last executing test programs:

1.212410052s ago: executing program 2 (id=3729):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x304)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r4)
sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, r5, 0x1, 0x9, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"})
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10}}, 0xc0}}, 0x0)

1.142570252s ago: executing program 0 (id=3731):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
r3 = socket(0x1e, 0x4, 0x0)
socket(0x2b, 0x80803, 0x1f)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7810, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r3, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x222, 0x0)
sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000005ebbe09e5fe2e32ba8f7b6c58fd476a631f627815c1030f77e2579ec2e5b40522d15b5631dc7bcc07006bf62218657bd37e931082b8af2669c6985cfd83cc40dd3fbb157d0ce2e84d4ebc376a5b19bf92e1f25b6adaae458b831e10d88a4ab75f6d7018d5048c50ceeb0c350b3c5c6de72b6b75eabd0a5a7d9d594ec4992d6214120724e7ccd4e58636b817acec017dd8dc5b38c9929a01e65c372820f"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r5, &(0x7f00000007c0)}, 0x20)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1200000003000000040000000700000000000000", @ANYRES32, @ANYBLOB="020500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000001bedd7b3cb4c38fccac9c5082800000000"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0xd, 0xc, &(0x7f0000002b80)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0f00000000000000b7080000000000007b8af8ff00000000cea200000000000007020000f8ffffffb703000008000000b704000000000000850000005900ba669b2f000000000000"], &(0x7f0000002b40)='syzkaller\x00'}, 0x94)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', r2, 0xffffffffffffffff, 0x5, 0x4, 0x4}, 0x50)
r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='pids.events\x00', 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000552bbf800000000000000000000ffff0000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018370000040000000000000000000000184800000700000000000000000000008500000076000000181b0000", @ANYRES32=r6, @ANYBLOB="0000000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0xef, &(0x7f0000000180)=""/239, 0x41100, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x1, 0x30, 0x100}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r7, 0xffffffffffffffff, r8], 0x0, 0x10, 0x10001}, 0x94)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000440)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x7}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x7ff}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x2}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0xfffffffc}]}}]}, 0x50}}, 0x0)

1.142001671s ago: executing program 1 (id=3732):
r0 = epoll_create1(0x0)
epoll_wait(r0, &(0x7f00000000c0)=[{}, {}], 0x2, 0x476f9c86)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f00000000c0)="510003000000", 0x6)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f00000002c0)={0x0, 0x2d}}, 0x0)
getsockname$packet(r3, 0x0, &(0x7f00000003c0))
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="090000f7020000c2087000000100000000090436", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
close(0x3)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
pipe(&(0x7f0000000200)={<r7=>0xffffffffffffffff})
splice(r7, 0x0, r4, 0x0, 0x80000003, 0x5)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000040000ae080000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000800cef80f0000008000000000000018010000786c6c2500000000070000007b1af87f00000000bfa100000000000007010000f8ffff74e6574e52331e28ffb700000000000000b7030000000000fd85000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r8}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan1\x00', <r9=>0x0})
bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r9, 0x400000000000}, 0x18)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum64={0x2, 0x0, 0x0, 0x13, 0x1, 0x1}]}, {0x0, [0x5f, 0x5f, 0x30]}}, 0x0, 0x29, 0x0, 0x0, 0x7}, 0x28)
r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r11)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01000000000000000000077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004200000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0)
connect$can_j1939(r4, &(0x7f0000000000)={0x1d, 0x0, 0xc, {0x2, 0xf0, 0x2}, 0xfd}, 0x18)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r13, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)

1.141494098s ago: executing program 2 (id=3733):
r0 = socket(0x2, 0x3, 0xff)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x204, &(0x7f0000000040)={&(0x7f0000000340)={0x4c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r5=>0x0})
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r8=>0x0]}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={r8, 0x4}, 0x8)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000006c0)={r8, 0x1000, "7ba54c6566e3dd749bc19fc99df3bc44927513d381bf305b899e41a2069a87123680742eed35fe7aa8e17c553a105a99f498755168a7a19b8f40ad10da39a2ee574261f4b2f3220e95484d2693970eee842616d47b7a07051e9689bb0c0d4b4c9c6ea40bcfdd2da611e23afa0e7ad46a2c4f1952f99e3fcf4b792082e2ebaf1117c79d85f7ba802a1dfef90889bd19d9dfbce1a6947ef090b0b23664056828f7aefa2ff642d5cb2af874e4a55ec20eabbaccae9c218e2778abd8af4609d3c79f852be1270a1d31450fd4837158b56d8446ff2b907e755efc4e44e8d4f43742f9d99a50bd564ad468e0d4dc86b7c052769ef8775622edf967251869889b443839dcae5a3e792c9336b4c0030148c9f308013c65456bbe13ca9a833381b9622e2acabe394e3ba912c62e86c91e317844a16f079525c88b4987d26c7e30236b65a5a48752245418f4caa5b99c5a0ea01e79e3fc433c06be9eafc7ba3b8c5240ea3f930f011a86d637cb8504b2c5740e864fd438ef5462868a8c832de7c9db9e89cfff87b483717aac285a98d5cddbf581a7beb161fdf3fcff882e4916d79a88f968234fe4f50a18954d44f61b562a8295fe3ad3de4f22792b0e8ae55f2d7e228e6232d1c9fb776eba67f4498d1bc75d9171ef608a14e43c115772e150012f928ad3ddec510f4f47874c946cb875582357644bbe116c381e265674ebf49c47db8719e0ce264d5524af5bac5f1c98874360379a5b4fb59572a3f7e778f1040e3fccb85153b71a16e76f534e62900d29cddb637101900ed67ada4b2faac3a32b95aca7db9eb998ed5038b0dd699424d6d5db47ffdf962b69ce8c3e9afaab626ef4489a1e3061a91fe4333a706683d97f0f857cb4a7e383dab731c16ac7a6b860fc21bcd04966dd8a6000336e008321da35377e6875d81c2a13153b6907a8b0067de4d9e920a514f1150a95d17c6fa96fa9777e8f3a235f70111eb3e4cdb1276376cf316ddfdfad2d4f1f3df0c5df6ea8538cbbb14b23c399b63e05e015cb7006776fa9388ce682cf64662f566ce9dabf486b698fbe93e58e3fd837ffcbd0bede801a065f7ab5544103491fca5990535f568641e58f6b48db7c9d5b345ca5256b4ee2e6637c8259d2c6b7b2cb6bea4ab97cc412b87de4368f75e3be98363684456cc6b4fdc2bee758aae3ba200c317a637d0b4a9f53f4db86e6b85dc847f12f690f0fb8f5591e1058fd0440ff9dfbf32c62fc4ad68376cd6832aecdbea4e83d3bae3a4f3beef61f2ced7d604733e6d831a59d90c4656e2f68d4e8d39fed30a68d3fdbdc06bb992d351fddbbf50662b65025f7c8d52c5cacd390c5d24f0d09c2ea59e80b8e9054aa35a8dda4b896922536eac5a4695d344134b8dca36ad78fbb0d32238c4366cf953e46df989eb6e2a765881f2d5a9a8ad97ecfed95786d438363b9b18eb973b49dfe238d1c2d1b21fb41737f55da3ecad7cd6d12d4042a860f75eeb8b912af8ae3b695e391a4c1776d83fdc0d146ee916695e41e2a941c6d19dc444fa1fe098d337d16c2782a50ac8ea79dd111720f2ef7057f0058a514a97856eb97ec19c6a14a00364264bde4df7872c946aa13450eb383fcf4ecb8f1a10a32f81a4e9d8e9e8cb4d786fc2f4eb1120a1611ab51cbfccc9a0638ad0b0ad7126ddd4c792e7dfe5c7fa084c63c3411077b6986dabb9de702fcc15e77b5a068d1ab98bf16f836d67b9006ca3538d3e688d16fd69db271132e616769476b5e4ff22257a695eed03abfa234eb4ba4edf969f145b08b011c83f9a8548249a04766e9254a61084e00af7bef8964bf12e816b22ddb3840c8ddd324af1cd771e9de42857111a4ed34b9ecf726edaa0299e4982f6202aa6a0436732399f49bc4a770317ee5f2a6f85e2d7061cbfc1374967ef62c6248addf6091ef1b72554ec243fa0f8a0fc2a3308c286370fb4e9fcbb1366809cedd2d7d7b850e7cc79d9176c1630a4ac755b0aa26959ee1793aafbf57a33b5b87f70ad2cb81c42e0197961e3366d2f77ed1ca0e6d0fb255767dc159ba3c853b8f7928ebcd2359854337fe4d0e2d637a178b217c33daae3fff01025d15b1939433a7e296996e043eae3fd488d9201022360bbf118ca990401bdfc7b07b52378198bfe76bfb5dffa3938b088b38d59387a8cc21b7479a49b919850f774f02feb70f1c133635aaad820bb45bb4cc1baa010c15e6c6d11d8708cd8cc08f087c04796f36b60d4a69fa20af039015da289fa661858eedd0d3cbb169798d3a7a8a18970704200193e807ef30b8928be1da025ae613d66653142fed3f00727bdd65f550fd8f177e6f57ff30dd0d23a3f53845ddf78796402c0568c512ab2f363838d18d488727f698b8fb34c5986543dbc5bd189fd69808dc59b44145c410c06fdff57a944fe33d1e9c07b8d577d6676e64b4db26266542b26e6e59bb859cbb32eda6d6445d3535c1428d313cf4edbb4eb7bcc68c4df5802438fbb816353b04d78b331b3847b710dd89752b47548cd2bb5264a45fe43916e8f9b97f43185144bf49dc0ff12fa6dd542e9d457a77fdc518b8d3a950cf320b6d0b263d89d6ea9487b3a37c71e2b39937e44ce96f36d32cee586f26d016cba4dd84289d559b4e3402d49190eb11118f0954cd7405ecc32d81e1743de2680d6e024263f6789578a474f88d2f351e549f442639de0a16715b5a20eb6761a17c4c375b4e261d8810bc878e67a8dfa1f29b76a02802baae6fd7a769b7b67fee8085230819c631d80cfbc1d2f11f604db6f99acb752797938654bb7e6a053c38806f65820c02077442889dd66d83b953a4e0c8c1eb35f74dfb5d1e3d386d2cf4075cca6023076cebb3455e8a1343bd9620c101e867fd50ac546f6aaa83b1ec0356252090deeca808ad470e408df41d87d0073a427efcb74265607123c3f39b13acdab7026e9d467cd41276ab4c06503365cc7a7149d57d5d5ec4b598d5da8830f43f42c82568c837e74e7f25d907e6b881c602dd27bb285d27860a965b3a5d0cc8582a520de6f91563122f7f99835af59f4218afc56fabd44945c01efa99451ce425bccc2e066bcba67ad85e995a9d17afc7b5327cfe29ae9deae42734c82d6e8ec36e4251927c47e8ea61bf01bebb9fef136e2af84a7fc464eed5c42cd83336b4090dc9b9b428090f63bab1cf689454b6efc665b2ea0f2a1738c0e3b4640b4f94d0e53186fde026833396efca80f453eba014c695e89fd12e8f0a1ba2b21a569ffc1bb62aacc1606cc44f5f241801cf4175c12748b3637f6f1cabc31cb31b82ca8275a89b3a8254fe984d17fa0751d0486e1c4533aa91343823ca3372d95446b38a05762a5f0ab8613650e8b30e223f41d1c8b8f36cbd5509a2a1e3ca38eb20cf6ac0bc5c6bd37aa2e7d0e6a64d6a03ea1d87c898885df7da7bca0328e9528c010d4d3fed4e459668d1f8649b6b7bf8b51c0a09b59e3d3ff794d248856a7169bc8c4bddcfd19a78e39fbe76b81fda3ffd97173cb7577e3f7469cbd5fde327c80ef155d12170dff769d8e763f362f687d6f82f47a8c4ca99656983a518310911a0ee4a158bd0721fe69fc6288b9405feea0a710e3340ac50fe2b9d4ea64a6f74d80ea82e8dc7c1accdf062fc3b0200d04f39c790dec14047b52743b9646151813ea7f7ce2a4f28a6070df21847d507bf63924360de92877db21cd5868526fc592c12ce3f4da095457a96aedd772f6f7407b5736c737a0b5f28cce0d3999f1278656261a7a49c746b9c18e32ed8e8c0bb2709ac3fb913ae39da130a93da416017dea11ff566df05320a51271709791cb8597c7e97146aaba45a1d6acd3e239c6f38f8e52f717ed5248e77baab4f6b22f22fbf6a7399f82fc1ffed361ab1152ca39828ea2522b06de252a4e9645957d9c70a26a01a41cd45293c29f7e1fc387edaad93c45e4e148f71143ec81dffb549b9d85620c714b57f0f0acbc7fbf1b90294c1594dc2a1b088953a60ea9f0d61ea5e884639a0780c8b269ba2b48fd56e39b4d95d03814406cb50aa6fd81221f9b50871050caab9397a3fdfc8f1a67c53259b9048c4ca5ebfb90bb1480ca0077a79e7f941d96428ed71c4d585b2509091860f70236c9d1935db7823772b04ec9a6e53ed2789aa5b081ce48747dcffe2f46b8a3e9cb248793b68acd1282b059b2b12a885fae753a0f7143d56d4859af05dbfcf425ef2a8f61f230ddaaa051ddc6063dd4101b0d89b2fd3dfc62f5b85e33b8bf15df07bc6df6d73d1a9cfd4dc671b1916c01ff082ad80a8475e1da7114eace3dad458658e698663adfb358d924d783134f7b79c7afc8c548705e6864d87711e05462333ef98ae2d62afc9427f1acbf9002bd895041a20effcfe0636e8823529f850dd185b115804f4fe8306a8f1cbf610ac09a5ac450fa031ba2e14f0442b0a55f6bb1a987b2b5961dfa5f17c3a82510fa60157f80b0a0fb8364f97b3ea76ee52f6a270662bea9a3eb53782ed539062d54938b34b5f5a7c909f663090663d1cadfbe5f5b4fa83af24f1795f23d5e9b3ce1d82fc90da01b91ac9a7afb12b97843fbb533a34f3353d8ed304b2fcca60d1c785b6ca6623027e4bd9ba7e9fbdeed9c83fa2a85575109a70f7a95e336da4f7b2fb092f34da8da64de5b463ae1ec733f7b8e0155662b2b3b2998634b18a6a643d5653ef79f8142abdca6503ccb6e9e8692cdce60ef8d1b0e2fec092d5b9aa634ec4b097cde8c8702d50e5e4f395476f912816fdb8b5880242a1e86b8f3f5bfc341ff1f859285781411df66502e06fa6a3a37167f3c1d480b46f824b14a68de4e2ab16822f4dfa3b632ca7a0e2363d161268f4c4f8a893a04a1821eea514d5d476982f43e873b61035e169c6575c8d443b324db9f7512baa27ff7879528a1b458db2088fafee74c38eece320dc77fa854417e14c5b50940d6a63d647b62ba47e7e8094b8622164fa12148555428d506f42eaf153e49bfe7aa1c205bf6a3a2c42c7f0c94d045e91f421b8d3a94027d82f354eae51a96f4239787611b9fed93070b8f29f34b64e76ef0a871e20250f4a3aa79b49fbe6991b220468cf82df2d19c7296bddb5813dccb1771259457611449cc03e4076773a5b9919fc24c24b0faf5e30b11898ab395dcf615f48f9b93b2336d08d847f61e08b047c77ab88b27b11a39d5a40eb637f155b869bf5d0d385c5932b06df061bdd7b5deb2d6f26bbae2f3d42ebfef8df18988f9e514e0971da3ece2554b18b554178aa0eb9e712b722529df144d7faff06f25c65561369bd7d94713b49cda00ada47d5a334dd5f5b5ec80a2b456ed95766604c43bafa89322d1af67420f0fbe34cbba3af4a9673a8d2f025b97a9d3cb33e178e1a08f39625a856d93dace67e47870db5e69b18f77f2adba64cb74b3f2caa285d031f25c2e4965e6f2b0c2cd427ec8c04c30e391aea85e011bf5d66af1fe81767fcbfe76f40ce06e207cc14322a91d83da821708db21a08f797ca6d745104e1a97fcd60d2e01342a71611c76efa5dec1069e794fa8424a0608d237cfe77760a49cee27a783e9b637bd07a414fe43530f85a462dcb897de91358db9eadeee34ea9add01163bc031ec16558e9b6ae671bda3087bddd49cdd773ed164c0bb3acc3bac8051eeaf227c9f64162abcbbbd387a7cce8a2280f4a62761d52ccfcee0416ab024ad5c0959874db72200a6682eb06aa6565a8a09e0801908fa463d96e995df1841910edcf36172b580634958edee93f8e9381462041ede48c463c956cbb4b9ba2c9bbf46f7aaf1fbd2e03"}, &(0x7f0000000200)=0x1008)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r5, 0x1, 0x6, @local}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r5, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10)
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt(r9, 0x400000000000003a, 0x3ff, 0x0, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x4)
write(r10, &(0x7f00000000c0)="270046e463aa0707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039885e48195943", 0x2d)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa0}, [@ldst={0x5, 0x3, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a)
setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000180)={0x9, 0x41, 0x8001, 0x1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000040)=0xa, 0x4)
recvfrom$inet(r0, 0x0, 0x0, 0x10042, 0x0, 0x0)

282.670455ms ago: executing program 0 (id=3734):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400030082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
ppoll(&(0x7f00000005c0)=[{r1, 0x2743}], 0x1, 0x0, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={0x0, 0x0, 0x3}, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000180400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)

282.205747ms ago: executing program 2 (id=3735):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$pppoe(0x18, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0017000000000000000000000000000000400000", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r0], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000f400850000008600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x392b8a4ff77e3f7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
socket$netlink(0x10, 0x3, 0x8000000004)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
close(r3)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000800", @ANYRES32=r4], 0x38}}, 0x10) (async)
r5 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800)
ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, &(0x7f00000000c0))
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r6, 0x0, 0x4001) (async)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000015883300fcffffff0000000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
socket$packet(0x11, 0x2, 0x300)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)

281.583716ms ago: executing program 1 (id=3736):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xfc, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0xdf, 0x5b, "18dd0877af3634aa243d1a13fafc2e58365f05423df5bc529d169ab09a8083acb942471f5b71aec1f287fee1a04e19cc998fe6589f164f081dbb04cef7298775ee2f6dd28ef2cc35be6ca0ee18b4ae1967d6ff6eeb1c72731804d32abe6137d8329585d3962c7e2a9585d0747584398c613ec4913b80e9e2030ba9e9d0ef37fb6b1b2218a8d671009a77dcce98461568aacd855b71ac422ba9cec5197037a39a43454e13607d784b7197c81461b8b0b9df25e5117e4d94da43dbf10b72541c1adec2d93b8ef2d764b74bf5688097b486842d9d8e072e5636c8f149"}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$nl_generic(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000380001002cbd7000ffdbdf250c"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0xc804)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f0000000040)="ae1d8e5d998f927aaafe5f6fe885255e66b16e7edbbf9d3e6a03cbe4f219568b5d39514a6993520a199633a162148d053271eaf1a08840fd8b40af6a4358148c135698414fee10a6992794889c8cce56e9b7aa96862aa7ffc4f2a6ac07f6caa4716a0652128d62da9636282dc74dc86917649f82d7c2105e050624794e")
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x84, 0x0, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000000)={0x0, 0x8001, [0x3, 0x0, 0x7fff, 0x9, 0x5, 0xffff]})

281.215675ms ago: executing program 0 (id=3737):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x154}, 0x1, 0x0, 0x0, 0x24000804}, 0x0)
r2 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan4\x00', <r3=>0x0})
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x90000, 0x0)
syz_emit_ethernet(0x2a, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000002c0)={'pim6reg0\x00'})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r6)
r8 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DEL_MFC(r8, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e20, 0x22, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd}, {0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, 0x5}, 0xffffffffffffffff, {[0xfffffff7, 0x1fd3, 0x29, 0x3, 0x1, 0xa, 0x5, 0x7]}}, 0x5c)
sendmsg$IEEE802154_LIST_PHY(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x14, r7, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2400c0c3}, 0x20060004)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r6)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
read(r9, &(0x7f0000000340)=""/49, 0x31)
r10 = socket$inet6(0xa, 0x2, 0x0)
r11 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r11, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c)
bind$inet6(r10, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000002}}, 0x1c)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x18, 0x11, 0xff, @empty, @mcast2, {[], {0x4e22, 0xe22, 0x18, 0x0, @wg=@data={0x4, 0x9}}}}}}}, 0x0)
sendmsg$IPSET_CMD_SAVE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00", @ANYRES16=r2, @ANYBLOB="010026bd7000fbdbdf250b00030000000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x380533681c76ead2}, 0x80)

180.696046ms ago: executing program 2 (id=3738):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r1, 0x501}, 0x14}}, 0x0)

180.263447ms ago: executing program 2 (id=3739):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3a}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0x40f, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket(0xa, 0x3, 0x3a)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2]}})
socket$inet6(0xa, 0x2, 0x3a)
socket$inet_udp(0x2, 0x2, 0x0)
r5 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket$packet(0x11, 0x2, 0x300)
ioctl$FS_IOC_GETFSUUID(r5, 0x80111500, &(0x7f0000000100))
getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@local}, &(0x7f00000001c0)=0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
pipe(&(0x7f0000001180)={<r7=>0xffffffffffffffff})
bind$alg(r7, &(0x7f0000001380)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-224-arm\x00'}, 0x58)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x2, 0x3c, 0x3c, 0x4, [@enum={0x0, 0x6, 0x0, 0x6, 0x4, [{0xf, 0xf}, {0x6, 0xfffffff9}, {0x4, 0x3}, {0x4, 0x9}, {0xa, 0x8}, {0xf, 0x4}]}]}, {0x0, [0x5f, 0x30]}}, &(0x7f00000000c0)=""/190, 0x58, 0xbe, 0x1}, 0x28)

123.2618ms ago: executing program 1 (id=3740):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) (async)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0x9, 0x0, 0x1a) (async, rerun: 32)
bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) (async, rerun: 32)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)

108.392412ms ago: executing program 0 (id=3741):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xc}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x114, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0xd8, 0x11, 0x0, 0x1, @target={{0xb}, @val={0xc8, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_INFO={0xb4, 0x3, "c65bb76ad8b4bc8ba8339e522e8d86ad2ccc42c87089db01a96985be3abb3a78c51858406c4991e44d25c8f79e753c8b2a5ba23c2e8f4cc7652ca97fd0e9f2bacc7473e43f9fc1f3c98fbabfe511df9e19f9275b8f4726d2588a6c346fabf522ed08597bb8136c7c2760eb0da2e99af74cfa0329eba271076dca884241fa275870ad07e0711f47ad67741e0cf18e7414fd4a4a995edd82bdda3a7258f3ccda5f3977de68a8fcd5d64a5fce957a082b11"}, @NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}]}}}]}], {0x14, 0x10}}, 0x15c}}, 0x0)
bind$netlink(r1, 0x0, 0x0)
read(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r3], 0x50}, 0x1, 0xba01, 0x0, 0x24008041}, 0x0)

52.150779ms ago: executing program 1 (id=3742):
r0 = socket(0x10, 0x80002, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0200000004000000080000000100000180000000", @ANYRES32=0x1, @ANYRES8, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff000000000000009d2ef546"], 0x50) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x80, 0x25dfdbfc, {0xa, 0x14, 0x80, 0x0, 0xff, 0x1, 0xfd, 0x7, 0x900}}, 0x1c}}, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c00018006020600"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

51.423075ms ago: executing program 2 (id=3743):
r0 = epoll_create1(0x0)
epoll_wait(r0, &(0x7f00000000c0)=[{}, {}], 0x2, 0x476f9c86)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f00000000c0)="510003000000", 0x6)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f00000002c0)={0x0, 0x2d}}, 0x0)
getsockname$packet(r3, 0x0, &(0x7f00000003c0))
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="090000f7020000c2087000000100000000090436", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
close(0x3)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
vmsplice(r7, &(0x7f0000000480)=[{&(0x7f00000000c0)="799ec4ef60730db54ba7eb81cdd50b97bca89ccc659604f40b5b797de301a6be6ac46b55ea79409a6416533c203537834d602f6539447b188b45b069318dfe0e67bec1ab000ca6a688400daddf71dca040d97bd49ab721f872efb05db0bf554bcf4d09c190434d57d43ae2fbc5a0b1bd5194125543f0ac961aa97da42c93dfa891a90f9882b125a585f63fc944efcfac2d1d2f1284e92ba2592fc6cfce7944988e3ebcb9cc3ebeeb4a54a44cf1ce89c132988134938a2852765efdbca1e8f64b7ad582242943ad78a4b9931e57336036b47c319283213c9dff0fe05f032650bd21148414161b087cb2b20091a00fa17f0587577346", 0xf5}, {&(0x7f0000000000)="8e9c4b4dceb1f6586168ddf70f36be85544a56aaed3a5c427d13898651404168c5e43c18ebd6725adff05ac2cd4a07fcd7752b4dde7d23a4327f082f7ae4df1efd9e143229ee99", 0x47}, {&(0x7f00000001c0)="22c423c2baa4a1b96cb1ed403a2db8a072e1e87dd8dc6d799405c9c2fc9edc73030cfea90c7ac18cd1562624432d327d1e", 0x31}, {&(0x7f0000000400)="24af31297e0503110db87e40cf93d1cf9c4cf27002d7c6088487b5088ef4450890b377bc93220c3e067d9cfc52822f0d92afe773b4350ec8e7e1877e6008ab42365efaf30f731be2cd4989ffaf26e5c68d65d0a654f135a8bbbb716e58bd41fc908293cdbca944af3dc770dfeb78efd00f170b", 0x73}, {&(0x7f0000000540)="ee926c9c12c5beda0d883e5172900447d19a98485ae115545defdac2467f6dbcf5189323f3e129df203b85cb1ea4e96bc47e3a040f6739101a75434dbf36a619fd498b318025fe4bb0ae530dda25dfc66f0bc112bcc3a0f4834d14c2957324261bdd8c86c3cc07986b7da0373de650de91ba36b3cb7c8fd255f533238359fa62dbd459b946793f69a2039e18d63a0ab557cde3adf19ed209ac080e89c584669f3a3b945a", 0xa4}, {&(0x7f0000000600)="09d84de72791a3da3464c417ec4576b38f01ecaf19f3856a7394e8df465618d0ec395005049e98d065f46414b72e9140f14bf9990a99ddeed414cc9f1fde9b55f216915da70f4e4b808414504c648007db6e67a21579d3960199135b6be4a0f270611b726846d1e1c01d322bfadacf7f8a18cb7389a516dcf5165a5bcbe0db16a8df86425020443b0ea5eb630ef975055222cdb32a85b1c2419e25b5ee8041fabd32561343", 0xa5}, {&(0x7f00000006c0)="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", 0x4cc}], 0x7, 0xe)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000040000ae080000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000800cef80f0000008000000000000018010000786c6c2500000000070000007b1af87f00000000bfa100000000000007010000f8ffff74e6574e52331e28ffb700000000000000b7030000000000fd85000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r8}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan1\x00', <r9=>0x0})
bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r9, 0x400000000000}, 0x18)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum64={0x2, 0x0, 0x0, 0x13, 0x1, 0x1}]}, {0x0, [0x5f, 0x5f, 0x30]}}, 0x0, 0x29, 0x0, 0x0, 0x7}, 0x28)
r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r11)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01000000000000000000077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004200000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0)
connect$can_j1939(r4, &(0x7f0000000000)={0x1d, 0x0, 0xc, {0x2, 0xf0, 0x2}, 0xfd}, 0x18)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r13, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)

48.014311ms ago: executing program 0 (id=3744):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0xc0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r3 = accept(r1, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48)
writev(r2, &(0x7f0000002640)=[{&(0x7f00000001c0)="80aceb0fe4", 0x5}], 0x1)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r3}, 0x47)
recvmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, 0x0, 0x4000040)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=0x0, @ANYBLOB="0a0001000000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0)

1.501792ms ago: executing program 1 (id=3745):
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004"], 0x48)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRESHEX=r0, @ANYBLOB="0000130000000000280012800b0001006d616302000038948764fc000300"/43], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="edffffff0000040018001280080001e8746974000c000204000000"], 0x40}}, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480))

887.659µs ago: executing program 1 (id=3746):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
recvmmsg(r1, &(0x7f00000017c0)=[{{&(0x7f00000000c0)=@qipcrtr, 0x80, 0x0}, 0x22}], 0x1, 0x22020, 0x0)
socket(0x1, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000001117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf2504"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008010)

0s ago: executing program 0 (id=3747):
r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000000)={{}, [@default, @remote, @bcast, @null, @rose, @bcast, @default, @default]}, &(0x7f0000000080)=0x48)
recvfrom$ax25(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x40002000, &(0x7f00000010c0)={{0x3, @null, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$SIOCNRDECOBS(r1, 0x89e2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x78, r3, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x4e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_IDX={0x5}]}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002440)={'syztnl2\x00', &(0x7f00000023c0)={'syztnl1\x00', <r4=>0x0, 0x700, 0x20, 0x8, 0x10, {{0x10, 0x4, 0x3, 0x38, 0x40, 0x64, 0x0, 0xd, 0x2f, 0x0, @empty, @local, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0xcc, [@multicast1, @dev={0xac, 0x14, 0x14, 0xe}]}, @timestamp={0x44, 0x1c, 0xf2, 0x0, 0x2, [0x5, 0x5, 0xc, 0x6, 0x294c, 0xdb80]}]}}}}})
r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002500)={0xffffffffffffffff, 0x2, 0x4}, 0xc)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x50)
r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000025c0), 0xc)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002680)={{0xffffffffffffffff, <r8=>0xffffffffffffffff}, &(0x7f0000002600), &(0x7f0000002640)='%pi6   \x00'}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002780)={0x18, 0x18, &(0x7f00000012c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xe}, [@ldst={0x1, 0x2, 0x2, 0x3, 0x0, 0x2, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @generic={0x4, 0x6, 0x1, 0x9, 0x7}, @cb_func={0x18, 0x2}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000001380)='GPL\x00', 0x2, 0x1000, &(0x7f00000013c0)=""/4096, 0x40f00, 0x54, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002480)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000024c0)={0x3, 0x9, 0xc5d}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000026c0)=[r5, r6, r7, r8], &(0x7f0000002700)=[{0x4, 0x2, 0xb, 0x8}, {0x2, 0x2, 0x10, 0xb}, {0x0, 0x3, 0x1, 0x9}, {0x4, 0x4, 0x10, 0xc}, {0x2, 0x5, 0xb}, {0x5, 0x3, 0x6, 0x3}, {0x0, 0x1, 0xb, 0x3}], 0x10, 0xfffffffa}, 0x94)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000002940)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002900)={&(0x7f0000002880)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xff, 0x4c}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x16, 0xcd, [0x0, 0x9, 0x802, 0xffff, 0x0, 0x8, 0x2, 0x2, 0x800]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xbae}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xf5c}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0xee1c, 0x8, 0x5, 0x9]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
clock_gettime(0x1, &(0x7f0000002980))
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DEL_TX_TS(r9, &(0x7f0000002ac0)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x80, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000881}, 0x4000)
syz_emit_ethernet(0xbf, &(0x7f0000002b00)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @val={@void, {0x8100, 0x7, 0x1}}, {@llc_tr={0x11, {@snap={0x0, 0x0, "06", "a19bb2", 0x88a2, "c939387d16dbd8a854b9619f5ea54cd8d9add787e01cb18306bf4291bc5121878d58dcc5b407fc05051805292a3f1fd9850d9d959f7a4e1c0421730c8b1a80b761f68e6fd252942c56fdaf0cb4ba6ed389cbf56a5b8c807bdbebe326a6a4a0a2cbd0ee5116b5d9c543ba3aecc11518558093d8d44a36e15b8b7363b4135bc5c6d9011e93ac14fc5c9fcbd1b86cadd2ed2e60dc17e3ac75b57a9a07845777e1ee3ef9101d85"}}}}}, &(0x7f0000002bc0)={0x0, 0x1, [0xd3a, 0xc1e, 0x8d9, 0x412]})
syz_genetlink_get_family_id$devlink(&(0x7f0000002c00), r2)
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000002c80)=@add_del={0x2, &(0x7f0000002c40)='veth0\x00'})
syz_genetlink_get_family_id$ethtool(&(0x7f0000002cc0), r9)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002d00)={'vcan0\x00'})
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002d80), r9)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000002e80)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002e40)={&(0x7f0000002dc0)={0x64, r10, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40881)
ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000002ec0)={'batadv0\x00', {0x2, 0x0, @private}})
r11 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3)
ioctl$F2FS_IOC_COMPRESS_FILE(r11, 0xf518, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_NET_SET(r12, &(0x7f0000003300)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000032c0)={&(0x7f0000002f80)={0x31c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xae}]}, @TIPC_NLA_NODE={0x2c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x41b}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffff8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8a2d}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5cc0f21f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7c0}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb08bbd2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @remote, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'netdevsim0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010102}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x20400000, @private1, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x10001, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}]}]}, 0x31c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040011)

kernel console output (not intermixed with test programs):

cluster: you have exceeded the maximum number of cluster nodes (514 > 32)
[  170.733359][T12547] netlink: 'syz.2.1861': attribute type 1 has an invalid length.
[  170.777479][ T1024] bridge0: port 1(bond18) entered disabled state
[  170.977765][T12551] netlink: 'syz.2.1862': attribute type 1 has an invalid length.
[  171.218473][T12558] netlink: 'syz.1.1865': attribute type 1 has an invalid length.
[  171.357395][T12560] C speed is unknown, defaulting to 1000
[  171.359989][T12560] DL<Y speed is unknown, defaulting to 1000
[  171.478757][T12560] lo speed is unknown, defaulting to 1000
[  171.666997][T12572] netlink: 'syz.2.1869': attribute type 1 has an invalid length.
[  171.837512][T12582] syzkaller0: entered promiscuous mode
[  172.139616][T12611] netlink: 'syz.2.1882': attribute type 1 has an invalid length.
[  172.598955][T12633] netlink: 'syz.2.1886': attribute type 83 has an invalid length.
[  172.706198][T12642] netlink: 'syz.1.1889': attribute type 1 has an invalid length.
[  173.187723][T12689] __nla_validate_parse: 21 callbacks suppressed
[  173.187737][T12689] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1901'.
[  173.567375][T12723] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1908'.
[  173.809060][T12725] xt_hashlimit: size too large, truncated to 1048576
[  173.821109][T12725] syz.0.1909: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  173.826517][T12725] CPU: 1 UID: 0 PID: 12725 Comm: syz.0.1909 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  173.826531][T12725] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  173.826538][T12725] Call Trace:
[  173.826542][T12725]  <TASK>
[  173.826548][T12725]  dump_stack_lvl+0x189/0x250
[  173.826566][T12725]  ? __pfx_dump_stack_lvl+0x10/0x10
[  173.826577][T12725]  ? __pfx__printk+0x10/0x10
[  173.826589][T12725]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  173.826602][T12725]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  173.826614][T12725]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  173.826626][T12725]  warn_alloc+0x214/0x310
[  173.826638][T12725]  ? __pfx_warn_alloc+0x10/0x10
[  173.826650][T12725]  ? __get_vm_area_node+0x28f/0x300
[  173.826669][T12725]  ? htable_create+0xfc/0x7a0
[  173.826680][T12725]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  173.826706][T12725]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  173.826721][T12725]  ? rcu_is_watching+0x15/0xb0
[  173.826733][T12725]  ? htable_create+0xfc/0x7a0
[  173.826740][T12725]  ? htable_create+0xfc/0x7a0
[  173.826747][T12725]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  173.826761][T12725]  ? htable_create+0xfc/0x7a0
[  173.826767][T12725]  ? hashlimit_pernet+0x23/0x240
[  173.826779][T12725]  htable_create+0xfc/0x7a0
[  173.826790][T12725]  hashlimit_mt_check_common+0x719/0xa10
[  173.826802][T12725]  xt_check_match+0x3d1/0xab0
[  173.826817][T12725]  ? __pfx___mutex_lock+0x10/0x10
[  173.826829][T12725]  ? __pfx_xt_check_match+0x10/0x10
[  173.826843][T12725]  ? pcpu_alloc_noprof+0xfdd/0x16b0
[  173.826860][T12725]  ? xt_find_match+0x1f7/0x250
[  173.826876][T12725]  translate_table+0x1553/0x2040
[  173.826901][T12725]  ? __pfx_translate_table+0x10/0x10
[  173.826914][T12725]  ? __might_fault+0xb0/0x130
[  173.826936][T12725]  ? _copy_from_user+0x94/0xb0
[  173.826951][T12725]  do_ip6t_set_ctl+0x970/0xce0
[  173.826966][T12725]  ? rcu_is_watching+0x15/0xb0
[  173.826975][T12725]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  173.826996][T12725]  ? __pfx___mutex_lock+0x10/0x10
[  173.827005][T12725]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  173.827019][T12725]  ? __lock_acquire+0xab9/0xd20
[  173.827032][T12725]  nf_setsockopt+0x26f/0x290
[  173.827048][T12725]  rawv6_setsockopt+0x23b/0x5b0
[  173.827059][T12725]  ? __pfx_rawv6_setsockopt+0x10/0x10
[  173.827066][T12725]  ? aa_sock_opt_perm+0x74/0x110
[  173.827077][T12725]  ? sock_common_setsockopt+0x36/0xc0
[  173.827087][T12725]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  173.827098][T12725]  do_sock_setsockopt+0x17c/0x1b0
[  173.827114][T12725]  __x64_sys_setsockopt+0x13f/0x1b0
[  173.827128][T12725]  do_syscall_64+0xfa/0x3b0
[  173.827138][T12725]  ? lockdep_hardirqs_on+0x9c/0x150
[  173.827147][T12725]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.827155][T12725]  ? exc_page_fault+0x9f/0xf0
[  173.827164][T12725]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.827172][T12725] RIP: 0033:0x7f3f9298e929
[  173.827181][T12725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  173.827190][T12725] RSP: 002b:00007f3f93820038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  173.827199][T12725] RAX: ffffffffffffffda RBX: 00007f3f92bb5fa0 RCX: 00007f3f9298e929
[  173.827205][T12725] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004
[  173.827210][T12725] RBP: 00007f3f92a10ca1 R08: 00000000000005c0 R09: 0000000000000000
[  173.827216][T12725] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000
[  173.827221][T12725] R13: 0000000000000000 R14: 00007f3f92bb5fa0 R15: 00007ffd3dd2c678
[  173.827234][T12725]  </TASK>
[  173.827237][T12725] Mem-Info:
[  173.935126][T12725] active_anon:8730 inactive_anon:0 isolated_anon:0
[  173.935126][T12725]  active_file:1160 inactive_file:38254 isolated_file:0
[  173.935126][T12725]  unevictable:1768 dirty:115 writeback:0
[  173.935126][T12725]  slab_reclaimable:10084 slab_unreclaimable:207167
[  173.935126][T12725]  mapped:18100 shmem:2474 pagetables:920
[  173.935126][T12725]  sec_pagetables:0 bounce:0
[  173.935126][T12725]  kernel_misc_reclaimable:0
[  173.935126][T12725]  free:133350 free_pcp:19101 free_cma:0
[  173.948690][T12725] Node 0 active_anon:18804kB inactive_anon:0kB active_file:3932kB inactive_file:146940kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:46804kB dirty:404kB writeback:0kB shmem:4876kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5336kB pagetables:2592kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  173.958796][T12725] Node 1 active_anon:16524kB inactive_anon:0kB active_file:708kB inactive_file:6076kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:25596kB dirty:56kB writeback:0kB shmem:5020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7512kB pagetables:1088kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  173.969467][T12725] Node 0 DMA free:4408kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:680kB local_pcp:288kB free_cma:0kB
[  173.978327][T12725] lowmem_reserve[]: 0 812 812 812 812
[  173.980729][T12725] Node 0 DMA32 free:58428kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19620kB inactive_anon:0kB active_file:3932kB inactive_file:146940kB unevictable:3536kB writepending:404kB present:1556484kB managed:831984kB mlocked:0kB bounce:0kB free_pcp:23524kB local_pcp:17796kB free_cma:0kB
[  173.990168][T12725] lowmem_reserve[]: 0 0 0 0 0
[  173.991649][T12725] Node 1 DMA32 free:410356kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:21640kB local_pcp:10912kB free_cma:0kB
[  174.001266][T12725] lowmem_reserve[]: 0 0 854 854 854
[  174.002856][T12725] Node 1 Normal free:54156kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16524kB inactive_anon:0kB active_file:708kB inactive_file:6076kB unevictable:3536kB writepending:56kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:35400kB local_pcp:13196kB free_cma:0kB
[  174.012058][T12725] lowmem_reserve[]: 0 0 0 0 0
[  174.013517][T12725] Node 0 DMA: 4*4kB (UM) 3*8kB (UM) 3*16kB (UM) 3*32kB (U) 2*64kB (U) 2*128kB (UM) 3*256kB (UM) 0*512kB 1*1024kB (M) 1*2048kB (E) 0*4096kB = 4408kB
[  174.018043][T12725] Node 0 DMA32: 2*4kB (UM) 15*8kB (UE) 18*16kB (ME) 181*32kB (UE) 131*64kB (UME) 60*128kB (UM) 41*256kB (UM) 18*512kB (UM) 6*1024kB (UM) 5*2048kB (M) 0*4096kB = 58368kB
[  174.023709][T12725] Node 1 DMA32: 23*4kB (UM) 7*8kB (UME) 8*16kB (UME) 13*32kB (UME) 31*64kB (UM) 25*128kB (UME) 18*256kB (UM) 15*512kB (UME) 5*1024kB (UE) 3*2048kB (UME) 93*4096kB (UM) = 410356kB
[  174.029012][T12725] Node 1 Normal: 1*4kB (E) 9*8kB (UE) 2*16kB (UM) 203*32kB (UE) 37*64kB (U) 3*128kB (U) 17*256kB (UM) 5*512kB (UM) 3*1024kB (ME) 5*2048kB (UME) 6*4096kB (UM) = 54156kB
[  174.034462][T12725] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  174.037235][T12725] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  174.040876][T12725] 41888 total pagecache pages
[  174.042296][T12725] 0 pages in swap cache
[  174.043532][T12725] Free swap  = 124996kB
[  174.044776][T12725] Total swap = 124996kB
[  174.046019][T12725] 786301 pages RAM
[  174.047145][T12725] 0 pages HighMem/MovableOnly
[  174.048560][T12725] 241057 pages reserved
[  174.050027][T12725] 0 pages cma reserved
[  174.081901][T12730] openvswitch: netlink: Tunnel attr 8208 out of range max 16
[  174.085513][T12731] openvswitch: netlink: Tunnel attr 8208 out of range max 16
[  174.118477][T12733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1911'.
[  174.125097][T12733] IPVS: Unknown mcast interface: vcan0
[  174.159114][T12740] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1913'.
[  174.219972][T12744] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1915'.
[  174.263937][T12746] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.269530][T12746] tipc: Resetting bearer <eth:syzkaller0>
[  174.552260][T12775] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1925'.
[  174.740844][T12775] bond0 (unregistering): Released all slaves
[  175.157588][T12787] validate_nla: 6 callbacks suppressed
[  175.157600][T12787] netlink: 'syz.0.1927': attribute type 1 has an invalid length.
[  175.162156][T12787] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1927'.
[  175.299038][T12796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1930'.
[  175.308339][T12796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1930'.
[  175.516492][T12806] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  175.615347][T12821] netlink: zone id is out of range
[  175.616971][T12821] netlink: zone id is out of range
[  175.649248][T12821] netlink: set zone limit has 4 unknown bytes
[  175.663209][T12823] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  175.692494][T12823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1938'.
[  175.790514][T12840] x_tables: duplicate underflow at hook 1
[  175.926325][T12843] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  176.437245][T12874] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  176.439626][T12874] IPv6: NLM_F_CREATE should be set when creating new route
[  176.442116][T12875] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  176.483084][T12877] IPv6: sit4: Disabled Multicast RS
[  176.601573][T12885] netlink: 'syz.1.1962': attribute type 1 has an invalid length.
[  176.671030][T12893] syzkaller1: entered promiscuous mode
[  176.672940][T12893] syzkaller1: entered allmulticast mode
[  176.862049][T12908] bridge0: port 1(gretap0) entered blocking state
[  176.863287][T12907] netlink: 'syz.2.1969': attribute type 13 has an invalid length.
[  176.864041][T12908] bridge0: port 1(gretap0) entered disabled state
[  176.866439][T12907] netlink: 'syz.2.1969': attribute type 17 has an invalid length.
[  176.870852][T12908] gretap0: entered allmulticast mode
[  176.874031][T12908] gretap0: entered promiscuous mode
[  176.876011][T12908] bridge0: port 1(gretap0) entered blocking state
[  176.878035][T12908] bridge0: port 1(gretap0) entered listening state
[  176.903266][T12907] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  176.907952][ T5891] DL<Y speed is unknown, defaulting to 1000
[  176.911085][ T5891] syz0: Port: 1 Link ACTIVE
[  176.912527][ T5891] DL<Y speed is unknown, defaulting to 1000
[  176.933950][T12912] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  176.952772][T12907] C speed is unknown, defaulting to 1000
[  176.955497][T12907] DL<Y speed is unknown, defaulting to 1000
[  176.982011][   T13] bond15: (slave erspan0): failed to get link speed/duplex
[  177.010013][T12917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  177.090705][T12932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  177.093972][T12928] tun0: tun_chr_ioctl cmd 1074025681
[  177.135274][T12907] lo speed is unknown, defaulting to 1000
[  177.152830][T12932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  177.172555][T12936] netlink: 'syz.1.1977': attribute type 32 has an invalid length.
[  177.219218][T12949] syzkaller0: entered promiscuous mode
[  177.223897][T12949] syzkaller0: entered allmulticast mode
[  177.269256][T12955] rdma_rxe: rxe_newlink: failed to add lo
[  177.276373][T12954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  177.337282][T12959] netlink: 'syz.0.1982': attribute type 1 has an invalid length.
[  177.354533][T12959] bond13: entered promiscuous mode
[  177.356309][T12959] 8021q: adding VLAN 0 to HW filter on device bond13
[  177.363982][T12959] batadv1: entered promiscuous mode
[  177.365742][T12959] batadv1: entered allmulticast mode
[  177.368236][T12959] 8021q: adding VLAN 0 to HW filter on device batadv1
[  177.372863][T12959] bond13: (slave batadv1): making interface the new active one
[  177.376174][T12959] bond13: (slave batadv1): Enslaving as an active interface with an up link
[  177.506440][T12969] netlink: 'syz.0.1985': attribute type 1 has an invalid length.
[  177.546914][T12971] C speed is unknown, defaulting to 1000
[  177.550146][T12971] DL<Y speed is unknown, defaulting to 1000
[  177.645665][T12971] lo speed is unknown, defaulting to 1000
[  177.662112][T12973] bond13: (slave batadv1): Releasing active interface
[  177.707447][T12907] syz.2.1969 (12907) used greatest stack depth: 19408 bytes left
[  177.923450][T12986] netlink: 'syz.1.1990': attribute type 1 has an invalid length.
[  178.067116][T12994] netlink: 'syz.2.1994': attribute type 1 has an invalid length.
[  178.619216][T13036] __nla_validate_parse: 20 callbacks suppressed
[  178.619229][T13036] netlink: 844 bytes leftover after parsing attributes in process `syz.0.2007'.
[  178.634900][T13036] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2007'.
[  178.907347][T13054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2013'.
[  179.032644][T13064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2015'.
[  179.047255][T13064] netlink: 'syz.1.2015': attribute type 11 has an invalid length.
[  179.049633][T13064] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2015'.
[  179.087882][T13071] netlink: 'syz.1.2017': attribute type 1 has an invalid length.
[  179.111092][T13071] bond0: entered promiscuous mode
[  179.115182][T13071] 8021q: adding VLAN 0 to HW filter on device bond0
[  179.120574][ T5698] net_ratelimit: 19 callbacks suppressed
[  179.120587][ T5698] bond15: (slave erspan0): failed to get link speed/duplex
[  179.128428][T13071] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2017'.
[  179.136248][T13071] batadv1: entered promiscuous mode
[  179.138051][T13071] batadv1: entered allmulticast mode
[  179.142001][T13071] 8021q: adding VLAN 0 to HW filter on device batadv1
[  179.146754][T13071] bond0: (slave batadv1): making interface the new active one
[  179.150467][T13071] bond0: (slave batadv1): Enslaving as an active interface with an up link
[  179.240809][ T5853] bond15: (slave erspan0): failed to get link speed/duplex
[  179.353328][   T12] bond15: (slave erspan0): failed to get link speed/duplex
[  179.459977][   T12] bond15: (slave erspan0): failed to get link speed/duplex
[  179.466011][T13092] C speed is unknown, defaulting to 1000
[  179.468712][T13092] DL<Y speed is unknown, defaulting to 1000
[  179.534304][T13093] gretap0: left allmulticast mode
[  179.536107][T13093] gretap0: left promiscuous mode
[  179.537930][T13093] bridge0: port 1(gretap0) entered disabled state
[  179.547089][T13093] bond0: (slave batadv1): Releasing active interface
[  179.566043][T13092] lo speed is unknown, defaulting to 1000
[  179.610192][ T5698] bond15: (slave erspan0): failed to get link speed/duplex
[  179.719839][   T12] bond15: (slave erspan0): failed to get link speed/duplex
[  179.830243][ T5698] bond15: (slave erspan0): failed to get link speed/duplex
[  179.939868][ T5698] bond15: (slave erspan0): failed to get link speed/duplex
[  180.051007][   T12] bond15: (slave erspan0): failed to get link speed/duplex
[  180.159936][ T5853] bond15: (slave erspan0): failed to get link speed/duplex
[  180.291839][T13106] netlink: 'syz.2.2028': attribute type 1 has an invalid length.
[  180.322234][T13111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2029'.
[  180.325048][T13111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2029'.
[  180.327696][T13111] netlink: 'syz.1.2029': attribute type 13 has an invalid length.
[  180.331775][T13111] netlink: 'syz.1.2029': attribute type 12 has an invalid length.
[  180.393409][T13112] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  180.396004][T13112] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  180.403663][T13112] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  180.406667][T13112] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  180.414138][T13112] bond19: (slave geneve3): making interface the new active one
[  180.417472][T13112] bond19: (slave geneve3): Enslaving as an active interface with an up link
[  180.452724][ T5831] Bluetooth: hci1: command 0x0c20 tx timeout
[  180.494764][T13116] netlink: 'syz.0.2031': attribute type 12 has an invalid length.
[  180.522653][T13112] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2028'.
[  180.536474][T13112] 8021q: adding VLAN 0 to HW filter on device bond19
[  180.557730][T13122] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2032'.
[  181.076093][ T5698] ip6gretap2: left promiscuous mode
[  181.236259][T13133] netlink: 'syz.2.2035': attribute type 83 has an invalid length.
[  181.239560][T13133] netlink: 'syz.2.2035': attribute type 83 has an invalid length.
[  181.242660][T13133] netlink: 'syz.2.2035': attribute type 83 has an invalid length.
[  181.245782][T13133] netlink: 'syz.2.2035': attribute type 83 has an invalid length.
[  181.248802][T13133] netlink: 'syz.2.2035': attribute type 83 has an invalid length.
[  181.252171][T13133] netlink: 'syz.2.2035': attribute type 83 has an invalid length.
[  181.455984][T13144] bpq0: left allmulticast mode
[  181.581034][T13154] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  181.584400][   T12] bond0: (slave wlan1): interface is now down
[  181.588200][   T12] bond0: now running without any active interface!
[  181.593905][T13156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  182.193838][T13164] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  182.197085][T13164] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  182.200702][T13164] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  182.203890][T13164] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  182.207147][T13164] geneve0: entered promiscuous mode
[  182.317551][T13173] xt_TCPMSS: Only works on TCP SYN packets
[  182.342182][T13174] delete_channel: no stack
[  182.467651][T13186] chnl_net:caif_netlink_parms(): no params data found
[  183.203401][T13223] sctp: [Deprecated]: syz.2.2060 (pid 13223) Use of int in maxseg socket option.
[  183.203401][T13223] Use struct sctp_assoc_value instead
[  183.379208][T13226] tc_dump_action: action bad kind
[  183.606089][T13248] sctp: [Deprecated]: syz.1.2068 (pid 13248) Use of int in maxseg socket option.
[  183.606089][T13248] Use struct sctp_assoc_value instead
[  183.756067][T13252] __nla_validate_parse: 14 callbacks suppressed
[  183.756080][T13252] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2070'.
[  183.913640][T13271] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2074'.
[  183.950419][T13274] sctp: [Deprecated]: syz.1.2075 (pid 13274) Use of int in maxseg socket option.
[  183.950419][T13274] Use struct sctp_assoc_value instead
[  184.121302][T13283] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  184.145667][T13283] mac80211_hwsim hwsim4 wlan1: left allmulticast mode
[  184.189872][ T5698] net_ratelimit: 36 callbacks suppressed
[  184.189886][ T5698] bond15: (slave erspan0): failed to get link speed/duplex
[  184.300217][ T5853] bond15: (slave erspan0): failed to get link speed/duplex
[  184.379948][T13298] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2083'.
[  184.410169][ T6747] bond15: (slave erspan0): failed to get link speed/duplex
[  184.520042][ T5853] bond15: (slave erspan0): failed to get link speed/duplex
[  184.630280][ T6747] bond15: (slave erspan0): failed to get link speed/duplex
[  184.740056][ T5698] bond15: (slave erspan0): failed to get link speed/duplex
[  184.850320][ T6747] bond15: (slave erspan0): failed to get link speed/duplex
[  184.989948][ T5853] bond15: (slave erspan0): failed to get link speed/duplex
[  185.065006][T13306] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2085'.
[  185.076054][T13306] tap0: tun_chr_ioctl cmd 1074025677
[  185.080014][T13306] tap0: linktype set to 1
[  185.100010][ T5853] bond15: (slave erspan0): failed to get link speed/duplex
[  185.240258][T13312] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2087'.
[  185.252420][T13312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2087'.
[  185.300374][ T5853] bond15: (slave erspan0): failed to get link speed/duplex
[  185.318150][T13317] validate_nla: 38 callbacks suppressed
[  185.318160][T13317] netlink: 'syz.0.2090': attribute type 1 has an invalid length.
[  185.323576][T13317] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2090'.
[  185.517291][T13331] ip6gre3: entered allmulticast mode
[  185.623347][T13339] netlink: 'syz.0.2097': attribute type 1 has an invalid length.
[  185.625742][T13339] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2097'.
[  185.669539][T13344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2096'.
[  185.684908][T13349] dvmrp0: left allmulticast mode
[  185.791791][T13361] netlink: 'syz.1.2105': attribute type 1 has an invalid length.
[  185.794183][T13361] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2105'.
[  185.858409][T13363] C speed is unknown, defaulting to 1000
[  185.870600][T13363] DL<Y speed is unknown, defaulting to 1000
[  185.901827][T13368] netlink: 'syz.0.2108': attribute type 1 has an invalid length.
[  185.907041][T13368] sctp: [Deprecated]: syz.0.2108 (pid 13368) Use of int in maxseg socket option.
[  185.907041][T13368] Use struct sctp_assoc_value instead
[  186.031785][T13378] netlink: 'syz.0.2111': attribute type 6 has an invalid length.
[  186.034624][T13378] netlink: 'syz.0.2111': attribute type 5 has an invalid length.
[  186.066421][T13375] pimreg: entered allmulticast mode
[  186.068845][T13375] pimreg: left allmulticast mode
[  186.098533][T13381] bridge11: port 1(ip6gretap2) entered blocking state
[  186.100903][T13381] bridge11: port 1(ip6gretap2) entered disabled state
[  186.103003][T13381] ip6gretap2: entered allmulticast mode
[  186.105685][T13381] ip6gretap2: entered promiscuous mode
[  186.125779][T13381] veth13: entered promiscuous mode
[  186.127595][T13381] bridge11: port 2(veth13) entered blocking state
[  186.129643][T13381] bridge11: port 2(veth13) entered disabled state
[  186.132703][T13381] veth13: entered allmulticast mode
[  186.175602][T13363] lo speed is unknown, defaulting to 1000
[  186.529676][T13417] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  186.537078][T13417] syzkaller0: entered promiscuous mode
[  186.546464][T13417] syzkaller0: entered allmulticast mode
[  186.557488][T13417] tipc: Resetting bearer <eth:syzkaller0>
[  186.565712][T13416] tipc: Resetting bearer <eth:syzkaller0>
[  186.585174][T13416] tipc: Disabling bearer <eth:syzkaller0>
[  186.679100][T13425] netlink: 'syz.0.2127': attribute type 1 has an invalid length.
[  186.733097][T13429] netlink: 'syz.0.2129': attribute type 13 has an invalid length.
[  186.735562][T13429] netlink: 'syz.0.2129': attribute type 17 has an invalid length.
[  186.768749][T13432] netlink: 'syz.2.2131': attribute type 1 has an invalid length.
[  186.777928][  T790] C speed is unknown, defaulting to 1000
[  186.782056][  T790] syz1: Port: 1 Link ACTIVE
[  186.828135][T13429] C speed is unknown, defaulting to 1000
[  186.828747][  T790] lo speed is unknown, defaulting to 1000
[  186.832721][  T790] syz2: Port: 1 Link DOWN
[  186.839643][T13429] DL<Y speed is unknown, defaulting to 1000
[  186.979975][T13443] bond0 (unregistering): Released all slaves
[  186.997644][T13429] lo speed is unknown, defaulting to 1000
[  187.003303][T13438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  187.103450][T13454] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  187.933285][T13488] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0
[  188.216483][T13507] x_tables: duplicate underflow at hook 3
[  188.401938][T13516] tipc: Resetting bearer <eth:syzkaller0>
[  188.433335][T13516] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 44415 - 0
[  188.436005][T13516] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 44415 - 0
[  188.438570][T13516] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 44415 - 0
[  188.442675][T13516] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 44415 - 0
[  188.488581][T13516] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  188.493864][T13516] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  188.496461][T13516] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  188.499104][T13516] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  188.505562][   T24] DL<Y speed is unknown, defaulting to 1000
[  188.507571][   T24] syz0: Port: 1 Link DOWN
[  188.508886][   T24] DL<Y speed is unknown, defaulting to 1000
[  188.544797][T13530] C speed is unknown, defaulting to 1000
[  188.547367][T13530] DL<Y speed is unknown, defaulting to 1000
[  188.820680][T13530] lo speed is unknown, defaulting to 1000
[  188.834530][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.837195][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.917371][T13559] __nla_validate_parse: 23 callbacks suppressed
[  188.917385][T13559] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2160'.
[  189.336206][T13593] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2169'.
[  189.384148][T13595] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  189.387418][T13595] tipc: Resetting bearer <eth:syzkaller0>
[  189.414738][T13599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2172'.
[  189.498681][T13601] pimreg: entered allmulticast mode
[  189.503277][T13601] pimreg: left allmulticast mode
[  189.643844][T13617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2178'.
[  189.675011][T13617] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2178'.
[  189.781634][T13627] 8021q: adding VLAN 0 to HW filter on device bond0
[  189.801779][T13627] veth13: entered promiscuous mode
[  189.863354][T13627] erspan0: entered allmulticast mode
[  189.903616][T13639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2185'.
[  189.906670][T13639] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2185'.
[  189.917524][T13642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2185'.
[  189.942626][T13646] xt_TCPMSS: Only works on TCP SYN packets
[  189.978740][T13652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2189'.
[  190.085859][T13655] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2190'.
[  191.042705][T13697] IPVS: stopping backup sync thread 13488 ...
[  191.100894][T13701] validate_nla: 6 callbacks suppressed
[  191.100906][T13701] netlink: 'syz.0.2201': attribute type 1 has an invalid length.
[  191.108949][T13701] syzkaller1: entered promiscuous mode
[  191.112083][T13701] syzkaller1: entered allmulticast mode
[  191.267662][T13722] xt_TPROXY: Can be used only with -p tcp or -p udp
[  191.339393][T13728] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  191.342245][T13728] syzkaller0: entered promiscuous mode
[  191.343977][T13728] syzkaller0: entered allmulticast mode
[  191.363757][T13728] tipc: Resetting bearer <eth:syzkaller0>
[  191.381832][T13727] tipc: Resetting bearer <eth:syzkaller0>
[  191.395311][T13727] tipc: Disabling bearer <eth:syzkaller0>
[  191.422615][T13736] syzkaller1: entered promiscuous mode
[  191.424309][T13736] syzkaller1: entered allmulticast mode
[  191.445724][T13738] net_ratelimit: 29 callbacks suppressed
[  191.445737][T13738] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.532057][T13747] netlink: 'syz.2.2220': attribute type 1 has an invalid length.
[  191.627680][T13761] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  191.630696][T13761] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  191.698619][T13766] syzkaller1: entered promiscuous mode
[  191.701042][T13766] syzkaller1: entered allmulticast mode
[  191.741613][T13771] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  191.845549][T13787] netlink: 'syz.0.2231': attribute type 1 has an invalid length.
[  192.139022][T13815] syzkaller1: entered promiscuous mode
[  192.144123][T13815] syzkaller1: entered allmulticast mode
[  192.156362][T13818] C speed is unknown, defaulting to 1000
[  192.174083][T13818] DL<Y speed is unknown, defaulting to 1000
[  192.287257][T13818] lo speed is unknown, defaulting to 1000
[  193.254242][T13837] netlink: 'syz.0.2244': attribute type 3 has an invalid length.
[  193.278472][T13837] vxcan9: entered allmulticast mode
[  193.412103][T13855] C speed is unknown, defaulting to 1000
[  193.414675][T13855] DL<Y speed is unknown, defaulting to 1000
[  193.447470][T13857] netlink: 'syz.2.2250': attribute type 1 has an invalid length.
[  193.453143][T13859] tap0: tun_chr_ioctl cmd 1074025677
[  193.454940][T13859] tap0: linktype set to 0
[  193.571161][T13855] lo speed is unknown, defaulting to 1000
[  193.748083][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  194.010331][T13908] __nla_validate_parse: 35 callbacks suppressed
[  194.010344][T13908] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2263'.
[  194.059901][ T5831] Bluetooth: hci2: command 0x0405 tx timeout
[  194.107937][T13915] netlink: 26 bytes leftover after parsing attributes in process `syz.0.2266'.
[  194.657220][T13929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2271'.
[  194.661631][T13929] netlink: 'syz.0.2271': attribute type 2 has an invalid length.
[  194.703645][T13930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2272'.
[  194.704399][T13934] syzkaller1: entered promiscuous mode
[  194.707965][T13934] syzkaller1: entered allmulticast mode
[  194.729403][T13930] netlink: 'syz.2.2272': attribute type 10 has an invalid length.
[  194.912750][T13947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2278'.
[  194.916782][T13948] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2278'.
[  194.926167][T13948] vlan0: entered allmulticast mode
[  194.927851][T13948] 0{X: entered allmulticast mode
[  194.982051][T13951] ip6gretap2: left allmulticast mode
[  194.983680][T13951] ip6gretap2: left promiscuous mode
[  194.985356][T13951] bridge11: port 1(ip6gretap2) entered disabled state
[  194.997186][T13951] veth13: left allmulticast mode
[  194.998919][T13951] bridge11: port 2(veth13) entered disabled state
[  195.049139][T13958] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2281'.
[  195.091723][T13964] netlink: 'syz.1.2283': attribute type 1 has an invalid length.
[  195.094044][T13964] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2283'.
[  195.099067][T13962] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2284'.
[  195.116481][T13962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2284'.
[  195.328417][T13995] netlink: 'syz.2.2293': attribute type 1 has an invalid length.
[  195.378556][T13997] sctp: [Deprecated]: syz.2.2294 (pid 13997) Use of struct sctp_assoc_value in delayed_ack socket option.
[  195.378556][T13997] Use struct sctp_sack_info instead
[  195.385323][T13998] sctp: [Deprecated]: syz.2.2294 (pid 13998) Use of struct sctp_assoc_value in delayed_ack socket option.
[  195.385323][T13998] Use struct sctp_sack_info instead
[  195.392600][T13998] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20000
[  195.395136][T14000] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20000
[  195.465305][T14004] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  195.470334][T14004] tipc: Resetting bearer <eth:syzkaller0>
[  195.475027][T14004] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  195.509426][T14004] x_tables: duplicate underflow at hook 2
[  195.711458][T14019] netlink: 'syz.2.2300': attribute type 1 has an invalid length.
[  196.008064][T14034] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  196.087786][T14042] syzkaller1: entered promiscuous mode
[  196.089674][T14042] syzkaller1: entered allmulticast mode
[  196.372802][T14065] validate_nla: 1 callbacks suppressed
[  196.372813][T14065] netlink: 'syz.0.2316': attribute type 1 has an invalid length.
[  196.482943][T14075] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  196.585532][T14085] netlink: 'syz.2.2325': attribute type 1 has an invalid length.
[  196.593310][T14087] netlink: 'syz.0.2326': attribute type 4 has an invalid length.
[  196.598704][ T5891] C speed is unknown, defaulting to 1000
[  196.601201][T14087] netlink: 'syz.0.2326': attribute type 4 has an invalid length.
[  196.603687][ T5891] syz1: Port: 1 Link DOWN
[  196.606647][ T5891] C speed is unknown, defaulting to 1000
[  196.608424][ T5891] syz1: Port: 1 Link ACTIVE
[  196.768290][T14111] sctp: [Deprecated]: syz.0.2329 (pid 14111) Use of int in maxseg socket option.
[  196.768290][T14111] Use struct sctp_assoc_value instead
[  196.789328][T14113] netlink: 'syz.2.2331': attribute type 2 has an invalid length.
[  196.854685][T14121] syzkaller1: entered promiscuous mode
[  196.856431][T14121] syzkaller1: entered allmulticast mode
[  197.017890][T14124] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  197.020296][T14124] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  197.022672][T14124] tipc: Resetting bearer <eth:syzkaller0>
[  197.025803][T14124] rdma_rxe: rxe_newlink: failed to add vxcan1
[  197.115004][T14138] netlink: 'syz.0.2338': attribute type 5 has an invalid length.
[  197.242462][T14151] syzkaller1: entered promiscuous mode
[  197.244189][T14151] syzkaller1: entered allmulticast mode
[  197.281908][T14157] netlink: 'syz.0.2343': attribute type 21 has an invalid length.
[  197.284381][T14157] netlink: 'syz.0.2343': attribute type 5 has an invalid length.
[  197.286814][T14157] netlink: 'syz.0.2343': attribute type 6 has an invalid length.
[  197.900443][T14188] syzkaller1: entered promiscuous mode
[  197.902209][T14188] syzkaller1: entered allmulticast mode
[  198.378168][T14224] syzkaller1: entered promiscuous mode
[  198.381398][T14224] syzkaller1: entered allmulticast mode
[  198.581222][T14239] syzkaller1: entered promiscuous mode
[  198.582925][T14239] syzkaller1: entered allmulticast mode
[  198.593685][T14242] sctp: [Deprecated]: syz.1.2365 (pid 14242) Use of struct sctp_assoc_value in delayed_ack socket option.
[  198.593685][T14242] Use struct sctp_sack_info instead
[  201.052879][T14252] __nla_validate_parse: 25 callbacks suppressed
[  201.052892][T14252] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2370'.
[  201.086599][T14254] syzkaller1: entered promiscuous mode
[  201.088330][T14254] syzkaller1: entered allmulticast mode
[  201.233683][T14267] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2375'.
[  201.236560][T14267] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  201.253054][T14270] syzkaller1: entered promiscuous mode
[  201.254716][T14270] syzkaller1: entered allmulticast mode
[  201.285111][T14272] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2378'.
[  201.286614][T14274] netlink: 'syz.1.2377': attribute type 1 has an invalid length.
[  201.303308][T14274] bond13: entered promiscuous mode
[  201.305208][T14274] 8021q: adding VLAN 0 to HW filter on device bond13
[  201.309322][T14274] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2377'.
[  201.319217][T14274] batadv2: entered promiscuous mode
[  201.321095][T14274] batadv2: entered allmulticast mode
[  201.323652][T14274] 8021q: adding VLAN 0 to HW filter on device batadv2
[  201.327699][T14274] bond13: (slave batadv2): making interface the new active one
[  201.333677][T14274] bond13: (slave batadv2): Enslaving as an active interface with an up link
[  201.346308][T14272] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2378'.
[  201.349496][T14272] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2378'.
[  201.457737][T14274] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2377'.
[  201.489635][T14274] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2377'.
[  201.536758][T14302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2383'.
[  201.551580][T14302] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2383'.
[  201.584544][T14303] IPVS: set_ctl: invalid protocol: 133 0.0.0.0:20000
[  201.661767][T14309] netlink: 'syz.1.2386': attribute type 1 has an invalid length.
[  202.838469][T14324] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  202.842062][T14324] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  202.844571][T14324] tipc: Resetting bearer <eth:syzkaller0>
[  202.848454][T14324] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  202.879129][T14329] GUP no longer grows the stack in syz.1.2392 (14329): 200000006000-20000000a000 (200000005000)
[  202.883069][T14329] CPU: 1 UID: 0 PID: 14329 Comm: syz.1.2392 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  202.883082][T14329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  202.883089][T14329] Call Trace:
[  202.883093][T14329]  <TASK>
[  202.883098][T14329]  dump_stack_lvl+0x189/0x250
[  202.883116][T14329]  ? __pfx_dump_stack_lvl+0x10/0x10
[  202.883126][T14329]  ? __pfx__printk+0x10/0x10
[  202.883138][T14329]  ? find_vma+0xe7/0x160
[  202.883156][T14329]  __get_user_pages+0x2a60/0x30b0
[  202.883183][T14329]  ? __pfx___get_user_pages+0x10/0x10
[  202.883193][T14329]  ? __gup_longterm_locked+0xbf7/0x15b0
[  202.883204][T14329]  ? down_read_killable+0x1d1/0x350
[  202.883216][T14329]  ? try_get_folio+0x633/0x660
[  202.883229][T14329]  __gup_longterm_locked+0xd66/0x15b0
[  202.883243][T14329]  ? try_grab_folio_fast+0x1be/0x4f0
[  202.883259][T14329]  ? gup_fast_fallback+0x1afc/0x2260
[  202.883271][T14329]  gup_fast_fallback+0x1cd4/0x2260
[  202.883298][T14329]  ? __pfx_gup_fast_fallback+0x10/0x10
[  202.883307][T14329]  ? trace_contention_end+0x39/0x120
[  202.883319][T14329]  ? __mutex_lock+0x330/0xe80
[  202.883330][T14329]  ? is_valid_gup_args+0x11f/0x200
[  202.883341][T14329]  ? get_user_pages_fast+0x4d/0xb0
[  202.883352][T14329]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  202.883369][T14329]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  202.883377][T14329]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  202.883389][T14329]  ? wait_for_space+0x24d/0x2d0
[  202.883403][T14329]  iov_iter_get_pages2+0x5e/0xa0
[  202.883417][T14329]  __se_sys_vmsplice+0x548/0x10d0
[  202.883435][T14329]  ? wake_up_q+0xca/0x110
[  202.883449][T14329]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  202.883464][T14329]  ? __pfx_futex_wake+0x10/0x10
[  202.883476][T14329]  ? __lock_acquire+0xab9/0xd20
[  202.883500][T14329]  ? do_pipe2+0xf7/0x170
[  202.883510][T14329]  ? rcu_is_watching+0x15/0xb0
[  202.883522][T14329]  ? do_syscall_64+0xbe/0x3b0
[  202.883535][T14329]  do_syscall_64+0xfa/0x3b0
[  202.883542][T14329]  ? lockdep_hardirqs_on+0x9c/0x150
[  202.883551][T14329]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.883559][T14329]  ? exc_page_fault+0x9f/0xf0
[  202.883569][T14329]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.883579][T14329] RIP: 0033:0x7f5a96f8e929
[  202.883588][T14329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  202.883597][T14329] RSP: 002b:00007f5a97dca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  202.883607][T14329] RAX: ffffffffffffffda RBX: 00007f5a971b5fa0 RCX: 00007f5a96f8e929
[  202.883613][T14329] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000d
[  202.883618][T14329] RBP: 00007f5a97010ca1 R08: 0000000000000000 R09: 0000000000000000
[  202.883623][T14329] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  202.883628][T14329] R13: 0000000000000000 R14: 00007f5a971b5fa0 R15: 00007ffdb8025118
[  202.883641][T14329]  </TASK>
[  203.029854][T14336] syzkaller1: entered promiscuous mode
[  203.031581][T14336] syzkaller1: entered allmulticast mode
[  203.042649][T14330] xt_ipcomp: unknown flags F7
[  203.166465][T14352] syzkaller1: entered promiscuous mode
[  203.171702][T14352] syzkaller1: entered allmulticast mode
[  203.257261][T14364] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  203.260332][T14364] tipc: Resetting bearer <eth:syzkaller0>
[  203.366373][T14370] 8021q: adding VLAN 0 to HW filter on device bond14
[  203.372922][T14372] bridge10: the hash_elasticity option has been deprecated and is always 16
[  203.375575][T14372] bridge10: entered allmulticast mode
[  203.405382][T14373] C speed is unknown, defaulting to 1000
[  203.417320][T14373] DL<Y speed is unknown, defaulting to 1000
[  203.583098][T14373] lo speed is unknown, defaulting to 1000
[  203.675794][T14406] syzkaller1: entered promiscuous mode
[  203.677518][T14406] syzkaller1: entered allmulticast mode
[  203.742049][T14416] netlink: 'syz.2.2417': attribute type 1 has an invalid length.
[  203.821069][T14421] 0{X: entered promiscuous mode
[  203.848154][T14421] nbd: couldn't find device at index 536870912
[  203.923200][T14421] pim6reg: entered allmulticast mode
[  204.128241][T14443] netlink: 'syz.1.2425': attribute type 1 has an invalid length.
[  204.328941][T14458] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  204.398484][T14465] pimreg3: entered allmulticast mode
[  204.418262][T14464] pimreg3: left allmulticast mode
[  204.437786][T14468] syzkaller1: entered promiscuous mode
[  204.439514][T14468] syzkaller1: entered allmulticast mode
[  204.597419][T14482] xt_TPROXY: Can be used only with -p tcp or -p udp
[  204.672702][T14488] netlink: 'syz.1.2441': attribute type 1 has an invalid length.
[  204.689178][T14488] 8021q: adding VLAN 0 to HW filter on device bond15
[  204.705453][T14488] 8021q: adding VLAN 0 to HW filter on device bond15
[  204.707828][T14488] bond15: (slave vxcan1): The slave device specified does not support setting the MAC address
[  204.712175][T14488] bond15: (slave vxcan1): Error -95 calling set_mac_address
[  204.758588][T14494] veth13: entered promiscuous mode
[  204.765292][T14494] bond15: (slave veth13): Enslaving as an active interface with a down link
[  204.919060][T14507] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  204.974564][T14514] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  205.022944][T14518] syzkaller1: entered promiscuous mode
[  205.024706][T14518] syzkaller1: entered allmulticast mode
[  205.153933][T14525] IPVS: Unknown mcast interface: vlan0
[  205.157379][T14527] syzkaller1: entered promiscuous mode
[  205.159248][T14527] syzkaller1: entered allmulticast mode
[  205.199303][T14529] netlink: 'syz.2.2457': attribute type 7 has an invalid length.
[  205.264412][T14535] netlink: 'syz.0.2461': attribute type 1 has an invalid length.
[  205.372778][T14552] netlink: 'syz.1.2462': attribute type 10 has an invalid length.
[  205.428314][T14557] syzkaller1: entered promiscuous mode
[  205.443019][T14557] syzkaller1: entered allmulticast mode
[  205.514018][T14567] netlink: 'syz.2.2470': attribute type 1 has an invalid length.
[  205.545341][T14570] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  205.668862][T14595] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  205.669683][T14596] netlink: 'syz.1.2480': attribute type 1 has an invalid length.
[  205.676798][T14595] sch_fq: defrate 257 ignored.
[  205.741847][T14605] netlink: 'syz.2.2482': attribute type 1 has an invalid length.
[  205.762578][T14607] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  205.838015][T14619] sctp: [Deprecated]: syz.2.2486 (pid 14619) Use of int in maxseg socket option.
[  205.838015][T14619] Use struct sctp_assoc_value instead
[  206.078416][T14631] __nla_validate_parse: 42 callbacks suppressed
[  206.078428][T14631] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2491'.
[  206.159541][T14635] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  206.163738][T14635] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  206.262584][T14645] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2494'.
[  206.293728][T14647] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2495'.
[  206.348723][T14649] C speed is unknown, defaulting to 1000
[  206.357176][T14649] DL<Y speed is unknown, defaulting to 1000
[  206.463082][T14660] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2498'.
[  206.472825][T14660] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2498'.
[  206.612348][T14649] lo speed is unknown, defaulting to 1000
[  206.624349][T14672] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2500'.
[  206.665121][T14679] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2501'.
[  206.703843][T14688] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.2503'.
[  207.019086][T14709] validate_nla: 2 callbacks suppressed
[  207.019100][T14709] netlink: 'syz.0.2509': attribute type 8 has an invalid length.
[  207.030938][T14709] pim6reg1: entered promiscuous mode
[  207.032634][T14709] pim6reg1: entered allmulticast mode
[  207.128479][T14713] netlink: 'syz.0.2510': attribute type 1 has an invalid length.
[  207.131134][T14713] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2510'.
[  207.593414][T14733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2515'.
[  207.769572][T14739] netlink: 'syz.2.2517': attribute type 1 has an invalid length.
[  207.942739][T14756] netlink: 'syz.2.2520': attribute type 5 has an invalid length.
[  207.942776][T14757] netlink: 'syz.2.2520': attribute type 5 has an invalid length.
[  208.055502][T14771] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  208.087841][T14774] netlink: 'syz.2.2524': attribute type 11 has an invalid length.
[  208.125816][T14779] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  208.133711][T14779] pim6reg1: entered promiscuous mode
[  208.135425][T14779] pim6reg1: entered allmulticast mode
[  208.811031][T14827] netlink: 'syz.1.2529': attribute type 12 has an invalid length.
[  208.815492][T14827] netlink: 'syz.1.2529': attribute type 21 has an invalid length.
[  208.993402][T14850] netlink: 'syz.0.2534': attribute type 32 has an invalid length.
[  209.167662][T14874] netlink: 'syz.1.2540': attribute type 1 has an invalid length.
[  209.289670][T14887] netlink: 'syz.0.2544': attribute type 4 has an invalid length.
[  209.423311][T14895] syzkaller1: entered promiscuous mode
[  209.425177][T14895] syzkaller1: entered allmulticast mode
[  209.892226][T14935] syzkaller1: entered promiscuous mode
[  209.894370][T14935] syzkaller1: entered allmulticast mode
[  210.008799][T14937] bond14: entered promiscuous mode
[  210.012153][T14937] 8021q: adding VLAN 0 to HW filter on device bond14
[  210.024434][T14937] batadv2: entered promiscuous mode
[  210.026164][T14937] batadv2: entered allmulticast mode
[  210.029252][T14937] 8021q: adding VLAN 0 to HW filter on device batadv2
[  210.034728][T14937] bond14: (slave batadv2): making interface the new active one
[  210.037787][T14937] bond14: (slave batadv2): Enslaving as an active interface with an up link
[  210.129176][T14942] syzkaller1: entered promiscuous mode
[  210.131136][T14942] syzkaller1: entered allmulticast mode
[  210.436419][T14962] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  210.438644][T14962] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  210.443521][T14962] tipc: Resetting bearer <eth:syzkaller0>
[  210.446925][T14962] openvswitch: netlink: VXLAN extension 274 out of range max 1
[  210.456696][T14962] bond15: (slave erspan0): Releasing active interface
[  210.458952][T14962] ip6gretap2: entered promiscuous mode
[  210.465706][T14962] bond0: (slave wlan1): Releasing backup interface
[  210.471879][T14962] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  210.474891][T14962] tipc: Resetting bearer <eth:syzkaller0>
[  210.481148][T14962] bond15: (slave ip6gretap2): Releasing active interface
[  210.483329][T14962] bond15: (slave ip6gretap2): the permanent HWaddr of slave - 2a:08:d0:a7:16:a6 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  210.487237][T14967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  210.500239][T14962] ip6gretap2: left promiscuous mode
[  210.503243][T14962] bond15: (slave veth11): Releasing active interface
[  210.506015][T14962] bond18: left allmulticast mode
[  210.507565][T14962] bond18: left promiscuous mode
[  210.509185][T14962] bridge0: port 1(bond18) entered disabled state
[  210.517605][T14962] bond19: (slave geneve3): Releasing active interface
[  211.124006][T14974] bridge0 (unregistering): left allmulticast mode
[  211.173233][T14973] __nla_validate_parse: 19 callbacks suppressed
[  211.173243][T14973] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2569'.
[  211.180457][T14973] Set syz0 is full, maxelem 0 reached
[  211.252755][T14976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2570'.
[  211.259966][T14976] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2570'.
[  211.297447][T14981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2572'.
[  211.305018][T14980] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2571'.
[  211.308336][T14980] netlink: 15 bytes leftover after parsing attributes in process `syz.2.2571'.
[  211.347444][T14986] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2574'.
[  211.442921][T14996] tipc: Resetting bearer <eth:syzkaller0>
[  211.580291][T15001] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2579'.
[  211.616254][T15008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2580'.
[  211.619145][T15008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2580'.
[  211.698209][T15014] syzkaller1: entered promiscuous mode
[  211.704265][T15014] syzkaller1: entered allmulticast mode
[  211.706878][T15014] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  211.928630][T15033] C speed is unknown, defaulting to 1000
[  211.935223][T15033] DL<Y speed is unknown, defaulting to 1000
[  212.034748][T15049] netlink: zone id is out of range
[  212.036293][T15033] lo speed is unknown, defaulting to 1000
[  212.036516][T15049] netlink: zone id is out of range
[  212.041798][T15049] netlink: zone id is out of range
[  212.043485][T15049] netlink: zone id is out of range
[  212.045176][T15049] netlink: zone id is out of range
[  212.046919][T15049] netlink: zone id is out of range
[  212.048647][T15049] netlink: zone id is out of range
[  212.052293][T15049] netlink: zone id is out of range
[  212.396485][T15057] validate_nla: 11 callbacks suppressed
[  212.396496][T15057] netlink: 'syz.2.2595': attribute type 10 has an invalid length.
[  212.402153][T15057] bond0: (slave wlan1): Opening slave failed
[  212.612951][T15067] netlink: 'syz.2.2599': attribute type 1 has an invalid length.
[  212.645176][T15069] syzkaller1: entered promiscuous mode
[  212.646965][T15069] syzkaller1: entered allmulticast mode
[  212.798458][T15078] C speed is unknown, defaulting to 1000
[  212.802638][T15078] DL<Y speed is unknown, defaulting to 1000
[  212.806015][T15080] syzkaller1: entered promiscuous mode
[  212.808088][T15080] syzkaller1: entered allmulticast mode
[  212.909673][T15085] erspan0: left allmulticast mode
[  212.949549][T15085] wg1: left allmulticast mode
[  212.954917][T15085] veth1_macvtap: left allmulticast mode
[  212.981458][T15090] netlink: 'syz.0.2607': attribute type 1 has an invalid length.
[  212.985424][T15085] ip6erspan0: left allmulticast mode
[  212.990512][T15085] geneve2: left allmulticast mode
[  212.992583][T15085] tipc: Resetting bearer <eth:syzkaller0>
[  213.001461][T15085] syzkaller0: left promiscuous mode
[  213.003667][T15085] syzkaller0: left allmulticast mode
[  213.013319][T15085] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  213.015433][T15085] macsec1: left allmulticast mode
[  213.035688][T15085] macsec0: left allmulticast mode
[  213.039899][T15085] macsec2: left allmulticast mode
[  213.076461][T15085] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  213.079074][T15085] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  213.081758][T15085] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  213.084219][T15085] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  213.090934][T15085] ip6gre2: left allmulticast mode
[  213.110167][T15085] batadv1: left promiscuous mode
[  213.116825][T15085] batadv1: left allmulticast mode
[  213.125214][T15085] bond13: left promiscuous mode
[  213.130198][T15085] batadv2: left promiscuous mode
[  213.132006][T15085] batadv2: left allmulticast mode
[  213.137063][T15085] veth13: left promiscuous mode
[  213.140183][T15078] lo speed is unknown, defaulting to 1000
[  213.226616][T15095] syzkaller1: entered promiscuous mode
[  213.228308][T15095] syzkaller1: entered allmulticast mode
[  213.428337][T15110] netlink: 'syz.0.2615': attribute type 1 has an invalid length.
[  213.476628][T15115] netlink: 'syz.2.2617': attribute type 5 has an invalid length.
[  213.623957][T15131] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  213.632135][T15131] IPv6: syztnl1: Disabled Multicast RS
[  213.666319][T15133] xfrm1: entered allmulticast mode
[  213.766693][T15144] 0: renamed from hsr0
[  213.771356][T15144] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  213.774489][T15144] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  213.778035][T15144] 0: entered allmulticast mode
[  213.780272][T15144] hsr_slave_0: entered allmulticast mode
[  213.782118][T15144] hsr_slave_1: entered allmulticast mode
[  213.805424][T15148] syzkaller1: entered promiscuous mode
[  213.807127][T15148] syzkaller1: entered allmulticast mode
[  213.928798][T15158] netlink: 'syz.1.2632': attribute type 1 has an invalid length.
[  213.977361][T15160] pim6reg1: entered promiscuous mode
[  213.979202][T15160] pim6reg1: entered allmulticast mode
[  214.095345][T15160] bond16 (unregistering): Released all slaves
[  214.257772][T15185] syzkaller1: entered promiscuous mode
[  214.261381][T15185] syzkaller1: entered allmulticast mode
[  214.351109][T15188] netlink: 'syz.0.2640': attribute type 1 has an invalid length.
[  214.475561][T15203] netlink: 'syz.0.2644': attribute type 4 has an invalid length.
[  214.481050][ T5870] C speed is unknown, defaulting to 1000
[  214.482882][ T5870] syz1: Port: 1 Link DOWN
[  214.952254][T15251] tipc: Resetting bearer <eth:syzkaller0>
[  215.099409][T15261] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  215.166896][T15265] pim6reg1: entered promiscuous mode
[  215.168494][T15265] pim6reg1: entered allmulticast mode
[  215.278133][T15265] bond16 (unregistering): Released all slaves
[  215.347349][T15271] syzkaller1: entered promiscuous mode
[  215.349090][T15271] syzkaller1: entered allmulticast mode
[  215.423246][T15273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  215.635914][T15288] syzkaller0: entered promiscuous mode
[  215.637693][T15288] syzkaller0: entered allmulticast mode
[  215.707982][T15292] syzkaller1: entered promiscuous mode
[  215.709733][T15292] syzkaller1: entered allmulticast mode
[  215.751735][T15294] ip_vti0: Master is either lo or non-ether device
[  215.784785][T15297] netlink: 'syz.2.2670': attribute type 1 has an invalid length.
[  215.816279][T15299] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  215.878470][T15302] tipc: Resetting bearer <eth:syzkaller0>
[  215.906413][T15301] netlink: 'syz.2.2672': attribute type 303 has an invalid length.
[  215.910017][T15301] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  215.912839][T15301] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  216.036699][T15308] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  216.040608][T15308] syzkaller0: entered promiscuous mode
[  216.043717][T15308] syzkaller0: entered allmulticast mode
[  216.073543][T15313] net_ratelimit: 80 callbacks suppressed
[  216.073553][T15313] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  216.702925][T15320] syzkaller1: entered promiscuous mode
[  216.704855][T15320] syzkaller1: entered allmulticast mode
[  216.860559][   T24] tipc: Node number set to 2851309010
[  216.994463][T15350] __nla_validate_parse: 26 callbacks suppressed
[  216.994475][T15350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2687'.
[  217.053402][T15359] : left promiscuous mode
[  217.247360][T15370] C speed is unknown, defaulting to 1000
[  217.252553][T15370] DL<Y speed is unknown, defaulting to 1000
[  217.265717][T15372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2693'.
[  217.415247][T15380] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2695'.
[  217.427436][T15370] lo speed is unknown, defaulting to 1000
[  217.547250][T15388] syzkaller1: entered promiscuous mode
[  217.549322][T15388] syzkaller1: entered allmulticast mode
[  217.644790][T15390] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2699'.
[  217.685478][T15392] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2700'.
[  217.763225][T15396] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2702'.
[  217.778562][T15401] validate_nla: 1 callbacks suppressed
[  217.778574][T15401] netlink: 'syz.2.2703': attribute type 9 has an invalid length.
[  217.823906][T15403] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2704'.
[  217.911594][T15408] netlink: 'syz.2.2706': attribute type 1 has an invalid length.
[  217.913936][T15408] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2706'.
[  217.994450][T15416] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  217.996901][T15416] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  217.999428][T15416] tipc: Resetting bearer <eth:syzkaller0>
[  218.118704][T15426] netlink: 'syz.2.2709': attribute type 13 has an invalid length.
[  218.121620][T15426] netlink: 'syz.2.2709': attribute type 17 has an invalid length.
[  218.150149][T15424] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  218.165592][T15424] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2710'.
[  218.235786][T15431] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2711'.
[  218.263710][T15426] tipc: Resetting bearer <eth:syzkaller0>
[  218.426930][T15428] C speed is unknown, defaulting to 1000
[  218.460845][T15428] DL<Y speed is unknown, defaulting to 1000
[  218.525879][T15435] netlink: 'syz.1.2712': attribute type 11 has an invalid length.
[  218.739397][T15442] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  218.768987][T15428] lo speed is unknown, defaulting to 1000
[  218.917148][T15454] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  218.960335][T15456] netlink: 'syz.2.2720': attribute type 4 has an invalid length.
[  218.969926][T15456] netlink: 'syz.2.2720': attribute type 4 has an invalid length.
[  218.998258][   T24] DL<Y speed is unknown, defaulting to 1000
[  219.019403][   T24] syz0: Port: 1 Link ACTIVE
[  219.021056][ T5870] DL<Y speed is unknown, defaulting to 1000
[  219.191184][T15469] veth0: entered promiscuous mode
[  219.194791][T15469] veth0 (unregistering): left promiscuous mode
[  219.222722][T15471] netlink: 'syz.2.2725': attribute type 1 has an invalid length.
[  219.485880][T15491] xt_recent: Unsupported userspace flags (00000048)
[  219.616566][T15501] netlink: 'syz.1.2733': attribute type 33 has an invalid length.
[  219.852293][T15519] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  219.855493][T15519] tipc: Resetting bearer <eth:syzkaller0>
[  219.993194][T15538] xt_hashlimit: size too large, truncated to 1048576
[  220.195132][T15554] syzkaller1: entered promiscuous mode
[  220.198133][T15554] syzkaller1: entered allmulticast mode
[  220.515251][T15591] syzkaller1: entered promiscuous mode
[  220.517481][T15591] syzkaller1: entered allmulticast mode
[  220.544198][T15588] netlink: zone id is out of range
[  220.546358][T15588] netlink: zone id is out of range
[  220.548416][T15588] netlink: zone id is out of range
[  220.552163][T15588] netlink: zone id is out of range
[  220.553681][T15588] netlink: zone id is out of range
[  220.555165][T15588] netlink: zone id is out of range
[  220.556683][T15588] netlink: zone id is out of range
[  220.788436][T15623] netlink: 'syz.2.2766': attribute type 21 has an invalid length.
[  220.914845][T15631] syzkaller1: entered promiscuous mode
[  220.916522][T15631] syzkaller1: entered allmulticast mode
[  221.174703][T15656] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  221.552864][T15671] netlink: 'syz.0.2780': attribute type 1 has an invalid length.
[  221.649544][T15677] xt_l2tp: v2 tid > 0xffff: 4294967295
[  221.991338][T15685] No such timeout policy "syz1"
[  222.000296][T15685] xt_nfacct: accounting object `syz1' does not exists
[  222.012991][T15685] __nla_validate_parse: 20 callbacks suppressed
[  222.013002][T15685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2786'.
[  222.064762][T15692] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2788'.
[  222.425522][T15718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2796'.
[  222.472413][T15711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2794'.
[  222.514271][T15735] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2798'.
[  222.523332][T15735] batadv0: entered promiscuous mode
[  222.524979][T15735] batadv0: entered allmulticast mode
[  222.619200][T15735] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2798'.
[  222.722401][T15740] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2800'.
[  222.735173][T15743] C speed is unknown, defaulting to 1000
[  222.738399][T15743] DL<Y speed is unknown, defaulting to 1000
[  222.836191][T15749] net_ratelimit: 4079 callbacks suppressed
[  222.836201][T15749] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  222.884710][T15749] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  222.887356][T15749] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  222.890179][T15749] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  222.893001][T15750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2803'.
[  222.893031][T15749] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  222.920036][T15749] tipc: Resetting bearer <eth:syzkaller0>
[  222.930857][T15743] lo speed is unknown, defaulting to 1000
[  222.982628][T15757] validate_nla: 2 callbacks suppressed
[  222.982639][T15757] netlink: 'syz.0.2804': attribute type 1 has an invalid length.
[  223.008533][T15757] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR
[  223.091740][T15763] macsec1: entered promiscuous mode
[  223.095724][T15763] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  223.099176][T15763] macsec1: entered allmulticast mode
[  223.101696][T15763] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  223.147876][T15765] netlink: 'syz.0.2806': attribute type 10 has an invalid length.
[  223.175813][T15770] netlink: 'syz.2.2807': attribute type 9 has an invalid length.
[  223.178222][T15770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2807'.
[  223.189949][T15770] macvlan0: entered promiscuous mode
[  223.191971][T15771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2807'.
[  223.194997][T15770] hsr0: entered promiscuous mode
[  223.196972][T15770] macvlan0: entered allmulticast mode
[  223.198552][T15770] hsr0: entered allmulticast mode
[  223.216495][T15770] hsr_slave_0: entered allmulticast mode
[  223.218574][T15770] hsr_slave_1: entered allmulticast mode
[  223.282300][T15782] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  223.532856][T15820] Timeout policy `syz1' can only be used by L3 protocol number 41216
[  223.535966][T15820] xt_nfacct: accounting object `syz1' does not exists
[  223.587746][T15826] vlan3: entered promiscuous mode
[  223.589492][T15826] vlan3: entered allmulticast mode
[  223.882480][T15859] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  223.884911][T15859] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  223.955350][T15869] netlink: 'syz.1.2831': attribute type 1 has an invalid length.
[  224.048932][T15878] netlink: 'syz.0.2833': attribute type 12 has an invalid length.
[  224.277720][T15901] pim6reg1: entered promiscuous mode
[  224.279493][T15901] pim6reg1: entered allmulticast mode
[  224.690865][T15906] syzkaller0: left promiscuous mode
[  224.692534][T15906] syzkaller0: left allmulticast mode
[  224.695349][T15909] netlink: 'syz.0.2840': attribute type 1 has an invalid length.
[  224.741750][T15907] bond17 (unregistering): Released all slaves
[  224.778334][T15919] 0{X: left promiscuous mode
[  224.788902][T15919] veth0_to_team: left promiscuous mode
[  224.791889][T15919] veth0_to_team: left allmulticast mode
[  224.794806][T15919] mac80211_hwsim hwsim3 wlan0: left promiscuous mode
[  224.797095][T15919] tipc: Resetting bearer <eth:syzkaller0>
[  224.804170][T15919] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  224.806272][T15919] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  224.812197][T15919] veth7: left promiscuous mode
[  224.813819][T15919] bond11: left promiscuous mode
[  224.815763][T15919] geneve2: left promiscuous mode
[  224.817261][T15919] geneve2: left allmulticast mode
[  224.819067][T15919] veth11: left promiscuous mode
[  224.820779][T15919] bond17: left promiscuous mode
[  224.824653][T15919] bridge10: left allmulticast mode
[  224.840279][T15919] hsr0: left allmulticast mode
[  224.841732][T15919] hsr_slave_0: left allmulticast mode
[  224.843405][T15919] hsr_slave_1: left allmulticast mode
[  224.845033][T15919] hsr0: left promiscuous mode
[  224.846773][T15919] macvlan0: left promiscuous mode
[  224.848313][T15919] macvlan0: left allmulticast mode
[  224.856330][ T5849] DL<Y speed is unknown, defaulting to 1000
[  224.858410][ T5849] syz0: Port: 1 Link DOWN
[  224.870063][ T5849] DL<Y speed is unknown, defaulting to 1000
[  224.912446][T15930] xt_CT: You must specify a L4 protocol and not use inversions on it
[  224.915202][T15928] netlink: 'syz.0.2846': attribute type 25 has an invalid length.
[  225.286631][T15958] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  225.289255][T15958] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  225.447077][T15970] netlink: 'syz.0.2859': attribute type 22 has an invalid length.
[  225.803847][T16000] tipc: New replicast peer: 0.0.0.0
[  225.806001][T16000] tipc: Enabled bearer <udp:syz2>, priority 10
[  225.931690][T16007] netlink: 'syz.2.2871': attribute type 21 has an invalid length.
[  225.937741][T16010] netlink: 'syz.1.2872': attribute type 3 has an invalid length.
[  226.047350][T16020] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  226.246964][ T3709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  226.249426][ T3709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  226.296527][T16053] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[  226.399210][T16062] gretap0: entered promiscuous mode
[  226.422725][T16065] 8021q: VLANs not supported on caif0
[  226.655849][T16075] bond17: entered promiscuous mode
[  226.657828][T16075] 8021q: adding VLAN 0 to HW filter on device bond17
[  226.752025][T16075] bond17 (unregistering): Released all slaves
[  227.024003][T16108] __nla_validate_parse: 35 callbacks suppressed
[  227.024014][T16108] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2900'.
[  227.076908][T16111] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  227.094148][T16111] tipc: Resetting bearer <eth:syzkaller0>
[  227.113190][T16111] syzkaller0: Caught tx_queue_len zero misconfig
[  227.217898][T16123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2904'.
[  227.257150][T16124] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  227.267694][ T5870] DL<Y speed is unknown, defaulting to 1000
[  227.275063][ T5870] syz0: Port: 1 Link ACTIVE
[  227.276563][ T5870] DL<Y speed is unknown, defaulting to 1000
[  227.324773][T16132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2907'.
[  227.328232][T16132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2907'.
[  227.333292][T16132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2907'.
[  227.335973][T16132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2907'.
[  227.338873][T16132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2907'.
[  227.344481][T16132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2907'.
[  227.348052][T16132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2907'.
[  227.406237][T16138] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2908'.
[  227.557379][T16145] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  227.892574][T16170] xt_CT: You must specify a L4 protocol and not use inversions on it
[  228.029897][T16178] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  228.104382][T16185] validate_nla: 7 callbacks suppressed
[  228.104393][T16185] netlink: 'syz.0.2924': attribute type 1 has an invalid length.
[  228.240662][T16193] gretap2: entered promiscuous mode
[  228.344119][T16201] tipc: Resetting bearer <eth:syzkaller0>
[  228.472400][T16210] netlink: 'syz.2.2932': attribute type 1 has an invalid length.
[  228.589530][T16218] pim6reg: entered allmulticast mode
[  228.591963][T16218] pim6reg: left allmulticast mode
[  228.858232][T16241] xt_hashlimit: size too large, truncated to 1048576
[  228.884677][T16228] netlink: 'syz.2.2940': attribute type 30 has an invalid length.
[  229.013876][T16241] xt_bpf: check failed: parse error
[  229.114415][T16263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  229.262363][T16274] netlink: 'syz.0.2950': attribute type 10 has an invalid length.
[  229.297068][T16278] lo: entered promiscuous mode
[  229.301285][T16278] lo: entered allmulticast mode
[  229.304078][ T5849] lo speed is unknown, defaulting to 1000
[  229.306026][ T5849] syz2: Port: 1 Link ACTIVE
[  229.367211][T16285] netlink: 'syz.0.2954': attribute type 2 has an invalid length.
[  229.442210][T16291] netlink: 'syz.0.2955': attribute type 29 has an invalid length.
[  229.456536][T16287] xt_CT: You must specify a L4 protocol and not use inversions on it
[  229.707098][T16313] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  229.734738][T16315] netlink: 'syz.2.2963': attribute type 1 has an invalid length.
[  229.761834][T16317] netlink: 'syz.1.2964': attribute type 9 has an invalid length.
[  230.124636][T16336] netlink: 'syz.1.2971': attribute type 3 has an invalid length.
[  230.389118][T16342] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  230.394546][T16343] netlink: 'syz.1.2972': attribute type 6 has an invalid length.
[  230.525769][T16349] IPVS: Unknown mcast interface: vlan0
[  230.527671][T16349] IPVS: stopping backup sync thread 8837 ...
[  230.620773][T16353] x_tables: ip6_tables: tcp match: only valid for protocol 6
[  230.838322][T16362] rdma_rxe: rxe_newlink: failed to add lo
[  230.841336][T16362] lo: left promiscuous mode
[  230.842867][T16362] lo: left allmulticast mode
[  230.863604][T16362] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  230.967757][T16368] C speed is unknown, defaulting to 1000
[  230.984495][T16368] DL<Y speed is unknown, defaulting to 1000
[  231.009224][T16373] vlan0: entered promiscuous mode
[  231.019895][T16373] hsr_slave_1: entered promiscuous mode
[  231.021827][T16373] vlan0: entered allmulticast mode
[  231.023513][T16373] hsr_slave_1: entered allmulticast mode
[  231.109768][T16368] lo speed is unknown, defaulting to 1000
[  231.421413][T16376] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  231.498942][T16378] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  231.502269][T16378] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  231.504706][T16378] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  231.507199][T16378] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  231.510265][T16378] geneve1: entered promiscuous mode
[  231.511897][T16378] geneve1: entered allmulticast mode
[  231.956880][T16301] warn_alloc: 1 callbacks suppressed
[  231.956892][T16301] syz.0.2957: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  231.965882][T16301] CPU: 0 UID: 0 PID: 16301 Comm: syz.0.2957 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  231.965895][T16301] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  231.965901][T16301] Call Trace:
[  231.965906][T16301]  <TASK>
[  231.965911][T16301]  dump_stack_lvl+0x189/0x250
[  231.965954][T16301]  ? __pfx_dump_stack_lvl+0x10/0x10
[  231.965965][T16301]  ? __pfx__printk+0x10/0x10
[  231.965978][T16301]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  231.965991][T16301]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  231.966003][T16301]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  231.966015][T16301]  warn_alloc+0x214/0x310
[  231.966027][T16301]  ? __pfx_warn_alloc+0x10/0x10
[  231.966039][T16301]  ? __get_vm_area_node+0x28f/0x300
[  231.966052][T16301]  ? translate_table+0x19b/0x2040
[  231.966068][T16301]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  231.966094][T16301]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  231.966108][T16301]  ? rcu_is_watching+0x15/0xb0
[  231.966120][T16301]  ? translate_table+0x19b/0x2040
[  231.966131][T16301]  ? translate_table+0x19b/0x2040
[  231.966141][T16301]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  231.966155][T16301]  ? translate_table+0x19b/0x2040
[  231.966165][T16301]  ? xt_alloc_table_info+0x3b/0xa0
[  231.966178][T16301]  translate_table+0x19b/0x2040
[  231.966196][T16301]  ? __lock_acquire+0xab9/0xd20
[  231.966208][T16301]  ? __pfx_translate_table+0x10/0x10
[  231.966225][T16301]  ? __might_fault+0xb0/0x130
[  231.966247][T16301]  ? _copy_from_user+0x94/0xb0
[  231.966264][T16301]  do_ip6t_set_ctl+0x970/0xce0
[  231.966279][T16301]  ? rcu_is_watching+0x15/0xb0
[  231.966288][T16301]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  231.966309][T16301]  ? __pfx___mutex_lock+0x10/0x10
[  231.966320][T16301]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  231.966328][T16301]  ? aa_sk_perm+0x81e/0x950
[  231.966346][T16301]  ? __pfx_aa_sk_perm+0x10/0x10
[  231.966361][T16301]  nf_setsockopt+0x26f/0x290
[  231.966376][T16301]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  231.966389][T16301]  do_sock_setsockopt+0x17c/0x1b0
[  231.966404][T16301]  __x64_sys_setsockopt+0x13f/0x1b0
[  231.966418][T16301]  do_syscall_64+0xfa/0x3b0
[  231.966429][T16301]  ? lockdep_hardirqs_on+0x9c/0x150
[  231.966437][T16301]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.966446][T16301]  ? exc_page_fault+0x9f/0xf0
[  231.966455][T16301]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.966463][T16301] RIP: 0033:0x7f3f9298e929
[  231.966471][T16301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  231.966479][T16301] RSP: 002b:00007f3f93820038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  231.966488][T16301] RAX: ffffffffffffffda RBX: 00007f3f92bb5fa0 RCX: 00007f3f9298e929
[  231.966495][T16301] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
[  231.966500][T16301] RBP: 00007f3f92a10ca1 R08: 0000000000000448 R09: 0000000000000000
[  231.966505][T16301] R10: 0000200000000840 R11: 0000000000000246 R12: 0000000000000000
[  231.966510][T16301] R13: 0000000000000000 R14: 00007f3f92bb5fa0 R15: 00007ffd3dd2c678
[  231.966523][T16301]  </TASK>
[  231.966527][T16301] Mem-Info:
[  232.024293][T16301] active_anon:5472 inactive_anon:0 isolated_anon:0
[  232.024293][T16301]  active_file:1346 inactive_file:37446 isolated_file:0
[  232.024293][T16301]  unevictable:1768 dirty:163 writeback:0
[  232.024293][T16301]  slab_reclaimable:10382 slab_unreclaimable:170046
[  232.024293][T16301]  mapped:21466 shmem:2471 pagetables:1004
[  232.024293][T16301]  sec_pagetables:0 bounce:0
[  232.024293][T16301]  kernel_misc_reclaimable:0
[  232.024293][T16301]  free:154075 free_pcp:19317 free_cma:0
[  232.032514][T16301] Node 0 active_anon:13984kB inactive_anon:0kB active_file:4076kB inactive_file:144216kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:51820kB dirty:448kB writeback:0kB shmem:4888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5560kB pagetables:2544kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  232.085094][T16398] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  232.085157][T16301] Node 1 active_anon:7904kB inactive_anon:0kB active_file:1308kB inactive_file:5568kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34044kB dirty:204kB writeback:0kB shmem:4996kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7760kB pagetables:1472kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  232.108370][T16301] Node 0 DMA free:4020kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:172kB local_pcp:168kB free_cma:0kB
[  232.128815][T16301] lowmem_reserve[]: 0 812 812 812 812
[  232.132473][T16301] Node 0 DMA32 free:35028kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13984kB inactive_anon:0kB active_file:4076kB inactive_file:144216kB unevictable:3536kB writepending:448kB present:1556484kB managed:831984kB mlocked:0kB bounce:0kB free_pcp:26032kB local_pcp:20076kB free_cma:0kB
[  232.143210][T16401] C speed is unknown, defaulting to 1000
[  232.145730][T16401] DL<Y speed is unknown, defaulting to 1000
[  232.159929][T16301] lowmem_reserve[]: 0 0 0 0 0
[  232.161393][T16301] Node 1 DMA32 free:431580kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:26628kB local_pcp:15164kB free_cma:0kB
[  232.170727][T16301] lowmem_reserve[]: 0 0 854 854 854
[  232.172527][T16301] Node 1 Normal free:145512kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7836kB inactive_anon:0kB active_file:1308kB inactive_file:5568kB unevictable:3536kB writepending:204kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:24700kB local_pcp:5704kB free_cma:0kB
[  232.181874][T16301] lowmem_reserve[]: 0 0 0 0 0
[  232.183356][T16301] Node 0 DMA: 1*4kB (M) 1*8kB (U) 2*16kB (UM) 0*32kB 2*64kB (UM) 2*128kB (UM) 2*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 0*2048kB 0*4096kB = 4012kB
[  232.187790][T16301] Node 0 DMA32: 145*4kB (ME) 61*8kB (ME) 47*16kB (ME) 42*32kB (ME) 9*64kB (ME) 54*128kB (UME) 37*256kB (UM) 17*512kB (UM) 6*1024kB (UM) 0*2048kB 0*4096kB = 34972kB
[  232.194171][T16301] Node 1 DMA32: 26*4kB (UM) 30*8kB (UME) 23*16kB (UME) 24*32kB (UME) 39*64kB (UM) 29*128kB (UME) 26*256kB (UM) 17*512kB (UME) 7*1024kB (UME) 2*2048kB (U) 97*4096kB (U) = 431624kB
[  232.199532][T16301] Node 1 Normal: 364*4kB (UME) 202*8kB (UME) 109*16kB (ME) 270*32kB (UME) 151*64kB (UME) 162*128kB (UM) 95*256kB (UM) 33*512kB (UM) 21*1024kB (UME) 5*2048kB (UM) 7*4096kB (UM) = 145488kB
[  232.205202][T16301] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB
[  232.208027][T16301] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  232.210972][T16301] 41263 total pagecache pages
[  232.212391][T16301] 0 pages in swap cache
[  232.213597][T16301] Free swap  = 124996kB
[  232.214793][T16301] Total swap = 124996kB
[  232.216018][T16301] 786301 pages RAM
[  232.217111][T16301] 0 pages HighMem/MovableOnly
[  232.218541][T16301] 241057 pages reserved
[  232.220025][T16301] 0 pages cma reserved
[  232.281130][T16401] lo speed is unknown, defaulting to 1000
[  232.414059][T16413] __nla_validate_parse: 29 callbacks suppressed
[  232.414073][T16413] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2990'.
[  232.429153][T16413] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode 802.3ad(4)
[  232.442213][T16413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2990'.
[  232.446777][T16413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2990'.
[  232.523756][T16417] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2992'.
[  232.583816][T16419] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.2993'.
[  232.587093][T16419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2993'.
[  232.663940][T16427] x_tables: duplicate underflow at hook 4
[  232.686959][T16429] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2997'.
[  232.858477][T16439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3000'.
[  232.862911][T16439] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.3000'.
[  232.887422][T16443] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2999'.
[  233.645069][T16467] tipc: Trying to set illegal importance in message
[  233.715870][T16471] syzkaller0: entered promiscuous mode
[  233.717729][T16471] syzkaller0: entered allmulticast mode
[  233.865058][T16477] _Z`Ԁ@: entered promiscuous mode
[  233.871820][T16477] tap0: tun_chr_ioctl cmd 1074025677
[  233.873536][T16477] tap0: linktype set to 776
[  234.185456][T16492] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  234.286768][T16498] validate_nla: 6 callbacks suppressed
[  234.286814][T16498] netlink: 'syz.0.3016': attribute type 1 has an invalid length.
[  234.305380][T16499] veth1: entered promiscuous mode
[  235.595899][ T5221] Bluetooth: hci2: link tx timeout
[  235.597601][ T5221] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  235.803599][T16551] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  235.835319][T16553] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  236.217787][T16556] batadv_slave_0: entered promiscuous mode
[  236.222086][T16556] batadv_slave_0: entered allmulticast mode
[  236.562719][T16570] C speed is unknown, defaulting to 1000
[  236.565448][T16570] DL<Y speed is unknown, defaulting to 1000
[  236.667329][T16570] lo speed is unknown, defaulting to 1000
[  237.222028][T16584] bond0: option lp_interval: invalid value (18446744073709551604)
[  237.224453][T16584] bond0: option lp_interval: allowed values 1 - 2147483647
[  237.225916][T16586] netlink: 'syz.0.3043': attribute type 1 has an invalid length.
[  237.289009][T16595] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  237.381242][T16605] netlink: 'syz.1.3050': attribute type 13 has an invalid length.
[  237.387909][T16605] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  237.452988][T16612] __nla_validate_parse: 18 callbacks suppressed
[  237.453002][T16612] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3053'.
[  237.457672][T16613] IPVS: set_ctl: invalid protocol: 8 10.1.1.2:20002
[  237.481857][T16615] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3051'.
[  237.517383][T16620] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3055'.
[  237.650331][ T5221] Bluetooth: hci2: command 0x0405 tx timeout
[  237.788121][T16632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3057'.
[  238.257052][T16634] tipc: Resetting bearer <eth:syzkaller0>
[  238.306179][T16638] xt_nfacct: accounting object `syz1' does not exists
[  238.336560][T16640] netlink: 'syz.1.3061': attribute type 23 has an invalid length.
[  238.381882][T16650] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3064'.
[  238.388763][T16645] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3062'.
[  238.449125][T16657] netlink: 844 bytes leftover after parsing attributes in process `syz.1.3067'.
[  238.471564][T16657] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3067'.
[  238.511951][T16664] bridge15: the hash_elasticity option has been deprecated and is always 16
[  238.521037][T16664] bridge15: entered allmulticast mode
[  238.563026][T16671] openvswitch: netlink: IP tunnel TTL not specified.
[  238.686567][T16668] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3070'.
[  238.689362][T16668] nbd: must specify a size in bytes for the device
[  238.703320][T16694] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3073'.
[  238.820831][T16708] netlink: 'syz.0.3079': attribute type 1 has an invalid length.
[  238.894751][T16720] netlink: 'syz.2.3078': attribute type 7 has an invalid length.
[  238.897835][T16720] netlink: 'syz.2.3078': attribute type 8 has an invalid length.
[  239.033346][T16735] netlink: 'syz.0.3086': attribute type 1 has an invalid length.
[  240.013599][T16757] xt_CT: You must specify a L4 protocol and not use inversions on it
[  240.151727][T16774] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  240.934508][T16782] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  241.046676][T16793] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[  241.046708][T16796] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[  241.055344][T16795] IPVS: Unknown mcast interface: vlan0
[  241.087388][T16799] IPVS: Error connecting to the multicast addr
[  241.227184][T16812] 8021q: VLANs not supported on lo
[  241.316935][T16820] xt_nfacct: accounting object `syz1' does not exists
[  241.367918][T16816] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  241.371095][T16816] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  242.106909][T16840] C speed is unknown, defaulting to 1000
[  242.164927][T16840] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  242.347090][T16859] C speed is unknown, defaulting to 1000
[  242.350013][T16859] DL<Y speed is unknown, defaulting to 1000
[  242.350414][T16858] C speed is unknown, defaulting to 1000
[  242.386098][T16863] vlan0: entered allmulticast mode
[  242.387662][T16863] bridge_slave_0: entered allmulticast mode
[  242.471999][T16858] DL<Y speed is unknown, defaulting to 1000
[  242.472003][T16859] lo speed is unknown, defaulting to 1000
[  242.492322][T16869] __nla_validate_parse: 27 callbacks suppressed
[  242.492335][T16869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3123'.
[  242.604122][T16858] lo speed is unknown, defaulting to 1000
[  242.758254][T16888] xt_CT: You must specify a L4 protocol and not use inversions on it
[  242.787243][T16890] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3130'.
[  242.827509][T16893] netlink: 'syz.2.3131': attribute type 1 has an invalid length.
[  242.835521][T16893] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3131'.
[  242.939091][T16905] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3134'.
[  242.942461][T16904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3134'.
[  243.807079][T16913] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3136'.
[  243.973584][T16935] netlink: 'syz.1.3140': attribute type 8 has an invalid length.
[  244.120435][T16946] tun0: tun_chr_ioctl cmd 2147767520
[  244.177989][T16954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3147'.
[  244.222189][T16960] pim6reg1: entered promiscuous mode
[  244.224089][T16960] pim6reg1: entered allmulticast mode
[  244.289529][T16958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3145'.
[  244.321939][T16960] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3148'.
[  244.325101][T16960] syzkaller0: left promiscuous mode
[  244.326709][T16960] syzkaller0: left allmulticast mode
[  244.365227][T16968] netlink: 'syz.1.3149': attribute type 12 has an invalid length.
[  244.367790][T16968] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.3149'.
[  244.973271][T16982] netlink: 'syz.0.3153': attribute type 12 has an invalid length.
[  245.043254][T16989] netlink: 'syz.0.3155': attribute type 23 has an invalid length.
[  245.127445][T16995] xt_nfacct: accounting object `syz1' does not exists
[  245.197071][T17000] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0
[  245.202448][T16999] IPVS: stopping backup sync thread 17000 ...
[  245.573286][T17018] IPVS: length: 18 != 8
[  245.606821][T17021] xt_nfacct: accounting object `syz1' does not exists
[  245.777018][T17034] C speed is unknown, defaulting to 1000
[  245.780047][T17034] DL<Y speed is unknown, defaulting to 1000
[  245.904284][T17035] C speed is unknown, defaulting to 1000
[  245.929571][T17035] DL<Y speed is unknown, defaulting to 1000
[  245.932683][T17034] lo speed is unknown, defaulting to 1000
[  246.001901][T17039] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  246.060008][T17035] lo speed is unknown, defaulting to 1000
[  246.176052][T17050] netlink: 'syz.1.3171': attribute type 1 has an invalid length.
[  246.303802][T17054] netlink: 'syz.0.3172': attribute type 1 has an invalid length.
[  246.306329][T17053] netlink: 'syz.0.3172': attribute type 1 has an invalid length.
[  246.409576][T17064] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  246.656021][T17079] netlink: 'syz.0.3179': attribute type 1 has an invalid length.
[  246.900423][T17093] netlink: 'syz.0.3182': attribute type 2 has an invalid length.
[  246.906246][T17093] : entered promiscuous mode
[  247.023580][T17099] xt_CT: You must specify a L4 protocol and not use inversions on it
[  247.528774][T17134] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  247.691922][T17145] netlink: 'syz.1.3198': attribute type 11 has an invalid length.
[  247.757374][T17152] IPVS: set_ctl: invalid protocol: 44 10.1.1.0:0
[  248.079088][T17176] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  248.096024][T17178] xt_CT: You must specify a L4 protocol and not use inversions on it
[  248.154221][T17183] netlink: 'syz.0.3209': attribute type 1 has an invalid length.
[  248.157153][T17183] __nla_validate_parse: 23 callbacks suppressed
[  248.157163][T17183] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3209'.
[  248.237348][T17190] netlink: 'syz.0.3212': attribute type 8 has an invalid length.
[  248.304300][T17196] delete_channel: no stack
[  248.412630][T17200] netlink: 'syz.0.3214': attribute type 21 has an invalid length.
[  248.415240][T17200] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3214'.
[  248.418408][T17200] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3214'.
[  248.424271][T17200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3214'.
[  248.431838][T17200] xfrm3: entered promiscuous mode
[  248.433722][T17200] xfrm3: entered allmulticast mode
[  249.056869][T17208] netlink: 'syz.1.3217': attribute type 2 has an invalid length.
[  249.060051][T17208] netlink: 1184 bytes leftover after parsing attributes in process `syz.1.3217'.
[  249.196664][T17214] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3220'.
[  249.205935][T17218] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3221'.
[  249.868378][T17221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3222'.
[  249.872858][T17221] openvswitch: netlink: nsh attribute has 65520 unknown bytes.
[  249.876281][T17221] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  249.947599][T17226] netlink: 'syz.1.3223': attribute type 303 has an invalid length.
[  249.987368][T17228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3224'.
[  250.024891][T17231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3225'.
[  250.031328][T17231] netlink: 'syz.1.3225': attribute type 21 has an invalid length.
[  250.115311][T17233] C speed is unknown, defaulting to 1000
[  250.117842][T17233] DL<Y speed is unknown, defaulting to 1000
[  250.134567][T17238] C speed is unknown, defaulting to 1000
[  250.154317][T17241] netlink: 'syz.0.3226': attribute type 1 has an invalid length.
[  250.156669][T17241] netlink: 'syz.0.3226': attribute type 2 has an invalid length.
[  250.158956][T17241] netlink: 'syz.0.3226': attribute type 8 has an invalid length.
[  250.182568][T17241] netlink: 'syz.0.3226': attribute type 29 has an invalid length.
[  250.240989][T17238] DL<Y speed is unknown, defaulting to 1000
[  250.241174][T17233] lo speed is unknown, defaulting to 1000
[  250.402340][T17238] lo speed is unknown, defaulting to 1000
[  250.595596][T17264] C speed is unknown, defaulting to 1000
[  250.602108][T17264] DL<Y speed is unknown, defaulting to 1000
[  250.666096][T17274] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  250.874863][T17264] lo speed is unknown, defaulting to 1000
[  251.522879][T17341] 8021q: adding VLAN 0 to HW filter on device bond17
[  251.527473][T17341] bond0: (slave bond17): Enslaving as an active interface with an up link
[  251.607720][T17348] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  251.684521][T17353] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.687086][T17353] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.689542][T17353] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.692951][T17353] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.707124][   T24] DL<Y speed is unknown, defaulting to 1000
[  251.709346][   T24] syz0: Port: 1 Link DOWN
[  251.710938][   T24] DL<Y speed is unknown, defaulting to 1000
[  252.395703][T17358] ip6t_srh: unknown srh match flags  5294
[  252.444039][T17362] ipvlan1: entered promiscuous mode
[  252.619339][T17381] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  252.623583][T17381] syzkaller0: entered promiscuous mode
[  252.625761][T17381] syzkaller0: entered allmulticast mode
[  252.796505][T17399] xt_TPROXY: Can be used only with -p tcp or -p udp
[  252.925836][T17408] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  252.930420][T17408] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  252.932352][T17410] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  252.933303][T17408] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  252.939546][T17408] tipc: Resetting bearer <eth:syzkaller0>
[  253.008881][T17413] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  253.106974][T17424] ..@: renamed from bond_slave_0
[  253.176204][T17434] xt_CT: You must specify a L4 protocol and not use inversions on it
[  253.200489][T17435] veth1_to_team: entered allmulticast mode
[  253.208156][T17435] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  253.246279][T17442] validate_nla: 8 callbacks suppressed
[  253.246294][T17442] netlink: 'syz.2.3284': attribute type 1 has an invalid length.
[  253.252547][T17442] __nla_validate_parse: 24 callbacks suppressed
[  253.252557][T17442] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3284'.
[  253.283856][T17444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3286'.
[  253.286560][T17444] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3286'.
[  253.305723][T17449] netlink: 'syz.0.3287': attribute type 25 has an invalid length.
[  253.331749][T17449] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3287'.
[  253.367183][T17456] xt_CT: You must specify a L4 protocol and not use inversions on it
[  253.442276][T17466] tipc: Resetting bearer <eth:syzkaller0>
[  253.459387][T17459] Cannot find set identified by id 0 to match
[  253.467284][T17459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3292'.
[  253.474677][T17469] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3293'.
[  253.510802][T17469] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3293'.
[  253.554733][T17478] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  253.659569][T17478] netlink: 'syz.0.3295': attribute type 2 has an invalid length.
[  253.670357][T17478] netlink: 'syz.0.3295': attribute type 1 has an invalid length.
[  253.672810][T17478] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3295'.
[  253.784969][T17496] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3301'.
[  253.825309][T17496] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3301'.
[  254.037699][T17519] netlink: 'syz.1.3307': attribute type 1 has an invalid length.
[  254.369155][T17543] xt_hashlimit: size too large, truncated to 1048576
[  254.623719][T17537] bond0 (unregistering): Released all slaves
[  254.815516][T17565] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  254.818975][T17565] bond7: (slave macvlan0): Enslaving as a backup interface with a down link
[  255.186234][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  255.228397][T17617] netlink: 'syz.1.3334': attribute type 10 has an invalid length.
[  255.312508][T17626] syzkaller1: entered promiscuous mode
[  255.314188][T17626] syzkaller1: entered allmulticast mode
[  255.318383][T17634] xt_CT: You must specify a L4 protocol and not use inversions on it
[  255.475310][T17646] tipc: Resetting bearer <eth:syzkaller0>
[  255.479159][T17646] bond14: (slave batadv2): Releasing active interface
[  255.487212][T17646] bond0: (slave bond17): Releasing backup interface
[  255.489142][T17652] netlink: 'syz.2.3341': attribute type 13 has an invalid length.
[  255.495275][T17652] netlink: 'syz.2.3341': attribute type 17 has an invalid length.
[  255.516932][T17652] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  255.522481][    T9] DL<Y speed is unknown, defaulting to 1000
[  255.527007][    T9] syz0: Port: 1 Link ACTIVE
[  255.542165][    T9] DL<Y speed is unknown, defaulting to 1000
[  255.727212][T17674] xt_CT: You must specify a L4 protocol and not use inversions on it
[  255.873392][T17678] openvswitch: netlink: nsh attribute has 65520 unknown bytes.
[  255.875901][T17678] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  255.910614][T17685] pimreg: entered allmulticast mode
[  255.913814][T17683] pimreg: left allmulticast mode
[  256.392355][T17710] tipc: Resetting bearer <eth:syzkaller0>
[  256.679101][T17723] C speed is unknown, defaulting to 1000
[  256.681995][T17723] DL<Y speed is unknown, defaulting to 1000
[  256.770044][ T5831] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  256.793968][T17723] lo speed is unknown, defaulting to 1000
[  258.375460][T17798] 8021q: VLANs not supported on xfrm0
[  258.379048][T17798] netlink: 'syz.0.3377': attribute type 10 has an invalid length.
[  258.413448][T17806] __nla_validate_parse: 42 callbacks suppressed
[  258.413464][T17806] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3378'.
[  258.455980][T17806] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3378'.
[  258.575518][T17816] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  258.608617][T17818] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3382'.
[  258.639082][T17820] netlink: 'syz.0.3383': attribute type 1 has an invalid length.
[  258.643521][T17820] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3383'.
[  258.714735][T17822] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3384'.
[  258.953243][T17830] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3386'.
[  259.012243][T17835] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3386'.
[  259.164716][T17848] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  259.169047][T17848] openvswitch: netlink: Missing valid actions attribute.
[  259.171551][T17848] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  259.174873][T17848] netlink: 'syz.1.3390': attribute type 9 has an invalid length.
[  259.177296][T17848] netlink: 'syz.1.3390': attribute type 7 has an invalid length.
[  259.183011][T17848] netlink: 'syz.1.3390': attribute type 8 has an invalid length.
[  259.275889][T17851] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3391'.
[  259.442777][T17861] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  259.553348][T17869] C speed is unknown, defaulting to 1000
[  259.555918][T17869] DL<Y speed is unknown, defaulting to 1000
[  259.656364][T17869] lo speed is unknown, defaulting to 1000
[  259.851972][T17874] netlink: 'syz.2.3397': attribute type 1 has an invalid length.
[  259.854460][T17874] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3397'.
[  259.904458][T17876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3398'.
[  260.000489][T17880] bond13: left promiscuous mode
[  260.004636][T17880] batadv1: left promiscuous mode
[  260.006298][T17880] geneve0: left promiscuous mode
[  260.008167][T17880] veth13: left promiscuous mode
[  260.010144][T17880] syzkaller0: left promiscuous mode
[  260.011992][T17880] tipc: Resetting bearer <eth:syzkaller0>
[  260.013865][T17880] tipc: Resetting bearer <eth:syzkaller0>
[  260.015716][T17880] bond14: left promiscuous mode
[  260.017284][T17880] batadv2: left promiscuous mode
[  260.019256][T17880] veth1: left promiscuous mode
[  260.021573][T17880] xfrm3: left promiscuous mode
[  260.065534][T17888] sctp: [Deprecated]: syz.0.3401 (pid 17888) Use of struct sctp_assoc_value in delayed_ack socket option.
[  260.065534][T17888] Use struct sctp_sack_info instead
[  260.180478][T17902] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  260.294296][T17914] IPv6: sit2: Disabled Multicast RS
[  260.296705][T17914] sit2: entered allmulticast mode
[  260.424191][T17920] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  260.471942][T17924] netlink: 'syz.0.3411': attribute type 39 has an invalid length.
[  260.595346][T17939] netlink: 'syz.1.3410': attribute type 16 has an invalid length.
[  260.597752][T17939] netlink: 'syz.1.3410': attribute type 17 has an invalid length.
[  260.619114][T17939] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  260.745322][T17946] tipc: Resetting bearer <eth:syzkaller0>
[  260.755167][    T9] DL<Y speed is unknown, defaulting to 1000
[  260.760395][    T9] syz0: Port: 1 Link DOWN
[  260.766021][    T9] DL<Y speed is unknown, defaulting to 1000
[  260.928000][T17963] syzkaller0: entered promiscuous mode
[  260.930970][T17963] tipc: Resetting bearer <eth:syzkaller0>
[  261.024973][T17968] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  261.331952][T17981] xt_nfacct: accounting object `syz1' does not exists
[  261.505516][T17996] openvswitch: netlink: nsh attribute has 13 unknown bytes.
[  261.508531][T17996] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  261.828903][T18024] netlink: 'syz.2.3440': attribute type 4 has an invalid length.
[  261.841397][    T9] DL<Y speed is unknown, defaulting to 1000
[  261.843792][    T9] syz0: Port: 1 Link ACTIVE
[  261.849477][    T9] DL<Y speed is unknown, defaulting to 1000
[  261.855714][ T5870] DL<Y speed is unknown, defaulting to 1000
[  261.857927][ T5870] syz0: Port: 1 Link DOWN
[  262.051698][T18040] syzkaller0: MTU too low for tipc bearer
[  262.058426][T18040] tipc: Disabling bearer <eth:syzkaller0>
[  262.291216][T18057] xt_nfacct: accounting object `syz1' does not exists
[  262.685922][T18082] xt_nfacct: accounting object `syz1' does not exists
[  262.718921][T18084] rdma_rxe: rxe_newlink: failed to add bond0
[  262.980174][T18096] block nbd0: server does not support multiple connections per device.
[  262.983133][T18096] block nbd0: shutting down sockets
[  263.153584][T18121] xt_TPROXY: Can be used only with -p tcp or -p udp
[  263.262609][   T33] audit: type=1800 audit(1752822203.775:4): pid=18131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3470" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=5671 res=0 errno=0
[  263.546217][T18171] __nla_validate_parse: 36 callbacks suppressed
[  263.546228][T18171] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3479'.
[  263.557798][T18171] nftables ruleset with unbound set
[  263.591637][T18176] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3480'.
[  263.934828][T18198] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  264.144253][T18207] validate_nla: 6 callbacks suppressed
[  264.144266][T18207] netlink: 'syz.1.3486': attribute type 13 has an invalid length.
[  264.148516][T18207] netlink: 'syz.1.3486': attribute type 17 has an invalid length.
[  264.163962][T18207] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  264.198688][T18209] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3487'.
[  264.202819][T18207] C speed is unknown, defaulting to 1000
[  264.205454][T18207] DL<Y speed is unknown, defaulting to 1000
[  264.295562][T18215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  264.342572][T18207] lo speed is unknown, defaulting to 1000
[  264.355678][T18215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  264.365380][T18221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3488'.
[  264.447694][T18212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  264.467262][T18224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3489'.
[  264.619625][T18236] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3492'.
[  264.627708][T18236] netlink: 'syz.2.3492': attribute type 1 has an invalid length.
[  264.660766][T18237] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3491'.
[  264.664005][T18237] netlink: 'syz.0.3491': attribute type 7 has an invalid length.
[  264.666894][T18237] netlink: 'syz.0.3491': attribute type 8 has an invalid length.
[  264.669323][T18237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3491'.
[  264.703045][T18239] netlink: 'syz.2.3493': attribute type 27 has an invalid length.
[  264.732014][T18241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3494'.
[  264.814301][T18250] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3496'.
[  265.152516][T18277] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  265.172390][T18280] sctp: [Deprecated]: syz.2.3504 (pid 18280) Use of int in max_burst socket option.
[  265.172390][T18280] Use struct sctp_assoc_value instead
[  265.260901][T18292] xt_CT: You must specify a L4 protocol and not use inversions on it
[  265.314020][T18296] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  265.324040][T18299] netlink: 'syz.1.3508': attribute type 16 has an invalid length.
[  265.334081][T18299] netlink: 'syz.1.3508': attribute type 17 has an invalid length.
[  265.388026][T18299] tipc: Resetting bearer <ib:ip6gre0>
[  265.400577][T18299] tipc: Resetting bearer <eth:syzkaller0>
[  265.414858][    T9] lo speed is unknown, defaulting to 1000
[  265.414924][T18301] syzkaller0: Caught tx_queue_len zero misconfig
[  265.416776][    T9] syz2: Port: 1 Link DOWN
[  265.577068][T18324] veth15: entered allmulticast mode
[  265.734991][T18329] netlink: 'syz.2.3518': attribute type 9 has an invalid length.
[  265.744218][T18329] macvlan1: entered promiscuous mode
[  265.746006][T18329] hsr0: entered promiscuous mode
[  265.747788][T18329] macvlan1: entered allmulticast mode
[  265.749494][T18329] hsr0: entered allmulticast mode
[  265.751162][T18329] hsr_slave_0: entered allmulticast mode
[  265.752970][T18329] hsr_slave_1: entered allmulticast mode
[  266.054421][T18343] netlink: 'syz.2.3523': attribute type 10 has an invalid length.
[  266.203214][T18356] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  267.134326][T18374] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  267.244557][T18387] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  267.307225][T18393] xt_hashlimit: size too large, truncated to 1048576
[  267.466581][T18414] C speed is unknown, defaulting to 1000
[  267.469191][T18414] DL<Y speed is unknown, defaulting to 1000
[  267.650727][T18414] lo speed is unknown, defaulting to 1000
[  267.691830][T18400] C speed is unknown, defaulting to 1000
[  267.694373][T18400] DL<Y speed is unknown, defaulting to 1000
[  267.805195][T18400] lo speed is unknown, defaulting to 1000
[  267.991368][T18439] xt_CT: You must specify a L4 protocol and not use inversions on it
[  268.312346][T18461] pim6reg1: entered promiscuous mode
[  268.314076][T18461] pim6reg1: entered allmulticast mode
[  268.484591][T18480] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  268.494191][ T5870] lo speed is unknown, defaulting to 1000
[  268.498694][ T5870] syz2: Port: 1 Link ACTIVE
[  268.539435][T18480] C speed is unknown, defaulting to 1000
[  268.543755][T18480] DL<Y speed is unknown, defaulting to 1000
[  268.614427][T18482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  268.646487][T18480] lo speed is unknown, defaulting to 1000
[  268.669131][T18482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  268.730948][T18480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  269.184163][T18488] __nla_validate_parse: 23 callbacks suppressed
[  269.184176][T18488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3556'.
[  269.297521][T18492] validate_nla: 5 callbacks suppressed
[  269.297532][T18492] netlink: 'syz.1.3558': attribute type 1 has an invalid length.
[  269.308163][T18490] syzkaller0: MTU too low for tipc bearer
[  269.310287][T18490] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  269.313135][T18492] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3558'.
[  269.382548][T18502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3562'.
[  269.389631][T18502] pim6reg: entered allmulticast mode
[  269.407177][T18502] pim6reg: left allmulticast mode
[  269.494303][T18508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3564'.
[  269.500470][T18512] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3566'.
[  269.582621][T18520] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3566'.
[  269.583768][T18522] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  269.753506][T18546] netlink: 'syz.0.3575': attribute type 13 has an invalid length.
[  269.755867][T18546] netlink: 'syz.0.3575': attribute type 17 has an invalid length.
[  269.772938][T18546] tipc: Resetting bearer <ib:ip6gre0>
[  269.780807][T18546] tipc: Resetting bearer <ib:ip6gre0>
[  269.788602][T18546] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  269.796170][ T5849] C speed is unknown, defaulting to 1000
[  269.798006][ T5849] syz1: Port: 1 Link ACTIVE
[  269.802365][T18553] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  269.819127][T18554] C speed is unknown, defaulting to 1000
[  269.823191][T18554] DL<Y speed is unknown, defaulting to 1000
[  269.917995][T18554] lo speed is unknown, defaulting to 1000
[  269.992847][T18565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3576'.
[  270.036866][T18576] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3582'.
[  270.105595][T18573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3581'.
[  270.242655][T18591] netlink: 'syz.1.3586': attribute type 1 has an invalid length.
[  270.245116][T18591] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3586'.
[  270.276523][ T5698] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  270.279382][ T5698] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  270.300063][   T24] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  270.357555][T18594] erspan0: entered promiscuous mode
[  270.362819][T18594] erspan0: left promiscuous mode
[  270.382806][T18600] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  270.437481][T18608] macvlan0: entered allmulticast mode
[  270.439355][T18608] netlink: 'syz.1.3591': attribute type 1 has an invalid length.
[  270.444394][T18608] netlink: 'syz.1.3591': attribute type 2 has an invalid length.
[  270.464748][   T24] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  270.772090][   T24] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  270.878407][T18665] netlink: 'syz.2.3599': attribute type 1 has an invalid length.
[  271.695259][T18702] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  271.930116][T18716] netlink: 'syz.0.3610': attribute type 23 has an invalid length.
[  271.950284][T18716] netlink: 'syz.0.3610': attribute type 4 has an invalid length.
[  271.997778][T18718] netlink: 'syz.0.3611': attribute type 1 has an invalid length.
[  272.192932][T18730] xt_CT: You must specify a L4 protocol and not use inversions on it
[  272.558512][T18786] C speed is unknown, defaulting to 1000
[  272.562810][T18786] DL<Y speed is unknown, defaulting to 1000
[  272.657706][T18786] lo speed is unknown, defaulting to 1000
[  272.685232][T18800] netem: change failed
[  272.875594][T18823] ..@: renamed from bond_slave_0
[  272.944747][T18827] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma?
[  273.167801][T18844] hsr_slave_0: left promiscuous mode
[  273.353391][T18858] 8021q: adding VLAN 0 to HW filter on device bond0
[  273.377268][T18858] veth17: entered promiscuous mode
[  273.384153][T18858] bond0: (slave veth17): Enslaving as an active interface with a down link
[  273.393685][T18858] erspan0: entered allmulticast mode
[  273.483374][T18868] xt_CT: You must specify a L4 protocol and not use inversions on it
[  274.061540][T18904] tipc: Resetting bearer <eth:syzkaller0>
[  274.138692][T18902] C speed is unknown, defaulting to 1000
[  274.144607][T18902] DL<Y speed is unknown, defaulting to 1000
[  274.166920][T18913] pimreg: entered allmulticast mode
[  274.232690][T18916] tipc: Resetting bearer <ib:ip6gre0>
[  274.236760][T18916] tipc: Resetting bearer <eth:syzkaller0>
[  274.247967][T18921] __nla_validate_parse: 27 callbacks suppressed
[  274.247980][T18921] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3665'.
[  274.271149][   T24] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  274.305489][T18928] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3665'.
[  274.357661][T18932] xt_CT: You must specify a L4 protocol and not use inversions on it
[  274.387139][T18902] lo speed is unknown, defaulting to 1000
[  274.529970][    C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  274.618361][T18951] erspan0: left allmulticast mode
[  274.625947][T18951] batadv_slave_0: left promiscuous mode
[  274.627711][T18951] batadv_slave_0: left allmulticast mode
[  274.636472][T18951] geneve1: left promiscuous mode
[  274.638039][T18951] geneve1: left allmulticast mode
[  274.642431][T18951] tipc: Resetting bearer <eth:syzkaller0>
[  274.649951][   T24] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  274.697308][T18951] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  274.699653][T18951] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  274.733927][T18951] bridge15: left allmulticast mode
[  274.736037][T18951] vlan0: left allmulticast mode
[  274.738391][T18951] bridge_slave_0: left allmulticast mode
[  274.744291][T18951] ipvlan1: left promiscuous mode
[  274.746143][T18951] veth15: left allmulticast mode
[  274.748095][T18951] hsr0: left allmulticast mode
[  274.749520][T18951] hsr_slave_0: left allmulticast mode
[  274.751605][T18951] hsr_slave_1: left allmulticast mode
[  274.753179][T18951] hsr0: left promiscuous mode
[  274.754788][T18951] macvlan1: left promiscuous mode
[  274.756705][T18951] macvlan1: left allmulticast mode
[  274.766083][T18951] veth17: left promiscuous mode
[  274.857180][T18966] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3673'.
[  274.871738][T18959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3672'.
[  274.937799][T18975] validate_nla: 5 callbacks suppressed
[  274.937812][T18975] netlink: 'syz.0.3676': attribute type 1 has an invalid length.
[  274.939161][T18973] syzkaller1: entered promiscuous mode
[  274.941134][T18975] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3676'.
[  274.945281][T18973] syzkaller1: entered allmulticast mode
[  274.947709][T18973] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  274.953899][T18973] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  274.956982][T18973] tipc: Resetting bearer <eth:syzkaller0>
[  275.016086][T18979] xt_nfacct: accounting object `syz1' does not exists
[  275.096134][T18983] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3680'.
[  275.146896][T18983] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3680'.
[  275.147921][T18991] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3682'.
[  275.212998][T18998] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3683'.
[  275.299335][T19006] xt_l2tp: v2 sid > 0xffff: 4294901760
[  275.324879][T19010] netlink: 'syz.2.3685': attribute type 1 has an invalid length.
[  275.327701][T19010] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3685'.
[  275.352328][T19013] netlink: 'syz.0.3686': attribute type 1 has an invalid length.
[  275.395139][T19019] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  275.398207][T19019] tipc: Resetting bearer <eth:syzkaller0>
[  275.435446][T19015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  275.475295][T19023] 8021q: adding VLAN 0 to HW filter on device bond23
[  275.493933][T19023] xt_CT: No such helper "snmp_trap"
[  275.628345][T19038] netlink: 'syz.2.3694': attribute type 1 has an invalid length.
[  276.184873][T19060] tipc: Resetting bearer <ib:ip6gre0>
[  276.186791][T19060] tipc: Resetting bearer <ib:ip6gre0>
[  276.216969][T19060] tipc: Resetting bearer <eth:syzkaller0>
[  276.218954][T19060] tipc: Resetting bearer <eth:syzkaller0>
[  276.221036][T19060] tipc: Resetting bearer <eth:syzkaller0>
[  276.260044][   T24] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  276.469942][T19067] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  276.472416][T19067] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  276.510430][   T24] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  276.593105][T19074] siw: device registration error -23
[  276.717168][T19083] smc: net device bond0 applied user defined pnetid SYZ2
[  276.807486][T19086] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  276.822081][T19091] netlink: 'syz.1.3709': attribute type 10 has an invalid length.
[  276.952515][T19099] netlink: 'syz.0.3710': attribute type 1 has an invalid length.
[  276.972562][T19099] 8021q: adding VLAN 0 to HW filter on device bond18
[  276.984281][T19099] bond18: (slave gretap2): making interface the new active one
[  276.987727][T19099] bond18: (slave gretap2): Enslaving as an active interface with an up link
[  277.445448][T19108] netlink: 'syz.2.3713': attribute type 2 has an invalid length.
[  277.620158][T19111] bridge17: the hash_elasticity option has been deprecated and is always 16
[  277.710227][T19109] netlink: 'syz.2.3713': attribute type 12 has an invalid length.
[  277.933861][T19135] netlink: 'syz.0.3719': attribute type 83 has an invalid length.
[  277.959046][T19137] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  278.002077][T19140] xt_nfacct: accounting object `syz1' does not exists
[  278.166127][T19163] netlink: del zone limit has 4 unknown bytes
[  278.234152][T19168] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  278.239104][T19170] xt_nfacct: accounting object `syz1' does not exists
[  278.240173][T19168] tipc: Resetting bearer <eth:syzkaller0>
[  279.135183][T19187] netlink: 'syz.0.3734': attribute type 1 has an invalid length.
[  279.173719][T19191] tipc: Resetting bearer <eth:syzkaller0>
[  279.181871][T19191] bond0: (slave veth17): Releasing active interface
[  279.324092][T19205] __nla_validate_parse: 26 callbacks suppressed
[  279.324105][T19205] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3739'.
[  279.331585][T19205] tipc: Resetting bearer <eth:syzkaller0>
[  279.363334][T19213] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  279.365505][T19213] IPv6: NLM_F_CREATE should be set when creating new route
[  279.367662][T19213] IPv6: NLM_F_CREATE should be set when creating new route
[  279.369888][T19213] IPv6: NLM_F_CREATE should be set when creating new route
[  279.376280][T19215] : entered promiscuous mode
[  279.378547][T19215] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  279.403915][T19218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3744'.
[  279.410114][T19220] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3745'.
[  279.415593][T19220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3745'.
[  279.449341][T19225] 
[  279.450145][T19225] ======================================================
[  279.452207][T19225] WARNING: possible circular locking dependency detected
[  279.454283][T19225] 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 Not tainted
[  279.456803][T19225] ------------------------------------------------------
[  279.459321][T19225] syz.0.3747/19225 is trying to acquire lock:
[  279.461081][T19225] ffffffff8f6745d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50
[  279.463819][T19225] 
[  279.463819][T19225] but task is already holding lock:
[  279.466010][T19225] ffff88810bf5b970 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50
[  279.468741][T19225] 
[  279.468741][T19225] which lock already depends on the new lock.
[  279.468741][T19225] 
[  279.471761][T19225] 
[  279.471761][T19225] the existing dependency chain (in reverse order) is:
[  279.474359][T19225] 
[  279.474359][T19225] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[  279.476638][T19225]        lock_acquire+0x120/0x360
[  279.478099][T19225]        _raw_spin_lock_bh+0x36/0x50
[  279.479664][T19225]        nr_rt_device_down+0x12a/0x720
[  279.481226][T19225]        nr_device_event+0x137/0x150
[  279.482787][T19225]        notifier_call_chain+0x1b6/0x3e0
[  279.484441][T19225]        __dev_notify_flags+0x18d/0x2e0
[  279.486052][T19225]        netif_change_flags+0xe8/0x1a0
[  279.487607][T19225]        dev_change_flags+0x130/0x260
[  279.489188][T19225]        dev_ioctl+0x7b4/0x1150
[  279.490664][T19225]        sock_do_ioctl+0x22c/0x300
[  279.492173][T19225]        sock_ioctl+0x576/0x790
[  279.493595][T19225]        __se_sys_ioctl+0xfc/0x170
[  279.495079][T19225]        do_syscall_64+0xfa/0x3b0
[  279.496578][T19225]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  279.498479][T19225] 
[  279.498479][T19225] -> #1 (nr_node_list_lock){+...}-{3:3}:
[  279.498837][T19226] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3746'.
[  279.500772][T19225]        lock_acquire+0x120/0x360
[  279.500785][T19225]        _raw_spin_lock_bh+0x36/0x50
[  279.500800][T19225]        nr_rt_device_down+0xa9/0x720
[  279.500811][T19225]        nr_device_event+0x137/0x150
[  279.500818][T19225]        notifier_call_chain+0x1b6/0x3e0
[  279.500829][T19225]        __dev_notify_flags+0x18d/0x2e0
[  279.504506][T19226] ieee80211 phy39: Selected rate control algorithm 'minstrel_ht'
[  279.505040][T19225]        netif_change_flags+0xe8/0x1a0
[  279.516843][T19225]        dev_change_flags+0x130/0x260
[  279.518460][T19225]        dev_ioctl+0x7b4/0x1150
[  279.519894][T19225]        sock_do_ioctl+0x22c/0x300
[  279.521401][T19225]        sock_ioctl+0x576/0x790
[  279.522895][T19225]        __se_sys_ioctl+0xfc/0x170
[  279.524481][T19225]        do_syscall_64+0xfa/0x3b0
[  279.525969][T19225]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  279.527840][T19225] 
[  279.527840][T19225] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[  279.530144][T19225]        validate_chain+0xb9b/0x2140
[  279.531725][T19225]        __lock_acquire+0xab9/0xd20
[  279.533256][T19225]        lock_acquire+0x120/0x360
[  279.534726][T19225]        _raw_spin_lock_bh+0x36/0x50
[  279.536276][T19225]        nr_rt_ioctl+0x390/0xd50
[  279.537730][T19225]        sock_do_ioctl+0xdc/0x300
[  279.539262][T19225]        sock_ioctl+0x576/0x790
[  279.540751][T19225]        __se_sys_ioctl+0xfc/0x170
[  279.542290][T19225]        do_syscall_64+0xfa/0x3b0
[  279.543827][T19225]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  279.545717][T19225] 
[  279.545717][T19225] other info that might help us debug this:
[  279.545717][T19225] 
[  279.548698][T19225] Chain exists of:
[  279.548698][T19225]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  279.548698][T19225] 
[  279.552685][T19225]  Possible unsafe locking scenario:
[  279.552685][T19225] 
[  279.554835][T19225]        CPU0                    CPU1
[  279.556431][T19225]        ----                    ----
[  279.558006][T19225]   lock(&nr_node->node_lock);
[  279.559460][T19225]                                lock(nr_node_list_lock);
[  279.561615][T19225]                                lock(&nr_node->node_lock);
[  279.563861][T19225]   lock(nr_neigh_list_lock);
[  279.565261][T19225] 
[  279.565261][T19225]  *** DEADLOCK ***
[  279.565261][T19225] 
[  279.567639][T19225] 2 locks held by syz.0.3747/19225:
[  279.569128][T19225]  #0: ffffffff8f674638 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50
[  279.572021][T19225]  #1: ffff88810bf5b970 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50
[  279.574880][T19225] 
[  279.574880][T19225] stack backtrace:
[  279.576627][T19225] CPU: 1 UID: 0 PID: 19225 Comm: syz.0.3747 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  279.576641][T19225] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  279.576649][T19225] Call Trace:
[  279.576656][T19225]  <TASK>
[  279.576663][T19225]  dump_stack_lvl+0x189/0x250
[  279.576679][T19225]  ? __pfx_dump_stack_lvl+0x10/0x10
[  279.576690][T19225]  ? __pfx__printk+0x10/0x10
[  279.576702][T19225]  ? stack_trace_save+0x9c/0xe0
[  279.576717][T19225]  print_circular_bug+0x2ee/0x310
[  279.576731][T19225]  check_noncircular+0x134/0x160
[  279.576743][T19225]  validate_chain+0xb9b/0x2140
[  279.576758][T19225]  __lock_acquire+0xab9/0xd20
[  279.576767][T19225]  ? nr_rt_ioctl+0x390/0xd50
[  279.576775][T19225]  lock_acquire+0x120/0x360
[  279.576783][T19225]  ? nr_rt_ioctl+0x390/0xd50
[  279.576792][T19225]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  279.576804][T19225]  ? nr_rt_ioctl+0x390/0xd50
[  279.576811][T19225]  _raw_spin_lock_bh+0x36/0x50
[  279.576826][T19225]  ? nr_rt_ioctl+0x390/0xd50
[  279.576835][T19225]  nr_rt_ioctl+0x390/0xd50
[  279.576844][T19225]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  279.576857][T19225]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  279.576867][T19225]  ? apparmor_capable+0x137/0x1b0
[  279.576881][T19225]  ? capable+0x89/0xe0
[  279.576890][T19225]  ? nr_ioctl+0x1b1/0x3b0
[  279.576902][T19225]  sock_do_ioctl+0xdc/0x300
[  279.576913][T19225]  ? __pfx_sock_do_ioctl+0x10/0x10
[  279.576920][T19225]  ? __lock_acquire+0xab9/0xd20
[  279.576931][T19225]  sock_ioctl+0x576/0x790
[  279.576940][T19225]  ? __pfx_sock_ioctl+0x10/0x10
[  279.576948][T19225]  ? __fget_files+0x2a/0x420
[  279.576956][T19225]  ? __fget_files+0x3a0/0x420
[  279.576962][T19225]  ? __fget_files+0x2a/0x420
[  279.576972][T19225]  ? bpf_lsm_file_ioctl+0x9/0x20
[  279.576983][T19225]  ? __pfx_sock_ioctl+0x10/0x10
[  279.576991][T19225]  __se_sys_ioctl+0xfc/0x170
[  279.577001][T19225]  do_syscall_64+0xfa/0x3b0
[  279.577012][T19225]  ? lockdep_hardirqs_on+0x9c/0x150
[  279.577020][T19225]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  279.577028][T19225]  ? exc_page_fault+0x9f/0xf0
[  279.577036][T19225]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  279.577044][T19225] RIP: 0033:0x7f3f9298e929
[  279.577054][T19225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  279.577062][T19225] RSP: 002b:00007f3f93820038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  279.577071][T19225] RAX: ffffffffffffffda RBX: 00007f3f92bb5fa0 RCX: 00007f3f9298e929
[  279.577078][T19225] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004
[  279.577085][T19225] RBP: 00007f3f92a10ca1 R08: 0000000000000000 R09: 0000000000000000
[  279.577090][T19225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  279.577096][T19225] R13: 0000000000000000 R14: 00007f3f92bb5fa0 R15: 00007ffd3dd2c678
[  279.577107][T19225]  </TASK>
[  279.698720][T19232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3743'.
[  283.329868][    C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!

VM DIAGNOSIS:
07:03:40  Registers:
info registers vcpu 0

CPU#0
RAX=9c011c2e3ade3200 RBX=ffffffff81976c78 RCX=9c011c2e3ade3200 RDX=0000000000000001
RSI=ffffffff8be28c20 RDI=ffffffff81976c78 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1d5f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6d64d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c29e164 CR3=000000002853a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f4f66611df9
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000185b RDI=000000000000185c RBP=00000000000003f8 RSP=ffffc900081e7150
R8 =ffff888020e10237 R9 =1ffff110041c2046 R10=dffffc0000000000 R11=ffffffff85460db0
R12=dffffc0000000000 R13=ffffffff99aee897 R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f3f938206c0 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3f9381ffc8 CR3=000000011af34000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f3f92b86478 00007f3f92b86450 XMM03=00007f3f92b86488 00007f3f92b86480
XMM04=00007f3f936ed100 00007f3f92b86440 XMM05=00007f3f92b86458 00007f3f92b864a0
XMM06=00007f3f92b86498 00007f3f92b86490 XMM07=00007f3f92b86488 00007f3f92b86480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f3f92a11df9
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
