last executing test programs:

1.502039365s ago: executing program 0 (id=1409):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c00018006000600800a0000100002800400148008000480"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000280)={r3, r3, 0x1, 0x2, &(0x7f00000000c0)="0080", 0x48, 0x1, 0x7, 0x5505, 0x8, 0x1, 0x0, 'syz0\x00'})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x18)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x41, 0x40, 0x2}, 0x10)

1.500173246s ago: executing program 0 (id=1411):
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4)
sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000003c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000000c0)="257c0100000065666efda463d8", 0xd}, {&(0x7f0000000540)="0d763c2ffdae045976a5fc3bec1a35a5e4ac8ee4", 0x14}], 0x2, 0x0, 0x0, 0x4c840}, 0x4000001)
recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000a40)=""/188, 0xbc}], 0x1, &(0x7f00000004c0)=""/95, 0x5f}, 0xfffffffc}], 0x1, 0x12260, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a000000040000000c0000000b"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_emit_ethernet(0x1f, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffffff4ccb9831e8880011aa006f4cddd689f52770905d8405ed64e60c74fc5a028dad4e24ab198b7eb9599788bcc25a384c916c068b51fd9a2b32201de00e4d00f66cb75dbaf64c19c700453071add20238f72e"], 0x0)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000180), &(0x7f0000000440)=0x4)
r5 = socket$alg(0x26, 0x5, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000000004000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r8, 0x0, 0x0}, 0x10)
bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r9 = accept4(r5, 0x0, 0x0, 0x0)
sendmmsg$alg(r9, &(0x7f00000012c0)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="6003169e58f4f15fe1da4741cb69937ad2435bf42ee684e21583aad79fe3", 0x1e}, {&(0x7f00000014c0)="982e71", 0x3}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x0)
recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x20000253)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1cf90103", @ANYRES16=0x0, @ANYBLOB="c89045b2a6c0b186f6eb1f00000008003617"], 0x1c}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="1a00000000", @ANYRES32, @ANYRES32], 0x20)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8b28, &(0x7f0000000000)={'wlan1\x00'})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d4e3a"], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0x4000080)

1.439629282s ago: executing program 0 (id=1413):
r0 = socket$inet6(0xa, 0x5, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
shutdown(r1, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8)
sendto$inet6(r1, &(0x7f00000001c0)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0x1}, 0x1c)
close(r1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
epoll_create1(0x0)
pipe(&(0x7f00000000c0))
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c"], 0x20}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_delroute={0x38, 0x19, 0x1, 0x70bd25, 0x25dfcbfb, {0xa, 0x80, 0x14, 0x0, 0xff, 0x1, 0x0, 0x4, 0x3600}, [@RTA_PRIORITY={0x8, 0x1e, 0x40006}, @RTA_GATEWAY={0x14, 0x5, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x24040884)
getsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x4)

1.437166484s ago: executing program 0 (id=1415):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
socket(0x10, 0x3, 0x0) (async)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
socket$l2tp(0x2, 0x2, 0x73)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_int(r2, 0x0, 0x5, 0x0, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@gettaction={0x8c, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x8c}}, 0x4000015)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="100000000d14040029bd7000fcdbdf25c29067a932394b77008b770618280e15ae6677e075729a83c966ab8c46ee5516301ca4c2cf60790f4ec2912feae659e3f32b64d9287355401c996c1b28019c89569d4bdf4c8154627327492e4b73189a0b2b78ba5838274821eb5795decff11c17d7f5a8483bc23e5aae23adfd19dfb237708373a756c6d2788cac4e03e1035a1e48cfa05caac535f585c42cd8c1bf05f7d337cf922cbc842b0cdb190415aa6a6ca47152cdc670774c7ba86fbd1927f100841ef223fcc8e14430fee3c8612c1ec5fdbbc71602283a52009f4bf71635c3f862c7"], 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYRES16], &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x20}, 0x94)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2800000011148d8a29bd7000fcdbdf2508004b001300000008000100000000000800030003"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004800) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2800000011148d8a29bd7000fcdbdf2508004b001300000008000100000000000800030003"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004800)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c00f4d54378a218420240eaffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x40050)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001000000000000000000050000051d0a40000000030a0fdb00000000000000000a0200050900030073797a30000000000900010073797a310000000014000480080006403cb140bb23c27fa09d092058140000001900010000000000d24fdf5040cb7b632d56c6477742f5f5158cce00dca577d19c60be868c9e3d17344ab5ffddffda56f670e63b8e91f8ca979a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001000000000000000000050000051d0a40000000030a0fdb00000000000000000a0200050900030073797a30000000000900010073797a310000000014000480080006403cb140bb23c27fa09d092058140000001900010000000000d24fdf5040cb7b632d56c6477742f5f5158cce00dca577d19c60be868c9e3d17344ab5ffddffda56f670e63b8e91f8ca979a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r6 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r6, 0x29, 0x24, &(0x7f0000000080), 0x4) (async)
setsockopt$sock_attach_bpf(r6, 0x29, 0x24, &(0x7f0000000080), 0x4)
sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @loopback, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000780)="f4000900062b3325fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010dd010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000030900020073797a31000000000900010073797a300000000008001f4000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c000080080004"], 0xe0}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x880)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r4, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x48800)
socket$netlink(0x10, 0x3, 0x0)

1.320737572s ago: executing program 0 (id=1417):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000080)={{0x33, @rand_addr=0x64010100, 0x4e20, 0x0, 'wrr\x00', 0x8, 0x81, 0x5b}, {@loopback, 0x4e21, 0x2, 0x4, 0x10001, 0x3}}, 0x44)
sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="480100001000010000000000000000000000000000000000000000000000000000000000f8ff0000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000001eb900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c00120073657169762863636d28626c6f77666973682d61736d29290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000c0008"], 0x148}}, 0x0)

1.303915963s ago: executing program 0 (id=1418):
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) (async)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) (async)
r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) (async)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
getpid() (async)
r3 = getpid()
syz_open_procfs$namespace(r3, 0x0) (async)
syz_open_procfs$namespace(r3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x89f7, &(0x7f0000000080)={'lo\x00'}) (async)
ioctl$SIOCSIFHWADDR(r4, 0x89f7, &(0x7f0000000080)={'lo\x00'})
write$cgroup_pid(r2, &(0x7f0000000c40)=r3, 0x12)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r6, 0x0, r7, 0x0, 0x1, 0x5) (async)
splice(r6, 0x0, r7, 0x0, 0x1, 0x5)
write$cgroup_pid(r2, &(0x7f0000000080), 0x12)
r8 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) (async)
write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
syz_emit_ethernet(0x8f, &(0x7f0000000340)={@random="1706ee1f7ffb", @random="e7b39bcb21dc", @val={@void, {0x8100, 0x2, 0x1}}, {@generic={0xf7, "f94e5fbf839ce1b7a61676a8b7857eeeea8c26c828fbc73b50036f588c5a0e6888dd369ece9792b98135b8153749b0fdaf8b636cfa2089ebbe6b1c6318319d6197eca901980ddf3b4d5a89a1c4b73c0abcc553267f8623c21835cd38bb0d7f79c6c0ae308a27945b2077e918698f4b2041d50df2662a56bfe16d9965c7"}}}, &(0x7f0000000180)={0x0, 0x1, [0xed6, 0xe3e, 0xd68, 0x9c]})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newae={0x64, 0x1e, 0x301, 0x70bd2a, 0x25dfdbfa, {{@in=@rand_addr=0x64010100, 0x4d6, 0x2, 0x2b}, @in=@private=0xa010101, 0x0, 0x3500}, [@lifetime_val={0x24, 0x9, {0x1, 0xe9, 0x1, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
r9 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', <r11=>0x0})
sendmsg(r10, &(0x7f0000000100)={&(0x7f0000000180)=@l2={0x1f, 0x2, @any, 0xfffc, 0x2}, 0x80, &(0x7f0000001940)=[{&(0x7f00000002c0)="93549784eb476f1f17f059f3251890147c306dfca9ecd498a38b57aede04473c6c29f5089ee8e1a0f1af08bdb1e8adf0e24f03e826e0c1d53fe0d2f89afa6c077db303899030d3694b400b56d9c1527d66fcb700226582b058c21c3c01d11cd1dbc652c8665151ce601efde988d6fcf47752", 0x72}, {&(0x7f0000000400)="81c716dc10004450f20350db4d4a2bc14e0388dbb129fffe68169e7f6544cbd2d8d5664ce4469e9ae09aa4cd08afc3ddd3f54b8f6cf13026985e0541cf107f6bcf66a863995d2bff7a498643780e8909b929449349595e086ef2569a9ca1c3c25f69909d09e622f0b57ace1601e4cdae02474ff393a7af5f6272bda8bafc0a2cffffa8af50eceaccb32fb8de066f01cfbd485f94787777d44c1ed4d8ab1a7f0845f0a9cef1d09eae59f6cf7203ac75b16a18b2528aaa5bad28183d14f2f5d53ca8aa28dd44145a70a9fcb06673cda1ac2077621f10f08876646283b8847d5691f46e08960cdc69a576c330dc", 0xec}, {&(0x7f0000000500)="835f908100fa64da5a4ffb4bc3ef8b346d9a29edd84dc1d69d50516ca9df8058fe8b71675c76c93cb90c2c6138d84446b646fc0868181ded83a2323d4dce80991948bc0a7f50ad43d7d0b08d37a4f447", 0x50}, {&(0x7f0000000580)="52c01c806e571eee016775fb209295208d35a41c04bdb20736f3c676bff623edc3359855a139d0c29923993119944aaee844d92dd95e29598785e4188b527ee8b02b977785acb2a71a4b0f86d084434a351e4d690882767d2b579f86f01442464261880191e01134e9ad9e1f7851524482a4af31492e5cbc67ddfb3297fd2ed083d58acf290153fe8e4f6a90b36451af1c8a9677f2cdf15214296c6522", 0x9d}, {&(0x7f0000000640)="b7fc03a462aa74d7f5d85009689d011386f8f0000282368b406049faf73c58f7330c57a843dea18c6774b9f82a1c4f3a1b9ce00b73be4b4133bcadc7a639c060b0472e6e64372513aa143b62d57789b04748736ef7afd51f993904cfa2fe9bf915cc9b8dae14f4a18c54896d5b995208fd70bd060945541265539b79e7a159acfc9e35e96cf6c103e3843ef1370efaabc8755f97540a506e42fe686503f16ab1facd8a78c8b9f8cd268f35a8f65f47ca781c1dc89e1d0bb7e8ea5b8ff29febebaecf7b786983ccfcc0a3662990aa3e87da8cbae70affd268ce864f62e2d7bae3e28b8ad222fea8", 0xe7}, {&(0x7f00000007c0)="c2c8e199447ec3177c392e8c7311a7484c74bcb364f95f6d778144a6fdaa311a996d35e0c7b27c30737a79aec949afa1f3cf11ae8eabe278c98eaf5b7805fd430dbeac62550b49bdb7b3556bf7dea15a698e34d2c7781760b13b7b1dbbfba7a7894e74c6b0237fc138", 0x69}, {&(0x7f0000000840)="99a9cb2e9291f3cae592465325dd146d7205fc97875453018e1df90f3076e7fe103f657bdfbedaf5c33fe04b3293a45a97c1bc44d3f4777213c008736772a37923233bbcc984a77e0a0214e0924d1bf63d8dbc107e017e4cae74304b7ace4f986a8604ca847da92ffc9a8a959d8c20bc0b0c1f5ee57b2188bf782153eb7f351b8b02ef861a2520b39801bd73e25c20dbc26b8b67b869f62d85a328bbb964304b5730b1b8814d1b6082f4aa5b8e01e6e0348e5cb7cf1cf9fffe9a18acd67f04ba232802d0a1898278", 0xc8}, {&(0x7f0000000940)="0432055a8ae2b2f74ec16b2064f2104f92aa13bd0b18e0e3f876a4bbdb32d8e0d38de1b4a96a862e0bea1df38582e302aed8a3086d70cf25140daccdc7ad681f83659a615a9f8e811b37fb2ff5de6c8b3654275f4bf9b26645927f91abf9c22a50b77455898a77b41e740ada2a2fdedcc156a652ef9cca7d690c792e38d2c30836e2cba9c98dcd38771e9ffb312e514b874f89fcf016d7c7c0df21001a45c340ccd828e3443af6da8e37df16fb38fa0b479ba7d275cf7160bbd7cc1d7a34bc17573c5876f61f6e872e7851331a5e61761d0a36667049046af4ccbb5b61de7f70b333811d28197dbfe66178ac632afa11c7242d1ef1981c78b746c2bbe4ebac6993253f03d0b6e4cc68f93134c0000197ceeb3c052df2b03947b0a342da48d59cda64cd116636eb49a5c1573e005af6f05c0dbc6d28ba11ce7a80a7d1577fe2517a2f1c4a0618a1eabe81438c957a2a9893fddf482aa44f3074eb49aabda0c0e555c50383d751f6f573043fe2e6b74280e1030ddf4d682cd21eada8dca2a2473f8dfcd2c40deb447206b88040de5b528540eec794427259fbca081269e1c375a5716463f76ef6136e4f1533238f373ed27143c027f3849f72b94c12d4d93b18463edb400169368bb534b04f3f313b3c307ec9dfd299195b2a50b220d03e1c7242096a252da3fd0614e9f64a0809d50ecbea82831987ae1d4844630aa7a9fdb58faf5444ea29feb87b5d33684a7b5d0c0054135a5b8ed3a66be68d19e4cdc1bd74792b0b17c7997e18f1b0a7d0c77d7090553e95196996e7a4cbf3dcb7c0f504527f5df39da1b716c89d9679a7cff1978f27fa34d76d2e1a728b4803bbb49f8e2eca9858692bdd9b9df1df0bad9cceef528f68830f9bb734ef6c18c01a14bf97160ec2b8b649d39638bc3ca02e5f86a5f51731053f34dd11587fb38647ee467bd6ebdb4f2234d1f47533c63707484e4eacf998c3aef0215c5801cea6df1c52628e8ae59849b16b38bde6c3273d04b817da9ce42d2f9e34b3f4c2aede8711f54473124a73a85f6651d249efae51ff9068fa91936716447ac4c6f40bf6654dcd15dba31365c7537e89ab80247906e0a409fd2b5626bab99a5e73532a51e27e3774643cad8a517bfd5ad5e338c133432e38db7faf917c61cb0472e4ad0b08af47ee24c3d65cbd32e756ce05439f3fe2ba07cc76ac7ce535be2fce0f60515d927c5a2bb467fd058e51fb826bbd7dc3bcb5365d1a079d855cdc16e24e9522e6f6716acab75d7ae9458600d9b0c356c0740baff324ca30e1705ba110b8640df7ae42d71f25337b0c58d6c7d0d9c2401bc218df0ed3ca247ac6830269607c70f5a70933a372fd1b9b00e716d05c40b08d965fd2439297c5e6b1de3d566a8fa0c9e04bf7a5d76fa93b1be2a6baad42eebde3647a8462dadfb51bb8621cda5b5990157436d95ff48bd50c57e913dc282e869d8ba0861e643a594bf2f143f892f95241f8ea47d86b5890f044509223a269821ebb67f32d1c80246bd627ab8804080050b6704145a5dc357967e0ed692fb514ddbe13d9a647f0e46c502f9a310feb493d974ab620bb96a5e3ee3a8c0277aacdba9f7caf3f0fc38bd835bde21085a14a85792ab088261e651fdaf40893f566ea646702c0084c76e37f2d2acbcc8d7b17b5785d2e501768d19887233fa7310bdde846d1ff195a0be93a72485218dd7ef4bb5047aaa72c334f576121f4496c2a0dc4975bc30cf50cb75334d682e91d5bc54c2d76e0064b4d0eb94716fa920abe005085410ed6dcafdd182c3a256e338adc035e3a6560b2fc13870f2d95e31263a1de6421307223a37cf669b0ebe283074bd8ff1a2a6bb7adecc484b0d7061fcffd0a59d3872b069bf6c4a4391240022a7b77622f7a3ea1c4df8abda8719a36550890b9b101d5acbb21af3e2ed5f95f9502e2f299b7ec0b0e4362f5fcafbfab16cbed4694750d47754f4041618db7535a29042e03b95dca613e88330aa01bd2b9e579bd54a95f1aa28030234dd9b59efd1532528bc696640aa9cad6fc300f6ccc5ed1bc45d4dbccfc9e90c756339ff88f9d5943718667175f993b36f4b40f96a13aaaf2ae61b144b2902c6e446f896b52207f2f61132086df523d530e86463fddcfd1fc209aab362cbe695b58ce5ea0026c4228a5664252e807b4dffc13e8ae4e4cf5e36d0e2f842cc29689798e1254080aaa1107932d8ebfa4630d390c2b93109dabab43adc2309d5eca02da1b67a7e9b04901feaaf6d441b7d86a5ee6552fbf0ee0f1e791541d57e098edd983cdf3c76b7cc69311f66082c87899510bfd27e6328e8279b71b27655a365338f442b8fd58c4d88e6de166d7669391d4853020d578e46c2231d5ddeecc15b0de92a423d20a9ce9ff9a4f3c4f1be71110b6096ab3dbd3452b320d874877f9fa712d40fab60af61c7365907172e08cca5458aa4ac6493dd6f2b1962aa238cef8180539b1e126b4d4a23687d0aad16b2077d764ef56b68781ef6a5f966a5f7f681fdb14c25793482f2a71b21308c5468d9bff006a7deab21427bfc04d3b2379fc3215f166a3099d3c8d143a63d48424b77dc2fa3c61cca206d41489394512d83990222a86585dca218c4af8103f57a6e0fd6d2525a839358a10d587a5b25ae31390cc19df0cc36c1b5647445030def0c683bd963095a5cf9ef605359adc79312884348e0473be31a9ade56fc8142adee72b3f1312b608b1975fb9737d5c9b0acca415875b9c4cdb14e760d29abd7989bd2279c9fa2c62c34eead4470a5dfe5916e609169e6d95ce6cfd183e1bcbab6cf5a930d856c5a4518a9180ac05c1b321ed570cab0573cb78408f4f7bf7692b6cd99833d7f2975ae4097e01502950daf4b8fa2c7662048809134786ce693f34357c982f48e021284f8d03053eaeb1988d9cc13af88f08d72d249b8fd620e6765a6eb041ac92a14dfc4b9d3e59edf300f36826062e4c5de1fb031af49a688b8366e7c0d76207562a59ebbb378125cea9b2feaf5c0d2791ea61dbf1522770ac673ae027787b682c01a6da2986cb7012c667695495119e3b40b7d7312393f43e3f876b35b0c79fa21e6975566f160d27df2cb90292e7fcc2ff0ab041558eb534350669b3fa4447697c3dc2a63b7d297a55666341ef6d9065a829565fe135cad3d698ab21e331fcd0fc1747241840a37601ffa5eaece8d6ae8a7cdff873e6846c5445f672872d807e58389b72642d6ac37edc4a6b3d57aafc3443e4a4cd3ea04437ec046f0397293dd8ce3545540d17e0392fa6a9d929feeb1745c2f39377b08f3d62e2f56c85bed945ad20d531b97958b56e7374e9f38db956229e82240e03be5e216a408bf68403e562eb6e798b04c80beb86c2d49aba9a9f59845c6d4a89ea15374dfdafc68a1243ff899ab29f629426636cf618df1e71ca3d34ee64e99ff5377ee52b4ed2726bdd478bebbb5dd9061779188e5f3720fc6c40f5bf4f7f5564cdc02a2627b78f36f88a1a85c8fa411018499736ccd9500bd697940aea8cad086a1be920d71f023535471f5b947b114305ff1cdfafe8a5bb02a6c52c94e155cd54e82ae5fdfe9ede6021db996cf043207621ea0bfae2c9cd596c1ffb45ffeae44c3cfec43538830cc0822eb9ebd89c9e9e4dd20e86a205bf0b45cb4e8370d8c34d2fd9d6822fefa23da2d643a0993864b02bbaeea071f88952863d70512823a4c48e07a74bdc8be79e5fa0a0d34e5edeb2171b97b6edfb0c0df9aa713ce3cb39fd8784b50ab5bbe2ea2d5c8a9a1cfc2277b1f888f53fce6240679a1870d386d9ee9514aea2aa816b6e16da734751dc9fe89fa5ec599b2f5367e161808524e95c6cfe3aeff1678e4a5658fc2d40744eff17cc7087344f487a97d37c6cad39a7a84af9700fb1340651b2b0c11ad55a9f7470d3707f31765b43ed0c7843ef88ba51ca7135cca74f8ac42578fd3443a10935fa0eeabdcdfac09ee91063302821257926dfd4e450424c460a1c125a786f79404ab07eee31c59e2c3616e20feeb5ac7237496fb640837202d75369e48e27e7dac2f319c5bf58de791e1c9a4a2924058da9a79d411b21ef51c1edf8a29dbceba2810ffa45fff5d9bf2b82036ede739296cab7861e2ee02ad3db423eff7f54c40568a4315ddf09a1d228ad20f0024bab3a855aa6640eb3181410603dcbd2e92b3c476209fea22f64d78d0c98ff824b0f3ac053e030e3dd9e15b6524fda0c8aecf448f2c10f8aab012da3dbb46a78ca5f633665c91f4dbf628c7a216d2f0c10cdcd0cb6ef88efd0a6d08fe69e25037550d6f255ffbe51a4e2388a78f734a0c88fd2cbe3ff9404c74cf7041b374cb49805d7f5243412745c31b82903962c2b6a313dc2bd15a1bea04e22dd9f26fde72577e45c34d0560e34fbd3735572778b00f9b17253291f9ee53e75a89c80fec5e3f43cc2edd817c35d373e9bf9b6063a6d447caf93b29824e5ee49bde0e83ea188a038df80d42f7d83029942593bef477a1231e49dc50dc033a03618a690c27057181234427bb38dceabde74fef0c08a3aaf5c653f4847d6063d6a9a4dd18ff4f58ef0cb4f0954da2d1602372eac6c4de129c252dcea961ddeeaab0e61c48cbed8c3e97ccda7ccc5458eec5a00664f8774ecd7152feebf5e1c21a2f41439de0292e9bc6320659133713c14e6695ae677e01539759742595981f8491aebf97d588925fbd005d2f1fc9212a24f014878c002971ca365ab6962bdd7c98ba5704365d2127b3632cdc7d6c4f200d29fb9fb58869ae7b8ccb401cd6977e8dfec9962004651c322a720d06e29a964eda5d1c39fce19ef4aadaaa51284fb214ffe2ade2860e66b5c847802db702bf965d03b60ad1bc8ebe85d6e06f51cb038b025692aa4f3ed497a5353069033357789828a1fea5732da054d073a0c6b48cafb0e4819e590c7590302816469c657fe5893f06e4bdf981000c594094ab4ec42843b9d8ae0e077f479d8fa197748b2c5ee4d6043e182dd2c8ead2b86d56617b6997bf1689a33ae7131bc94fc737731310331e00bc82ecf311e6c1e07c09748c9217f69dc31871bd58c55c82537f896ae9b69c50607447e6ded92155c9cfebfb67e036bc0422066ce816d85f928c54a51eaf9d47c5332a01f3225bbbd977d9581e771c4bd71a85c8c3db78a05a6afa10161d7203a2a8f181ca6223c2598ba20ae7f25f1855ba4a50e147fc01f02433d2425e52a5548599ea829722536a3299208988bcd228625ff2520b9b47c3af0ef248e229cf52a9da55f9da472f2ebcfa9de1409805003df94f5c8de65cb9744aae3c3b11583862a0c76edb69ba549570f15df40d191f7eb187790d4f5128c4c4d2f9bc02ae405f2115c913fe6bb4c177fca6c7f10d19bf995116e0961b85581458cb5893c7ba34a8f13b079036a02b0e1cb7fd4c0d401571f9a8028c0f934d79980f8cdebb6bd5b496db177ece50321a4a51060f684deca2efb3a955edaa22bea1ab6e453f2352ef77cfd6f2ce31649673e6623d8d70f3cee043f97b7ee2ed3927beb41573c9d86e2d1247f11e4869ef8bced5b5478c44f8be922791338b7aa5d6fafc79db288f3c14974c0e823ddda0cc9ca95288f285bd5d5dbf739fcfb962965a7528726a8200cb7f1d4bb81e6b2d9cf1027849d3b7b61c707be74e01b95339783e5cd1f1f1ccedea2738477509365f9e1ee903de36d9669fa65b87716745175e61aa17facc0d701d5ffdaea2e3c85fe5405eacfd7f33c8cb0e44577ef828e084df79efa29cdd49a5f75436d249d4b409bfea3210b", 0x1000}], 0x8, &(0x7f00000019c0)=[{0x1010, 0x103, 0x0, "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"}, {0x98, 0x3a, 0xf, "0e04f14cda652adf59d04e0119bb7fed63e4e388a2a4d2447de3956458eb85e33093b6e6b3328eaf760039a682440b25d7ea298f9da43f5b1a7e3d1c804988babf7e08fda859fde6603ef0d2f4a583522459f6ba5f3acb276ef3358cb05e9802c194826176ad3bc1858c0a3c621119f59112287217b320269f6c3a5611de034ba9aadf92ca"}, {0x100, 0x0, 0x1ff, "b0054e979154c4995dfa246a3737dccddd5146c5b88350028fb7103e339e15c5afac8dd215698a88f3f016db9a36e2cc70a1713d23e0978dac88ca52689e8b56ca144454cd527110cc6e33e4ddd1ab4feb1be20b5158dabc0cfc68518e1b50d3ca29427a6a47c3cc5bb01eb9c8d0c0e33cadfb78d120a7620b244e47491e24d864229eca32aea39726874ab5dea723244b61e19b23bd468160578e6a879505e6ee4b24f8065620222e8f28da64d4bf65f06161be4b109dd72f3e095e12d8b1dcc0b0ea42810e6f6ac7708dd3b10bb95467a56d9284e947acfea490ac875e762e74636a8d5ee6ab21c3"}, {0xd0, 0x84, 0x3, "14a66c5d8750f188d818504bc1494eac3cfd06c71201b3790414aa9a0476df7579cef6a98768b7829a03f19003849427a6f5228314d9b6c0f21ca6be3f4bffddb779cbb7898a92eaeea95bac77ff7b76151125f2ca28d75ecc6b7ac07ef8b4e8c4f19088b1263fc0621edc51f64880c3bd5e8e787c31e5e048dcb94bfc69c7690a3c915732ae38c60afa9824078d3040744ea6ae3d3c71a4ff99f3b7aaa576e90d374ad545b116de21f293f27e73e574661ee4483c0e8f87111a9a50abd3"}, {0x20, 0x88, 0x10001, "a058b08444dbfcc482613b57f732"}, {0x50, 0x88, 0x7, "4fc498bf8fec6d8aa6b74c89f63428bc8b2ae13af40473e35a5e0719504091745b97c34631e7d223f42aeddd4eb24aabb9a2cf2fa55961d805"}, {0x108, 0x3a, 0xfffffc01, "ba2eec29cfd62fd908c1d1f55cec0e4a618993c51816881da25d459965c0fd542dbfb3d15d2850cf2decde29f7cd4100885ff821a95b09e0907b1099ea82816303647184474b7a18b629e5ac4ba9f799fba92f488e467b40ae900834412313e7f17efaa8f6997e74c61a4a23c4146041dd6494a9fe6e6454e6345bc506c40c9e254a81beeacab760a85aa2b4e4fbbcf29de3de9955f0c6bff9a1553877e0152d6b6d1ad51628467b1401d6a2f3f9025ece83945d7fbdad1d6ce56c60a63e7b405751185a888fd4e5c07e5fd70f4d9e361092d60899e7adb37ba91de3b94cc28a0a59d1a583ff1fa760b3a2ebc09eab05a73714558bab295f"}], 0x13f0}, 0x41)
sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xa}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x1, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44090)
sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffe0, 0xa}, {0xf, 0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xffffffff}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x101}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x6}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
r12 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r12, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r12, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c)

541.939547ms ago: executing program 2 (id=1430):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000003000000000000000000000d0a0000000000000001000006040000000100000004000000006100"], &(0x7f0000000f40)=""/4088, 0x3b, 0xff8, 0x8}, 0x28)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000020a03000000000000000000020000000c00024000000000000000010900010073797a30"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x0)

488.347721ms ago: executing program 2 (id=1432):
r0 = socket$inet6(0xa, 0x5, 0x0)
getsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0x47, &(0x7f0000000b00)={&(0x7f0000000000)={0x28, r3, 0x1, 0xfffffffe, 0x0, {{0x2}, {@void, @val={0xc, 0x99, {0x1, 0x2}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}]}, 0x28}}, 0x8000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r8, @ANYBLOB="080002002e"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x3008000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r3, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xfff, 0x51}}}}, ["", "", "", "", ""]}, 0x28}}, 0x40001)

486.57227ms ago: executing program 1 (id=1433):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socket$inet6_sctp(0xa, 0x801, 0x84) (async)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r1, &(0x7f0000000280)="f9", 0x1, 0x20000040, &(0x7f0000000040)={0xa, 0x0, 0x2, @private2}, 0x1c) (async)
sendto$inet6(r1, &(0x7f0000000280)="f9", 0x1, 0x20000040, &(0x7f0000000040)={0xa, 0x0, 0x2, @private2}, 0x1c)
sendto$inet6(r1, &(0x7f00000002c0)="ed1afe65", 0x4, 0x808d1, &(0x7f00000001c0)={0xa, 0x4e22, 0x1, @private0, 0x6}, 0x1c)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, 0x0)
shutdown(r1, 0x1) (async)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f0000000080)={0x0, 0x0, 0x10, 0xaf9}, &(0x7f00000010c0)=0x18)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
socket$unix(0x1, 0x1, 0x0) (async)
r7 = socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x4}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10001}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

421.207483ms ago: executing program 2 (id=1434):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58)
unshare(0x62040200)
r1 = socket(0x10, 0x80003, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e000081"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800dd00000000000000000002001000fe0400010000002008001e0002000000"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@newtfilter={0x38, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r8, {0xd, 0x9}, {0x6}, {0x3, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}}, 0x4000)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r9, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

310.032512ms ago: executing program 1 (id=1435):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r0, 0x0, 0xb9b}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r0, 0x0, 0xb9b}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket(0x15, 0x5, 0x0)
getsockopt(r2, 0x200000000114, 0x271a, &(0x7f0000032580)=""/102393, &(0x7f0000000040)=0x18ff9)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0))
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000010004b04bd7000fcdbdf257a000d0000", @ANYRES32=<r4=>0x0, @ANYBLOB="0010000020900000400012800b0001006272696467650000300002800c0023000100000000000080050016000000000008001b004b0f00000500250001000000050024"], 0x60}}, 0x0)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendmsg$nl_xfrm(r2, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)=@getsadinfo={0x6c, 0x23, 0x300, 0x70bd2b, 0x25dfdbfd, 0x0, [@extra_flags={0x8, 0x18, 0x2}, @user_kmaddress={0x2c, 0x13, {@in=@dev={0xac, 0x14, 0x14, 0xe}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x2}}, @lifetime_val={0x24, 0x9, {0xfffffffffffffff7, 0x8, 0xfffffffffffffb0b, 0x7}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x850)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES8=r4], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x5, 0x0, &(0x7f0000000340)="0e8c3ce1e2"}, 0x50)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'macvtap0\x00', <r7=>0x0})
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000080000001c001280090001007866726d000000000c000280080002000300000008000a00", @ANYRES32=r7, @ANYBLOB="f1af768cbf0be7ac1ffd474a7ef15902a56deead2eb29b7d8aada0359a3357f81234aa000f332d05f514b91551d141dbc015b64168af948ecf595d8333ce47525cbb0689001a85897084b0292d70796d7ec7b12f4625e5c2d97ebaf8c1eb9675b9ad10d3c38b275dca49384c446610c011ee6fd5067aaa64280464a866196245bfb21c9e110be3ddc6c5fd45f2ce89c65a88d1e58eb3fbf2274856225687648414162a0c0e90e687fad7ece507a038c6848354c0eebde5d6bf7b44dd455f85c3e0cd4a"], 0x44}, 0x1, 0x0, 0x0, 0x4028001}, 0x8000002) (async)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000080000001c001280090001007866726d000000000c000280080002000300000008000a00", @ANYRES32=r7, @ANYBLOB="f1af768cbf0be7ac1ffd474a7ef15902a56deead2eb29b7d8aada0359a3357f81234aa000f332d05f514b91551d141dbc015b64168af948ecf595d8333ce47525cbb0689001a85897084b0292d70796d7ec7b12f4625e5c2d97ebaf8c1eb9675b9ad10d3c38b275dca49384c446610c011ee6fd5067aaa64280464a866196245bfb21c9e110be3ddc6c5fd45f2ce89c65a88d1e58eb3fbf2274856225687648414162a0c0e90e687fad7ece507a038c6848354c0eebde5d6bf7b44dd455f85c3e0cd4a"], 0x44}, 0x1, 0x0, 0x0, 0x4028001}, 0x8000002)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
socket$inet6(0xa, 0x3, 0x8) (async)
r11 = socket$inet6(0xa, 0x3, 0x8)
ioctl$sock_SIOCETHTOOL(r11, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20000000, 0x0, 0x1, 0x900}}) (async)
ioctl$sock_SIOCETHTOOL(r11, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20000000, 0x0, 0x1, 0x900}})
setsockopt$inet6_tcp_TLS_RX(r11, 0x6, 0x2, &(0x7f0000000040)=@gcm_128={{0x303}, "170c7e1ef7f89f3a", "4192cab0a15c16973ba45e2eeb72e608", "6465e9bb", "e84c9d4f03ae70f7"}, 0x28)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r12, &(0x7f0000000240)={0x0, 0xfffffd84, &(0x7f0000000000)={&(0x7f00000012c0)={0x2c, r13, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x80003}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x51)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES16=r10, @ANYBLOB="010000000000fbdbdf25010000e70700020000000000050005000000000008000300000000ff47000180050002002000000100020000000800060003000000080003000000"], 0x84}}, 0x20000000)

130.487913ms ago: executing program 1 (id=1436):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000140), 0x4)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000000c0)=0xfffffffe, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x79f46c20}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0)

75.194443ms ago: executing program 1 (id=1437):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001040)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xdc}}, &(0x7f0000000000)='GPL\x00'}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x8}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x2}, {}, {0x4}}}, &(0x7f0000000200)='syzkaller\x00', 0x6}, 0x90)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x0)
sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x428}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xe4800}, 0x20000000)

74.715365ms ago: executing program 2 (id=1438):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, &(0x7f0000000080)) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r1, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r2 = socket$unix(0x1, 0x1, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r8, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4, 0xc}]}}]}, 0x98}}, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES16, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r4], 0x90}}, 0x4)

1.654292ms ago: executing program 1 (id=1439):
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203005b", 0x48}], 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv4_newroute={0x2c, 0x1a, 0x200, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x2, 0x0, 0x4}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}, @RTA_TABLE={0x8, 0xf, 0x9}]}, 0x2c}}, 0x24008800)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x20000)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x42, &(0x7f00000003c0)=ANY=[@ANYBLOB="aa9daaaaaaaa0180c2000000080045080034006500000f069078ac1e0101ac1414aa00114e22d7a2605717a1973b6578f47d78c78fe596400838564d6b706f89f434b5aa58b458b157fadcdd18a1713a39eaa235f4bc777a85348c432be016d3409f90f08f89293edc5a17e3fa18d63b3a380e70b4fd3d57475a0f1325e20bd38a8974bbbe1b5dbde9edb7b865db716de0b3e9721e8b8f609af225da", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c02ffff907800001e0cfb000700000000000000"], 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x7c, r5, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44000}, 0x8)
r6 = socket$caif_seqpacket(0x25, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000fd85baf87ddbdf250208000600800000000800050006"], 0x4c}, 0x1, 0x0, 0x0, 0x24000091}, 0x20010804)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r8)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r8)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="0100000000800000000007000000080001"], 0x1c}}, 0x80)
setsockopt$CAIFSO_LINK_SELECT(r6, 0x116, 0x7f, &(0x7f0000000080)=0x5, 0x4)
connect$caif(r6, &(0x7f0000000040)=@dgm={0x25, 0x2, 0x8}, 0x18)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r10 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000100)={<r11=>r10})
r12 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r12, 0x89e2, &(0x7f0000000300)={<r13=>r11})
bind$xdp(r13, &(0x7f00000005c0)={0x2d, 0x0, 0x0, 0xc}, 0x10)

1.097526ms ago: executing program 2 (id=1440):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0xa4, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x64, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PROTO={0x5}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3b13}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x21}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x4}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000000}, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x800)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0x2}, {0x9, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x40040c4)

604.548µs ago: executing program 2 (id=1441):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4c001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_type(r1, &(0x7f00000000c0), 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x10000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10)
socket$inet_udplite(0x2, 0x2, 0x88)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a)
sendfile(r3, r4, 0x0, 0xffffffff000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'caif0\x00'})
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @vti={{0x8}, {0x34, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8}, @IFLA_VTI_OKEY={0x8, 0x3, 0x7fffffff}, @IFLA_VTI_IKEY={0x8, 0x2, 0x1}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x1ebb}, @IFLA_VTI_OKEY={0x8, 0x3, 0x518}], @IFLA_VTI_LOCAL={0x8, 0x4, @broadcast}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40040}, 0x0)

0s ago: executing program 1 (id=1442):
bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket(0x11, 0x3, 0xd)
accept4$unix(r1, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000015c0)=ANY=[@ANYBLOB="580000000206010200000000000000000c00ffff11000300686173683a69702c706f7274000000000500010006000000050005000a00000005000400000000000900020073797a31000000000c0007800800124000060000f5dda63562a53acc0b5bb1892c44fbdac8e0ab5e37313c460b431d97b0fd78d460cc4e5ab500c4807f1998a8b463aa1345da3a477a34f5a49b7a24151168cd22d88f6eb0cbcf063bc6113c08a22f954b06ef44aef2681b912d803a26868fe5db77928e93e5e30bf7e19e6c866139a50c665ada0c9dd310d6b2fce760fa018cbbac5d13cada0000000000000000"], 0x58}}, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
recvmsg(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}}], {0x14, 0x10}}, 0x98}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'hsr0\x00'})
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e978000000000000", @ANYRES8=r8], 0x20}}, 0x0)
sendmsg$nl_route(r9, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0)
sendmsg$nl_route(r8, &(0x7f00000012c0)={0x0, 0x16, &(0x7f0000000500)={&(0x7f00000013c0)=@ipv6_newnexthop={0x0, 0x68, 0x1, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x4, 0x0, 0x11}, [@NHA_ENCAP_TYPE={0x0, 0x7, 0x1}, @NHA_ENCAP_TYPE={0x0, 0x7, 0x5}, @NHA_ENCAP_TYPE={0x0, 0x7, 0x3}, @NHA_FDB]}, 0x64}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
recvmmsg$unix(r7, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:14880' (ED25519) to the list of known hosts.
syzkaller login: [   48.933516][ T5782] cgroup: Unknown subsys name 'net'
[   49.023163][ T5782] cgroup: Unknown subsys name 'cpuset'
[   49.030716][ T5782] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.557222][ T5782] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.184789][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.189195][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.194549][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.199868][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.204201][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.236495][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.249070][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.253166][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.258224][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.261973][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.350103][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.353644][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.357162][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.362302][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.379022][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.447842][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   55.583134][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.586413][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.590298][ T5850] bridge_slave_0: entered allmulticast mode
[   55.594330][ T5850] bridge_slave_0: entered promiscuous mode
[   55.604343][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.607061][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.610669][ T5850] bridge_slave_1: entered allmulticast mode
[   55.614621][ T5850] bridge_slave_1: entered promiscuous mode
[   55.712664][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.731575][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.735858][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   55.818440][ T5850] team0: Port device team_slave_0 added
[   55.834059][ T5850] team0: Port device team_slave_1 added
[   55.900591][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.903547][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.915209][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.939446][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.942439][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.953586][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.972940][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.976182][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.979742][ T5854] bridge_slave_0: entered allmulticast mode
[   55.983648][ T5854] bridge_slave_0: entered promiscuous mode
[   55.999426][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.002775][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.006041][ T5854] bridge_slave_1: entered allmulticast mode
[   56.012357][ T5854] bridge_slave_1: entered promiscuous mode
[   56.016760][ T5858] chnl_net:caif_netlink_parms(): no params data found
[   56.093824][ T5850] hsr_slave_0: entered promiscuous mode
[   56.097159][ T5850] hsr_slave_1: entered promiscuous mode
[   56.103780][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.136068][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.215928][ T5854] team0: Port device team_slave_0 added
[   56.240795][ T5854] team0: Port device team_slave_1 added
[   56.243656][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.246842][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.250727][ T5858] bridge_slave_0: entered allmulticast mode
[   56.254690][ T5858] bridge_slave_0: entered promiscuous mode
[   56.270964][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.274094][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.277226][ T5858] bridge_slave_1: entered allmulticast mode
[   56.281952][ T5858] bridge_slave_1: entered promiscuous mode
[   56.294042][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.296756][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.307433][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.350744][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.353819][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.365835][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.391303][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.402727][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.455661][ T5858] team0: Port device team_slave_0 added
[   56.474385][ T5858] team0: Port device team_slave_1 added
[   56.492573][ T5854] hsr_slave_0: entered promiscuous mode
[   56.495747][ T5854] hsr_slave_1: entered promiscuous mode
[   56.498932][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   56.501470][ T5854] Cannot create hsr debugfs directory
[   56.538301][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.541696][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.553436][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.565671][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.570756][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.581897][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.653221][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.681061][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.693148][ T5858] hsr_slave_0: entered promiscuous mode
[   56.696617][ T5858] hsr_slave_1: entered promiscuous mode
[   56.700012][ T5858] debugfs: 'hsr0' already exists in 'hsr'
[   56.702486][ T5858] Cannot create hsr debugfs directory
[   56.716625][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.726046][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.857831][ T5854] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.864085][ T5854] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.893058][ T5854] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.912840][ T5854] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.966464][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.012115][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   57.015220][ T5858] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.036956][ T5858] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.044586][ T5858] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.054948][ T2255] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.058101][ T2255] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.070053][ T5858] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.088280][ T2255] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.091552][ T2255] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.187745][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.211269][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   57.225918][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.228966][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.233740][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.236438][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.240522][   T54] Bluetooth: hci0: command tx timeout
[   57.261909][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.302318][ T5854] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   57.306536][ T5854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.318925][   T54] Bluetooth: hci1: command tx timeout
[   57.328517][ T5858] 8021q: adding VLAN 0 to HW filter on device team0
[   57.344650][ T2255] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.347729][ T2255] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.363387][ T2255] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.366458][ T2255] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.399122][   T54] Bluetooth: hci2: command tx timeout
[   57.412825][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.486023][ T5850] veth0_vlan: entered promiscuous mode
[   57.494719][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.504560][ T5850] veth1_vlan: entered promiscuous mode
[   57.543085][ T5850] veth0_macvtap: entered promiscuous mode
[   57.545741][ T5854] veth0_vlan: entered promiscuous mode
[   57.555763][ T5850] veth1_macvtap: entered promiscuous mode
[   57.560465][ T5854] veth1_vlan: entered promiscuous mode
[   57.585657][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.605359][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.613248][ T5854] veth0_macvtap: entered promiscuous mode
[   57.622497][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.629803][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.635406][ T5854] veth1_macvtap: entered promiscuous mode
[   57.642269][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.646074][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.672684][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.681773][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.704286][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.735513][ T5877] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.742484][ T5877] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.746402][ T5877] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.756267][ T5877] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.801198][ T5858] veth0_vlan: entered promiscuous mode
[   57.815796][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.825698][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.834722][ T5858] veth1_vlan: entered promiscuous mode
[   57.855180][ T2255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.865166][ T2255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.893785][ T2255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.897036][ T2255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.919787][ T5858] veth0_macvtap: entered promiscuous mode
[   57.925076][ T2255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.927009][ T5858] veth1_macvtap: entered promiscuous mode
[   57.930507][ T2255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.949671][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.959573][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.968031][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.991928][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.004233][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.023194][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.030813][ T5917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'.
[   58.041303][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.114283][ T5918] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET)
[   58.155200][ T3574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.157787][ T3574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.225823][ T2255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.229193][ T2255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.435596][ T5927] dvmrp0: entered allmulticast mode
[   59.319364][   T54] Bluetooth: hci0: command tx timeout
[   59.398999][   T54] Bluetooth: hci1: command tx timeout
[   59.411664][ T5953] netlink: 140 bytes leftover after parsing attributes in process `syz.2.10'.
[   59.434681][ T5955] netlink: 'syz.0.11': attribute type 39 has an invalid length.
[   59.449847][ T5953] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   59.478540][ T5957] netlink: 'syz.1.12': attribute type 1 has an invalid length.
[   59.484549][   T54] Bluetooth: hci2: command tx timeout
[   59.578927][ T5958] nbd0: detected capacity change from 0 to 8388736
[   59.584922][ T5966] netlink: 'syz.1.12': attribute type 11 has an invalid length.
[   59.597163][ T5961] syz.2.13: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   59.605785][ T5961] CPU: 0 UID: 0 PID: 5961 Comm: syz.2.13 Not tainted syzkaller #0 PREEMPT(full) 
[   59.605802][ T5961] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   59.605809][ T5961] Call Trace:
[   59.605814][ T5961]  <TASK>
[   59.605820][ T5961]  dump_stack_lvl+0x189/0x250
[   59.605842][ T5961]  ? __pfx_dump_stack_lvl+0x10/0x10
[   59.605857][ T5961]  ? __pfx__printk+0x10/0x10
[   59.605875][ T5961]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   59.605890][ T5961]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   59.605905][ T5961]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   59.605921][ T5961]  warn_alloc+0x214/0x310
[   59.605944][ T5961]  ? __pfx_warn_alloc+0x10/0x10
[   59.605994][ T5961]  ? __get_vm_area_node+0x28f/0x300
[   59.606013][ T5961]  ? nf_tables_newset+0x132b/0x2530
[   59.606032][ T5961]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   59.606065][ T5961]  ? alloc_pages_mpol+0x3cd/0x4a0
[   59.606083][ T5961]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   59.606103][ T5961]  ? rcu_is_watching+0x15/0xb0
[   59.606117][ T5961]  ? nf_tables_newset+0x132b/0x2530
[   59.606131][ T5961]  ? nf_tables_newset+0x132b/0x2530
[   59.606144][ T5961]  __kvmalloc_node_noprof+0x3b8/0x5f0
[   59.606160][ T5961]  ? nf_tables_newset+0x132b/0x2530
[   59.606175][ T5961]  ? nft_table_lookup+0x211/0x230
[   59.606190][ T5961]  ? nft_set_lookup+0x128/0x150
[   59.606206][ T5961]  ? nft_hash_privsize+0x5f/0xf0
[   59.606220][ T5961]  nf_tables_newset+0x132b/0x2530
[   59.606249][ T5961]  ? __pfx_nf_tables_newset+0x10/0x10
[   59.606279][ T5961]  ? __nla_parse+0x40/0x60
[   59.606295][ T5961]  nfnetlink_rcv+0x1132/0x2520
[   59.606334][ T5961]  ? __pfx_nfnetlink_rcv+0x10/0x10
[   59.606362][ T5961]  ? ref_tracker_free+0x63a/0x7d0
[   59.606394][ T5961]  ? __netlink_deliver_tap+0x807/0x850
[   59.606409][ T5961]  ? netlink_deliver_tap+0x2e/0x1b0
[   59.606434][ T5961]  netlink_unicast+0x82f/0x9e0
[   59.606458][ T5961]  ? __pfx_netlink_unicast+0x10/0x10
[   59.606478][ T5961]  ? netlink_sendmsg+0x642/0xb30
[   59.606490][ T5961]  ? skb_put+0x11b/0x210
[   59.606508][ T5961]  netlink_sendmsg+0x805/0xb30
[   59.606528][ T5961]  ? __pfx_netlink_sendmsg+0x10/0x10
[   59.606544][ T5961]  ? aa_sock_msg_perm+0xf1/0x1d0
[   59.606559][ T5961]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   59.606572][ T5961]  ? __pfx_netlink_sendmsg+0x10/0x10
[   59.606586][ T5961]  __sock_sendmsg+0x21c/0x270
[   59.606606][ T5961]  ____sys_sendmsg+0x505/0x830
[   59.606626][ T5961]  ? __pfx_____sys_sendmsg+0x10/0x10
[   59.606646][ T5961]  ? import_iovec+0x74/0xa0
[   59.606665][ T5961]  ___sys_sendmsg+0x21f/0x2a0
[   59.606681][ T5961]  ? __pfx____sys_sendmsg+0x10/0x10
[   59.606720][ T5961]  ? __fget_files+0x2a/0x420
[   59.606731][ T5961]  ? __fget_files+0x3a0/0x420
[   59.606748][ T5961]  __x64_sys_sendmsg+0x19b/0x260
[   59.606764][ T5961]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   59.606807][ T5961]  ? rcu_is_watching+0x15/0xb0
[   59.606824][ T5961]  ? do_syscall_64+0xbe/0x3b0
[   59.606841][ T5961]  do_syscall_64+0xfa/0x3b0
[   59.606853][ T5961]  ? lockdep_hardirqs_on+0x9c/0x150
[   59.606865][ T5961]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.606877][ T5961]  ? exc_page_fault+0x9f/0xf0
[   59.606891][ T5961]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.606902][ T5961] RIP: 0033:0x7ff7d6f8eba9
[   59.606914][ T5961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   59.606924][ T5961] RSP: 002b:00007ff7d51f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   59.606938][ T5961] RAX: ffffffffffffffda RBX: 00007ff7d71d6090 RCX: 00007ff7d6f8eba9
[   59.606946][ T5961] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007
[   59.606953][ T5961] RBP: 00007ff7d7011e19 R08: 0000000000000000 R09: 0000000000000000
[   59.606960][ T5961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   59.606994][ T5961] R13: 00007ff7d71d6128 R14: 00007ff7d71d6090 R15: 00007ffd9fa05c48
[   59.607014][ T5961]  </TASK>
[   59.607120][ T5961] Mem-Info:
[   59.770948][ T5961] active_anon:5426 inactive_anon:0 isolated_anon:0
[   59.770948][ T5961]  active_file:1096 inactive_file:38236 isolated_file:0
[   59.770948][ T5961]  unevictable:1768 dirty:1453 writeback:0
[   59.770948][ T5961]  slab_reclaimable:9597 slab_unreclaimable:50616
[   59.770948][ T5961]  mapped:18025 shmem:2428 pagetables:896
[   59.770948][ T5961]  sec_pagetables:0 bounce:0
[   59.770948][ T5961]  kernel_misc_reclaimable:0
[   59.770948][ T5961]  free:301394 free_pcp:22545 free_cma:0
[   59.789999][ T5961] Node 0 active_anon:12256kB inactive_anon:0kB active_file:2140kB inactive_file:23040kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:43348kB dirty:5328kB writeback:0kB shmem:4844kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5016kB pagetables:2000kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   59.808348][ T5961] Node 1 active_anon:9448kB inactive_anon:0kB active_file:2244kB inactive_file:129904kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28752kB dirty:484kB writeback:0kB shmem:4868kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6448kB pagetables:1584kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   59.820882][ T5961] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   59.832134][ T5961] lowmem_reserve[]: 0 811 811 811 811
[   59.834373][ T5961] Node 0 DMA32 free:410332kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12256kB inactive_anon:0kB active_file:2140kB inactive_file:23040kB unevictable:3536kB writepending:5328kB present:1556484kB managed:830892kB mlocked:0kB bounce:0kB free_pcp:28488kB local_pcp:20328kB free_cma:0kB
[   59.848472][ T5961] lowmem_reserve[]: 0 0 0 0 0
[   59.852729][ T5961] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[   59.866703][ T5961] lowmem_reserve[]: 0 0 854 854 854
[   59.869290][ T5961] Node 1 Normal free:321392kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9312kB inactive_anon:0kB active_file:2244kB inactive_file:129904kB unevictable:3536kB writepending:484kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:61964kB local_pcp:41060kB free_cma:0kB
[   59.884553][ T5961] lowmem_reserve[]: 0 0 0 0 0
[   59.898718][ T5961] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   59.904895][ T5961] Node 0 DMA32: 0*4kB 0*8kB 2*16kB (UM) 0*32kB 1*64kB (U) 1*128kB (M) 1*256kB (E) 2*512kB (ME) 1*1024kB (M) 1*2048kB (E) 99*4096kB (M) = 410080kB
[   59.912649][ T5961] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   59.920036][ T5961] Node 1 Normal: 94*4kB (ME) 117*8kB (UM) 261*16kB (UM) 14*32kB (UM) 10*64kB (ME) 6*128kB (UME) 3*256kB (UM) 7*512kB (UME) 6*1024kB (UM) 4*2048kB (ME) 72*4096kB (M) = 320944kB
[   59.926859][ T5961] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   59.938907][ T5961] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   59.949594][ T5961] 41760 total pagecache pages
[   59.951443][ T5961] 0 pages in swap cache
[   59.955503][ T5961] Free swap  = 124996kB
[   59.966802][ T5969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14'.
[   59.973426][ T5961] Total swap = 124996kB
[   59.978099][ T5961] 786301 pages RAM
[   59.980157][ T5961] 0 pages HighMem/MovableOnly
[   59.983106][ T5961] 241346 pages reserved
[   59.984715][ T5961] 0 pages cma reserved
[   60.120834][ T5972] openvswitch: netlink: Invalid VLAN frame
[   60.243144][ T5980] netlink: 'syz.2.17': attribute type 12 has an invalid length.
[   60.246394][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17'.
[   60.263606][   T55] block nbd0: Receive control failed (result -104)
[   60.296739][ T5982] netlink: 248 bytes leftover after parsing attributes in process `syz.2.18'.
[   60.499164][ T5990] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.536859][ T5992] netlink: 64 bytes leftover after parsing attributes in process `syz.2.19'.
[   60.557884][ T5992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19'.
[   60.721771][ T6002] mac80211_hwsim hwsim6 ;: renamed from wlan0 (while UP)
[   61.398806][   T54] Bluetooth: hci0: command tx timeout
[   61.441996][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23'.
[   61.479878][   T54] Bluetooth: hci1: command tx timeout
[   61.558839][   T54] Bluetooth: hci2: command tx timeout
[   61.623623][ T6019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'.
[   61.673089][ T6022] tipc: Started in network mode
[   61.675659][ T6022] tipc: Node identity 4ab0735c07bf, cluster identity 4711
[   61.679647][ T6022] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.683309][ T6022] syzkaller0: entered promiscuous mode
[   61.685677][ T6022] syzkaller0: entered allmulticast mode
[   61.713544][ T6022] tipc: Resetting bearer <eth:syzkaller0>
[   61.741907][ T6021] tipc: Resetting bearer <eth:syzkaller0>
[   61.751006][ T6021] tipc: Disabling bearer <eth:syzkaller0>
[   61.854861][ T6029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.29'.
[   61.863156][ T6029] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   62.056722][ T6056] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.060651][ T6053] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   62.064606][ T6053] syzkaller0: entered promiscuous mode
[   62.066533][ T6053] syzkaller0: entered allmulticast mode
[   62.080122][ T6052] tipc: Resetting bearer <eth:syzkaller0>
[   62.088183][ T6052] tipc: Disabling bearer <eth:syzkaller0>
[   62.492729][ T6087] netlink: 'syz.1.45': attribute type 8 has an invalid length.
[   62.512555][ T6087] bond0: entered promiscuous mode
[   62.514909][ T6087] bond_slave_0: entered promiscuous mode
[   62.517564][ T6087] bond_slave_1: entered promiscuous mode
[   62.525295][ T6087] bond0: left promiscuous mode
[   62.527127][ T6087] bond_slave_0: left promiscuous mode
[   62.533478][ T6087] bond_slave_1: left promiscuous mode
[   62.736798][ T6095] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 3, id = 0
[   62.788925][ T6099] warning: `syz.1.47' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   62.996439][ T6105] tipc: Started in network mode
[   63.004734][ T6105] tipc: Node identity 3685f1d487e4, cluster identity 4711
[   63.008064][ T6105] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.027552][ T6104] tipc: Disabling bearer <eth:syzkaller0>
[   63.097360][ T6111] netlink: 'syz.1.51': attribute type 6 has an invalid length.
[   63.106177][ T6111] netlink: 'syz.1.51': attribute type 6 has an invalid length.
[   63.112261][ T6111] Zero length message leads to an empty skb
[   63.116785][ T6111] __nla_validate_parse: 9 callbacks suppressed
[   63.116794][ T6111] netlink: 40 bytes leftover after parsing attributes in process `syz.1.51'.
[   63.339227][ T6127] netlink: 'syz.0.57': attribute type 12 has an invalid length.
[   63.480564][   T54] Bluetooth: hci0: command tx timeout
[   63.559206][   T54] Bluetooth: hci1: command tx timeout
[   63.639413][   T54] Bluetooth: hci2: command tx timeout
[   63.663924][ T6150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.63'.
[   63.686702][ T6150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.63'.
[   63.828532][ T6154] netlink: 20 bytes leftover after parsing attributes in process `syz.1.64'.
[   63.832377][ T6154] netlink: 128 bytes leftover after parsing attributes in process `syz.1.64'.
[   63.838242][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.64'.
[   64.245841][ T6189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.72'.
[   64.592322][ T6206] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.596128][ T6206] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.695085][ T6218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.74'.
[   64.710668][ T6206] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.720532][ T6206] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.867804][ T6218] hsr_slave_0: left promiscuous mode
[   64.871645][ T6218] hsr_slave_1: left promiscuous mode
[   64.886477][ T5877] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.895300][ T5877] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.899688][ T5877] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   64.904990][ T5877] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.001273][ T6229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'.
[   65.006240][ T6229] batadv_slave_1: entered promiscuous mode
[   65.020477][ T6229] bond0: entered promiscuous mode
[   65.027709][ T6229] bond_slave_0: entered promiscuous mode
[   65.036171][ T6229] bond_slave_1: entered promiscuous mode
[   65.044752][ T6228] batadv_slave_1: left promiscuous mode
[   65.085617][ T6236] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   65.179408][ T6241] netlink: 16 bytes leftover after parsing attributes in process `syz.2.83'.
[   65.208287][ T6243] veth0: entered promiscuous mode
[   65.246587][ T6242] veth0: left promiscuous mode
[   65.393340][ T6254] netlink: 'syz.2.88': attribute type 1 has an invalid length.
[   65.502687][ T6268] netlink: 'syz.2.92': attribute type 5 has an invalid length.
[   65.512566][ T6268] geneve2: entered promiscuous mode
[   65.514725][ T6268] geneve2: entered allmulticast mode
[   65.520078][ T5878] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   65.524626][ T5878] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   65.530457][ T5878] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[   65.533799][ T5878] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[   65.569962][ T6272] netlink: 'syz.2.93': attribute type 29 has an invalid length.
[   65.574840][ T6273] netlink: 'syz.2.93': attribute type 29 has an invalid length.
[   65.617729][ T6277] netlink: 'syz.2.95': attribute type 1 has an invalid length.
[   65.724042][ T6285] netlink: 'syz.2.97': attribute type 3 has an invalid length.
[   65.726648][ T6285] netlink: 'syz.2.97': attribute type 3 has an invalid length.
[   65.755061][ T6287] netlink: 'syz.2.99': attribute type 18 has an invalid length.
[   65.757709][ T6287] netlink: 'syz.2.99': attribute type 20 has an invalid length.
[   65.815465][ T6293] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   65.954585][ T6298] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.958387][ T6298] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.967884][ T6298] bond0: left promiscuous mode
[   65.970283][ T6298] bond_slave_0: left promiscuous mode
[   65.972748][ T6298] bond_slave_1: left promiscuous mode
[   66.040582][ T6298] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.050601][ T6298] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.151843][ T6298] geneve2: left promiscuous mode
[   66.153796][ T6298] geneve2: left allmulticast mode
[   66.162787][ T6300] hsr_slave_0: left promiscuous mode
[   66.165079][ T6300] hsr_slave_1: left promiscuous mode
[   66.176202][ T5877] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.179624][ T5877] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0
[   66.188056][ T5877] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.191729][ T5877] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0
[   66.195077][ T5877] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.199903][ T5877] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0
[   66.203863][ T6303] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.207443][ T6303] syzkaller0: entered promiscuous mode
[   66.211154][ T6303] syzkaller0: entered allmulticast mode
[   66.215336][ T5877] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.220646][ T5877] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0
[   66.295204][ T6302] tipc: Resetting bearer <eth:syzkaller0>
[   66.304887][ T6302] tipc: Disabling bearer <eth:syzkaller0>
[   66.428140][ T6311] trusted_key: syz.1.105 sent an empty control message without MSG_MORE.
[   66.604443][ T6327] netlink: 'syz.0.112': attribute type 30 has an invalid length.
[   66.952329][ T6352] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   67.102575][ T6363] tipc: Started in network mode
[   67.104405][ T6363] tipc: Node identity 5aa6e1f03d34, cluster identity 4711
[   67.107193][ T6363] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.111043][ T6363] syzkaller0: entered promiscuous mode
[   67.113176][ T6363] syzkaller0: entered allmulticast mode
[   67.122117][ T6363] tipc: Resetting bearer <eth:syzkaller0>
[   67.125652][ T6362] tipc: Resetting bearer <eth:syzkaller0>
[   67.135671][ T6362] tipc: Disabling bearer <eth:syzkaller0>
[   67.463387][ T6376] Illegal XDP return value 4294967274 on prog  (id 61) dev N/A, expect packet loss!
[   67.705110][ T6385] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   68.403354][ T6413] macsec1: entered allmulticast mode
[   68.405167][ T6413] ip6gretap0: entered allmulticast mode
[   68.410224][ T6413] ip6gretap0: left allmulticast mode
[   68.530014][ T6427] bridge_slave_0: left allmulticast mode
[   68.533659][ T6427] bridge_slave_0: left promiscuous mode
[   68.538640][ T6427] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.554049][ T6427] bridge_slave_1: left allmulticast mode
[   68.558444][ T6427] bridge_slave_1: left promiscuous mode
[   68.561475][ T6427] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.567437][ T6427] bond0: (slave bond_slave_0): Releasing backup interface
[   68.572239][ T6427] bond0: (slave bond_slave_1): Releasing backup interface
[   68.576159][ T6427] team0: Port device team_slave_0 removed
[   68.581317][ T6427] team0: Port device team_slave_1 removed
[   68.584059][ T6427] batman_adv: batadv0: Removing interface: batadv_slave_0
[   68.587293][ T6427] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.679992][ T6430] ieee802154 phy0 wpan0: encryption failed: -22
[   68.730586][ T6440] vlan2: entered promiscuous mode
[   68.732408][ T6440] macvtap0: entered promiscuous mode
[   68.783809][ T6442] __nla_validate_parse: 26 callbacks suppressed
[   68.783821][ T6442] netlink: 20 bytes leftover after parsing attributes in process `syz.0.141'.
[   69.016756][ T6457] Bluetooth: MGMT ver 1.23
[   69.225937][ T6480] netlink: 20 bytes leftover after parsing attributes in process `syz.2.151'.
[   69.354039][ T6494] netlink: 24 bytes leftover after parsing attributes in process `syz.0.153'.
[   69.489117][ T6507] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[   69.499007][ T6508] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[   69.545463][ T6506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.159'.
[   69.629142][ T6524] netlink: 308 bytes leftover after parsing attributes in process `syz.1.163'.
[   69.632956][ T6524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.163'.
[   69.645561][ T6522] netlink: 20824 bytes leftover after parsing attributes in process `syz.2.162'.
[   69.783025][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.164'.
[   69.905953][ T6534] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.909602][ T6534] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.950940][ T6547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.164'.
[   70.070300][ T6534] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.081550][ T6534] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.094245][ T6555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.166'.
[   70.180876][ T6547] hsr_slave_0: left promiscuous mode
[   70.184256][ T6547] hsr_slave_1: left promiscuous mode
[   70.204750][ T5877] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.207785][ T5877] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.211328][ T5877] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.218962][ T5877] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.102488][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[   71.104679][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[   71.227338][ T6570] validate_nla: 6 callbacks suppressed
[   71.227354][ T6570] netlink: 'syz.1.172': attribute type 4 has an invalid length.
[   71.559295][ T6606] netlink: 'syz.0.182': attribute type 7 has an invalid length.
[   71.562709][ T6606] netlink: 'syz.0.182': attribute type 8 has an invalid length.
[   71.571847][ T6606] ip6gretap0: entered promiscuous mode
[   71.575267][ T6606] syz_tun: entered promiscuous mode
[   71.578226][ T6606] ip6gretap0: left promiscuous mode
[   71.581689][ T6606] syz_tun: left promiscuous mode
[   72.891166][ T6658] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[   72.903679][   T10] cfg80211: failed to load regulatory.db
[   73.127600][ T6677] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   73.295420][ T6691] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.300169][ T6691] syzkaller0: entered promiscuous mode
[   73.302473][ T6691] syzkaller0: entered allmulticast mode
[   73.336579][ T6691] tipc: Resetting bearer <eth:syzkaller0>
[   73.345267][ T6690] tipc: Resetting bearer <eth:syzkaller0>
[   73.356660][ T6690] tipc: Disabling bearer <eth:syzkaller0>
[   73.498004][ T6704] vlan2: entered promiscuous mode
[   73.505047][ T6704] macvtap0: entered promiscuous mode
[   73.627124][ T6712] syzkaller1: entered promiscuous mode
[   73.629219][ T6712] syzkaller1: entered allmulticast mode
[   73.690841][ T6717] netlink: 'syz.0.215': attribute type 7 has an invalid length.
[   73.694003][ T6717] netlink: 'syz.0.215': attribute type 8 has an invalid length.
[   73.702238][ T6717] ip6gretap0: entered promiscuous mode
[   73.705287][ T6717] syz_tun: entered promiscuous mode
[   73.708315][ T6717] ip6gretap0: left promiscuous mode
[   73.713186][ T6717] syz_tun: left promiscuous mode
[   73.830035][ T6728] __nla_validate_parse: 14 callbacks suppressed
[   73.830046][ T6728] netlink: 72 bytes leftover after parsing attributes in process `syz.0.220'.
[   73.840055][ T6724] netlink: 'syz.1.218': attribute type 1 has an invalid length.
[   73.843502][ T6724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.218'.
[   73.848197][ T6728] netlink: 72 bytes leftover after parsing attributes in process `syz.0.220'.
[   73.878230][ T6724] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.882152][ T6724] syzkaller0: entered promiscuous mode
[   73.884483][ T6724] syzkaller0: entered allmulticast mode
[   73.895633][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.221'.
[   73.916109][ T6723] tipc: Resetting bearer <eth:syzkaller0>
[   73.925982][ T6723] tipc: Disabling bearer <eth:syzkaller0>
[   73.929694][ T6736] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.965830][ T6738] 8021q: adding VLAN 0 to HW filter on device bond1
[   73.970803][ T6741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.224'.
[   73.971935][ T6738] bond0: (slave bond1): Enslaving as an active interface with an up link
[   73.980992][ T6741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.224'.
[   74.116746][ T6751] netlink: 36 bytes leftover after parsing attributes in process `syz.0.227'.
[   74.219792][ T6760] netlink: 36 bytes leftover after parsing attributes in process `syz.1.229'.
[   74.279552][ T6763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.228'.
[   74.300112][ T6762] dvmrp1: entered allmulticast mode
[   74.303175][ T6764] dvmrp0: left allmulticast mode
[   74.305075][ T6764] dvmrp1: left allmulticast mode
[   74.325802][ T6762] dvmrp1: entered allmulticast mode
[   74.475940][ T6767] netlink: 'syz.1.230': attribute type 12 has an invalid length.
[   74.563482][ T6771] netlink: 16 bytes leftover after parsing attributes in process `syz.1.231'.
[   74.570523][ T6771] team0: Mode changed to "broadcast"
[   74.574322][ T6771] vlan0: entered promiscuous mode
[   74.580515][ T6771] tipc: Enabled bearer <eth:team0>, priority 0
[   75.096933][ T6780] bridge_slave_0: left allmulticast mode
[   75.099444][ T6780] bridge_slave_0: left promiscuous mode
[   75.101771][ T6780] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.106517][ T6780] bridge_slave_1: left allmulticast mode
[   75.109027][ T6780] bridge_slave_1: left promiscuous mode
[   75.111374][ T6780] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.115840][ T6780] bond0: (slave bond_slave_0): Releasing backup interface
[   75.119865][ T6780] bond0: (slave bond_slave_1): Releasing backup interface
[   75.123631][ T6780] team0: Port device team_slave_0 removed
[   75.126395][ T6780] team0: Port device team_slave_1 removed
[   75.129296][ T6780] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.132097][ T6780] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.135771][ T6780] bond0: (slave bond1): Releasing backup interface
[   75.195395][ T6781] netlink: 'syz.0.233': attribute type 10 has an invalid length.
[   75.201115][ T6781] bond0: (slave wlan1): Opening slave failed
[   75.421741][ T6783] netlink: 'syz.1.234': attribute type 3 has an invalid length.
[   75.710047][   T47] tipc: Node number set to 2975986132
[   75.723906][ T6803] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[   76.166896][ T6829] netlink: 'syz.0.247': attribute type 5 has an invalid length.
[   76.521530][ T5878] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   76.693089][ T6865] netlink: 'syz.2.255': attribute type 4 has an invalid length.
[   76.699583][ T6865] : renamed from bond0
[   77.380564][ T6874] netlink: 'syz.0.259': attribute type 7 has an invalid length.
[   77.383772][ T6875] netlink: 'syz.1.258': attribute type 24 has an invalid length.
[   77.383816][ T6874] netlink: 'syz.0.259': attribute type 8 has an invalid length.
[   77.391376][ T6874] ip6gretap0: entered promiscuous mode
[   77.394551][ T6874] syz_tun: entered promiscuous mode
[   77.398495][ T6874] ip6gretap0: left promiscuous mode
[   77.403784][ T6874] syz_tun: left promiscuous mode
[   77.510668][ T6884] netlink: 'syz.2.263': attribute type 1 has an invalid length.
[   77.541756][ T6887] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.545059][ T6887] syzkaller0: entered promiscuous mode
[   77.547344][ T6887] syzkaller0: entered allmulticast mode
[   77.557221][ T6889] tipc: Resetting bearer <eth:syzkaller0>
[   77.571036][ T6885] tipc: Resetting bearer <eth:syzkaller0>
[   77.581168][ T6885] tipc: Disabling bearer <eth:syzkaller0>
[   77.774028][ T6896] openvswitch: netlink: Flow key attr not present in new flow.
[   77.875814][ T6915] vxcan1 speed is unknown, defaulting to 1000
[   77.881359][ T6915] vxcan1 speed is unknown, defaulting to 1000
[   77.886021][ T6915] vxcan1 speed is unknown, defaulting to 1000
[   78.017616][ T5900] vxcan1 speed is unknown, defaulting to 1000
[   78.018732][ T6915] infiniband syz2: set down
[   78.022205][ T6915] infiniband syz2: added vxcan1
[   78.055583][ T6915] RDS/IB: syz2: added
[   78.058982][ T6915] smc: adding ib device syz2 with port count 1
[   78.061147][ T6915] smc:    ib device syz2 port 1 has pnetid 
[   78.064371][   T47] vxcan1 speed is unknown, defaulting to 1000
[   78.070147][ T6915] vxcan1 speed is unknown, defaulting to 1000
[   78.168341][ T6915] vxcan1 speed is unknown, defaulting to 1000
[   78.258365][ T6915] vxcan1 speed is unknown, defaulting to 1000
[   78.666572][ T6936] openvswitch: netlink: Tunnel attr 227 out of range max 16
[   78.666650][ T6937] netlink: 'syz.2.276': attribute type 1 has an invalid length.
[   78.673670][ T6937] netlink: 'syz.2.276': attribute type 2 has an invalid length.
[   78.676239][ T6937] netlink: 'syz.2.276': attribute type 1 has an invalid length.
[   78.756706][ T6942] ip6tnl2: entered promiscuous mode
[   78.759269][ T6942] ip6tnl2: entered allmulticast mode
[   78.762615][ T6942] team0: Device ip6tnl2 is of different type
[   79.126463][ T6959] vxcan1 speed is unknown, defaulting to 1000
[   79.194435][ T6960] bond0: entered promiscuous mode
[   79.196982][ T6960] bond0: entered allmulticast mode
[   79.200183][ T6960] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.278130][ T6960] bond0 (unregistering): Released all slaves
[   79.324436][ T6963] __nla_validate_parse: 15 callbacks suppressed
[   79.324450][ T6963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.286'.
[   79.405097][   T10] IPVS: starting estimator thread 0...
[   79.419654][ T6969] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[   79.474876][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.289'.
[   79.509948][ T6971] IPVS: using max 79 ests per chain, 189600 per kthread
[   79.523003][ T6974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.289'.
[   79.530372][ T6969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.288'.
[   79.637181][ T6981] netlink: 28 bytes leftover after parsing attributes in process `syz.2.291'.
[   79.644227][ T6981] netlink: 'syz.2.291': attribute type 7 has an invalid length.
[   79.647284][ T6981] netlink: 'syz.2.291': attribute type 8 has an invalid length.
[   79.654797][ T6981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.291'.
[   80.117604][ T6995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.297'.
[   80.150522][ T7000] !: renamed from dummy0
[   80.177097][ T6997] vxcan1 speed is unknown, defaulting to 1000
[   80.528050][ T7021] netlink: 28 bytes leftover after parsing attributes in process `syz.1.303'.
[   80.533334][ T7021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.303'.
[   80.546652][ T7017] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   80.679408][ T7037] netlink: 16 bytes leftover after parsing attributes in process `syz.2.304'.
[   80.750073][ T7017] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component
[   81.346604][ T7083] Unsupported ieee802154 address type: 0
[   81.576523][ T7097] vxcan1 speed is unknown, defaulting to 1000
[   81.864000][ T7099] vxcan1 speed is unknown, defaulting to 1000
[   82.694302][ T7143] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[   82.727166][ T7145] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20003
[   82.968318][ T7159] vxcan1 speed is unknown, defaulting to 1000
[   83.057961][ T7168] tipc: Resetting bearer <eth:team0>
[   83.152974][ T7163] vxcan1 speed is unknown, defaulting to 1000
[   83.291462][ T7166] vxcan1 speed is unknown, defaulting to 1000
[   84.414888][ T7224] __nla_validate_parse: 15 callbacks suppressed
[   84.414908][ T7224] netlink: 28 bytes leftover after parsing attributes in process `syz.0.352'.
[   84.421236][ T7224] validate_nla: 3 callbacks suppressed
[   84.421251][ T7224] netlink: 'syz.0.352': attribute type 7 has an invalid length.
[   84.426560][ T7224] netlink: 'syz.0.352': attribute type 8 has an invalid length.
[   84.438953][ T7224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.352'.
[   84.453682][ T7224] ip6gretap0: entered promiscuous mode
[   84.456126][ T7224] syz_tun: entered promiscuous mode
[   84.469651][ T7224] ip6gretap0: left promiscuous mode
[   84.498784][ T7224] syz_tun: left promiscuous mode
[   84.532015][ T7226] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.535262][ T7226] syzkaller0: entered promiscuous mode
[   84.537595][ T7226] syzkaller0: entered allmulticast mode
[   84.569330][ T7226] tipc: Resetting bearer <eth:syzkaller0>
[   84.573147][ T7225] tipc: Resetting bearer <eth:syzkaller0>
[   84.605052][ T7225] tipc: Disabling bearer <eth:syzkaller0>
[   84.626752][ T7228] 8021q: adding VLAN 0 to HW filter on device bond2
[   84.641513][ T7228] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   84.646626][ T7228] bond2: (slave macvlan2): Enslaving as a backup interface with a down link
[   84.662662][ T7228] bond2: (slave macvlan2): Releasing backup interface
[   84.775468][ T7235] netlink: 16 bytes leftover after parsing attributes in process `syz.0.357'.
[   84.813222][ T7240] ksmbd: Unknown IPC event: 3, ignore.
[   84.842625][ T7243] netlink: 112 bytes leftover after parsing attributes in process `syz.0.357'.
[   84.891835][ T7246] ksmbd: Unknown IPC event: 3, ignore.
[   85.057239][ T7254] netlink: 'syz.2.362': attribute type 1 has an invalid length.
[   85.082124][ T7258] netlink: 20 bytes leftover after parsing attributes in process `syz.1.363'.
[   85.152303][ T7266] sctp: [Deprecated]: syz.2.365 (pid 7266) Use of int in max_burst socket option deprecated.
[   85.152303][ T7266] Use struct sctp_assoc_value instead
[   85.241492][ T7275] netlink: 20 bytes leftover after parsing attributes in process `syz.1.368'.
[   85.245468][ T7274] netlink: 32 bytes leftover after parsing attributes in process `syz.1.368'.
[   85.253091][ T7273] netlink: 34 bytes leftover after parsing attributes in process `syz.1.368'.
[   85.263667][ T7277] netlink: 28 bytes leftover after parsing attributes in process `syz.2.369'.
[   85.267159][ T7277] netlink: 'syz.2.369': attribute type 7 has an invalid length.
[   85.270658][ T7277] netlink: 'syz.2.369': attribute type 8 has an invalid length.
[   85.273789][ T7277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.369'.
[   85.316004][ T7279] netlink: 'syz.2.370': attribute type 2 has an invalid length.
[   85.328330][ T7279] ave_0: entered promiscuous mode
[   85.472270][ T7285] syzkaller1: entered promiscuous mode
[   85.474187][ T7285] syzkaller1: entered allmulticast mode
[   85.499600][ T7289] xt_l2tp: missing protocol rule (udp|l2tpip)
[   85.502284][ T7289] netlink: 'syz.1.374': attribute type 15 has an invalid length.
[   85.623122][ T7301] netlink: 'syz.2.377': attribute type 7 has an invalid length.
[   85.626277][ T7301] netlink: 'syz.2.377': attribute type 8 has an invalid length.
[   85.889524][ T7319] IPv6: sit2: Disabled Multicast RS
[   85.894645][ T7321] netlink: 'syz.1.385': attribute type 7 has an invalid length.
[   85.972567][ T7324] 8021q: adding VLAN 0 to HW filter on device bond3
[   86.136716][ T7347] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[   86.149548][ T7347] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[   86.173723][ T7343] ip6tnl2: entered promiscuous mode
[   86.181732][ T7343] team0: Device ip6tnl2 is of different type
[   86.453439][ T7375] vlan3: entered promiscuous mode
[   86.458084][ T7375] hsr_slave_1: entered promiscuous mode
[   86.461670][ T7375] vlan3: entered allmulticast mode
[   86.463586][ T7375] hsr_slave_1: entered allmulticast mode
[   86.517538][ T7386] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   86.837677][ T7416] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   86.912821][ T7420] 8021q: adding VLAN 0 to HW filter on device bond2
[   87.161721][ T7429] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[   87.322054][ T7442] IPVS: Scheduler module ip_vs_sip not found
[   87.420533][ T7453] Bluetooth: MGMT ver 1.23
[   87.717221][ T7471] syzkaller1: entered promiscuous mode
[   87.722376][ T7471] syzkaller1: entered allmulticast mode
[   87.725371][ T7467] "syz.2.427" (7467) uses obsolete ecb(arc4) skcipher
[   87.776115][ T7475] sctp: [Deprecated]: syz.2.429 (pid 7475) Use of int in maxseg socket option.
[   87.776115][ T7475] Use struct sctp_assoc_value instead
[   87.872363][ T7481] veth0_to_bridge: entered promiscuous mode
[   87.884414][ T7482] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.887274][ T7482] syzkaller0: entered promiscuous mode
[   87.892972][ T7482] syzkaller0: entered allmulticast mode
[   87.903779][ T7482] tipc: Resetting bearer <eth:syzkaller0>
[   87.909669][ T7480] tipc: Resetting bearer <eth:syzkaller0>
[   87.924015][ T7480] tipc: Disabling bearer <eth:syzkaller0>
[   87.974164][ T7486] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.976886][ T7486] syzkaller0: entered promiscuous mode
[   87.979306][ T7486] syzkaller0: entered allmulticast mode
[   88.008551][ T7486] tipc: Resetting bearer <eth:syzkaller0>
[   88.014136][ T7485] tipc: Resetting bearer <eth:syzkaller0>
[   88.023978][ T7485] tipc: Disabling bearer <eth:syzkaller0>
[   88.112259][ T7496] lo speed is unknown, defaulting to 1000
[   88.119201][ T7496] lo speed is unknown, defaulting to 1000
[   88.122676][ T7496] lo speed is unknown, defaulting to 1000
[   88.206130][ T7500] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.211051][ T7500] 8021q: adding VLAN 0 to HW filter on device team0
[   88.225165][ T7500] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   88.346715][ T7496] infiniband syz0: set active
[   88.348766][ T7496] infiniband syz0: added lo
[   88.355156][ T5317] lo speed is unknown, defaulting to 1000
[   88.360138][ T5317] syz0: Port: 1 Link ACTIVE
[   88.380630][ T7496] RDS/IB: syz0: added
[   88.382425][ T7496] smc: adding ib device syz0 with port count 1
[   88.384642][ T7496] smc:    ib device syz0 port 1 has pnetid 
[   88.387590][ T7496] lo speed is unknown, defaulting to 1000
[   88.430849][ T5317] lo speed is unknown, defaulting to 1000
[   88.558866][   T33] audit: type=1800 audit(1758313474.140:2): pid=7504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.440" name="memory.events" dev="tmpfs" ino=809 res=0 errno=0
[   88.566821][ T7496] lo speed is unknown, defaulting to 1000
[   88.644433][ T7516] tipc: Can't bind to reserved service type 1
[   88.654658][ T7516] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   88.704842][ T7496] lo speed is unknown, defaulting to 1000
[   88.826886][ T7496] syz.0.438 (7496) used greatest stack depth: 19680 bytes left
[   89.194432][ T7551] tipc: Enabling of bearer <ulp:syz2> rejected, media not registered
[   89.466418][ T7565] erspan0: entered allmulticast mode
[   89.478925][   T54] Bluetooth: hci2: Opcode 0x0401 failed: -110
[   89.482852][   T54] Bluetooth: hci2: command 0x0401 tx timeout
[   89.636450][ T7574] __nla_validate_parse: 43 callbacks suppressed
[   89.636468][ T7574] netlink: 28 bytes leftover after parsing attributes in process `syz.1.459'.
[   89.646653][   T60] block nbd0: Possible stuck request ffff888021900000: control (read@0,4096B). Runtime 30 seconds
[   89.653606][ T7574] validate_nla: 12 callbacks suppressed
[   89.653625][ T7574] netlink: 'syz.1.459': attribute type 7 has an invalid length.
[   89.662441][ T7574] netlink: 'syz.1.459': attribute type 8 has an invalid length.
[   89.665943][ T7574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.459'.
[   90.024727][ T7595] netlink: 24 bytes leftover after parsing attributes in process `syz.2.462'.
[   90.103500][ T7599] vxcan1 speed is unknown, defaulting to 1000
[   90.216953][ T7597] netlink: 44 bytes leftover after parsing attributes in process `syz.2.465'.
[   90.250837][ T7599] lo speed is unknown, defaulting to 1000
[   90.309325][ T7612] netlink: 28 bytes leftover after parsing attributes in process `syz.0.467'.
[   90.312514][ T7612] netlink: 'syz.0.467': attribute type 7 has an invalid length.
[   90.315168][ T7612] netlink: 'syz.0.467': attribute type 8 has an invalid length.
[   90.320296][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.467'.
[   90.328097][ T7612] ip6gretap0: entered promiscuous mode
[   90.335485][ T7612] syz_tun: entered promiscuous mode
[   90.342397][ T7612] ip6gretap0: left promiscuous mode
[   90.345004][ T7612] syz_tun: left promiscuous mode
[   90.425981][ T7614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.468'.
[   90.533890][ T7614] vxcan1 speed is unknown, defaulting to 1000
[   90.545753][ T7620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.470'.
[   90.550331][ T7620] netlink: 'syz.0.470': attribute type 16 has an invalid length.
[   90.552931][ T7620] netlink: 'syz.0.470': attribute type 17 has an invalid length.
[   90.583147][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.468'.
[   90.583697][   T47] lo speed is unknown, defaulting to 1000
[   90.589051][   T47] syz0: Port: 1 Link DOWN
[   90.590733][   T47] lo speed is unknown, defaulting to 1000
[   90.640388][ T7620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.470'.
[   90.716442][ T7614] lo speed is unknown, defaulting to 1000
[   90.867337][ T7632] : renamed from vlan1
[   91.046106][ T5317] IPVS: starting estimator thread 0...
[   91.054644][ T7638] IPVS: set_ctl: invalid protocol: 136 0.0.0.0:20008
[   91.104223][ T7643] netlink: 'syz.2.476': attribute type 7 has an invalid length.
[   91.107282][ T7643] netlink: 'syz.2.476': attribute type 8 has an invalid length.
[   91.131154][ T7640] IPVS: using max 80 ests per chain, 192000 per kthread
[   91.236306][ T7645] vxcan1 speed is unknown, defaulting to 1000
[   91.301348][ T7650] netlink: 'syz.2.478': attribute type 10 has an invalid length.
[   91.327263][ T7650] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.331837][ T7650] : (slave batadv0): Enslaving as an active interface with an up link
[   91.463954][ T7645] lo speed is unknown, defaulting to 1000
[   91.870750][ T7679] netlink: 'syz.0.486': attribute type 4 has an invalid length.
[   92.056017][ T7701] !: renamed from dummy0
[   92.172826][ T7714] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.196438][ T7714] syzkaller0: entered promiscuous mode
[   92.198276][ T7714] syzkaller0: entered allmulticast mode
[   92.223025][ T7714] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   92.266117][ T7714] tipc: Resetting bearer <eth:syzkaller0>
[   92.278354][ T7709] tipc: Resetting bearer <eth:syzkaller0>
[   92.336545][ T7709] tipc: Disabling bearer <eth:syzkaller0>
[   92.487435][ T7747] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   92.597130][ T7760] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   92.602291][ T7760] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   92.686467][ T7769] ip6gretap0: entered promiscuous mode
[   92.701222][ T7769] syz_tun: entered promiscuous mode
[   92.704208][ T7769] ip6gretap0: left promiscuous mode
[   92.707834][ T7769] syz_tun: left promiscuous mode
[   92.766289][ T7777] nbd: illegal input index -1
[   92.809017][ T7779] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.828457][ T7781] vxcan1 speed is unknown, defaulting to 1000
[   92.944543][ T7781] lo speed is unknown, defaulting to 1000
[   93.158031][ T7804] ip6gretap0: entered promiscuous mode
[   93.165395][ T7804] syz_tun: entered promiscuous mode
[   93.174354][ T7804] ip6gretap0: left promiscuous mode
[   93.181608][ T7804] syz_tun: left promiscuous mode
[   93.478385][ T7821] vxcan1 speed is unknown, defaulting to 1000
[   93.561652][ T7830] 8021q: adding VLAN 0 to HW filter on device bond2
[   93.571561][ T7829] ipvlan2: entered allmulticast mode
[   93.573840][ T7829] bond2: entered allmulticast mode
[   93.592666][ T7831] bond2: (slave gretap1): making interface the new active one
[   93.595523][ T7831] gretap1: entered allmulticast mode
[   93.599306][ T7831] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   93.606931][ T7831] syz.2.523 (7831) used greatest stack depth: 18936 bytes left
[   93.618087][ T7821] lo speed is unknown, defaulting to 1000
[   93.622199][ T7826] vxcan1 speed is unknown, defaulting to 1000
[   93.803101][ T7842] wlan1: mtu less than device minimum
[   93.805075][ T7842] : (slave wlan1): Error -22 calling dev_set_mtu
[   93.807477][ T7826] lo speed is unknown, defaulting to 1000
[   93.813345][ T7841] wlan1: mtu less than device minimum
[   93.815177][ T7841] : (slave wlan1): Error -22 calling dev_set_mtu
[   94.300562][ T7879] openvswitch: netlink: IP tunnel dst address not specified
[   94.379953][ T7886] rdma_rxe: rxe_newlink: failed to add vxcan1
[   94.389003][ T7886] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   94.393053][ T7886] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   94.481779][ T7893] syzkaller1: entered promiscuous mode
[   94.484270][ T7893] syzkaller1: entered allmulticast mode
[   94.735433][ T7905] __nla_validate_parse: 29 callbacks suppressed
[   94.735448][ T7905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.543'.
[   94.742009][ T7905] validate_nla: 14 callbacks suppressed
[   94.742022][ T7905] netlink: 'syz.2.543': attribute type 5 has an invalid length.
[   94.747783][ T7905] netlink: 20 bytes leftover after parsing attributes in process `syz.2.543'.
[   94.946068][ T7911] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[   94.950810][ T7911] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[   95.108540][ T7917] netlink: 28 bytes leftover after parsing attributes in process `syz.0.547'.
[   95.113593][ T7917] netlink: 'syz.0.547': attribute type 7 has an invalid length.
[   95.116776][ T7917] netlink: 'syz.0.547': attribute type 8 has an invalid length.
[   95.120674][ T7917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.547'.
[   95.131798][ T7917] ip6gretap0: entered promiscuous mode
[   95.134929][ T7917] syz_tun: entered promiscuous mode
[   95.137997][ T7917] ip6gretap0: left promiscuous mode
[   95.140884][ T7917] syz_tun: left promiscuous mode
[   95.267050][ T7924] vxcan1 speed is unknown, defaulting to 1000
[   95.378091][ T7931] vxcan1 speed is unknown, defaulting to 1000
[   95.389415][ T7924] lo speed is unknown, defaulting to 1000
[   95.584082][ T7931] lo speed is unknown, defaulting to 1000
[   95.760581][ T7942] netlink: 24 bytes leftover after parsing attributes in process `syz.1.553'.
[   95.873730][ T7949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.556'.
[   95.979976][ T7949] vxcan1 speed is unknown, defaulting to 1000
[   95.987292][ T7958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.556'.
[   96.194239][ T7966] syzkaller0: entered promiscuous mode
[   96.196369][ T7966] syzkaller0: entered allmulticast mode
[   96.205967][ T7965] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.237567][ T7949] lo speed is unknown, defaulting to 1000
[   96.269008][ T7971] netlink: 'syz.1.561': attribute type 46 has an invalid length.
[   96.345563][ T7975] vxcan1 speed is unknown, defaulting to 1000
[   96.715140][ T7989] netlink: 28 bytes leftover after parsing attributes in process `syz.2.566'.
[   96.748416][ T7975] lo speed is unknown, defaulting to 1000
[   96.765189][ T7989] netlink: 'syz.2.566': attribute type 7 has an invalid length.
[   96.767718][ T7989] netlink: 'syz.2.566': attribute type 8 has an invalid length.
[   96.779150][ T7989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.566'.
[   97.098777][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.569'.
[   97.272709][ T8014] tipc: Failed to remove unknown binding: 66,1,1/2975986132:1215216584/1215216586
[   97.346461][ T8017] netlink: 'syz.1.574': attribute type 5 has an invalid length.
[   97.431630][ T8021] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  100.440902][ T8044] raw_sendmsg: syz.2.583 forgot to set AF_INET. Fix it!
[  100.467703][ T8051] __nla_validate_parse: 2 callbacks suppressed
[  100.467746][ T8051] netlink: 16 bytes leftover after parsing attributes in process `syz.1.582'.
[  100.523538][ T8054] netlink: 'syz.0.585': attribute type 1 has an invalid length.
[  100.594522][ T8060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.585'.
[  100.657618][ T8054] 8021q: adding VLAN 0 to HW filter on device bond5
[  100.835495][ T8075] tap0: tun_chr_ioctl cmd 1074025677
[  100.845533][ T8075] tap0: linktype set to 0
[  101.130002][ T8085] vxcan1 speed is unknown, defaulting to 1000
[  101.301764][ T8085] lo speed is unknown, defaulting to 1000
[  101.454215][ T8096] netlink: 'syz.1.596': attribute type 2 has an invalid length.
[  101.458073][ T8094] rdma_rxe: rxe_newlink: failed to add lo
[  101.465057][ T8098] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  101.504124][ T8098] netlink: 20 bytes leftover after parsing attributes in process `syz.2.598'.
[  101.508894][ T8098] netlink: 1 bytes leftover after parsing attributes in process `syz.2.598'.
[  101.591934][ T8106] netlink: 'syz.0.600': attribute type 11 has an invalid length.
[  101.630656][ T8107] netlink: 'syz.1.601': attribute type 10 has an invalid length.
[  101.644323][ T8107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.601'.
[  101.935481][ T8122] bond3: entered promiscuous mode
[  101.945553][ T8122] bond3: entered allmulticast mode
[  101.956147][ T8122] 8021q: adding VLAN 0 to HW filter on device bond3
[  102.215324][ T8139] netlink: 40 bytes leftover after parsing attributes in process `syz.1.613'.
[  102.226122][ T8139] netlink: 36 bytes leftover after parsing attributes in process `syz.1.613'.
[  102.230561][ T8139] netlink: 36 bytes leftover after parsing attributes in process `syz.1.613'.
[  102.237731][ T8140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.610'.
[  102.527003][ T8149] sctp: [Deprecated]: syz.1.615 (pid 8149) Use of int in max_burst socket option.
[  102.527003][ T8149] Use struct sctp_assoc_value instead
[  119.729160][   T60] block nbd0: Possible stuck request ffff888021900000: control (read@0,4096B). Runtime 60 seconds
[  121.622513][ T5299] udevd[5299]: worker [5855] /devices/virtual/block/nbd0 is taking a long time
[  129.664240][ T8164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.619'.
[  129.679356][ T8164] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  129.682804][ T8164] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  129.983148][ T8178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.622'.
[  129.986770][ T8178] veth1: entered promiscuous mode
[  129.990140][ T8178] netlink: 'syz.2.622': attribute type 8 has an invalid length.
[  129.993338][ T8178] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  130.095702][ T8161] IPVS: ip_vs_add_dest(): server weight less than zero
[  130.186643][ T8188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.626'.
[  130.272030][ T8194] netlink: 28 bytes leftover after parsing attributes in process `syz.1.629'.
[  130.276287][ T8194] netlink: 'syz.1.629': attribute type 7 has an invalid length.
[  130.281147][ T8194] netlink: 'syz.1.629': attribute type 8 has an invalid length.
[  130.284444][ T8194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.629'.
[  130.339193][ T8197] netlink: 'syz.0.630': attribute type 46 has an invalid length.
[  130.484390][ T8214] netlink: 32 bytes leftover after parsing attributes in process `syz.1.634'.
[  130.491678][ T8214] netlink: 256 bytes leftover after parsing attributes in process `syz.1.634'.
[  130.496232][ T8214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.634'.
[  130.915781][ T8239] netlink: 28 bytes leftover after parsing attributes in process `syz.1.638'.
[  130.921106][ T8239] netlink: 'syz.1.638': attribute type 7 has an invalid length.
[  130.930221][ T8239] netlink: 'syz.1.638': attribute type 8 has an invalid length.
[  130.934418][ T8239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.638'.
[  131.334060][ T8289] bridge: RTM_NEWNEIGH with invalid ether address
[  131.473977][ T8299] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.492498][ T8300] vxcan1 speed is unknown, defaulting to 1000
[  131.499971][ T8297] delete_channel: no stack
[  131.564231][ T8302] netlink: 'syz.2.646': attribute type 7 has an invalid length.
[  131.567454][ T8302] netlink: 'syz.2.646': attribute type 8 has an invalid length.
[  131.668422][ T8300] lo speed is unknown, defaulting to 1000
[  131.962884][ T8315] netlink: 'syz.2.651': attribute type 1 has an invalid length.
[  131.996602][ T8315] 8021q: adding VLAN 0 to HW filter on device bond4
[  132.027348][ T8315] bond4: (slave ip6erspan0): making interface the new active one
[  132.034388][ T8315] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link
[  132.256117][ T8329] netdevsim netdevsim1: Direct firmware load for .
[  132.256117][ T8329]  failed with error -2
[  132.262098][ T8329] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  132.262098][ T8329] 
[  132.475447][ T8339] bridge4: entered allmulticast mode
[  132.528386][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[  132.531304][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[  132.595040][ T8347] netlink: 'syz.0.658': attribute type 7 has an invalid length.
[  132.624085][ T8347] ip6gretap0: entered promiscuous mode
[  132.626574][ T8347] syz_tun: entered promiscuous mode
[  132.630832][ T8347] ip6gretap0: left promiscuous mode
[  132.633174][ T8347] syz_tun: left promiscuous mode
[  132.653682][ T8349] vlan3: entered allmulticast mode
[  132.655392][ T8349] bridge0: entered allmulticast mode
[  132.657435][ T8349] bridge5: port 1(vlan3) entered blocking state
[  132.661476][ T8349] bridge5: port 1(vlan3) entered disabled state
[  132.664858][ T8349] vlan3: entered promiscuous mode
[  132.666485][ T8349] bridge0: entered promiscuous mode
[  132.673304][ T8349] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode
[  132.714180][ T8351] erspan0: left allmulticast mode
[  132.717766][ T8351] veth0_to_bridge: left promiscuous mode
[  133.312293][ T8392] IPVS: stopping backup sync thread 6095 ...
[  133.654036][ T8423] : (slave batadv0): Releasing backup interface
[  133.661277][ T8423] bridge_slave_0: left allmulticast mode
[  133.663829][ T8423] bridge_slave_0: left promiscuous mode
[  133.666445][ T8423] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.672844][ T8423] bridge_slave_1: left allmulticast mode
[  133.675274][ T8423] bridge_slave_1: left promiscuous mode
[  133.677849][ T8423] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.685494][ T8423] : (slave bond_slave_0): Releasing backup interface
[  133.692895][ T8423] : (slave bond_slave_1): Releasing backup interface
[  133.700129][ T8423] team0: Port device team_slave_0 removed
[  133.704579][ T8423] team0: Port device team_slave_1 removed
[  133.707463][ T8423] batman_adv: batadv0: Removing interface: batadv_slave_0
[  133.713307][ T8423] batman_adv: batadv0: Removing interface: batadv_slave_1
[  133.718435][ T8423] bond2: (slave gretap1): Releasing active interface
[  133.721638][ T8423] gretap1: left allmulticast mode
[  133.730307][ T8423] bond4: (slave ip6erspan0): Releasing active interface
[  133.736403][ T8423] vlan3: left promiscuous mode
[  133.738706][ T8423] bridge0: left promiscuous mode
[  133.741391][ T8423] bridge5: port 1(vlan3) entered disabled state
[  133.901380][ T8434] netlink: zone id is out of range
[  133.903147][ T8434] netlink: zone id is out of range
[  133.905117][ T8434] netlink: zone id is out of range
[  133.907147][ T8434] netlink: zone id is out of range
[  133.909745][ T8434] netlink: zone id is out of range
[  133.911751][ T8434] netlink: zone id is out of range
[  134.198330][ T8460] nbd: couldn't find a device at index 65546
[  134.202691][ T8460] Unknown options in mask b7f2
[  134.920540][ T8481] netlink: 'syz.2.696': attribute type 11 has an invalid length.
[  134.994663][ T8487] __nla_validate_parse: 21 callbacks suppressed
[  134.994680][ T8487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.699'.
[  135.039898][ T8489] : entered promiscuous mode
[  135.042799][ T8489] netlink: 10 bytes leftover after parsing attributes in process `syz.2.700'.
[  135.244193][ T8496] veth1: left promiscuous mode
[  135.252939][ T8496] mac80211_hwsim hwsim10 wlan0: left allmulticast mode
[  135.262707][ T8496] ipvlan2: left allmulticast mode
[  135.264712][ T8496] bond2: left allmulticast mode
[  135.268038][ T8496] bond3: left promiscuous mode
[  135.270399][ T8496] bond3: left allmulticast mode
[  135.279128][ T8496] bridge4: left allmulticast mode
[  135.293708][ T8496] vlan3: left allmulticast mode
[  135.295886][ T8496] bridge0: left allmulticast mode
[  135.342165][ T8501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.704'.
[  135.391123][ T8501] net_ratelimit: 9 callbacks suppressed
[  135.391138][ T8501] netlink: zone id is out of range
[  135.396434][ T8501] netlink: zone id is out of range
[  135.400968][ T8501] netlink: zone id is out of range
[  135.403686][ T8501] netlink: zone id is out of range
[  135.406001][ T8501] netlink: zone id is out of range
[  135.408289][ T8501] netlink: zone id is out of range
[  135.410678][ T8501] netlink: zone id is out of range
[  135.413077][ T8501] netlink: zone id is out of range
[  135.415318][ T8501] netlink: zone id is out of range
[  135.417599][ T8501] netlink: zone id is out of range
[  135.427244][ T8505] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR
[  135.561933][ T8521] netlink: 16 bytes leftover after parsing attributes in process `syz.0.707'.
[  135.604596][ T8523] validate_nla: 6 callbacks suppressed
[  135.604610][ T8523] netlink: 'syz.1.708': attribute type 2 has an invalid length.
[  135.612368][ T8523] netlink: 20 bytes leftover after parsing attributes in process `syz.1.708'.
[  135.643417][ T8525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.709'.
[  135.677788][ T8527] netlink: 28 bytes leftover after parsing attributes in process `syz.1.710'.
[  135.681638][ T8527] netlink: 'syz.1.710': attribute type 7 has an invalid length.
[  135.685065][ T8527] netlink: 'syz.1.710': attribute type 8 has an invalid length.
[  135.688309][ T8527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.710'.
[  135.990349][ T8550] netlink: 84 bytes leftover after parsing attributes in process `syz.0.719'.
[  136.118192][ T8565] IPVS: ip_vs_add_dest(): server weight less than zero
[  136.194147][ T8573] netlink: 96 bytes leftover after parsing attributes in process `syz.1.725'.
[  136.322111][ T8580] netlink: 'syz.0.729': attribute type 1 has an invalid length.
[  136.352227][ T8580] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  136.357377][ T8580] bond6: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  136.362133][ T8580] bond6: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  136.454960][ T8601] netlink: 'syz.2.734': attribute type 29 has an invalid length.
[  136.484021][ T8601] netlink: 'syz.2.734': attribute type 29 has an invalid length.
[  136.487684][ T8601] netlink: 'syz.2.734': attribute type 29 has an invalid length.
[  136.496190][ T8601] netlink: 'syz.2.734': attribute type 29 has an invalid length.
[  136.500172][ T8601] netlink: 'syz.2.734': attribute type 29 has an invalid length.
[  136.503698][ T8601] netlink: 'syz.2.734': attribute type 29 has an invalid length.
[  136.779270][ T8615] IPVS: ip_vs_add_dest(): server weight less than zero
[  136.827516][ T8617] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  136.859749][ T8617] tipc: Resetting bearer <eth:syzkaller0>
[  137.005796][ T8625] IPVS: ip_vs_add_dest(): server weight less than zero
[  137.058474][ T8627] syzkaller0: left promiscuous mode
[  137.062232][ T8627] syzkaller0: left allmulticast mode
[  137.165187][ T8631] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  137.429782][ T8646] vlan1: entered promiscuous mode
[  137.508960][ T8648] syzkaller1: entered promiscuous mode
[  137.511453][ T8648] syzkaller1: entered allmulticast mode
[  137.831097][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  137.847674][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  137.859843][   T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  137.936894][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  137.948758][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  137.952413][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  138.048304][ T8684] 8021q: adding VLAN 0 to HW filter on device 
[  138.049838][ T8691] IPVS: ip_vs_add_dest(): server weight less than zero
[  138.054855][ T8684] 8021q: adding VLAN 0 to HW filter on device team0
[  138.067550][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  138.128995][ T8687] vxcan1 speed is unknown, defaulting to 1000
[  138.134642][ T8684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  138.210201][ T8684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  138.436884][ T8705] vxcan1 speed is unknown, defaulting to 1000
[  138.437009][ T8687] lo speed is unknown, defaulting to 1000
[  138.496614][ T8720] IPVS: ip_vs_add_dest(): server weight less than zero
[  138.587777][ T8720] team0: Mode changed to "loadbalance"
[  138.653617][ T8727] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  138.679931][   T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  138.704540][ T8705] lo speed is unknown, defaulting to 1000
[  138.832030][ T8740] syzkaller0: entered promiscuous mode
[  138.834071][ T8740] syzkaller0: entered allmulticast mode
[  138.919265][   T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  140.296070][ T8777] __nla_validate_parse: 17 callbacks suppressed
[  140.296081][ T8777] netlink: 20 bytes leftover after parsing attributes in process `syz.0.785'.
[  140.374939][ T8779] vxcan1 speed is unknown, defaulting to 1000
[  140.423506][ T8783] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  140.423703][ T8782] IPVS: stopping backup sync thread 8783 ...
[  140.781209][ T8792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.789'.
[  140.786187][ T8779] lo speed is unknown, defaulting to 1000
[  141.170348][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.796'.
[  141.173308][ T8811] validate_nla: 40 callbacks suppressed
[  141.173319][ T8811] netlink: 'syz.2.796': attribute type 30 has an invalid length.
[  141.179771][ T8813] netlink: 16 bytes leftover after parsing attributes in process `syz.0.797'.
[  141.181825][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.796'.
[  141.183652][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  141.191245][ T8811] netlink: 'syz.2.796': attribute type 30 has an invalid length.
[  141.193056][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  141.197609][ T8692] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  141.206171][ T8692] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  141.215182][ T8813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.797'.
[  141.222163][ T8811] netlink: 'syz.2.796': attribute type 4 has an invalid length.
[  141.241564][ T8811] netlink: 'syz.2.796': attribute type 4 has an invalid length.
[  141.283210][ T8817] netlink: 28 bytes leftover after parsing attributes in process `syz.0.799'.
[  141.317575][ T8820] netlink: 36 bytes leftover after parsing attributes in process `syz.2.800'.
[  141.374408][ T8827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.802'.
[  141.406915][ T8828] netlink: 28 bytes leftover after parsing attributes in process `syz.0.803'.
[  141.413208][ T8828] netlink: 'syz.0.803': attribute type 7 has an invalid length.
[  141.416132][ T8828] netlink: 'syz.0.803': attribute type 8 has an invalid length.
[  141.425327][ T8823] netlink: 'syz.1.801': attribute type 5 has an invalid length.
[  141.427921][ T8823] netlink: 'syz.1.801': attribute type 7 has an invalid length.
[  141.434091][ T8828] ip6gretap0: entered promiscuous mode
[  141.436546][ T8828] syz_tun: entered promiscuous mode
[  141.440001][ T8828] ip6gretap0: left promiscuous mode
[  141.443373][ T8828] syz_tun: left promiscuous mode
[  141.459709][ T8823] : entered promiscuous mode
[  141.512385][ T8830] net_ratelimit: 37 callbacks suppressed
[  141.512400][ T8830] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  141.597504][ T8832] netlink: 'syz.0.805': attribute type 12 has an invalid length.
[  141.611106][ T8832] netlink: 'syz.0.805': attribute type 12 has an invalid length.
[  141.619405][ T8834] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  141.638161][ T8832] IPVS: set_ctl: invalid protocol: 1 100.1.1.0:20004
[  141.641236][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  141.746290][ T8842] 8021q: adding VLAN 0 to HW filter on device bond7
[  141.827422][ T8850] ip6gretap0: entered promiscuous mode
[  141.837486][ T8850] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.906837][ T8850] 8021q: adding VLAN 0 to HW filter on device team0
[  141.915321][ T8850] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  142.141759][   T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  142.144849][   T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  142.148302][   T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  142.156514][   T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  142.574779][ T8910] ip6gretap0: entered promiscuous mode
[  142.577686][ T8910] syz_tun: entered promiscuous mode
[  142.581442][ T8910] ip6gretap0: left promiscuous mode
[  142.584399][ T8910] syz_tun: left promiscuous mode
[  143.315727][ T8937] tipc: Resetting bearer <eth:team0>
[  143.361349][ T8937] tipc: Resetting bearer <eth:syzkaller0>
[  143.490984][ T8954] 8021q: adding VLAN 0 to HW filter on device bond8
[  143.508181][ T8954] 8021q: adding VLAN 0 to HW filter on device bond8
[  143.512502][ T8954] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address
[  143.517661][ T8954] bond8: (slave vxcan3): Error -95 calling set_mac_address
[  143.599089][ T8961] 0Ӓ: renamed from veth1_to_hsr
[  143.960649][ T8278] smc: removing ib device syz2
[  144.103776][ T8989] lo speed is unknown, defaulting to 1000
[  144.130378][  T974] IPVS: starting estimator thread 0...
[  144.218847][ T8991] IPVS: using max 78 ests per chain, 187200 per kthread
[  144.515844][ T8996] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20000
[  144.576903][ T9000] IPVS: ip_vs_add_dest(): server weight less than zero
[  144.845415][ T9029] IPVS: ip_vs_add_dest(): server weight less than zero
[  145.062351][ T9043] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.112114][ T9060] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  145.115415][ T9060] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  145.334168][ T9073] bond5: entered promiscuous mode
[  145.336579][ T9073] 8021q: adding VLAN 0 to HW filter on device bond5
[  145.350690][ T9073] bond5: (slave bridge7): making interface the new active one
[  145.354501][ T9073] bridge7: entered promiscuous mode
[  145.359227][ T9073] bond5: (slave bridge7): Enslaving as an active interface with an up link
[  145.398374][ T9076] __nla_validate_parse: 33 callbacks suppressed
[  145.398393][ T9076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.878'.
[  145.406599][ T9076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.878'.
[  145.446795][ T9081] lo speed is unknown, defaulting to 1000
[  145.449345][ T9081] lo speed is unknown, defaulting to 1000
[  145.452380][ T9081] lo speed is unknown, defaulting to 1000
[  145.457492][ T9081] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  145.464508][ T9081] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  145.483730][ T9081] lo speed is unknown, defaulting to 1000
[  145.486677][ T9081] lo speed is unknown, defaulting to 1000
[  145.490798][ T9081] lo speed is unknown, defaulting to 1000
[  145.507836][ T9081] tc_dump_action: action bad kind
[  145.535162][ T9084] lo speed is unknown, defaulting to 1000
[  145.674876][ T9095] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  145.678245][ T9095] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  145.684845][ T9094] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  145.689517][ T9084] lo speed is unknown, defaulting to 1000
[  145.830700][ T9106] netlink: 16 bytes leftover after parsing attributes in process `syz.2.884'.
[  145.830960][ T9108] netlink: 165 bytes leftover after parsing attributes in process `syz.1.886'.
[  145.835038][ T9106] netlink: 224 bytes leftover after parsing attributes in process `syz.2.884'.
[  145.876734][ T9108] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  145.896324][ T9108] syzkaller0: entered promiscuous mode
[  145.915085][ T9108] syzkaller0: entered allmulticast mode
[  145.986203][ T9115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.889'.
[  145.999719][ T9113] netlink: 152 bytes leftover after parsing attributes in process `syz.2.888'.
[  146.005068][ T9115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.889'.
[  146.010408][ T9113] netlink: 16 bytes leftover after parsing attributes in process `syz.2.888'.
[  146.068191][ T9122] netlink: 28 bytes leftover after parsing attributes in process `syz.2.892'.
[  146.113741][ T9126] !: renamed from dummy0
[  146.151096][ T9126] lo speed is unknown, defaulting to 1000
[  146.288200][ T9126] lo speed is unknown, defaulting to 1000
[  146.799342][  T974] tipc: Node number set to 1292858204
[  146.928221][ T9136] lo speed is unknown, defaulting to 1000
[  147.181332][ T9136] lo speed is unknown, defaulting to 1000
[  147.184553][ T9141] siw: device registration error -23
[  147.401115][ T9153] sch_tbf: burst 2 is lower than device lo mtu (18) !
[  147.426287][ T9157] sch_tbf: burst 2 is lower than device lo mtu (18) !
[  147.449542][ T9157] sch_tbf: burst 2 is lower than device lo mtu (18) !
[  147.560234][ T9165] validate_nla: 22 callbacks suppressed
[  147.560248][ T9165] netlink: 'syz.1.903': attribute type 14 has an invalid length.
[  147.602696][ T9166] gretap1: entered promiscuous mode
[  147.884823][ T9180] netlink: 'syz.1.908': attribute type 7 has an invalid length.
[  147.895277][ T9180] netlink: 'syz.1.908': attribute type 8 has an invalid length.
[  147.926314][ T9178] syzkaller1: entered promiscuous mode
[  147.930778][ T9178] syzkaller1: entered allmulticast mode
[  147.935909][ T9178] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  148.084139][ T9185] IPVS: ip_vs_add_dest(): server weight less than zero
[  148.173573][ T9189] netlink: 'syz.1.911': attribute type 5 has an invalid length.
[  148.214596][ T9191] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  148.727157][ T9212] IPVS: ip_vs_add_dest(): server weight less than zero
[  148.906359][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.917293][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.043618][ T9235] netlink: 'syz.1.925': attribute type 29 has an invalid length.
[  149.047244][ T9235] netlink: 'syz.1.925': attribute type 29 has an invalid length.
[  149.072835][ T9237] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  149.810739][   T60] block nbd0: Possible stuck request ffff888021900000: control (read@0,4096B). Runtime 90 seconds
[  150.152329][ T9265] netlink: 'syz.2.938': attribute type 12 has an invalid length.
[  150.197132][ T9264] lo speed is unknown, defaulting to 1000
[  150.437176][ T9264] lo speed is unknown, defaulting to 1000
[  150.611569][ T9308] netlink: 'syz.2.945': attribute type 1 has an invalid length.
[  150.778974][ T9321] __nla_validate_parse: 48 callbacks suppressed
[  150.778986][ T9321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.949'.
[  150.793252][ T9324] netlink: 40 bytes leftover after parsing attributes in process `syz.0.950'.
[  150.834153][ T9324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.950'.
[  150.841463][ T9323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.948'.
[  150.977060][ T9336] netlink: 120 bytes leftover after parsing attributes in process `syz.2.954'.
[  151.217682][ T9348] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  151.221699][ T9348] syzkaller0: entered promiscuous mode
[  151.224006][ T9348] syzkaller0: entered allmulticast mode
[  151.242927][ T9348] tipc: Resetting bearer <eth:syzkaller0>
[  151.246231][ T9347] tipc: Resetting bearer <eth:syzkaller0>
[  151.256569][ T9347] tipc: Disabling bearer <eth:syzkaller0>
[  151.396102][ T9353] netem: change failed
[  151.730454][ T9362] lo speed is unknown, defaulting to 1000
[  152.120842][ T9358] netlink: 40 bytes leftover after parsing attributes in process `syz.0.960'.
[  152.152623][ T9372] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  152.254313][ T9375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.964'.
[  152.261802][ T9374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.964'.
[  152.312143][ T9362] lo speed is unknown, defaulting to 1000
[  152.353957][ T9380] netlink: 28 bytes leftover after parsing attributes in process `syz.2.966'.
[  152.367801][ T9380] netlink: 48 bytes leftover after parsing attributes in process `syz.2.966'.
[  152.534365][ T9389] netlink: 'syz.1.969': attribute type 32 has an invalid length.
[  152.620583][ T9397] syzkaller0: Caught tx_queue_len zero misconfig
[  152.655806][ T9401] netlink: 'syz.0.973': attribute type 1 has an invalid length.
[  152.725575][ T9406] netlink: 'syz.1.975': attribute type 1 has an invalid length.
[  152.751215][ T9406] 8021q: adding VLAN 0 to HW filter on device bond4
[  152.765903][ T9413] netlink: 'syz.1.975': attribute type 1 has an invalid length.
[  152.836974][ T9417] IPv6: NLM_F_CREATE should be specified when creating new route
[  153.005873][ T9432] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  153.132610][ T9457] netlink: 'syz.0.991': attribute type 33 has an invalid length.
[  153.269569][ T9463] nbd2: detected capacity change from 0 to 63
[  153.272098][ T9468] tipc: Resetting bearer <eth:syzkaller0>
[  153.276129][ T9469] block nbd2: NBD_DISCONNECT
[  153.278184][ T9469] block nbd2: Disconnected due to user request.
[  153.284294][ T9469] block nbd2: shutting down sockets
[  153.290071][    C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  153.293678][    C1] Buffer I/O error on dev nbd2, logical block 0, async page read
[  153.296969][    C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  153.300824][    C1] Buffer I/O error on dev nbd2, logical block 1, async page read
[  153.303760][    C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  153.306834][    C1] Buffer I/O error on dev nbd2, logical block 2, async page read
[  153.309584][    C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  153.312527][    C1] Buffer I/O error on dev nbd2, logical block 3, async page read
[  153.315206][ T5999] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  153.320329][ T5999] Buffer I/O error on dev nbd2, logical block 0, async page read
[  153.321623][ T9463] bond6: entered promiscuous mode
[  153.324023][ T5999] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  153.326773][ T9463] bond6: entered allmulticast mode
[  153.330010][ T5999] Buffer I/O error on dev nbd2, logical block 1, async page read
[  153.330160][ T5999] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  153.330177][ T5999] Buffer I/O error on dev nbd2, logical block 2, async page read
[  153.330272][ T5999] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  153.330286][ T5999] Buffer I/O error on dev nbd2, logical block 3, async page read
[  153.331057][ T5999] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  153.334817][ T9463] 8021q: adding VLAN 0 to HW filter on device bond6
[  153.335954][ T5999] Buffer I/O error on dev nbd2, logical block 0, async page read
[  153.367211][ T5999] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  153.371041][ T5999] Buffer I/O error on dev nbd2, logical block 1, async page read
[  153.374835][ T5999] ldm_validate_partition_table(): Disk read failed.
[  153.378089][ T5999] Dev nbd2: unable to read RDB block 0
[  153.382629][ T5999]  nbd2: unable to read partition table
[  153.389476][ T5999] ldm_validate_partition_table(): Disk read failed.
[  153.392411][ T5999] Dev nbd2: unable to read RDB block 0
[  153.395725][ T5999]  nbd2: unable to read partition table
[  153.437656][ T9474] netlink: 'syz.2.997': attribute type 21 has an invalid length.
[  153.514241][ T9478] lo speed is unknown, defaulting to 1000
[  153.605609][ T9484] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  153.610915][ T9484] netlink: zone id is out of range
[  153.613865][ T9484] netlink: zone id is out of range
[  153.615707][ T9484] netlink: zone id is out of range
[  153.617882][ T9484] netlink: zone id is out of range
[  153.621520][ T9484] netlink: zone id is out of range
[  153.623735][ T9484] netlink: zone id is out of range
[  153.625923][ T9484] netlink: zone id is out of range
[  153.626742][ T9478] lo speed is unknown, defaulting to 1000
[  153.650474][ T9484] tipc: Resetting bearer <eth:syzkaller0>
[  153.878931][ T9504] bond5: (slave bridge7): Releasing backup interface
[  153.881253][ T9504] bridge7: left promiscuous mode
[  153.994500][ T9504] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  154.183299][ T9529] batadv0: entered promiscuous mode
[  154.186881][ T9529] 8021q: adding VLAN 0 to HW filter on device batadv0
[  154.614422][ T9564] netlink: 'syz.2.1026': attribute type 7 has an invalid length.
[  154.617742][ T9564] netlink: 'syz.2.1026': attribute type 8 has an invalid length.
[  155.645184][ T9580] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  155.650736][ T9580] tipc: Resetting bearer <eth:syzkaller0>
[  155.654628][ T9579] tipc: Disabling bearer <eth:syzkaller0>
[  155.699495][ T9582] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20004
[  155.735347][ T9582] lo speed is unknown, defaulting to 1000
[  155.764744][ T9594] netlink: 'syz.0.1037': attribute type 4 has an invalid length.
[  155.782712][ T9594] netlink: 'syz.0.1037': attribute type 4 has an invalid length.
[  155.788810][   T47] lo speed is unknown, defaulting to 1000
[  155.790890][   T47] syz0: Port: 1 Link ACTIVE
[  155.792549][   T47] lo speed is unknown, defaulting to 1000
[  155.796160][ T9594] __nla_validate_parse: 24 callbacks suppressed
[  155.796168][ T9594] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1037'.
[  155.828160][ T9597] netlink: 47 bytes leftover after parsing attributes in process `syz.1.1038'.
[  155.881680][ T9582] lo speed is unknown, defaulting to 1000
[  155.933595][ T9604] ieee802154 phy0 wpan0: encryption failed: -22
[  155.946301][ T9604] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1040'.
[  155.953491][ T9604] netlink: 'syz.1.1040': attribute type 1 has an invalid length.
[  156.330928][ T9632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1048'.
[  156.334490][ T9633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1048'.
[  156.659971][ T9646] syzkaller1: entered allmulticast mode
[  156.663419][ T9646] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1052'.
[  157.363217][ T9669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1059'.
[  157.366634][ T9669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1059'.
[  157.410832][ T9674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1060'.
[  157.426600][ T9673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1061'.
[  157.669817][ T9705] validate_nla: 2 callbacks suppressed
[  157.669829][ T9705] netlink: 'syz.0.1070': attribute type 4 has an invalid length.
[  157.943843][ T9731] netlink: 'syz.2.1078': attribute type 10 has an invalid length.
[  157.950822][ T9731] net_ratelimit: 13 callbacks suppressed
[  157.950834][ T9731] wlan1: mtu less than device minimum
[  157.957830][ T9731] : (slave wlan1): Error -22 calling dev_set_mtu
[  158.015200][ T9731] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  158.016717][ T9735] sctp: [Deprecated]: syz.1.1080 (pid 9735) Use of int in maxseg socket option.
[  158.016717][ T9735] Use struct sctp_assoc_value instead
[  158.018417][ T9731] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  158.163686][ T9753] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.177898][ T9753] tipc: Disabling bearer <eth:syzkaller0>
[  158.259275][ T9764] netlink: 'syz.1.1088': attribute type 9 has an invalid length.
[  158.303058][ T9768] dvmrp1: left allmulticast mode
[  158.376860][ T9777] openvswitch: netlink: Invalid VLAN frame
[  158.654516][ T9794] lo speed is unknown, defaulting to 1000
[  158.731666][ T9794] lo speed is unknown, defaulting to 1000
[  159.505578][ T9810] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  159.744051][ T9828] netlink: 'syz.2.1106': attribute type 1 has an invalid length.
[  159.812507][ T9841] netlink: 'syz.1.1109': attribute type 1 has an invalid length.
[  159.845630][ T9846] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  159.852251][ T9845] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  160.007925][ T9868] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  160.115049][ T9875] syzkaller0: left promiscuous mode
[  160.117382][ T9875] syzkaller0: left allmulticast mode
[  160.121971][ T9875] gretap1: left promiscuous mode
[  160.376812][ T9905] netlink: 'syz.1.1123': attribute type 1 has an invalid length.
[  160.420894][ T9905] bond5: (slave bridge4): making interface the new active one
[  160.423987][ T9905] bond5: (slave bridge4): Enslaving as an active interface with an up link
[  160.510949][ T9914] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  160.513679][ T9914] team0: Device macvtap1 is already an upper device of the team interface
[  161.094421][ T9885] netlink: 'syz.0.1121': attribute type 12 has an invalid length.
[  161.193805][ T9923] __nla_validate_parse: 30 callbacks suppressed
[  161.193818][ T9923] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1130'.
[  161.194647][ T9925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1131'.
[  161.195899][ T9923] netlink: 'syz.2.1130': attribute type 7 has an invalid length.
[  161.206630][ T9924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1131'.
[  161.215223][ T9923] netlink: 'syz.2.1130': attribute type 8 has an invalid length.
[  161.224243][ T9923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1130'.
[  161.406104][ T9952] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2)
[  161.413262][ T9951] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2)
[  161.578507][ T9956] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1141'.
[  161.581616][ T9956] netlink: 'syz.2.1141': attribute type 7 has an invalid length.
[  161.585303][ T9956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1141'.
[  161.661271][ T9964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1143'.
[  161.706047][ T9970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1144'.
[  161.733393][ T9972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1142'.
[  161.848223][ T9981] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1149'.
[  162.598109][T10029] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  162.930361][T10058] validate_nla: 3 callbacks suppressed
[  162.930373][T10058] netlink: 'syz.2.1159': attribute type 10 has an invalid length.
[  162.992214][T10070] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  162.994761][T10070] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  163.095625][T10082] lo speed is unknown, defaulting to 1000
[  163.147649][T10087] ieee802154 phy0 wpan0: encryption failed: -22
[  163.152234][T10087] ieee802154 phy0 wpan0: encryption failed: -22
[  163.167508][T10090] netlink: 'syz.0.1168': attribute type 1 has an invalid length.
[  163.202085][T10092] net veth1_virt_wifi : renamed from virt_wifi0
[  163.268293][T10082] lo speed is unknown, defaulting to 1000
[  163.281167][T10097] : renamed from bond_slave_0
[  163.354368][T10102] netlink: 'syz.1.1173': attribute type 28 has an invalid length.
[  163.370866][T10101] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.373571][T10101] syzkaller0: entered promiscuous mode
[  163.375433][T10101] syzkaller0: entered allmulticast mode
[  163.474595][T10113] tipc: Resetting bearer <eth:syzkaller0>
[  163.486084][   T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  163.489520][   T47] lo speed is unknown, defaulting to 1000
[  163.491884][   T47] syz0: Port: 1 Link DOWN
[  163.500092][   T47] lo speed is unknown, defaulting to 1000
[  163.500205][   T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  163.534174][T10100] tipc: Disabling bearer <eth:syzkaller0>
[  163.547190][   T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  163.555270][   T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  163.571584][T10123] netlink: 'syz.1.1178': attribute type 1 has an invalid length.
[  163.578079][T10123] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  163.625583][T10129] bridge0: entered allmulticast mode
[  163.779834][T10132] nbd: socks must be embedded in a SOCK_ITEM attr
[  163.783805][T10132] block nbd1: shutting down sockets
[  163.932829][T10141] ieee802154 phy0 wpan0: encryption failed: -22
[  164.254672][T10178] netlink: 'syz.0.1188': attribute type 1 has an invalid length.
[  164.299706][T10178] bond9: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  164.305295][T10178] bond9: (slave ipvlan1): The slave device specified does not support setting the MAC address
[  164.310008][T10188] netlink: 'syz.1.1190': attribute type 13 has an invalid length.
[  164.311395][T10178] bond9: (slave ipvlan1): Setting fail_over_mac to active for active-backup mode
[  164.313284][T10188] netlink: 'syz.1.1190': attribute type 17 has an invalid length.
[  164.372364][T10188] ip6gretap0: left promiscuous mode
[  164.383432][T10188] 8021q: adding VLAN 0 to HW filter on device bond0
[  164.391782][T10188] 8021q: adding VLAN 0 to HW filter on device team0
[  164.399090][T10188] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  164.433281][T10193] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  164.466929][T10193] 8021q: adding VLAN 0 to HW filter on device bond10
[  164.474021][T10193] bond0: (slave bond10): Enslaving as an active interface with an up link
[  164.488009][T10190] lo speed is unknown, defaulting to 1000
[  164.619758][T10190] lo speed is unknown, defaulting to 1000
[  164.722935][T10210] netlink: 'syz.0.1196': attribute type 4 has an invalid length.
[  165.658549][T10220] lo speed is unknown, defaulting to 1000
[  165.732856][T10227] netlink: 'syz.1.1203': attribute type 7 has an invalid length.
[  165.736069][T10227] netlink: 'syz.1.1203': attribute type 8 has an invalid length.
[  165.749466][T10226] syzkaller0: entered promiscuous mode
[  165.751547][T10226] syzkaller0: entered allmulticast mode
[  165.875378][T10220] lo speed is unknown, defaulting to 1000
[  166.207116][T10241] sctp: [Deprecated]: syz.1.1207 (pid 10241) Use of int in max_burst socket option deprecated.
[  166.207116][T10241] Use struct sctp_assoc_value instead
[  166.279675][T10245] __nla_validate_parse: 20 callbacks suppressed
[  166.279691][T10245] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1208'.
[  166.389846][T10254] netlink: 564 bytes leftover after parsing attributes in process `syz.1.1211'.
[  166.571210][T10266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1217'.
[  166.644987][   T56] block nbd1: Receive control failed (result -11)
[  166.667434][T10276] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  166.671390][T10276] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  166.944751][T10294] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1222'.
[  166.966120][T10299] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1227'.
[  167.036265][T10304] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1229'.
[  167.041332][T10304] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1229'.
[  167.150506][T10307] lo speed is unknown, defaulting to 1000
[  167.293248][T10307] lo speed is unknown, defaulting to 1000
[  167.296825][T10317] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  167.391890][T10324] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  167.504474][T10329] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1237'.
[  167.768227][T10341] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1239'.
[  167.781980][T10341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1239'.
[  167.861002][T10343] lo speed is unknown, defaulting to 1000
[  167.905449][T10346] geneve0: entered promiscuous mode
[  167.907637][T10346] geneve0: entered allmulticast mode
[  168.124405][T10365] validate_nla: 4 callbacks suppressed
[  168.124420][T10365] netlink: 'syz.2.1243': attribute type 7 has an invalid length.
[  168.125254][T10343] lo speed is unknown, defaulting to 1000
[  168.133327][T10365] netlink: 'syz.2.1243': attribute type 8 has an invalid length.
[  168.384857][T10393] unsupported nlmsg_type 40
[  168.512508][T10402] lo speed is unknown, defaulting to 1000
[  168.628423][T10402] lo speed is unknown, defaulting to 1000
[  168.629357][T10406] lo speed is unknown, defaulting to 1000
[  168.773045][T10421] netlink: 'syz.0.1252': attribute type 12 has an invalid length.
[  168.798359][T10424] netlink: 'syz.0.1252': attribute type 12 has an invalid length.
[  168.867248][T10430] sctp: [Deprecated]: syz.0.1253 (pid 10430) Use of int in max_burst socket option.
[  168.867248][T10430] Use struct sctp_assoc_value instead
[  168.879560][T10423] lo speed is unknown, defaulting to 1000
[  168.971776][T10436] netlink: 'syz.0.1256': attribute type 1 has an invalid length.
[  168.987707][T10436] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  168.991742][T10436] syzkaller0: entered promiscuous mode
[  168.994018][T10436] syzkaller0: entered allmulticast mode
[  169.000168][T10436] tipc: Resetting bearer <eth:syzkaller0>
[  169.003841][T10435] tipc: Resetting bearer <eth:syzkaller0>
[  169.016010][T10435] tipc: Disabling bearer <eth:syzkaller0>
[  169.034534][T10406] lo speed is unknown, defaulting to 1000
[  169.046001][T10423] lo speed is unknown, defaulting to 1000
[  169.482954][T10446] netlink: 'syz.0.1258': attribute type 1 has an invalid length.
[  169.550347][T10448] veth1_to_team: entered promiscuous mode
[  169.553463][T10448] bond0: entered promiscuous mode
[  169.555532][T10448] bond10: entered promiscuous mode
[  169.561435][T10448] bond0: left promiscuous mode
[  169.563686][T10448] bond10: left promiscuous mode
[  169.566208][T10448] veth1_to_team: left promiscuous mode
[  169.694682][T10451] macsec1: entered allmulticast mode
[  169.711416][T10451] ip6gretap0: entered allmulticast mode
[  169.720819][T10451] ip6gretap0: left allmulticast mode
[  169.966154][T10470] lo speed is unknown, defaulting to 1000
[  170.075868][T10489] netlink: 'syz.2.1268': attribute type 13 has an invalid length.
[  170.079629][T10489] netlink: 'syz.2.1268': attribute type 17 has an invalid length.
[  170.133413][T10489] 8021q: adding VLAN 0 to HW filter on device 
[  170.140330][T10489] 8021q: adding VLAN 0 to HW filter on device team0
[  170.216335][T10489] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  170.226362][   T24] lo speed is unknown, defaulting to 1000
[  170.230136][T10470] lo speed is unknown, defaulting to 1000
[  170.234583][   T24] syz2: Port: 1 Link ACTIVE
[  170.289699][T10490] lo speed is unknown, defaulting to 1000
[  170.393805][T10497] netlink: 'syz.0.1271': attribute type 1 has an invalid length.
[  170.406396][T10498] netlink: 'syz.0.1271': attribute type 1 has an invalid length.
[  170.569891][T10490] lo speed is unknown, defaulting to 1000
[  170.798013][T10522] dvmrp0: entered allmulticast mode
[  171.333219][T10546] syzkaller1: entered promiscuous mode
[  171.336385][T10546] syzkaller1: entered allmulticast mode
[  171.338395][T10547] __nla_validate_parse: 21 callbacks suppressed
[  171.338410][T10547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1285'.
[  171.635418][T10561] geneve3: entered promiscuous mode
[  171.773425][T10570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1293'.
[  171.783919][T10570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1293'.
[  171.978206][T10583] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1297'.
[  171.981863][T10583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1297'.
[  172.046901][T10587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1299'.
[  172.267523][T10593] 8021q: adding VLAN 0 to HW filter on device bond0
[  172.274994][T10593] 8021q: adding VLAN 0 to HW filter on device team0
[  172.288076][T10593] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  172.309225][   T47] lo speed is unknown, defaulting to 1000
[  172.311619][   T47] syz0: Port: 1 Link ACTIVE
[  172.311714][T10592] lo speed is unknown, defaulting to 1000
[  172.315986][   T47] lo speed is unknown, defaulting to 1000
[  172.345733][T10593] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1300'.
[  172.537664][T10592] lo speed is unknown, defaulting to 1000
[  172.555700][T10595] lo speed is unknown, defaulting to 1000
[  172.772401][T10608] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  172.874221][T10595] lo speed is unknown, defaulting to 1000
[  172.916860][T10612] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1305'.
[  172.922735][T10612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1305'.
[  173.064203][T10616] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1307'.
[  173.417966][T10634] validate_nla: 12 callbacks suppressed
[  173.417982][T10634] netlink: 'syz.1.1312': attribute type 21 has an invalid length.
[  173.613598][T10641] lo speed is unknown, defaulting to 1000
[  173.887869][T10641] lo speed is unknown, defaulting to 1000
[  174.057831][T10658] : renamed from wg2
[  174.162475][T10667] netlink: 'syz.1.1323': attribute type 14 has an invalid length.
[  174.165809][T10667] netlink: 'syz.1.1323': attribute type 13 has an invalid length.
[  175.219187][T10702] bridge7: port 1(veth7) entered blocking state
[  175.222076][T10702] bridge7: port 1(veth7) entered disabled state
[  175.225008][T10702] veth7: entered allmulticast mode
[  175.230858][T10702] veth7: entered promiscuous mode
[  175.242210][T10701] bridge7: port 2(veth0_to_bond) entered blocking state
[  175.245385][T10701] bridge7: port 2(veth0_to_bond) entered disabled state
[  175.248544][T10701] veth0_to_bond: entered allmulticast mode
[  175.253812][T10701] veth0_to_bond: entered promiscuous mode
[  175.270989][T10701] vlan0: entered allmulticast mode
[  175.273186][T10701] veth1: entered allmulticast mode
[  175.275634][T10701] bridge7: port 3(vlan0) entered blocking state
[  175.290890][T10701] bridge7: port 3(vlan0) entered disabled state
[  175.299150][T10701] vlan0: entered promiscuous mode
[  175.301419][T10701] veth1: entered promiscuous mode
[  175.342646][T10704] netlink: 'syz.2.1334': attribute type 1 has an invalid length.
[  175.371759][T10704] bond9: entered promiscuous mode
[  175.374153][T10704] 8021q: adding VLAN 0 to HW filter on device bond9
[  175.398761][T10704] 8021q: adding VLAN 0 to HW filter on device bond10
[  175.403074][T10704] bond9: (slave bond10): making interface the new active one
[  175.406093][T10704] bond10: entered promiscuous mode
[  175.409030][T10704] bond9: (slave bond10): Enslaving as an active interface with an up link
[  175.412526][T10705] ip6gre0: entered allmulticast mode
[  175.443733][T10713] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  175.452137][T10713] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  175.458468][T10713] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  175.475040][T10715] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  175.749534][T10723] netlink: 'syz.2.1340': attribute type 1 has an invalid length.
[  175.752823][T10723] nbd: error processing sock list
[  175.757978][T10723] block nbd2: shutting down sockets
[  175.893423][T10742] netlink: 'syz.1.1343': attribute type 7 has an invalid length.
[  175.896779][T10742] netlink: 'syz.1.1343': attribute type 8 has an invalid length.
[  176.055126][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x22
[  176.304154][T10767] netlink: 'syz.0.1351': attribute type 7 has an invalid length.
[  176.306887][T10767] netlink: 'syz.0.1351': attribute type 8 has an invalid length.
[  176.315477][T10767] ip6gretap0: entered promiscuous mode
[  176.318320][T10767] syz_tun: entered promiscuous mode
[  176.322849][T10767] ip6gretap0: left promiscuous mode
[  176.325143][T10767] syz_tun: left promiscuous mode
[  176.700846][T10786] __nla_validate_parse: 17 callbacks suppressed
[  176.700857][T10786] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1359'.
[  176.710617][T10786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1359'.
[  176.818398][T10793] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1361'.
[  176.857544][T10802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1365'.
[  176.871881][T10804] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1366'.
[  176.873133][T10802] openvswitch: netlink: Actions may not be safe on all matching packets
[  176.890835][T10802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1365'.
[  176.920642][T10804] netlink: 'syz.0.1366': attribute type 10 has an invalid length.
[  176.923976][T10804] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1366'.
[  176.936699][T10804] batman_adv: batadv0: Adding interface: 
[  176.939867][T10804] batman_adv: batadv0: The MTU of interface  is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.956702][T10804] batman_adv: batadv0: Interface activated: 
[  176.976060][T10811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1367'.
[  176.980621][T10811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1367'.
[  177.165550][T10834] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1373'.
[  177.266709][T10840] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  177.324604][T10836] tipc: Resetting bearer <eth:team0>
[  177.476017][T10845] IPVS: set_ctl: invalid protocol: 36 112.0.1.0:0
[  177.686765][T10847] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig
[  177.810040][T10861] wg2: entered promiscuous mode
[  177.811968][T10861] wg2: entered allmulticast mode
[  177.892594][T10865] openvswitch: netlink: Actions may not be safe on all matching packets
[  178.047220][T10871] lo speed is unknown, defaulting to 1000
[  178.127410][T10871] lo speed is unknown, defaulting to 1000
[  178.343837][T10882] bond9: (slave bond10): Releasing backup interface
[  178.346588][T10882] bond10: left promiscuous mode
[  178.390733][T10882] 8021q: adding VLAN 0 to HW filter on device 
[  178.395363][T10882] wlan1: mtu less than device minimum
[  178.398043][T10882] : (slave wlan1): Error -22 calling dev_set_mtu
[  178.415882][T10882] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  178.421893][T10882] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  178.660270][  T974] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  178.663722][  T974] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  178.672062][  T974] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  179.502376][T10938] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  179.505549][T10938] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  179.535394][T10940] validate_nla: 3 callbacks suppressed
[  179.535404][T10940] netlink: 'syz.2.1405': attribute type 7 has an invalid length.
[  179.540138][T10940] netlink: 'syz.2.1405': attribute type 8 has an invalid length.
[  179.882874][   T60] block nbd0: Possible stuck request ffff888021900000: control (read@0,4096B). Runtime 120 seconds
[  180.137405][T10950] geneve0: entered promiscuous mode
[  180.141687][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  180.147976][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  180.152569][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  180.156546][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  180.179390][T10954] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.200897][T10956] openvswitch: netlink: Actions may not be safe on all matching packets
[  180.299793][T10968] siw: device registration error -23
[  180.326631][T10968] netlink: 'syz.0.1415': attribute type 4 has an invalid length.
[  180.329153][T10971] lo speed is unknown, defaulting to 1000
[  180.531894][T10971] lo speed is unknown, defaulting to 1000
[  180.681024][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  181.148022][T11017] netlink: 'syz.2.1430': attribute type 2 has an invalid length.
[  181.264418][T11023] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  181.280776][T11023] syzkaller0: entered promiscuous mode
[  181.283125][T11023] syzkaller0: entered allmulticast mode
[  181.385976][T11027] lo speed is unknown, defaulting to 1000
[  181.405285][T11028] netlink: 'syz.2.1434': attribute type 2 has an invalid length.
[  181.414189][T11028] netlink: 'syz.2.1434': attribute type 12 has an invalid length.
[  181.433948][T11030] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  181.570778][T11027] lo speed is unknown, defaulting to 1000
[  181.901696][T11057] __nla_validate_parse: 21 callbacks suppressed
[  181.901707][T11057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1442'.
[  181.922464][T11052] tipc: Resetting bearer <eth:syzkaller0>
[  181.925491][T11052] syzkaller0: left promiscuous mode
[  181.927252][T11052] syzkaller0: left allmulticast mode
[  181.943037][T11052] geneve0: left promiscuous mode
[  181.951556][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.955541][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.963576][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  181.969684][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  182.538001][    C0] ==================================================================
[  182.541456][    C0] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  182.544753][    C0] Write of size 8 at addr ffff8880280716b0 by task syz.2.1441/11053
[  182.548920][    C0] 
[  182.550003][    C0] CPU: 0 UID: 0 PID: 11053 Comm: syz.2.1441 Not tainted syzkaller #0 PREEMPT(full) 
[  182.550020][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  182.550028][    C0] Call Trace:
[  182.550035][    C0]  <IRQ>
[  182.550042][    C0]  dump_stack_lvl+0x189/0x250
[  182.550060][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  182.550074][    C0]  ? rcu_is_watching+0x15/0xb0
[  182.550085][    C0]  ? __kasan_check_byte+0x12/0x40
[  182.550102][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  182.550115][    C0]  ? rcu_is_watching+0x15/0xb0
[  182.550127][    C0]  ? lock_release+0x4b/0x3e0
[  182.550144][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  182.550158][    C0]  ? __virt_addr_valid+0x4a5/0x5c0
[  182.550172][    C0]  print_report+0xca/0x240
[  182.550184][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  182.550198][    C0]  kasan_report+0x118/0x150
[  182.550250][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  182.550265][    C0]  __xfrm_state_delete+0x696/0xca0
[  182.550282][    C0]  xfrm_timer_handler+0x18f/0xa00
[  182.550298][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  182.550310][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  182.550329][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  182.550340][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  182.550357][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  182.550374][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  182.550386][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  182.550398][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  182.550416][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  182.550427][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  182.550441][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  182.550455][    C0]  handle_softirqs+0x286/0x870
[  182.550467][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  182.550479][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  182.550491][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  182.550506][    C0]  __irq_exit_rcu+0xca/0x1f0
[  182.550517][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  182.550530][    C0]  irq_exit_rcu+0x9/0x30
[  182.550539][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  182.550551][    C0]  </IRQ>
[  182.550555][    C0]  <TASK>
[  182.550559][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  182.550571][    C0] RIP: 0010:rcu_is_watching+0x3a/0xb0
[  182.550585][    C0] Code: e8 1b e1 d3 09 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 10 1d be 8d 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 6c c1 7c 00 48 c7 c3 98 df a1 92 49 03 1e 48 89
[  182.550596][    C0] RSP: 0018:ffffc90006e36c58 EFLAGS: 00000246
[  182.550608][    C0] RAX: 1ffffffff1b7c3a2 RBX: 0000000000000000 RCX: dbba7c5b15592300
[  182.550617][    C0] RDX: 0000000000000001 RSI: ffffffff8be33be0 RDI: ffffffff8be33ba0
[  182.550626][    C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff8172d195
[  182.550634][    C0] R10: ffffc90006e36d98 R11: ffffffff81ac4b00 R12: 1ffff92000dc6da9
[  182.550643][    C0] R13: ffffc90006e36d80 R14: ffffffff8dbe1d10 R15: dffffc0000000000
[  182.550653][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  182.550668][    C0]  ? unwind_next_frame+0xa5/0x2390
[  182.550685][    C0]  ? rcu_is_watching+0x15/0xb0
[  182.550696][    C0]  ? direct_splice_actor+0x101/0x160
[  182.550712][    C0]  ? unwind_next_frame+0xa5/0x2390
[  182.550724][    C0]  unwind_next_frame+0xd4/0x2390
[  182.550739][    C0]  ? unwind_next_frame+0xa5/0x2390
[  182.550752][    C0]  ? splice_to_socket+0x8ff/0xf10
[  182.550768][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  182.550782][    C0]  arch_stack_walk+0x11c/0x150
[  182.550798][    C0]  ? direct_splice_actor+0x101/0x160
[  182.550815][    C0]  stack_trace_save+0x9c/0xe0
[  182.550829][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  182.550842][    C0]  ? stack_trace_save+0x9c/0xe0
[  182.550854][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  182.550867][    C0]  kasan_save_track+0x3e/0x80
[  182.550882][    C0]  ? kasan_save_track+0x3e/0x80
[  182.550895][    C0]  ? __kasan_kmalloc+0x93/0xb0
[  182.550909][    C0]  ? __kmalloc_node_track_caller_noprof+0x271/0x4e0
[  182.550926][    C0]  ? kmalloc_reserve+0x13f/0x290
[  182.550940][    C0]  ? __alloc_skb+0x142/0x2d0
[  182.550951][    C0]  ? alloc_skb_with_frags+0xca/0x890
[  182.550965][    C0]  ? sock_alloc_send_pskb+0x857/0x990
[  182.550980][    C0]  ? llc_ui_sendmsg+0x477/0xdd0
[  182.550994][    C0]  ? __sock_sendmsg+0x21c/0x270
[  182.551010][    C0]  ? sock_sendmsg+0x158/0x230
[  182.551025][    C0]  ? splice_to_socket+0x8ff/0xf10
[  182.551040][    C0]  ? direct_splice_actor+0x101/0x160
[  182.551068][    C0]  __kasan_kmalloc+0x93/0xb0
[  182.551085][    C0]  __kmalloc_node_track_caller_noprof+0x271/0x4e0
[  182.551101][    C0]  ? __alloc_skb+0x142/0x2d0
[  182.551115][    C0]  ? __alloc_skb+0x142/0x2d0
[  182.551126][    C0]  kmalloc_reserve+0x13f/0x290
[  182.551141][    C0]  __alloc_skb+0x142/0x2d0
[  182.551155][    C0]  alloc_skb_with_frags+0xca/0x890
[  182.551168][    C0]  ? do_syscall_64+0xfa/0x3b0
[  182.551185][    C0]  sock_alloc_send_pskb+0x857/0x990
[  182.551228][    C0]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  182.551251][    C0]  ? __local_bh_enable_ip+0x12d/0x1c0
[  182.551261][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  182.551273][    C0]  llc_ui_sendmsg+0x477/0xdd0
[  182.551300][    C0]  ? __pfx_llc_ui_sendmsg+0x10/0x10
[  182.551311][    C0]  ? aa_sock_msg_perm+0xf1/0x1d0
[  182.551322][    C0]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  182.551333][    C0]  ? __pfx_llc_ui_sendmsg+0x10/0x10
[  182.551343][    C0]  __sock_sendmsg+0x21c/0x270
[  182.551360][    C0]  sock_sendmsg+0x158/0x230
[  182.551376][    C0]  ? __pfx_sock_sendmsg+0x10/0x10
[  182.551390][    C0]  ? __asan_memset+0x22/0x50
[  182.551400][    C0]  ? iov_iter_bvec+0xb8/0x180
[  182.551412][    C0]  splice_to_socket+0x8ff/0xf10
[  182.551432][    C0]  ? __pfx_splice_to_socket+0x10/0x10
[  182.551444][    C0]  ? current_time+0x222/0x370
[  182.551461][    C0]  ? touch_atime+0xf1/0x6d0
[  182.551476][    C0]  ? __pfx_splice_to_socket+0x10/0x10
[  182.551489][    C0]  direct_splice_actor+0x101/0x160
[  182.551504][    C0]  splice_direct_to_actor+0x5a8/0xcc0
[  182.551522][    C0]  ? __pfx_direct_splice_actor+0x10/0x10
[  182.551535][    C0]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  182.551551][    C0]  do_splice_direct+0x181/0x270
[  182.551565][    C0]  ? __pfx_do_splice_direct+0x10/0x10
[  182.551576][    C0]  ? common_file_perm+0x1b5/0x230
[  182.551585][    C0]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  182.551599][    C0]  ? bpf_lsm_file_permission+0x9/0x20
[  182.551610][    C0]  ? security_file_permission+0x75/0x290
[  182.551625][    C0]  ? rw_verify_area+0x255/0x4d0
[  182.551638][    C0]  do_sendfile+0x4da/0x7e0
[  182.551648][    C0]  ? count_memcg_event_mm+0x21/0x260
[  182.551662][    C0]  ? __pfx_do_sendfile+0x10/0x10
[  182.551674][    C0]  __se_sys_sendfile64+0x13e/0x190
[  182.551689][    C0]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  182.551703][    C0]  ? do_user_addr_fault+0xc8a/0x1390
[  182.551718][    C0]  ? do_syscall_64+0xbe/0x3b0
[  182.551729][    C0]  do_syscall_64+0xfa/0x3b0
[  182.551738][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  182.551748][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.551758][    C0]  ? exc_page_fault+0x9f/0xf0
[  182.551767][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.551776][    C0] RIP: 0033:0x7ff7d6f8eba9
[  182.551787][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  182.551796][    C0] RSP: 002b:00007ff7d51f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  182.551806][    C0] RAX: ffffffffffffffda RBX: 00007ff7d71d6090 RCX: 00007ff7d6f8eba9
[  182.551813][    C0] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 000000000000000a
[  182.551819][    C0] RBP: 00007ff7d7011e19 R08: 0000000000000000 R09: 0000000000000000
[  182.551826][    C0] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000000
[  182.551832][    C0] R13: 00007ff7d71d6128 R14: 00007ff7d71d6090 R15: 00007ffd9fa05c48
[  182.551843][    C0]  </TASK>
[  182.551847][    C0] 
[  182.836069][    C0] Allocated by task 8834:
[  182.837709][    C0]  kasan_save_track+0x3e/0x80
[  182.839607][    C0]  __kasan_slab_alloc+0x6c/0x80
[  182.841526][    C0]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  182.843666][    C0]  xfrm_state_alloc+0x24/0x2f0
[  182.845585][    C0]  __find_acq_core+0x8a7/0x1c00
[  182.847362][    C0]  xfrm_find_acq+0x78/0xa0
[  182.849149][    C0]  xfrm_alloc_userspi+0x6b3/0xc90
[  182.851043][    C0]  xfrm_user_rcv_msg+0x7a3/0xab0
[  182.852861][    C0]  netlink_rcv_skb+0x208/0x470
[  182.854715][    C0]  xfrm_netlink_rcv+0x79/0x90
[  182.856303][    C0]  netlink_unicast+0x82f/0x9e0
[  182.857955][    C0]  netlink_sendmsg+0x805/0xb30
[  182.860010][    C0]  __sock_sendmsg+0x21c/0x270
[  182.861914][    C0]  ____sys_sendmsg+0x505/0x830
[  182.863694][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  182.865407][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  182.867327][    C0]  do_syscall_64+0xfa/0x3b0
[  182.869019][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.871119][    C0] 
[  182.871941][    C0] Freed by task 5317:
[  182.873389][    C0]  kasan_save_track+0x3e/0x80
[  182.875009][    C0]  kasan_save_free_info+0x46/0x50
[  182.876806][    C0]  __kasan_slab_free+0x5b/0x80
[  182.878593][    C0]  kmem_cache_free+0x18f/0x400
[  182.880342][    C0]  xfrm_state_gc_task+0x52d/0x6b0
[  182.882114][    C0]  process_scheduled_works+0xae1/0x17b0
[  182.884180][    C0]  worker_thread+0x8a0/0xda0
[  182.885913][    C0]  kthread+0x711/0x8a0
[  182.887406][    C0]  ret_from_fork+0x439/0x7d0
[  182.889170][    C0]  ret_from_fork_asm+0x1a/0x30
[  182.890878][    C0] 
[  182.891702][    C0] The buggy address belongs to the object at ffff888028071680
[  182.891702][    C0]  which belongs to the cache xfrm_state of size 928
[  182.896580][    C0] The buggy address is located 48 bytes inside of
[  182.896580][    C0]  freed 928-byte region [ffff888028071680, ffff888028071a20)
[  182.901561][    C0] 
[  182.902511][    C0] The buggy address belongs to the physical page:
[  182.905015][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888028071680 pfn:0x28070
[  182.908778][    C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  182.912148][    C0] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  182.915158][    C0] page_type: f5(slab)
[  182.916704][    C0] raw: 00fff00000000040 ffff88801afa1780 ffffea000447ad00 0000000000000003
[  182.919883][    C0] raw: ffff888028071680 00000000000e000d 00000000f5000000 0000000000000000
[  182.923326][    C0] head: 00fff00000000040 ffff88801afa1780 ffffea000447ad00 0000000000000003
[  182.926298][    C0] head: ffff888028071680 00000000000e000d 00000000f5000000 0000000000000000
[  182.929142][    C0] head: 00fff00000000002 ffffea0000a01c01 00000000ffffffff 00000000ffffffff
[  182.932022][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  182.935031][    C0] page dumped because: kasan: bad access detected
[  182.937287][    C0] page_owner tracks the page as allocated
[  182.939189][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6524, tgid 6523 (syz.1.163), ts 69646094636, free_ts 66816798212
[  182.945821][    C0]  post_alloc_hook+0x240/0x2a0
[  182.947544][    C0]  get_page_from_freelist+0x21e4/0x22c0
[  182.949369][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[  182.951247][    C0]  alloc_pages_mpol+0x232/0x4a0
[  182.952795][    C0]  allocate_slab+0x8a/0x370
[  182.954355][    C0]  ___slab_alloc+0xbeb/0x1420
[  182.955869][    C0]  kmem_cache_alloc_noprof+0x283/0x3c0
[  182.957644][    C0]  xfrm_state_alloc+0x24/0x2f0
[  182.959252][    C0]  pfkey_add+0x6e4/0x2e00
[  182.960680][    C0]  pfkey_sendmsg+0xbfe/0x1090
[  182.962288][    C0]  __sock_sendmsg+0x21c/0x270
[  182.963957][    C0]  ____sys_sendmsg+0x505/0x830
[  182.965976][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  182.967854][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  182.969875][    C0]  do_syscall_64+0xfa/0x3b0
[  182.971604][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.973896][    C0] page last free pid 6342 tgid 6341 stack trace:
[  182.976158][    C0]  __free_frozen_pages+0xbc4/0xd30
[  182.977997][    C0]  stack_depot_save_flags+0x436/0x860
[  182.979868][    C0]  ref_tracker_free+0xfe/0x7d0
[  182.981638][    C0]  neigh_parms_release+0x19c/0x230
[  182.983402][    C0]  inetdev_event+0x7d5/0x15b0
[  182.985175][    C0]  notifier_call_chain+0x1b6/0x3e0
[  182.987229][    C0]  unregister_netdevice_many_notify+0x14d7/0x1ff0
[  182.989651][    C0]  unregister_netdevice_queue+0x33c/0x380
[  182.991882][    C0]  unregister_netdev+0x1f/0x60
[  182.993892][    C0]  gprs_attach+0x489/0x540
[  182.995803][    C0]  pep_setsockopt+0x33d/0x4c0
[  182.997831][    C0]  do_sock_setsockopt+0x17c/0x1b0
[  182.999856][    C0]  __x64_sys_setsockopt+0x13f/0x1b0
[  183.001970][    C0]  do_syscall_64+0xfa/0x3b0
[  183.003872][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.006288][    C0] 
[  183.007189][    C0] Memory state around the buggy address:
[  183.009378][    C0]  ffff888028071580: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc
[  183.012687][    C0]  ffff888028071600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  183.015911][    C0] >ffff888028071680: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  183.019097][    C0]                                      ^
[  183.021373][    C0]  ffff888028071700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  183.024575][    C0]  ffff888028071780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  183.027858][    C0] ==================================================================
[  183.031296][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  183.034070][    C0] CPU: 0 UID: 0 PID: 11053 Comm: syz.2.1441 Not tainted syzkaller #0 PREEMPT(full) 
[  183.037843][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  183.041905][    C0] Call Trace:
[  183.043294][    C0]  <IRQ>
[  183.044282][    C0]  dump_stack_lvl+0x99/0x250
[  183.046265][    C0]  ? __asan_memcpy+0x40/0x70
[  183.048174][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  183.050384][    C0]  ? __pfx__printk+0x10/0x10
[  183.052386][    C0]  vpanic+0x281/0x750
[  183.054069][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  183.056046][    C0]  ? __pfx_vpanic+0x10/0x10
[  183.057807][    C0]  ? irqentry_exit+0x74/0x90
[  183.059427][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  183.061171][    C0]  panic+0xb9/0xc0
[  183.062732][    C0]  ? __pfx_panic+0x10/0x10
[  183.064565][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  183.066632][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  183.069247][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  183.071472][    C0]  check_panic_on_warn+0x89/0xb0
[  183.073590][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  183.075970][    C0]  end_report+0x78/0x160
[  183.078007][    C0]  kasan_report+0x129/0x150
[  183.080033][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  183.082271][    C0]  __xfrm_state_delete+0x696/0xca0
[  183.084313][    C0]  xfrm_timer_handler+0x18f/0xa00
[  183.086460][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  183.088703][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  183.091129][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  183.093341][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  183.095990][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  183.098728][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  183.101002][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  183.103342][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  183.105541][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  183.107867][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  183.110268][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  183.112425][    C0]  handle_softirqs+0x286/0x870
[  183.114499][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  183.116535][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  183.118782][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  183.120814][    C0]  __irq_exit_rcu+0xca/0x1f0
[  183.122399][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  183.124163][    C0]  irq_exit_rcu+0x9/0x30
[  183.125638][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  183.127746][    C0]  </IRQ>
[  183.129063][    C0]  <TASK>
[  183.130120][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  183.132247][    C0] RIP: 0010:rcu_is_watching+0x3a/0xb0
[  183.134265][    C0] Code: e8 1b e1 d3 09 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 10 1d be 8d 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 6c c1 7c 00 48 c7 c3 98 df a1 92 49 03 1e 48 89
[  183.141266][    C0] RSP: 0018:ffffc90006e36c58 EFLAGS: 00000246
[  183.143658][    C0] RAX: 1ffffffff1b7c3a2 RBX: 0000000000000000 RCX: dbba7c5b15592300
[  183.146766][    C0] RDX: 0000000000000001 RSI: ffffffff8be33be0 RDI: ffffffff8be33ba0
[  183.149814][    C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff8172d195
[  183.152866][    C0] R10: ffffc90006e36d98 R11: ffffffff81ac4b00 R12: 1ffff92000dc6da9
[  183.155914][    C0] R13: ffffc90006e36d80 R14: ffffffff8dbe1d10 R15: dffffc0000000000
[  183.158977][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  183.161434][    C0]  ? unwind_next_frame+0xa5/0x2390
[  183.163449][    C0]  ? rcu_is_watching+0x15/0xb0
[  183.165330][    C0]  ? direct_splice_actor+0x101/0x160
[  183.167422][    C0]  ? unwind_next_frame+0xa5/0x2390
[  183.169422][    C0]  unwind_next_frame+0xd4/0x2390
[  183.171369][    C0]  ? unwind_next_frame+0xa5/0x2390
[  183.173364][    C0]  ? splice_to_socket+0x8ff/0xf10
[  183.175364][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  183.177717][    C0]  arch_stack_walk+0x11c/0x150
[  183.179571][    C0]  ? direct_splice_actor+0x101/0x160
[  183.181613][    C0]  stack_trace_save+0x9c/0xe0
[  183.183462][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  183.185513][    C0]  ? stack_trace_save+0x9c/0xe0
[  183.187433][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  183.189528][    C0]  kasan_save_track+0x3e/0x80
[  183.191391][    C0]  ? kasan_save_track+0x3e/0x80
[  183.193488][    C0]  ? __kasan_kmalloc+0x93/0xb0
[  183.195534][    C0]  ? __kmalloc_node_track_caller_noprof+0x271/0x4e0
[  183.198143][    C0]  ? kmalloc_reserve+0x13f/0x290
[  183.200144][    C0]  ? __alloc_skb+0x142/0x2d0
[  183.202068][    C0]  ? alloc_skb_with_frags+0xca/0x890
[  183.204181][    C0]  ? sock_alloc_send_pskb+0x857/0x990
[  183.206360][    C0]  ? llc_ui_sendmsg+0x477/0xdd0
[  183.208306][    C0]  ? __sock_sendmsg+0x21c/0x270
[  183.210323][    C0]  ? sock_sendmsg+0x158/0x230
[  183.212338][    C0]  ? splice_to_socket+0x8ff/0xf10
[  183.214364][    C0]  ? direct_splice_actor+0x101/0x160
[  183.216540][    C0]  __kasan_kmalloc+0x93/0xb0
[  183.218487][    C0]  __kmalloc_node_track_caller_noprof+0x271/0x4e0
[  183.221313][    C0]  ? __alloc_skb+0x142/0x2d0
[  183.223231][    C0]  ? __alloc_skb+0x142/0x2d0
[  183.224772][    C0]  kmalloc_reserve+0x13f/0x290
[  183.226300][    C0]  __alloc_skb+0x142/0x2d0
[  183.227800][    C0]  alloc_skb_with_frags+0xca/0x890
[  183.229628][    C0]  ? do_syscall_64+0xfa/0x3b0
[  183.231408][    C0]  sock_alloc_send_pskb+0x857/0x990
[  183.233328][    C0]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  183.235237][    C0]  ? __local_bh_enable_ip+0x12d/0x1c0
[  183.237003][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  183.238929][    C0]  llc_ui_sendmsg+0x477/0xdd0
[  183.240659][    C0]  ? __pfx_llc_ui_sendmsg+0x10/0x10
[  183.242601][    C0]  ? aa_sock_msg_perm+0xf1/0x1d0
[  183.244433][    C0]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  183.246160][    C0]  ? __pfx_llc_ui_sendmsg+0x10/0x10
[  183.248092][    C0]  __sock_sendmsg+0x21c/0x270
[  183.249762][    C0]  sock_sendmsg+0x158/0x230
[  183.251289][    C0]  ? __pfx_sock_sendmsg+0x10/0x10
[  183.253178][    C0]  ? __asan_memset+0x22/0x50
[  183.255061][    C0]  ? iov_iter_bvec+0xb8/0x180
[  183.257033][    C0]  splice_to_socket+0x8ff/0xf10
[  183.258976][    C0]  ? __pfx_splice_to_socket+0x10/0x10
[  183.260806][    C0]  ? current_time+0x222/0x370
[  183.262460][    C0]  ? touch_atime+0xf1/0x6d0
[  183.264011][    C0]  ? __pfx_splice_to_socket+0x10/0x10
[  183.265987][    C0]  direct_splice_actor+0x101/0x160
[  183.268049][    C0]  splice_direct_to_actor+0x5a8/0xcc0
[  183.269956][    C0]  ? __pfx_direct_splice_actor+0x10/0x10
[  183.271910][    C0]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  183.273920][    C0]  do_splice_direct+0x181/0x270
[  183.275626][    C0]  ? __pfx_do_splice_direct+0x10/0x10
[  183.277474][    C0]  ? common_file_perm+0x1b5/0x230
[  183.279298][    C0]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  183.281333][    C0]  ? bpf_lsm_file_permission+0x9/0x20
[  183.283150][    C0]  ? security_file_permission+0x75/0x290
[  183.285121][    C0]  ? rw_verify_area+0x255/0x4d0
[  183.286855][    C0]  do_sendfile+0x4da/0x7e0
[  183.288477][    C0]  ? count_memcg_event_mm+0x21/0x260
[  183.290250][    C0]  ? __pfx_do_sendfile+0x10/0x10
[  183.291913][    C0]  __se_sys_sendfile64+0x13e/0x190
[  183.293665][    C0]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  183.295567][    C0]  ? do_user_addr_fault+0xc8a/0x1390
[  183.297335][    C0]  ? do_syscall_64+0xbe/0x3b0
[  183.298926][    C0]  do_syscall_64+0xfa/0x3b0
[  183.300471][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  183.302291][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.304383][    C0]  ? exc_page_fault+0x9f/0xf0
[  183.306108][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.308507][    C0] RIP: 0033:0x7ff7d6f8eba9
[  183.310121][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  183.316669][    C0] RSP: 002b:00007ff7d51f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  183.319689][    C0] RAX: ffffffffffffffda RBX: 00007ff7d71d6090 RCX: 00007ff7d6f8eba9
[  183.322415][    C0] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 000000000000000a
[  183.325143][    C0] RBP: 00007ff7d7011e19 R08: 0000000000000000 R09: 0000000000000000
[  183.328414][    C0] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000000
[  183.331087][    C0] R13: 00007ff7d71d6128 R14: 00007ff7d71d6090 R15: 00007ffd9fa05c48
[  183.333738][    C0]  </TASK>
[  183.335612][    C0] Kernel Offset: disabled
[  183.337231][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:26:08  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000066 RBX=0000000000000066 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000073b0
R8 =ffff888020d30237 R9 =1ffff110041a6046 R10=dffffc0000000000 R11=ffffffff854f91c0
R12=dffffc0000000000 R13=ffffffff99b008f3 R14=ffffffff99df5420 R15=0000000000000000
RIP=ffffffff854f923c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ff7d51f66c0 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000011030 CR3=0000000035d60000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=006e6f6974617a69 6c6974755f756372
XMM02=01001e0008000000 0003000000000000 XMM03=0a00000000000000 0004090018000000
XMM04=00007f7fc050d100 00007f7fbf9a7460 XMM05=00007f7fbf9a7478 00007f7fbf9a74c0
XMM06=00007f7fbf9a74b8 00007f7fbf9a74b0 XMM07=00007f7fbf9a74a8 00007f7fbf9a74a0
XMM08=86263a802d911b68 f2ae44ef064b952f XMM09=0000000000000000 00007f7fbf812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=4595e2beab19e100 RBX=ffffffff819693f8 RCX=4595e2beab19e100 RDX=0000000000000001
RSI=ffffffff8d9b9cae RDI=ffffffff8be33c00 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa3a630 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d5000
RIP=ffffffff8b7a33f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005622b7cb47e8 CR3=00000001106a4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=006e6f6974617a69 6c6974755f756372
XMM02=01001e0008000000 0003000000000000 XMM03=0a00000000000000 0004090018000000
XMM04=00007f7fc050d100 00007f7fbf9a7460 XMM05=00007f7fbf9a7478 00007f7fbf9a74c0
XMM06=00007f7fbf9a74b8 00007f7fbf9a74b0 XMM07=00007f7fbf9a74a8 00007f7fbf9a74a0
XMM08=86263a802d911b68 f2ae44ef064b952f XMM09=0000000000000000 00007f7fbf812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
