last executing test programs:

2.83910965s ago: executing program 1 (id=3467):
syz_emit_ethernet(0x9a, &(0x7f0000000840)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004100008c00000000002f90780000000000000000442c6383ac1414bb000003ffac141417000000087f0000010000008b000000000000002ee65c1b11f68e59725f00640101000000000594040100248081000002041000047f1a10000800000086dd080088be00000000100060000100000000000000080022ebfffffffc2000000002000000000000080000"], 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWTABLE={0x44, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x40000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x104, 0x3e, 0x107, 0x0, 0x0, {0x24, 0x7c}, [@nested={0x4, 0x12}, @generic="6d1dc9e05e440a4dda71778b5d391b3633ed1f3ab25f2f7f411e54ff4a31721a21539e6366af27677419000af4f17032885973d13b2a352d10526143b38ec15d3a0d64dbde694ea2ea742b9bf2a425db09416af43ead1a389e6dca82f09055da791a71114f7e8d7bb50ef8a0c5b240019928c5437792e96123556242ef9460f180be69fd55c93ef25a892ff92033d1ef3df20934c708602090a46d28dae38f936add629f96b5db292683b0cddfce2743faba1e03e9aa26b6c250fe3a9b4210ef3c71175fd05c6a06563a52dc1ffec07f6e89c58fa4141003e4a2dd61ff57e7d540ff689366db68c4b6"]}, 0x104}, 0x1, 0x0, 0x0, 0xc851}, 0x0)
syz_emit_ethernet(0x159a, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r2, 0xfffffffc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @local, @val, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x10, 0x3a, 0x0, @private0, @mcast2, {[], @ni={0x1d0899e851774393, 0x0, 0x0, 0x9, 0x5, 0xba}}}}}}, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xb, &(0x7f0000000740)=ANY=[@ANYRES64=r2], &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4)
sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x5f, 0x0, 0x3, 0x4000000}, 0x40008d1)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
recvfrom$inet6(r2, &(0x7f00000003c0)=""/231, 0xe7, 0x2000, &(0x7f00000001c0)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x3d95a577}, 0x1c)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c00000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000e180000008001b000000000024002b8008000800", @ANYRES32=r6, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r6, @ANYBLOB="08000300000080000800030000000000"], 0x4c}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r11=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000080)={r11, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x2, 0x80000003, 0x4, 0xe2d8f2eb1d010935, 0x5, 0x9}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000180)={0x3, 0xb8, 0x4, 0xe, 0x0, 0x6, 0x6, 0x1ff, r11}, 0x20)
sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000008f9ff00000000000a14000000060a0b04000000000000000002000100140000001100012000000000000000ffff00000a560ffacc3c4ce57a1ed1968af47285fab699b4724de6ab217fe55b5c0c553223a097da33a3004ec574dd85cb1ab9fd9f6b02ed58f3bb8b6b4095915b741ec3a3df295a94f500d2e7d7fa65870b00d49db0a4d6c976e4776af630a5"], 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

1.995921845s ago: executing program 1 (id=3470):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
unshare(0x400)
recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x2022)
ioctl$SIOCSIFHWADDR(r2, 0xff04, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r3, &(0x7f0000000100)={0x1d, 0x0, 0x0, {}, 0xfd}, 0x18)
connect$can_j1939(r3, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18)
getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000040), &(0x7f00000000c0)=0xc)
sendmsg$can_j1939(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)="2e33fb2b6cc9ebdac14900003126bb2ff124f71e71326d5ce71c3b97b7059e3a23d3376f29d2d55b608b2bc1201fee7df867a16004000000792a1c6148281ed8b8122f453f30ab0ed72f6713dc18a341758eddfdff00", 0x56}, 0x1, 0x0, 0x0, 0x20044050}, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="f5483d2edeb0b4b805031c2ef486e5e16217079b01a0efb643d0cd1fee99caa83f9c00c582957007b881115c7dd13c4e226dd0133af87acc4604e5df3d4013af33f95b44fdaefe9a7cf4cd8b7d46b2acde7912ee1f2eba92256aaa1701ff83e6c648677a520264a8356bba2dfddb2d59f4d5991edbaaefae25cf7836b729885b1c58b771c6c5918da838e0ea064d366a2707d709b9859c9f1e4b9f133bf41f2ea2a8d9843541f3c4b3915bf928128f6cee068c28c71fed9f59bdf9cf5d0671227b23d0b6df38c6a2f3c3161d97786cbf72f5d1cbf0f0c5a5db3ef810d4bfbbc155ee1271d9"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000885000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r7, 0x0, 0x0}, 0x10)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4, 0x0, @loopback, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x10, &(0x7f0000000600)=ANY=[@ANYRESOCT=r7, @ANYRES32=r8, @ANYRESDEC=r6], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="c48a570389e85e8182eab41a2f16", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "06000079feff00", "9e8ecc7bb535c861b116b4559cb4000008006f1800", "d0100108", "fbdeffff00"}, 0x38)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000011}, 0xc000)
setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000440)={{{@in=@private=0xa010101, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e21, 0x1, 0x4e24, 0x9, 0x2, 0xa0, 0xa0, 0x8}, {0x3, 0x0, 0x3, 0x8, 0x69c3, 0x2, 0x3, 0x4b1}, {0x0, 0x400, 0x40, 0x9}, 0x4, 0x6e6bb4, 0x1, 0x0, 0x1, 0x2}, {{@in6=@private1, 0x4d6, 0x3c}, 0x0, @in=@rand_addr=0x64010101, 0x1, 0x2, 0x2, 0x5, 0xce, 0x4, 0xfffffc01}}, 0xe8)
openat$tun(0xffffffffffffff9c, 0x0, 0x4003, 0x0)

1.919390127s ago: executing program 1 (id=3471):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
tee(r1, r2, 0x8, 0xa)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x7, 0xfff, 0x20e, 0xfffffffe, 0x8, 0xfff, 0x8, 0x7df3, <r3=>0x0}, &(0x7f0000000280)=0x20)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000300)={r3, 0x8, 0x30}, &(0x7f0000000440)=0xc)
socket$kcm(0x29, 0x7, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000b00000000fc00000035030000047670e2001c192d997ca0a4"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f00000010c0)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000000)={r8, 0x0, 0x92f}, &(0x7f0000000080)=0x8)
close(r5)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="a400000010000104000000006f00000000000000", @ANYRES32=<r10=>0x0, @ANYBLOB="00000000000000007c0012800e00010069703665727370616e000000680002800600030006000000060002"], 0xa4}}, 0x0)
r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNDEL(r11, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1})
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000000000020000003000048010000180080001006c6f6700040002801c0001800900010000000c00028008000740000000010900010073797a30000000000900020073797a3200000000140000001100010000000000000000000100000a000000000000"], 0x84}, 0x1, 0x0, 0x0, 0x40440c1}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000003c0)=ANY=[@ANYRES32=r10, @ANYRES32=r11, @ANYRES8, @ANYRES16=r0, @ANYRESOCT=r9, @ANYBLOB="c30c04e6ee880392642cf2cfec5183f71b0857ce3edf5b2e1f364a6157af601d3607a254fe1a26b229a897"], 0xd8}, 0x1, 0x0, 0x0, 0x2001c810}, 0x0)
r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$inet6_sctp(0xa, 0xee715abd9af3d2d8, 0x84)
r13 = openat$cgroup_ro(r12, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r13, &(0x7f0000000200)=0x1, 0x12)
r14 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)

1.127812851s ago: executing program 2 (id=3473):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000040)={0x14, 0x4, 0xa, 0x101, 0x70bd28, 0x25dfdbff, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x2004d805}, 0x8000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x90)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={0x0})
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000000000), 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
sendmsg$can_bcm(r3, 0x0, 0x0)
sendmsg$can_bcm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="050000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009dfc"], 0x48}}, 0x0)

1.065802626s ago: executing program 2 (id=3474):
r0 = socket$kcm(0x10, 0x3, 0x10)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x6}, @NFTA_SET_ELEM_EXPRESSIONS={0x1c, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xdc}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', <r3=>0x0}) (async)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r5], 0x20}}, 0x0) (async)
sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @remote}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) (async, rerun: 64)
r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1000000000000225}}], 0x4000000000003b9, 0x26022, 0x0) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r9}, 0x10)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f00000012c0)=0x5, 0x4) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0x0, 0x6}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810) (async)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a595c779f10ce0630fc60", 0x14}], 0x1}, 0x0)

1.064744161s ago: executing program 1 (id=3475):
syz_emit_ethernet(0x6a, &(0x7f0000000380)={@broadcast, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x10, [0x0], "7f1a"}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}}}, {0x8, 0x22eb, 0xfffffffc, {{}, 0x2, {0x8}}}}}}}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140300001000010000000000000000000000000a20000000000a03000000000000000000070000010900010073797a300000000030000000090a010400000000000000000700000008000a40000000000900010073797a300000000008000540000000213c0000001e0a05010000000000000000070000070900020073797a3100000000100003800c00008008000340000000030900010073797a3000000000140000001000010000000000000000000084000a"], 0xb4}}, 0x40000) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140300001000010000000000000000000000000a20000000000a03000000000000000000070000010900010073797a300000000030000000090a010400000000000000000700000008000a40000000000900010073797a300000000008000540000000213c0000001e0a05010000000000000000070000070900020073797a3100000000100003800c00008008000340000000030900010073797a3000000000140000001000010000000000000000000084000a"], 0xb4}}, 0x40000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x3e, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x12}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x24}}, 0x0)
syz_emit_ethernet(0x159a, &(0x7f00000020c0)={@empty, @link_local, @void, {@ipv6={0x86dd, @dccp_packet={0x9, 0x6, "000300", 0x1564, 0x21, 0x0, @mcast2, @dev={0xfe, 0x80, '\x00', 0xf}, {[@hopopts={0x5c, 0x21b, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0xd3, 0xff3, "d21f4e5df8f6bfc31b0f3ef9d62fc6fd58e654a66dbf9a4cdd60f861b71d595360921bafaf076f3773d25ac1b8c60e0057665cc1e01903844bafbbe463d0df4170b6d1ecc47f159adf4214de7070437c6d706627e1b4366681bc8508fa0d58d4147f7795795945a0b60be0f304a68c9a1f97007162a9973a33acd0a4ed5e37d14391d879456cd16a17eee3712e61152d8804ca10f3c830c52341916a6c297332838e610d727400397343cb75e554016d515896ae920564792025245f7d7a2c0975eedba05277d483405cc58bb35e8a9cc653ca053e3b797683932a550dc82b5b975c4ec764e45ddcb865aa8c3586eacdfb007a2650073a77c2dc565f34e8daa2d540f0e41ab965199088aecaf545d00f6bf04723608d29cbbd9e9a966f24e2c5e83db8b063349d2c6dfaff2d90943cc6c89e95333e6f30e0a111eff9a1ddf70693fa572d6c60457c4500b68c5b5e71ece33ea98baec95e29b54b6e024693bd8766def8013fc5a0d3e6fbf8f6504e3c0ff7fe945a53948337c526b46a5ab575bd27f4df3d9ed9b42226cc3349c2e02d14c323f377238164af36d66ad5ed258834f82f6a55458e54a5054e87da02a956c4c7a6a796fafd46d3e9f272073e104b0ecc7cc06ee6280b2239775a13cb2d43fe90a8eec6f0520d9c7373df08ebc38d05cd999f1fdc4bb8178a6bc5eee5e4c4fed0690eb55398ae341ad44093ee05379edb5067e1c4dc05aebd741ecd1f004f4820217d27134d9c580a3660992a660f5220cb17d80765273966b68691c898ffca6d69a9c7393e2ab8b35eff630e62bcb556b87854bd3954ec22d4e77b5580af2eca7c04ee2e72f7ac4d19db01c221f8430b319ba2826d8c7a39f34544310d91156dba8566c1da127e34df5db014a9a29ca213ad4462c2ccf70920e86c3168b5cc2384b5c056a25effd1e2b19719a1229dca940fb7f6391c43f24ab4da4631a1f5a45f574c0a7bf4d6618b5781e75b7d6b443f3b21ef409dfddec9e576adcaaa6aa5cded23177e633ece091b477203ff868f69223433c2bc258a56e40e6901f1150a98a993e80c10dc581cd632185916478c3177812953d12177e54a26e8f07388f672fef9e7295525d4e2d49c484c09c537fbc1d09ee7d0dcb5cfc214f7b402d5a6ead0551381dcaacd910b945af3f49726bc300dac961be21d5eeb34eaf830b8b6d0dec95bf8b117c879341b643023856ebb601fa7938b8835fce3d047923164345355fc2fab384a18d389b56914d37953266ae99a5e077f79330ced4450706a3b3746ecb392a26d08f91a894a296f49c77bb222209b1fa300886f0df58a8e05dc7420bd815563d18f604cfb6e03b808d49c609711ab4edad15982a7d0246b7569d8998fb6737863249334402b2388d25e850a8cfdcca18a0b0253de289f18c3aa82e146b59771f3fbf52bd233f135e94575edee213cb1152bdff6d8dc6e1edeed34c7727e7026bb14e9ed893633fe3f04b7e0e522f24b8f9d2ef6a0ca8c4a9a6d26c2b122ac84435094d7add885bacf6e450aada0cb986716937ff1791ef2c401357184a65aca35b75df1da3a22960b081db2a2a660a66e8ce747531cb37943a6ece2736c44ec95be95950d3757e551304c2b5c6256e59f009f64524e69de40e3fceea327c516bade78971b500006c623b38b0425087ec542ef75700af9573ac5cc69e09417486dbddb8a312feece9a377816a22a0dcf9cc5d5a57e08001926c259032271232983b92f0a965172c00d88171cfc52826a82840cff66a9e1f0ac561345612f5bcc726cbc996c804a3de357b93ad87fd2db643db0d07104d5e7d9499cc1f869151212a08261de3359da621d2955b7b21c6e0585f9609a54e19da40df2daf86485301a99b97568a4c913d904905af574dfd20f9a35a241aec99bc56818d8f2b9b1a7f084ecc5984a8f657ef678b69bd8787c411b0283d9caadaa8c7e07179accfc867a506083909f2678b03f68bc815b3d20a16580aa8dc2392c8b3c00a23ede3e01b2310c33bf46420105fc140a9a3a43a83418c9ac821380b8bd97017de6fcd61f463e760bd9a02e7ec5f525eb11731f9f7d69a0acd2c4605303ed8c74464d6358e8704f8b0e92dc7a6c4d2c429d8178a3a3b6c61c4ee7c2ddfc45cf03d08ef5ef737b9f964a8f182ab727083665fc4effccfbdcca8ff70e5019587777bb2ee3a46ac48aab3f75bcddbb76aa33d2a3b8f0e46c222a32039ecf443ab7b80c2a2b7f9298ba3a8bbedcb4fb2a187ed8c4050f3c1cec979e07bc8cbd5be6d6108de5d2cd04c608d632e4b3e03a5607fa2f6ac6d2d07bc5a107686e53b3beea340bff34902b088bba0cc9ecaf435fed398c188b23a946004d1ce9c0e6d7021adf2edf8171363d2e82137d099bd146ad430a76a61745b1fdaddd3807023a6e99b1f404795f9209a3e6a4a98cc1da4aa42347a244ac2d86c9288d197125b1d89958555fb55e13ffade329a9b1835019e9d69d32035987d5a1d978711d5e693bd06a639733811c4ee16d4fed8900b0d1d328d80cba3163f10fa044e652ef8491e9ca7d44bbbca8850ef97ec6a987916e19a1c8fd7f69406908b43f8fe39f1579cca5f6cd3baa1376b97ca4c4ac585b57b30a8e95ad049e9820e36dae880b0f7079ae3491787cf9b65918e8459fe47796be56e36949107ed5380cab1abefc7dfb4e7110427d67553259f8fbe1ca8c7c09759d517904b98a8ba3df9ca96efaa21e5751bebd3225dd1faea5172fc3c57632f78ebe00ef1ba6d87edd4bae4271b3aa3867f4b2662a030b49483c43b7fe7af00971297146946216e36e934f360ac8f2e47020cd1d950db116694e05cab18d6e59f49576011bdfbd8c701d5535ee84f257c7159ee53465bb94e71c79761a7274d60aad0bcc4c4ac9d0f5ed07aa20022db8d0fff853f9a86fcbb0cec3ab48156fa25cea1dc1245d5558d259d1c9971306b5670521e6efb8cb789b90bafc30cc58174d1e9a71f27130c5a03e82c0f2285e2742ff7e0929a434e2affb9766af1345d675fc345d7459c3465027395ef85bee51ec3987d40e9a2914aec988d534a6b1cef1290026e98a80645d97cb2605433415a0c8d10b9d74c41761bc50a5981221f61c57cef94f1175bdb661a4ed1fab4d42857490cef3e2afaeb0c1ff8f7cc7baa467d1bb8537a6c8ad50b0ab966abc652515705e02729deed0ef3780ff7a69b52b7188abf1c7db0efe33520feca1b3a74d87d416e737580d3f9fed27f107343235623dbbb62be56368711f247bb0880c25cb0f276b5f56eeaf759f79c8856ba651ff7343a4817f719758c940e85d20aec7f8bca07cd5230b39817c0b5519b0fcdc529a097a6dc559a4f00cae18656b9dc27ae5521b8d41529d148ec78370c3fb87004fbab06c1ab3d526954e86ea41fd0f53bab7f106f967bcc416d0c0f06675901aeab8f01478a3de543dac28ebae7356c5bf65ab3a6044fc09214424815df73fa33575d5aa3594a88410455bb4088bcf2badd04bf2066a8da6fc018864b569a326efbda14cc91abc5acb7ffb0d78162cb5a94f23db69ffc1a8317b3712733202768f75188cfd41ce6d98a57ba198c107ea2ebbd0cee68ab3166216d463d3ab350c88c3318e0fd6eb8b4e2f99a5b26c992a15a4e6ba362eaba5b4d622f6a0927d4f3c56bbcd75395c43c5d68491784f1771cd90d9b13296dae55e93f275cb79a35d6ebdbb5b92b07b56d7b2f9d90c08c3f1f1803edf295940c06a82c88ad941a87085b29e665612488b1b39e8859d7ccb86f8a2b358dbe663a4ea41979b5ae35afa717cdc4e5b51391596e068d4f61bdc953bd0a8a8dff13e6f0e39dcf543c6c0756030581c6b25e43b8be1364ce0853a3e223e9e79df1844a31c76f46ff9de01cb5f0b44a4b54cbab4df5bf9e4520656dcadc3cc3b76ddc885e2a1b4a2be470756b5d038ae5bce5d597458807b4689d3cb479b128c5115a38abd3d3e8dc28fde5fb9280be244a34114ba50357fb01631a99d56b7143dbe87ad8addac616056d46be59adb8c82e37f5c514b41df5bc5a8eead3ec859bb462894c4c450ed47a3c0a01dbe58b4bf31c92df44b35a61d1901787355f51469d250687dc8b92d0b416b00ada7ab234392cb60e5e5325196ff0cb897f011f5540687e704e4bf542cef7c3eca9d2433ca723f2de5d29fb74a22db169aed51ff5994d3b520ebfa18d0d36e779fb53e6d0284e24b1d269f48930640a6c77bbd996f083a72030e51fa48688589f9d2abb92db53fd9f2a361366c0932bb8350123e0b7111d185a04b6059e22040959dd744df543206320b8c6215150dc7bb610a99f258d77e9d98d9de73862d09411d454821f99ab3cf19f2461891ba8c2f041a114cd1493d1643b4eae9543c20673ea2802efa18522c86ea25778c0b7eba0875448c448cb1d7885db4125e3c3764c5cbc69a89b3c13a3f65e9af4e8eef5ced8d3e3e72482c43c9ae09515325893ba5e405eb545e9e98166e6b9aa56b80a49461e152ee38803607dcd3e3144e490e53be86a34e57c9a5589dc1d8486b31ed7f4ad45648e4b0d5ebab681ac5062194c55ff7dd9567c743454ccee5b1798a3b77c65866e213acb79356acec94ef7614ee7d2cac2a869f915a291b893fbc19c603a3385f9e6e904587a7b2ed74427c36785b103e46b7361ec3403f0f01d028d68a6df7147d75bfd6936360d4e4ba63adc44f48df972561659db62ac488eb25195d199873a9d05e07862998102806f03f31eae3347a185ef77ffbf4e128a96d7fe2c14ef3b7d113e99e00095804a43ee52a83d276521ddb3d1471ff78cc28788dad471767d0d1e17f87027c78485f2083fcc2dff3b922c37201e97c4477cec26f10511a8020e4c5d14a89cb77e738998b03fc88d6ac79cd57450e110e76bddb64e47d0827580e8993d24ce9f67e65843265f29fc96ab2b6003d68732148d0478c947207a201d8fa92a32a320036487897f30fb7695b371a339f983a6b40c0def252b91a50e0f5f9debe40fbbb4189def5dd9e90895ff80363fba893ac064415eaae17114fac483b1869e167de5894d6697c52e9b5aeec7ef9499772b1ce2c22e836bd21f399c4daa03e8f598bfaf4f557d5e06aaab1b5426fd90cc9e47081e91180c687bb78596d91fdb20780443ebe7a469e22598da929ea683b99e336772a6bef6ba117bf731676f0e38af1bee5b9331adc4b32791ca32bbd9e46316331b35da364008274e81cdcc52e6f676aee5aceedcb5a90c5ad2952832212282cf997d5c267c2539c470380187f4e77f7260b6954406b95669781d1bf16159700d0b8aabca19784cf5606149ed67fe18de276b30d3907698454c63212da310ed41a5dc7e0026275f08ae864805c21b0a2e4043f3b225d69a7a99a517c7f18442672765e3fb2f4d96e0fcdee0e63c258b228d8da4aa5f5a6b6738c806437c71857e2d04d30d4b9cbc95aa31250f58306a144401166626a4c7a385534ca5a19984714bbf8fa0d3f081941fac9178bf93d26ecb8616d9105ce72ae7731d13dc109506d1449e83eb2a0cf4c80bd4dc8107d9d9a24efba374b383d20d8b42d1aa812dde4ff164db250f502d8242a5555ae6e385471e44787987a9bd3df9cd8b9109810d76e3c903cbe1161d897c7538c7b16cc6bdfc15995de1470788417f118f71b9f70b3b9b06ba83b67481709d33c8f5ef62053b56d9c9451a692c808fd1b1bf7b05051860527ba284d4a2611bcde5218466ea560c369d80fefbde12e72926a986e7d"}, @generic={0x3, 0x78, "303d6c9e657696a9aba5dc51df7b5f8b240f0b5782850a29fab56d4d5248f67eb1052faa9638fd61d07ac45de73d1403e38e43ab8a60c3c6803793cb81b34a4173171375c6155a22260998968b979e011da4f672aa3700823cd767797ee0b116adc6e112391c199e27d6909cd1f3608c4e46ca54bf7adeaa"}, @generic={0x5, 0x17, "c1174487a6a307d23bd4f7b75d01aa4447fd361e391ef0"}, @pad1, @calipso={0x7, 0x38, {0x2, 0xc, 0xe3, 0x3, [0x6, 0x7ff, 0x2, 0xc92f, 0x5, 0xfffffffffffffff7]}}, @ra={0x5, 0x2, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @dstopts={0x3c, 0x69, '\x00', [@generic={0x2, 0x39, "c36f8e376d8285e50a1e3f525fb87fd5769ca934ce067f12de4368c786bc7557f23df9aec10962be79e69d2927d9b04cf902fd83b4fd766762"}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @ra, @jumbo={0xc2, 0x4, 0x8}, @generic={0x2, 0xbe, "975bc6c05d2e9eec470f9fcc3b03a7cbbf73b628eb5bf4dbc594938d0a3ccc9884494b8b6405aece0cb35a3503e9285b16220d6f249724a32d2b19d95273fc6e750664559dbdbb306196bfd7c61b23ead1e9bd1728a51d524c8b725d20edb7c3cb36e236c07643a50e5f89305c600ba983d282b09db5c04c39361a10e98bc1ea1939f28d5365983b4810c713690c4cb2e690057832eabd613c1c90a38ee79b0070f180e6f1a0fa7c35c9295588a546018ec57fb3e9badc185f4848470592"}, @jumbo={0xc2, 0x4, 0x4}, @generic={0x97, 0xe5, "d3eaf19f9dfda59a2deedb0a2f11a6dca9d271339708d16341f86302d6391212f397bb17c3fe123a0ade7e9a37c9fcce14633f26b3ea617c09177156a0f65df4eb7bbe1e5bc49fcf4ceb7f1abaa10a64a981f0b37cb701dd638c314863f90924b3e77275d529c6ebef2abdda6335df3f2ce3dec964755565a2482ad3d8c152d7b3447633d2eea26aa0a049730c21209a8c9c5a7e9c6b706169193466c15187b84213c15c61c17ad5c193e79b8109c031df9ce310fd516361b462872e4c6f362987b2987ab50be6eedfb3de059cd041f214cdcf0c926c305d2f017f7880a3364695b9d6d467"}, @generic={0x0, 0x7a, "6ce8637479c7acf33994c2c4bdc340f6ae28839cdc62ae082262115c2ba51a6c42dba56273cac0bfcd98ab4223b5dd5106aa1b5ddd02763fc994a6f3bb4c6c37aaf0a705a39d15b332311d1b73ce4d0dd2a44c81b41f827e7812a2e05280b41a8a6ffddc06c9bf27e6e18114263f2879c97bab6c2323678ddda3"}, @generic={0x2, 0xcb, "17f6808b163dd3f2be8d12a081636cbc3b9af32dcb91a070b93023b0e72d43ddb46660ef72dbd1f9924bd0088de85813d95d2442575bcd34c556cb5645dec8f94f5bc485db980ba7ed258083909f9bf6b60caa5a3ab3061d6c75fa855790b24825c1aa26f6289fdf0ba8a3a9101475c473965d15fe9eb9caaa94d67a814e0aeadec324fe58840db79d68542b41f4a0049d45c37f224a7f76e93278850afd7611be110e5ec67be7fbafb576f566ed2a335545b2ae25b051c545cb950084f1f9e1aa3802f8dd7267c0b08647"}]}, @dstopts={0x29, 0x0, '\x00', [@pad1, @pad1]}, @dstopts={0x2f}, @routing={0x1d, 0x4, 0x0, 0x9b, 0x0, [@mcast1, @mcast2]}, @routing={0xc, 0xa, 0x1, 0x3, 0x0, [@dev={0xfe, 0x80, '\x00', 0x11}, @mcast1, @mcast1, @loopback, @mcast1]}, @fragment={0xc, 0x0, 0xc, 0x1, 0x0, 0x1, 0x66}, @routing={0x5c, 0x2, 0x1, 0x6, 0x0, [@private1]}, @hopopts={0x0, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @hao={0xc9, 0x10, @private0}, @pad1, @hao={0xc9, 0x10, @local}, @ra={0x5, 0x2, 0xc8}]}, @fragment={0x73, 0x0, 0xf, 0x0, 0x0, 0x1c, 0x65}], {{0x4e22, 0x4e23, 0x4, 0x1, 0x8, 0x0, 0x0, 0x0, 0x2, "6e2599", 0x7, "eafd60"}, "3e3db6cb514113961b619653e867d330ee4613780e77cda152cf22e0"}}}}}}, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r2, 0xfffffffc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
syz_emit_ethernet(0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800ae1b3ff2ba1f15236960f2ecca3b53008100000086dd60f81fcb00103a00fc000000000000ff02000000000000000000000000000193"], 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000140000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) (async)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4)
sendmsg$unix(r8, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$unix(r8, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
recvfrom$inet6(r2, &(0x7f00000003c0)=""/237, 0xed, 0x2000, &(0x7f00000001c0)={0xa, 0x4e23, 0x7a0090cb, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x3d95a577}, 0x1c)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x24, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_FLAGS={0x8}]}]}, 0x4c}}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) (async)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r12=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000080)={r12, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x2, 0x80000003, 0x4, 0xe2d8f2eb1d010935, 0x5, 0x9}, 0x9c) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000080)={r12, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x2, 0x80000003, 0x4, 0xe2d8f2eb1d010935, 0x5, 0x9}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000180)={0x1, 0xb7, 0x4, 0xe, 0x0, 0x6, 0x6, 0x1ff, r12}, 0x20)
sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x100}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

1.063635714s ago: executing program 2 (id=3476):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f00000002c0))
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1a, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="180200000000000000000000fdffffff85000000b500000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020206b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000fcffff850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x800, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x10, r9}, 0x18)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@ifindex, 0x31, 0x0, 0x55dc, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], <r11=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@fallback=r5, r10, 0x0, 0x0, 0x0, @void, @value=r2, @void, @void, r11}, 0x20)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
ioctl$TUNSETIFF(r9, 0x400454ca, 0x0)
getsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, 0x0, &(0x7f0000000040)=0x6)

917.404616ms ago: executing program 2 (id=3477):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x100c3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e1f}]}}}]}, 0x3c}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4)
sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840)
write(r2, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x0, 0x0)
accept4(r2, &(0x7f00000003c0)=@can, &(0x7f0000000240)=0x80, 0x81000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)={0x2c, r7, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048814}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x3, 0x8, 0x18, @mcast1, @empty, 0x8000, 0x80, 0x8000, 0x4a91fb1}})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e86c0d85ff9783763a0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)

858.665147ms ago: executing program 2 (id=3478):
syz_emit_ethernet(0x6a, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500005c00000000002f90780000000000000000248081000002001000007f1a10000800000086dd080088be00000000100060000100000000000000080022ebfffffffc200000000200000000000008000000000800655800000000800e45f097313aba970dacfbc13e8de6"], 0x0) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x0, 0x6, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x0, 0x4, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @ct={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @tproxy={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @numgen={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x0, 0x1, 0x1, 0x0, 0x13}, @NFTA_NG_DREG={0x0, 0x1, 0x1, 0x0, 0xb}, @NFTA_NG_TYPE={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x0, 0x2, 0x1, 0x0, 0xffff}]}}}, {0x0, 0x1, 0x0, 0x1, @bitwise={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @byteorder={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @queue={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @immediate={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x0, 0x1, 0x1, 0x0, 0xe}, @NFTA_IMMEDIATE_DATA={0x0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x0, 0x1, "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"}, @NFTA_DATA_VALUE={0x0, 0x1, "ae8fb75001461d387c25eafaf1b415669af6fa8d36b8f58e32a0f4e01a91a28a8feaf9ca13b124c2f4055aea1995a421bffc4e86fad32248111b0257384a72e6900bc493c23531b7eb"}, @NFTA_DATA_VALUE={0x0, 0x1, "c853e10714681ec24d073b4da3a09ee5f5700e7e948b11d3cf29e6bb919372e5e175726ab36f14fa67b546f348d9bd8d66e8d6d57b560fd848e278c522b8205dda686d810ea1ee8c6f3e3d19fdf5be8fa71017493cb67d0f5ccbf262a2a183e3e5dd07edff4aeba92c517f9d62c3c7bc5533e665ffe28dddb4a8cff2a30f60b07bdff3c759f28961a25050123870ce61"}]}, @NFTA_IMMEDIATE_DATA={0x0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x0, 0x1, "3ec08f1416fa36cb90e2fb9272c4e41426c4974b5b63731dbbb4300e50fd049d7b90f6c0010d874d9ff922783a266f715a1f3331a4837e5a2977c32c339e32b1940bf18cf96c3dc5c0aa51676e78c0aa631f51b1087e5fa99d62467ce78c485d2405ffa0565f62db102e6bf19bc175193904ee480c3f74136bdd9fcbfcbaa6b4b8070404fe82fa73ea8b8bb87702254670d219bc6f13057562bf90b071f87b71683472ac951768a54f14544538ea82e2291dc733758211f8f334ee81271ce2043110d383d1"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x0, 0x1, "6df43efe3cb07b6c087f318967bedd2e0f53fc5c92b2f982147ec8a17fe59326232c38124a85fd23c3ea60359158fbc864180d5c53b0cf2e5730a7d2afb879424c673db280e91c41d813bcd83210b373c22f0cff56a746c74fe722e4aa20968bbea5ba42fc81ce0e3b9a9e3c064f1b1c12ddb68c905ea290ed3172c9b0e5405a2065926db9ebd4d9f675de5136"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_IMMEDIATE_DATA={0x0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x0, 0x1, "83c741d545f501335ba403e546723dfdef4f7e9e9870dccff5ac27506b75e30f37abd6ae3b73b537f3c86af7ec418748e5d594a123b8e924ee"}, @NFTA_DATA_VALUE={0x0, 0x1, "b81b95914038ff300dba0f88346c50f164b8666f7bd22c150612a40eb77b84951f42454c81232a0347d3a9bad0de2b033b350923346c8532"}, @NFTA_DATA_VALUE={0x0, 0x1, "7318760ca0800a1d3c24ddd1b14beda6c5f2446e807189c5c0c377e58d3a912aa93a9ff1939543b5a75a36e85304df60d998a362c460edfec2370263b3d447f24d94a5d1e2fa09f1146af72b4f6e39e612d0dbfa402ec73912d367452b3cff2b9c9d156bcbacb8c5596cc8a9fc52b6f6a656d6cdad328385b498daf632976aae33e062772ab4286679d0d90a5ac1b99648822f03234f2bd9340f2d45cf2e2dfd2dd35128a8532d45cedf7d718a41807fc60f77e2d152"}, @NFTA_DATA_VALUE={0x0, 0x1, "3079e563f5c1b9d24d9372d0330ce5818150a949b540015a9b7b24665b2c691f04948558303a519a49bf6b44364422626555dde6d2"}, @NFTA_DATA_VALUE={0x0, 0x1, "c4709241f95493d611b63fc0136719d6a72fb53f769f31b5f5065a3a5bb6c11696dbe1df1fcd331afce25f918074d08ca6d89d7a0375ecdd2217dbac68a178d69ed60deda4a13fd8b8574e76f599e120c6e6cb1391806053855f6ca2f4391767eee3f972bdec335eafa69a5e0ccf6093e3c5568f6e84a5cdc5f79cdb12647838bc4405e2567b591913eb56e25cc0cbd8df42e7475c52386254c7644a45cf114a8a7972180b764f3e9e51cd53758fc5e49c2bc3227bcf7fdec6866d52988505db5b472dc5e3"}]}, @NFTA_IMMEDIATE_DATA={0x0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x0, 0x1, "2f8fd607849cdba2217a60603b0dbed0aea7e1c22759fb8fec29efc4c99b70c01a688f870e23eadbf8952d29a018e757db20063acf89b6c152c9e2ede8c7a139397aa7850a644b801899ff2595a8093d8f9054a4dc2767d1772ebe76d0ecf7f916c6e99bee"}, @NFTA_DATA_VALUE={0x0, 0x1, "17f8f0f0a2b8bbdeaf1e122c6762b7371ef2b4239c00a11de1965f721d04bc92838018cd4da6f85e149cffad16c69dd57943744435a312c0ca2409dad923a2eb08de7d592553"}, @NFTA_DATA_VALUE={0x0, 0x1, "cf7600968e6ea7a72ee0177bee355a5abaf2ab8fb9a7"}]}]}}}, {0x0, 0x1, 0x0, 0x1, @dup_ipv4={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @dup_ipv6={{}, @void}}]}, @NFTA_RULE_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN={0x0, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x0, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x0, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x0, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x0, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x0, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x0, 0x2, 'syz2\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x40000)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000003e0007010000000000000000047c0000c93769ae0c00018008ae6459e7d71a29e19a3b6bb768d5001000e0000001"], 0x24}}, 0x0) (async)
syz_emit_ethernet(0x1482, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], 0x0) (async)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async)
listen(r2, 0xfffffffc) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async)
syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @local, @val, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x10, 0x3a, 0x0, @private0, @mcast2, {[], @ni={0x1d0899e851774393, 0x0, 0x0, 0xff, 0x5}}}}}}, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000140000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) (async)
sendmsg$unix(r8, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
recvfrom$inet6(r2, &(0x7f00000003c0)=""/237, 0xed, 0x2000, &(0x7f00000001c0)={0xa, 0x4e23, 0x7a0090cb, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x3d95a577}, 0x1c)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x24, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_FLAGS={0x8}]}]}, 0x4c}}, 0x0) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r12=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000080)={r12, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x2, 0x80000003, 0x4, 0xe2d8f2eb1d010935, 0x5, 0x9}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000180)={0x1, 0xb7, 0x4, 0xd, 0x0, 0x6, 0x6, 0x1ff, r12}, 0x20)
sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x100}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="4af42995d4573c50e708cbe656d2f4462d25ba9e77c5100a35f9ffffffbe3a2cdde1a16eddb6834aaf75d9", @ANYRES16=r4, @ANYBLOB="07000000000000000000020000001400018006000100020000000500020001000000"], 0x28}}, 0x0)

489.362598ms ago: executing program 0 (id=3479):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x10, 0xd35606d0bb67df85)
setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88)
ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f00000000c0)={0x2})
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00)

378.578484ms ago: executing program 0 (id=3480):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x3)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0)
syz_emit_ethernet(0x38, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}, {"c516"}}}}}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x4, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4040c00)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r2, 0x785b6694473fd5ed, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x24}}, 0x4050)

377.327191ms ago: executing program 0 (id=3481):
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
r1 = socket$key(0xf, 0x3, 0x2) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1700000056000100000000000000000007"], 0x38}}, 0x0) (async)
sendmsg$key(r1, &(0x7f0000000240)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020300090a0000000000000000000200030006000000000002000000ac1414aa000000000000000002353b00010000000000fd000504feffff4b030043f6ab563dbb4cba24bff86b846986e005000000000002004e21e00000020000000000000044015510bac2730abfa356cfe7445a2f897dc98860247d5f7cda8249a8bdb4553e8d230900000000000079411309c47ad471a5fd92144fc2fc05333f05721199616610d582f2709de74fd2a51d"], 0x50}}, 0x0) (async)
bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) (async)
sendmsg$802154_dgram(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x24, @short={0x2, 0x1}}, 0x14, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x44010)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r4 = socket$kcm(0x2, 0xa, 0x2)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c)
setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r9=>0x0}) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="0c00990000000200000000000800a00094090000080026009409000008002700000000000800a1"], 0x48}}, 0x0)
r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000140)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000010)
r11 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r11, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, 0x0, 0x0)
r12 = accept4(r11, 0x0, 0x0, 0x80800)
sendmsg$nl_route(r12, &(0x7f00000043c0)={0x0, 0x0, &(0x7f0000004380)={&(0x7f0000000100)=@delneigh={0x1c, 0x1d, 0x800, 0x70bdac, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x2, 0xa1, 0xb}}, 0x1c}, 0x1, 0x0, 0x0, 0x400a001}, 0x20001840) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
socket$kcm(0x29, 0x5, 0x0)

174.725044ms ago: executing program 1 (id=3482):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00)

166.003293ms ago: executing program 0 (id=3483):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c)
bind$inet(r1, &(0x7f0000001240)={0x2, 0x4e21, @loopback}, 0x10)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa000000000400"/177], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
socket$inet6(0xa, 0x80002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0xc1646000)
r3 = socket$kcm(0x10, 0x3, 0x10)
recvmsg(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0xdc}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'hsr0\x00'})
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000009a45253a02000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="b57dad8800000000140012800b00010067656e6576650000040002800a0001000000000000000000"], 0x40}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

94.975274ms ago: executing program 1 (id=3484):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0xfeffffff)
r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', <r5=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r6=>0x0})
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x80)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r7, r6, 0x25, 0x8, @void}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f0000000500)=[{r8}], 0x1, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x3a1}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

94.56281ms ago: executing program 0 (id=3485):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0x4, 0x4, 0x398, 0xffffffff, 0x1a8, 0x1a8, 0xd0, 0xfeffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private2, [0x0, 0x0, 0x0, 0xff000000], [0xff000000], 'pim6reg0\x00', 'team_slave_1\x00', {}, {}, 0x6, 0x0, 0x1}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x0, 0x1}, {0x4, 0x5, 0x7}, 0x1, 0xf0f}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x58}}, @common=@eui64={{0x28}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES64, @ANYRESDEC=0x0, @ANYRES16=r0], 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="a02000000cb103000c0008001b00eb000000"], 0x34}, 0x1, 0x0, 0x0, 0x45}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x3100, 0x11, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair(0x5, 0x6, 0x7ff, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x51}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$SIOCX25SFACILITIES(r6, 0x89e3, &(0x7f0000000780)={0x74, 0x101, 0x406, 0x7, 0x6, 0x81})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b40000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xb8}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r13=>0x0})
r14 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r14, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x89, 0x0, 0x0, 0x0, @empty, @private}}}})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r3)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x2c, r11, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x15}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x24000880)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0x28, r8, 0x8, 0x870bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0xfffff8fc, 0x3a}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20008000)

1.745783ms ago: executing program 0 (id=3486):
r0 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)='1', 0x1}], 0x1}, 0x1)
setsockopt$sock_attach_bpf(r1, 0x1, 0xa, &(0x7f0000000480), 0x4)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_ext={0x1c, 0x1a, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x3ff}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10000}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0x7, 0x0, 0x8, 0x3, 0x4, 0xfffffffffffffff4, 0x10}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x54}]}, &(0x7f0000000300)='syzkaller\x00', 0x7, 0xb6, &(0x7f0000000a00)=""/182, 0x100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x3, 0x8000, 0x49c4}, 0x10, 0xc4f5, 0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000ac0)=[{0x2, 0x4, 0xf}, {0x4, 0x1, 0x9, 0xc}, {0x1, 0x4, 0x5, 0x8}, {0x5, 0x1, 0x6, 0x2}, {0x0, 0x1, 0x1, 0xf}, {0x0, 0x3, 0x6, 0x5}, {0x4, 0x5, 0xe, 0xa}, {0x3, 0x2, 0x7, 0xb}, {0x2, 0x3, 0xf, 0xa}], 0x10, 0x3}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000000)=r3, 0x4)
recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2)
getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r5, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0)
r6 = socket(0x10, 0x80003, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xffffff81, "0000000000000000000100000e000081"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

0s ago: executing program 2 (id=3487):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000240)={0x4}, 0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010000305000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="115a0100000000002000128008000100687372001400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r4], 0x40}}, 0x44)

kernel console output (not intermixed with test programs):

syz.0.1645'.
[  195.698439][T12004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1645'.
[  195.944844][T12006] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  195.959515][T12006] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1646'.
[  195.969281][T12007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1646'.
[  195.969338][T12008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1646'.
[  196.362851][T12013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1648'.
[  196.608233][T12019] IPv6: Can't replace route, no match found
[  196.915807][T12023] validate_nla: 6 callbacks suppressed
[  196.915823][T12023] netlink: 'syz.2.1652': attribute type 13 has an invalid length.
[  197.248992][T12015] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  197.495048][T12040] 8021q: adding VLAN 0 to HW filter on device batadv0
[  197.635875][T12061] bond0: Caught tx_queue_len zero misconfig
[  197.649555][T12055] lo: Caught tx_queue_len zero misconfig
[  197.712127][T12075] bond0: Caught tx_queue_len zero misconfig
[  197.832246][T12085] netlink: 'syz.0.1669': attribute type 13 has an invalid length.
[  197.948349][T12096] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  198.694146][T12132] netlink: 'syz.2.1686': attribute type 10 has an invalid length.
[  199.027481][T12152] sctp: [Deprecated]: syz.1.1691 (pid 12152) Use of int in maxseg socket option.
[  199.027481][T12152] Use struct sctp_assoc_value instead
[  199.674827][T12161] netlink: 'syz.2.1694': attribute type 8 has an invalid length.
[  200.088318][T12174] netlink: 'syz.0.1700': attribute type 178 has an invalid length.
[  200.195990][T12180] netlink: 'syz.0.1703': attribute type 12 has an invalid length.
[  200.206716][T12182] netlink: 'syz.1.1702': attribute type 13 has an invalid length.
[  200.360246][T12198] __nla_validate_parse: 22 callbacks suppressed
[  200.360257][T12198] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1707'.
[  200.449390][T12195] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1706'.
[  200.451018][T12204] hsr0: left promiscuous mode
[  200.454111][T12204] hsr0: left allmulticast mode
[  200.456085][T12204] ip6gretap0: left allmulticast mode
[  200.458226][T12204] syz_tun: left allmulticast mode
[  200.460829][T12204] ip6gre1: left allmulticast mode
[  200.477976][T12204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1708'.
[  200.481640][T12204] ip6gretap0: left promiscuous mode
[  200.484560][T12204] syz_tun: left promiscuous mode
[  200.575893][T12163] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  200.721442][T12211] netlink: 'syz.2.1711': attribute type 17 has an invalid length.
[  200.767587][T12224] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1713'.
[  200.807004][T12225] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1712'.
[  200.810590][T12225] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1712'.
[  200.814274][T12225] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1712'.
[  200.817358][T12225] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1712'.
[  201.669434][T12254] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  201.700206][T12254] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1722'.
[  201.772094][T12267] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1724'.
[  201.819875][T12271] netlink: 'syz.2.1726': attribute type 7 has an invalid length.
[  201.822437][T12271] netlink: 'syz.2.1726': attribute type 8 has an invalid length.
[  201.828540][T12271] bridge0: entered promiscuous mode
[  201.831386][T12271] syz_tun: entered promiscuous mode
[  201.835036][T12271] bridge0: left promiscuous mode
[  201.837580][T12271] syz_tun: left promiscuous mode
[  201.973965][T12276] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  201.979416][T12276] validate_nla: 1 callbacks suppressed
[  201.979428][T12276] netlink: 'syz.2.1729': attribute type 4 has an invalid length.
[  202.136768][T12288] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  202.409044][T12298] tc_dump_action: action bad kind
[  202.554994][T12305] 8021q: adding VLAN 0 to HW filter on device batadv0
[  202.625015][T12311] netlink: 'syz.0.1738': attribute type 7 has an invalid length.
[  202.627664][T12311] netlink: 'syz.0.1738': attribute type 8 has an invalid length.
[  202.636610][T12311] bridge0: entered promiscuous mode
[  202.639094][T12311] ip6gretap0: entered promiscuous mode
[  202.641767][T12311] bridge0: left promiscuous mode
[  202.644459][T12311] ip6gretap0: left promiscuous mode
[  202.782511][T12313] syzkaller0: entered promiscuous mode
[  202.785038][T12313] syzkaller0: entered allmulticast mode
[  203.028029][T12338] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  203.042662][T12338] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  203.157368][T12351] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = -352321536, id = 0
[  203.176079][T12348] bond0: entered promiscuous mode
[  203.178768][T12348] bridge0: entered promiscuous mode
[  203.181016][T12348] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  203.188665][T12348] hsr0: Slave B (bridge0) is not up; please bring it up to get a fully working HSR network
[  203.665856][T12388] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  204.090142][T12412] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  204.117591][T12413] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  204.376787][T12439] 8021q: adding VLAN 0 to HW filter on device batadv0
[  204.578813][T12462] netlink: 'syz.0.1777': attribute type 12 has an invalid length.
[  204.583962][T12462] netlink: 'syz.0.1777': attribute type 12 has an invalid length.
[  204.605685][T12466] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  204.770351][T12479] netlink: 'syz.1.1781': attribute type 15 has an invalid length.
[  205.429064][T12511] __nla_validate_parse: 24 callbacks suppressed
[  205.429080][T12511] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1787'.
[  205.468493][T12511] netlink: 'syz.0.1787': attribute type 10 has an invalid length.
[  205.496157][T12513] netlink: 'syz.2.1788': attribute type 178 has an invalid length.
[  205.499876][T12513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1788'.
[  205.548693][T12518] netlink: 'syz.2.1789': attribute type 178 has an invalid length.
[  205.683257][T12522] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1791'.
[  205.733917][T12529] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  205.753000][T12529] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1792'.
[  205.783683][T12534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1794'.
[  205.790323][T12534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1794'.
[  205.813536][T12535] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1793'.
[  205.827838][T12535] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1793'.
[  205.897747][T12540] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1795'.
[  205.900992][T12540] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1795'.
[  205.944916][T12542] bond0: option all_slaves_active: invalid value (3)
[  206.247995][T12571] netlink: 'syz.1.1805': attribute type 8 has an invalid length.
[  206.466602][T12607] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  206.470646][T12607] hsr0: Slave B (bridge0) is not up; please bring it up to get a fully working HSR network
[  206.475017][T12607] hsr0: entered promiscuous mode
[  206.477175][T12607] hsr0: entered allmulticast mode
[  206.479264][T12607] bond0: entered allmulticast mode
[  206.481317][T12607] bridge0: entered allmulticast mode
[  206.526890][T12616] erspan0: entered promiscuous mode
[  206.529250][T12616] gretap0: entered promiscuous mode
[  206.531335][T12616] debugfs: 'hsr2' already exists in 'hsr'
[  206.533060][T12616] Cannot create hsr debugfs directory
[  206.535441][T12616] hsr2: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network
[  206.539091][T12616] hsr2: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[  207.107591][T12671] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  207.322093][T12687] ieee802154 phy0 wpan0: encryption failed: -90
[  207.325435][T12687] hsr0: left promiscuous mode
[  207.538677][T12705] validate_nla: 4 callbacks suppressed
[  207.538687][T12705] netlink: 'syz.0.1839': attribute type 8 has an invalid length.
[  207.760398][T12720] 8021q: adding VLAN 0 to HW filter on device batadv0
[  207.799231][T12723] netlink: 'syz.0.1844': attribute type 13 has an invalid length.
[  208.167355][T12754] dummy0: entered promiscuous mode
[  208.169567][T12754] batadv_slave_0: entered promiscuous mode
[  208.171789][T12754] debugfs: 'hsr0' already exists in 'hsr'
[  208.173571][T12754] Cannot create hsr debugfs directory
[  208.175754][T12754] hsr0: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network
[  208.179527][T12754] hsr0: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network
[  208.182835][T12754] hsr0: entered allmulticast mode
[  208.184654][T12754] dummy0: entered allmulticast mode
[  208.186586][T12754] batadv_slave_0: entered allmulticast mode
[  208.191061][T12755] 8021q: adding VLAN 0 to HW filter on device batadv0
[  208.242708][T12759] hsr0: left allmulticast mode
[  208.248084][T12759] bond0: left allmulticast mode
[  208.249686][T12759] bridge0: left allmulticast mode
[  208.447592][T12777] netlink: 'syz.1.1859': attribute type 13 has an invalid length.
[  209.091300][T12785] sch_tbf: burst 43029 is lower than device ip6gre0 mtu (65485) !
[  209.298477][T12806] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  209.313532][T12806] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  209.324292][T12807] syzkaller0: entered promiscuous mode
[  209.326053][T12807] syzkaller0: entered allmulticast mode
[  209.412034][T12811] erspan0: entered promiscuous mode
[  209.415509][T12811] gretap0: entered promiscuous mode
[  209.418662][T12811] gretap0: left promiscuous mode
[  209.420516][T12811] erspan0: left promiscuous mode
[  209.530763][T12819] netlink: 'syz.0.1872': attribute type 10 has an invalid length.
[  209.659131][T12830] netlink: 'syz.1.1876': attribute type 10 has an invalid length.
[  209.748260][T12845] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  209.878476][T12852] 8021q: adding VLAN 0 to HW filter on device batadv0
[  210.016870][T12859] netlink: 'syz.0.1884': attribute type 178 has an invalid length.
[  210.227840][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  210.234320][T12868] bond0: left promiscuous mode
[  210.236361][T12868] bridge0: left promiscuous mode
[  210.602231][T12875] netlink: 'syz.1.1887': attribute type 13 has an invalid length.
[  210.947547][T12877] netlink: 'syz.1.1888': attribute type 12 has an invalid length.
[  210.971995][T12878] netlink: 'syz.1.1888': attribute type 12 has an invalid length.
[  211.005182][T12883] netlink: 'syz.0.1889': attribute type 8 has an invalid length.
[  211.010411][T12883] __nla_validate_parse: 81 callbacks suppressed
[  211.010420][T12883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1889'.
[  211.123071][T12896] syzkaller0: entered promiscuous mode
[  211.128615][T12896] syzkaller0: entered allmulticast mode
[  211.131993][T12895] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  211.142828][T12899] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  211.149126][T12895] tipc: Resetting bearer <eth:syzkaller0>
[  211.160620][T12895] tipc: Disabling bearer <eth:syzkaller0>
[  211.201066][T12902] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1894'.
[  211.236624][T12904] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1895'.
[  211.323225][T12915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1898'.
[  211.335591][T12915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1898'.
[  211.338402][T12915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1898'.
[  211.349314][T12922] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  211.844156][T12950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1909'.
[  211.948795][T12956] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  212.122213][T12969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1914'.
[  212.205939][T12969] 8021q: adding VLAN 0 to HW filter on device batadv0
[  212.257662][T12982] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1916'.
[  212.457299][T13006] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1921'.
[  212.787335][T13022] validate_nla: 8 callbacks suppressed
[  212.787349][T13022] netlink: 'syz.2.1924': attribute type 13 has an invalid length.
[  213.081335][T13040] netlink: 'syz.0.1929': attribute type 74 has an invalid length.
[  213.089888][T13040] bond0: entered promiscuous mode
[  213.092235][T13040] batadv0: entered promiscuous mode
[  213.097220][T13040] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  213.100532][T13040] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  213.105244][T13040] 8021q: adding VLAN 0 to HW filter on device hsr0
[  213.122546][T13040] 8021q: adding VLAN 0 to HW filter on device batadv0
[  213.238070][T13049] IPv6: sit1: Disabled Multicast RS
[  213.240338][T13049] sit1: entered allmulticast mode
[  213.405703][T13063] syzkaller0: entered promiscuous mode
[  213.407837][T13063] syzkaller0: entered allmulticast mode
[  213.577639][T13068] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  213.581994][T13068] netlink: 'syz.0.1939': attribute type 4 has an invalid length.
[  213.693531][T13083] 8021q: adding VLAN 0 to HW filter on device batadv0
[  213.745547][T13087] IPVS: set_ctl: invalid protocol: 51 10.1.1.0:20004
[  213.783154][T13091] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  213.798665][T13091] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  213.847458][T13096] bond0: Caught tx_queue_len zero misconfig
[  213.894625][T13099] netlink: 'syz.2.1949': attribute type 12 has an invalid length.
[  214.015610][T13114] netlink: 'syz.1.1954': attribute type 13 has an invalid length.
[  214.106553][T13129] netlink: 'syz.1.1958': attribute type 10 has an invalid length.
[  214.147567][T13127] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  214.155459][T13132] netlink: 'syz.2.1957': attribute type 4 has an invalid length.
[  214.210319][T13130] bond0: left promiscuous mode
[  214.215975][T13130] batadv0: left promiscuous mode
[  214.273481][T13136] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  214.314212][   T56] block nbd0: Receive control failed (result -11)
[  214.374712][T13136] netlink: 'syz.2.1960': attribute type 4 has an invalid length.
[  214.407238][T13147] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  214.411503][T13147] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  214.415680][T13147] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  214.418889][T13147] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  214.434212][T13147] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  214.438439][T13147] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  214.441631][T13147] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  214.449409][T13147] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  214.737621][T13165] netlink: 'syz.1.1966': attribute type 7 has an invalid length.
[  214.740187][T13165] netlink: 'syz.1.1966': attribute type 8 has an invalid length.
[  215.406364][T13202] syzkaller0: Caught tx_queue_len zero misconfig
[  215.474441][T13209] pimreg: left allmulticast mode
[  215.533414][T13210] lo speed is unknown, defaulting to 1000
[  215.537363][T13210] lo speed is unknown, defaulting to 1000
[  215.540506][T13210] lo speed is unknown, defaulting to 1000
[  215.665598][T13210] infiniband syz0: set down
[  215.668607][ T5880] lo speed is unknown, defaulting to 1000
[  215.670790][T13210] infiniband syz0: added lo
[  215.697217][T13210] RDS/IB: syz0: added
[  215.699696][T13210] smc: adding ib device syz0 with port count 1
[  215.701724][T13210] smc:    ib device syz0 port 1 has no pnetid
[  215.705340][ T5880] lo speed is unknown, defaulting to 1000
[  215.710133][T13210] lo speed is unknown, defaulting to 1000
[  215.816492][T13210] lo speed is unknown, defaulting to 1000
[  215.926328][T13210] lo speed is unknown, defaulting to 1000
[  217.247211][T13230] __nla_validate_parse: 27 callbacks suppressed
[  217.247223][T13230] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1984'.
[  217.410487][T13236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1985'.
[  217.416837][T13236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1985'.
[  217.428783][T13236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1985'.
[  217.438852][T13241] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1987'.
[  217.540856][T13250] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1987'.
[  217.659040][T13259] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1990'.
[  217.697586][T13259] lo speed is unknown, defaulting to 1000
[  217.735498][T13261] 8021q: adding VLAN 0 to HW filter on device batadv0
[  217.935564][T13264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1991'.
[  218.151302][T13272] sit1: left allmulticast mode
[  218.166157][T13272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1993'.
[  218.226905][T13276] hsr0: left allmulticast mode
[  218.228694][T13276] dummy0: left allmulticast mode
[  218.230555][T13276] batadv_slave_0: left allmulticast mode
[  218.285819][T13280] validate_nla: 2 callbacks suppressed
[  218.285834][T13280] netlink: 'syz.0.1995': attribute type 12 has an invalid length.
[  218.346404][T13280] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1995'.
[  218.487569][T13304] lo: Caught tx_queue_len zero misconfig
[  218.705822][T13322] netlink: 'syz.2.2006': attribute type 7 has an invalid length.
[  218.709393][T13322] netlink: 'syz.2.2006': attribute type 8 has an invalid length.
[  218.887698][T13340] net_ratelimit: 28 callbacks suppressed
[  218.887732][T13340] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  218.940241][T13345] pimreg: tun_chr_ioctl cmd 2147767506
[  218.963257][T13345] syzkaller0: entered promiscuous mode
[  218.965766][T13345] syzkaller0: entered allmulticast mode
[  218.968609][T13345] tipc: Resetting bearer <eth:syzkaller0>
[  219.272469][T13353] gretap0: entered promiscuous mode
[  219.275939][T13353] gretap0: left promiscuous mode
[  219.548978][T13378] netlink: 'syz.2.2020': attribute type 13 has an invalid length.
[  219.576487][T13378] tipc: Resetting bearer <eth:syzkaller0>
[  219.708234][T13394] syzkaller0: left promiscuous mode
[  219.710089][T13394] syzkaller0: left allmulticast mode
[  219.760356][T13391] gretap0: entered promiscuous mode
[  219.763628][T13391] gretap0: left promiscuous mode
[  219.772170][T13394] dummy0: left promiscuous mode
[  219.775332][T13394] batadv_slave_0: left promiscuous mode
[  219.845253][T13401] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  219.977870][T13410] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  219.992965][T13410] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  220.249713][T13426] netlink: 'syz.1.2033': attribute type 1 has an invalid length.
[  220.499440][T13438] netlink: 'syz.2.2035': attribute type 5 has an invalid length.
[  220.582789][T13445] netlink: 'syz.2.2037': attribute type 13 has an invalid length.
[  220.820230][T13459] netlink: 'syz.2.2041': attribute type 13 has an invalid length.
[  220.822615][T13459] netlink: 'syz.2.2041': attribute type 5 has an invalid length.
[  220.914805][T13466] pimreg: entered allmulticast mode
[  220.924534][T13466] pimreg: left allmulticast mode
[  221.044180][T13480] netlink: 'syz.0.2047': attribute type 1 has an invalid length.
[  221.110152][T13488] gretap1: entered allmulticast mode
[  221.621263][T13531] bond3: entered promiscuous mode
[  221.627619][T13531] 8021q: adding VLAN 0 to HW filter on device bond3
[  221.651500][T13531] bond3: (slave bridge18): making interface the new active one
[  221.655004][T13531] bridge18: entered promiscuous mode
[  221.658887][T13531] bond3: (slave bridge18): Enslaving as an active interface with an up link
[  222.077273][T13548] bridge0: entered promiscuous mode
[  222.080177][T13548] syz_tun: entered promiscuous mode
[  222.084118][T13548] hsr0: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network
[  222.087616][T13548] hsr0: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network
[  222.190606][T13555] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  222.244375][T13559] bond0: entered promiscuous mode
[  222.247278][T13559] batadv0: entered promiscuous mode
[  222.250262][T13559] debugfs: 'hsr0' already exists in 'hsr'
[  222.252558][T13559] Cannot create hsr debugfs directory
[  222.256496][T13559] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  222.260365][T13559] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  222.265444][T13559] 8021q: adding VLAN 0 to HW filter on device hsr0
[  222.265482][T13561] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  222.276770][T13559] 8021q: adding VLAN 0 to HW filter on device batadv0
[  222.288852][T13562] bond3: left promiscuous mode
[  222.290788][T13562] bridge18: left promiscuous mode
[  222.542134][T13575] __nla_validate_parse: 34 callbacks suppressed
[  222.542146][T13575] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2077'.
[  222.549660][T13575] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2077'.
[  222.725538][T13585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2079'.
[  222.952693][T13594] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2081'.
[  222.956636][T13594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2081'.
[  223.330163][T13622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2088'.
[  223.333110][T13622] validate_nla: 15 callbacks suppressed
[  223.333121][T13622] netlink: 'syz.0.2088': attribute type 7 has an invalid length.
[  223.337934][T13622] netlink: 'syz.0.2088': attribute type 8 has an invalid length.
[  223.340266][T13622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2088'.
[  223.351376][T13622] bridge0: entered promiscuous mode
[  223.354283][T13622] ip6gretap0: entered promiscuous mode
[  223.358065][T13622] bridge0: left promiscuous mode
[  223.360457][T13622] ip6gretap0: left promiscuous mode
[  223.368168][T13623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2089'.
[  223.375035][T13623] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2089'.
[  223.410118][T13626] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2090'.
[  223.925654][T13668] 8021q: adding VLAN 0 to HW filter on device batadv0
[  223.960258][T13673] netlink: 'syz.0.2103': attribute type 7 has an invalid length.
[  223.962816][T13673] netlink: 'syz.0.2103': attribute type 8 has an invalid length.
[  223.970054][T13673] ip6gretap0: entered promiscuous mode
[  223.972668][T13673] syz_tun: entered promiscuous mode
[  223.975622][T13673] ip6gretap0: left promiscuous mode
[  223.978219][T13673] syz_tun: left promiscuous mode
[  224.166132][T13679] netlink: 'syz.0.2106': attribute type 29 has an invalid length.
[  224.169116][T13679] netlink: 'syz.0.2106': attribute type 29 has an invalid length.
[  224.171977][T13679] netlink: 'syz.0.2106': attribute type 29 has an invalid length.
[  224.178030][T13679] netlink: 'syz.0.2106': attribute type 29 has an invalid length.
[  224.180690][T13679] netlink: 'syz.0.2106': attribute type 29 has an invalid length.
[  224.183412][T13679] netlink: 'syz.0.2106': attribute type 29 has an invalid length.
[  224.495071][T13686] 8021q: adding VLAN 0 to HW filter on device batadv0
[  224.557755][T13688] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  224.809413][T13714] hsr0: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network
[  224.813386][T13714] hsr0: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network
[  224.817659][T13714] hsr0: entered promiscuous mode
[  224.819574][T13714] hsr0: entered allmulticast mode
[  224.821474][T13714] bridge0: entered allmulticast mode
[  224.823681][T13714] syz_tun: entered allmulticast mode
[  225.060181][T13736] hsr0: left promiscuous mode
[  225.061832][T13736] hsr0: left allmulticast mode
[  225.063324][T13736] bridge0: left allmulticast mode
[  225.075207][T13736] syz_tun: left allmulticast mode
[  225.717850][T13792] bridge0: left promiscuous mode
[  225.720560][T13792] syz_tun: left promiscuous mode
[  226.210500][T13822] bond0: left promiscuous mode
[  226.213507][T13822] batadv0: left promiscuous mode
[  226.554151][T13851] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  226.558325][T13851] syzkaller0: entered promiscuous mode
[  226.560664][T13851] syzkaller0: entered allmulticast mode
[  226.562966][T13851] tipc: Resetting bearer <eth:syzkaller0>
[  226.926203][T13873] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  226.929281][T13873] syzkaller0: entered promiscuous mode
[  226.931217][T13873] syzkaller0: entered allmulticast mode
[  226.944450][T13873] tipc: Resetting bearer <eth:syzkaller0>
[  227.400163][T13905] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  227.410087][T13906] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  227.477265][T13915] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  227.546528][T13920] tipc: Resetting bearer <eth:syzkaller0>
[  227.603351][T13918] __nla_validate_parse: 38 callbacks suppressed
[  227.603363][T13918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2167'.
[  227.704247][T13871] tipc: Resetting bearer <eth:syzkaller0>
[  227.718693][T13871] tipc: Disabling bearer <eth:syzkaller0>
[  227.982275][T13950] lo speed is unknown, defaulting to 1000
[  228.018981][T13954] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2172'.
[  228.025487][T13954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2172'.
[  228.080614][T13953] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  228.084749][T13953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2173'.
[  228.260948][T13968] delete_channel: no stack
[  228.323416][T13974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2175'.
[  228.417423][T13981] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2179'.
[  228.420701][T13969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2175'.
[  228.669499][T14004] bond0: entered promiscuous mode
[  228.671988][T14004] batadv0: entered promiscuous mode
[  228.678070][T14004] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  228.681786][T14004] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  228.686720][T14004] 8021q: adding VLAN 0 to HW filter on device hsr0
[  228.704290][T14004] 8021q: adding VLAN 0 to HW filter on device batadv0
[  228.709141][T14006] 8021q: adding VLAN 0 to HW filter on device batadv0
[  228.758034][T14010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2188'.
[  228.761591][T14010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2188'.
[  228.764791][T14010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2188'.
[  228.767691][T14010] validate_nla: 39 callbacks suppressed
[  228.767704][T14010] netlink: 'syz.0.2188': attribute type 18 has an invalid length.
[  228.775807][T14010] netlink: 'syz.0.2188': attribute type 7 has an invalid length.
[  228.778315][T14010] netlink: 'syz.0.2188': attribute type 8 has an invalid length.
[  228.785948][T14010] bridge0: entered promiscuous mode
[  228.789958][T14010] ip6gretap0: entered promiscuous mode
[  228.792474][T14010] bridge0: left promiscuous mode
[  228.794945][T14010] ip6gretap0: left promiscuous mode
[  229.446734][T14020] netlink: 'syz.2.2191': attribute type 1 has an invalid length.
[  229.449293][T14020] netlink: 'syz.2.2191': attribute type 2 has an invalid length.
[  229.805467][T14043] 8021q: adding VLAN 0 to HW filter on device batadv0
[  229.911700][ T6624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  229.914316][ T6624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  229.977460][T14059] netlink: 'syz.0.2203': attribute type 8 has an invalid length.
[  229.999212][T14061] syz.2.2204: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  230.004721][T14061] CPU: 1 UID: 0 PID: 14061 Comm: syz.2.2204 Not tainted syzkaller #0 PREEMPT(full) 
[  230.004762][T14061] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  230.004768][T14061] Call Trace:
[  230.004772][T14061]  <TASK>
[  230.004776][T14061]  dump_stack_lvl+0x189/0x250
[  230.004802][T14061]  ? __pfx_dump_stack_lvl+0x10/0x10
[  230.004814][T14061]  ? __pfx__printk+0x10/0x10
[  230.004826][T14061]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  230.004836][T14061]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  230.004847][T14061]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  230.004859][T14061]  warn_alloc+0x214/0x310
[  230.004871][T14061]  ? stack_depot_save_flags+0x40/0x860
[  230.004884][T14061]  ? __pfx_warn_alloc+0x10/0x10
[  230.004897][T14061]  ? kasan_save_track+0x4f/0x80
[  230.004908][T14061]  ? xskq_create+0x56/0x170
[  230.004916][T14061]  ? xsk_init_queue+0xb0/0x110
[  230.004922][T14061]  ? xsk_setsockopt+0x4dc/0x8d0
[  230.004932][T14061]  ? do_sock_setsockopt+0x17c/0x1b0
[  230.004941][T14061]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  230.004951][T14061]  ? do_syscall_64+0xfa/0x3b0
[  230.004960][T14061]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.004972][T14061]  __vmalloc_node_range_noprof+0x125/0x12f0
[  230.004997][T14061]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  230.005011][T14061]  ? __kasan_kmalloc+0x93/0xb0
[  230.005023][T14061]  vmalloc_user_noprof+0xad/0xf0
[  230.005034][T14061]  ? xskq_create+0xbf/0x170
[  230.005042][T14061]  xskq_create+0xbf/0x170
[  230.005051][T14061]  xsk_init_queue+0xb0/0x110
[  230.005059][T14061]  xsk_setsockopt+0x4dc/0x8d0
[  230.005072][T14061]  ? __pfx_xsk_setsockopt+0x10/0x10
[  230.005084][T14061]  ? __pfx_aa_sk_perm+0x10/0x10
[  230.005098][T14061]  ? aa_sock_opt_perm+0xff/0x1b0
[  230.005107][T14061]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  230.005115][T14061]  ? __pfx_xsk_setsockopt+0x10/0x10
[  230.005127][T14061]  do_sock_setsockopt+0x17c/0x1b0
[  230.005139][T14061]  __x64_sys_setsockopt+0x13f/0x1b0
[  230.005152][T14061]  do_syscall_64+0xfa/0x3b0
[  230.005160][T14061]  ? lockdep_hardirqs_on+0x9c/0x150
[  230.005167][T14061]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.005175][T14061]  ? exc_page_fault+0x9f/0xf0
[  230.005183][T14061]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.005191][T14061] RIP: 0033:0x7fda0d38ec29
[  230.005200][T14061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  230.005206][T14061] RSP: 002b:00007fda0e18b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  230.005216][T14061] RAX: ffffffffffffffda RBX: 00007fda0d5d5fa0 RCX: 00007fda0d38ec29
[  230.005221][T14061] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  230.005226][T14061] RBP: 00007fda0d411e41 R08: 0000000000000004 R09: 0000000000000000
[  230.005230][T14061] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  230.005248][T14061] R13: 00007fda0d5d6038 R14: 00007fda0d5d5fa0 R15: 00007ffd577f9888
[  230.005262][T14061]  </TASK>
[  230.005266][T14061] Mem-Info:
[  230.111369][T14061] active_anon:5610 inactive_anon:0 isolated_anon:0
[  230.111369][T14061]  active_file:1630 inactive_file:38302 isolated_file:0
[  230.111369][T14061]  unevictable:1768 dirty:76 writeback:0
[  230.111369][T14061]  slab_reclaimable:10603 slab_unreclaimable:87610
[  230.111369][T14061]  mapped:18464 shmem:2445 pagetables:970
[  230.111369][T14061]  sec_pagetables:0 bounce:0
[  230.111369][T14061]  kernel_misc_reclaimable:0
[  230.111369][T14061]  free:259796 free_pcp:19798 free_cma:0
[  230.127427][T14061] Node 0 active_anon:11984kB inactive_anon:0kB active_file:3856kB inactive_file:135756kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:43024kB dirty:176kB writeback:0kB shmem:4860kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8340kB pagetables:2072kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  230.138183][T14061] Node 1 active_anon:10456kB inactive_anon:0kB active_file:2664kB inactive_file:17452kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30832kB dirty:128kB writeback:0kB shmem:4920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6724kB pagetables:1808kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  230.150334][T14061] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  230.160741][T14061] lowmem_reserve[]: 0 811 811 811 811
[  230.162595][T14061] Node 0 DMA32 free:256556kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11984kB inactive_anon:0kB active_file:3856kB inactive_file:135756kB unevictable:3536kB writepending:176kB present:1556484kB managed:830852kB mlocked:0kB bounce:0kB free_pcp:44780kB local_pcp:20684kB free_cma:0kB
[  230.172896][T14061] lowmem_reserve[]: 0 0 0 0 0
[  230.174780][T14061] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  230.184127][T14061] lowmem_reserve[]: 0 0 854 854 854
[  230.186670][T14061] Node 1 Normal free:317388kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10320kB inactive_anon:0kB active_file:2664kB inactive_file:17452kB unevictable:3536kB writepending:128kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:25800kB local_pcp:11520kB free_cma:0kB
[  230.197306][T14061] lowmem_reserve[]: 0 0 0 0 0
[  230.199056][T14061] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  230.203203][T14061] Node 0 DMA32: 699*4kB (M) 462*8kB (UM) 248*16kB (M) 197*32kB (UME) 90*64kB (UE) 62*128kB (UME) 25*256kB (U) 1*512kB (M) 8*1024kB (UM) 3*2048kB (M) 50*4096kB (UM) = 256508kB
[  230.209571][T14061] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  230.214932][T14061] Node 1 Normal: 243*4kB (M) 170*8kB (ME) 160*16kB (UM) 392*32kB (UME) 100*64kB (UM) 21*128kB (UM) 4*256kB (ME) 4*512kB (UME) 1*1024kB (U) 2*2048kB (M) 69*4096kB (UM) = 317340kB
[  230.222146][T14061] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  230.226769][T14061] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  230.230062][T14061] 42377 total pagecache pages
[  230.231766][T14061] 0 pages in swap cache
[  230.233297][T14061] Free swap  = 124996kB
[  230.236079][T14061] Total swap = 124996kB
[  230.237833][T14061] 786301 pages RAM
[  230.239987][T14061] 0 pages HighMem/MovableOnly
[  230.241931][T14061] 241356 pages reserved
[  230.243307][T14061] 0 pages cma reserved
[  230.406671][T14075] syzkaller0: left promiscuous mode
[  230.408544][T14075] syzkaller0: left allmulticast mode
[  231.094256][T14088] netlink: 'syz.0.2210': attribute type 178 has an invalid length.
[  231.542884][T14116] netlink: 'syz.1.2219': attribute type 13 has an invalid length.
[  232.198231][T14138] bond0: Caught tx_queue_len zero misconfig
[  232.767887][T14155] netlink: 'syz.1.2230': attribute type 2 has an invalid length.
[  232.827242][T14156] lo speed is unknown, defaulting to 1000
[  232.847047][T14155] 8021q: adding VLAN 0 to HW filter on device batadv0
[  232.919817][T14164] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  233.611707][T14169] netlink: 'syz.2.2232': attribute type 8 has an invalid length.
[  233.623676][T14169] __nla_validate_parse: 16 callbacks suppressed
[  233.623691][T14169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2232'.
[  233.817281][T14178] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2233'.
[  233.868241][T14183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2237'.
[  233.873689][T14183] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2237'.
[  233.902810][T14185] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2235'.
[  233.905773][T14185] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2235'.
[  233.908714][T14185] netlink: 'syz.0.2235': attribute type 5 has an invalid length.
[  233.911701][T14185] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2235'.
[  233.916810][T14185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2235'.
[  233.958067][T14187] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2238'.
[  234.167537][T14203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2240'.
[  234.779972][T14214] bond0: left promiscuous mode
[  234.782105][T14214] batadv0: left promiscuous mode
[  234.874937][T14221] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  235.074250][T14240] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  235.190499][T14254] syzkaller0: entered promiscuous mode
[  235.192912][T14254] syzkaller0: entered allmulticast mode
[  235.547689][T14289] netlink: 'syz.0.2266': attribute type 10 has an invalid length.
[  235.608423][T14295] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  235.611901][T14295] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  235.928210][T14314] vlan3: entered promiscuous mode
[  235.929986][T14314] macvtap0: entered promiscuous mode
[  236.153282][T14340] netlink: 'syz.1.2278': attribute type 12 has an invalid length.
[  236.188718][T14342] netlink: 'syz.2.2279': attribute type 13 has an invalid length.
[  236.215323][T14342] lo speed is unknown, defaulting to 1000
[  236.503254][T14360] netlink: 'syz.2.2284': attribute type 2 has an invalid length.
[  236.507911][T14360] netlink: 'syz.2.2284': attribute type 5 has an invalid length.
[  236.749839][T14376] 8021q: adding VLAN 0 to HW filter on device batadv0
[  236.930193][T14391] bond0: entered promiscuous mode
[  236.932786][T14391] batadv0: entered promiscuous mode
[  236.937994][T14391] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  236.942644][T14391] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  236.946728][T14391] 8021q: adding VLAN 0 to HW filter on device hsr0
[  236.958327][T14391] 8021q: adding VLAN 0 to HW filter on device batadv0
[  237.278739][T14418] ip6gre2: entered promiscuous mode
[  237.310080][T14418] ip6gre2: left promiscuous mode
[  237.335639][T14430] netlink: 'syz.2.2302': attribute type 1 has an invalid length.
[  237.353618][T14430] 8021q: adding VLAN 0 to HW filter on device bond3
[  237.368220][T14431] bond3: (slave geneve3): making interface the new active one
[  237.371662][T14431] bond3: (slave geneve3): Enslaving as an active interface with an up link
[  237.377386][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  237.383212][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  237.389833][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  237.393852][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  237.398272][T14427] bond0: left promiscuous mode
[  237.400567][T14427] batadv0: left promiscuous mode
[  237.481990][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  237.485487][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  237.488952][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  237.492339][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  237.786058][T14453] bond0: entered promiscuous mode
[  237.789241][T14453] batadv0: entered promiscuous mode
[  237.792702][T14453] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  237.798613][T14453] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  237.803254][T14453] 8021q: adding VLAN 0 to HW filter on device hsr0
[  237.810401][T14453] 8021q: adding VLAN 0 to HW filter on device batadv0
[  238.117283][T14463] netlink: 'syz.1.2311': attribute type 7 has an invalid length.
[  238.119713][T14463] netlink: 'syz.1.2311': attribute type 8 has an invalid length.
[  238.122577][T14462] netlink: 'syz.1.2311': attribute type 7 has an invalid length.
[  238.159441][T14465] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  238.209936][T14468] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  238.539954][T14500] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  238.671449][T14512] dummy0: entered promiscuous mode
[  238.673658][T14512] batadv_slave_0: entered promiscuous mode
[  238.677730][T14512] debugfs: 'hsr0' already exists in 'hsr'
[  238.679498][T14512] Cannot create hsr debugfs directory
[  238.681186][T14512] hsr0: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network
[  238.685056][T14512] hsr0: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network
[  238.688563][T14512] hsr0: entered allmulticast mode
[  238.690360][T14512] dummy0: entered allmulticast mode
[  238.692179][T14512] batadv_slave_0: entered allmulticast mode
[  238.833203][T14534] __nla_validate_parse: 40 callbacks suppressed
[  238.833215][T14534] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2330'.
[  238.838346][T14534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2330'.
[  238.846770][T14534] bridge0: entered promiscuous mode
[  238.849943][T14534] ip6gretap0: entered promiscuous mode
[  238.852993][T14534] bridge0: left promiscuous mode
[  238.857080][T14534] ip6gretap0: left promiscuous mode
[  238.935941][T14544] sctp: [Deprecated]: syz.1.2332 (pid 14544) Use of struct sctp_assoc_value in delayed_ack socket option.
[  238.935941][T14544] Use struct sctp_sack_info instead
[  238.938964][T14549] bond0: Unable to set down delay as MII monitoring is disabled
[  239.015556][T14542] hsr0: left allmulticast mode
[  239.017256][T14542] dummy0: left allmulticast mode
[  239.018965][T14542] batadv_slave_0: left allmulticast mode
[  239.677767][T14563] validate_nla: 3 callbacks suppressed
[  239.677779][T14563] netlink: 'syz.0.2336': attribute type 1 has an invalid length.
[  239.694310][T14565] netlink: 'syz.2.2335': attribute type 29 has an invalid length.
[  239.728080][T14565] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2335'.
[  239.731208][T14565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2335'.
[  239.750376][T14565] netlink: 'syz.2.2335': attribute type 29 has an invalid length.
[  239.753453][T14565] netlink: 'syz.2.2335': attribute type 29 has an invalid length.
[  239.756673][T14565] netlink: 'syz.2.2335': attribute type 29 has an invalid length.
[  239.760001][T14565] netlink: 'syz.2.2335': attribute type 29 has an invalid length.
[  239.762969][T14565] netlink: 'syz.2.2335': attribute type 29 has an invalid length.
[  239.767080][T14565] netlink: 'syz.2.2335': attribute type 29 has an invalid length.
[  239.771304][T14565] netlink: 'syz.2.2335': attribute type 29 has an invalid length.
[  239.775053][T14565] netlink: 'syz.2.2335': attribute type 29 has an invalid length.
[  239.790891][T14573] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  239.792638][    T9] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  239.799402][    T9] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  239.808592][    T9] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  239.961184][T14584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2339'.
[  239.966381][T14584] bond0: left promiscuous mode
[  239.969861][T14584] batadv0: left promiscuous mode
[  240.121406][T14590] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  240.254291][T14599] syzkaller0: entered promiscuous mode
[  240.256821][T14599] syzkaller0: entered allmulticast mode
[  240.554325][T14611] openvswitch: netlink: VXLAN extension 32 out of range max 1
[  240.558772][T14611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2345'.
[  240.648833][T14618] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2346'.
[  240.667282][T14618] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2346'.
[  241.381539][T14636] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2352'.
[  241.484604][T14639] tap0: tun_chr_ioctl cmd 1074025676
[  241.486355][T14639] tap0: owner set to 0
[  241.600886][T14641] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2354'.
[  241.763326][T14652] dummy0: left promiscuous mode
[  241.766920][T14652] batadv_slave_0: left promiscuous mode
[  241.913057][T14663] 8021q: adding VLAN 0 to HW filter on device batadv0
[  242.109566][T14678] 8021q: adding VLAN 0 to HW filter on device batadv0
[  242.755829][T14732] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  243.230358][T14753] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  243.623147][T14762] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  244.016481][T14771] __nla_validate_parse: 16 callbacks suppressed
[  244.016492][T14771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2390'.
[  244.104451][T14777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2391'.
[  244.141238][T14771] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2390'.
[  244.144567][T14771] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2390'.
[  244.335097][T14797] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  244.388812][T14794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2395'.
[  244.399372][T14794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2395'.
[  244.685044][T14813] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2400'.
[  245.127751][T14834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2404'.
[  245.190159][T14843] validate_nla: 156 callbacks suppressed
[  245.190196][T14843] netlink: 'syz.0.2407': attribute type 10 has an invalid length.
[  245.225030][T14847] netlink: 'syz.0.2409': attribute type 13 has an invalid length.
[  245.480878][T14873] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2414'.
[  245.492889][T14873] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2414'.
[  246.001842][T14883] sch_tbf: burst 43029 is lower than device ip6gre0 mtu (65485) !
[  246.265521][T14902] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  246.372743][T14906] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  246.452757][T14908] bond0: entered promiscuous mode
[  246.460174][T14908] batadv0: entered promiscuous mode
[  246.465120][T14908] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  246.468721][T14908] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  246.473603][T14908] 8021q: adding VLAN 0 to HW filter on device hsr0
[  246.480315][T14908] 8021q: adding VLAN 0 to HW filter on device batadv0
[  246.540400][T14914] tipc: New replicast peer: 172.20.20.187
[  246.543010][T14914] tipc: Enabled bearer <udp:syz2>, priority 10
[  246.576847][T14916] geneve5: entered promiscuous mode
[  246.579218][T14916] geneve5: entered allmulticast mode
[  246.582296][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 27679 - 0
[  246.592245][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 27679 - 0
[  246.595386][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 27679 - 0
[  246.598263][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 27679 - 0
[  246.720999][T14930] lo speed is unknown, defaulting to 1000
[  247.289928][T14949] vlan0: entered promiscuous mode
[  247.291986][T14949] macvtap0: entered promiscuous mode
[  247.639280][T14959] 8021q: adding VLAN 0 to HW filter on device batadv0
[  247.953302][T14983] netlink: 'syz.1.2442': attribute type 12 has an invalid length.
[  248.320426][T14998] erspan0: entered promiscuous mode
[  248.322944][T14998] gretap0: entered promiscuous mode
[  248.327730][T14998] gretap0: left promiscuous mode
[  248.329931][T14998] erspan0: left promiscuous mode
[  248.420825][T15008] bond0: Caught tx_queue_len zero misconfig
[  248.453152][T15011] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  248.539690][T15019] erspan0: entered promiscuous mode
[  248.542080][T15019] gretap0: entered promiscuous mode
[  248.544814][T15019] gretap0: left promiscuous mode
[  248.547418][T15019] erspan0: left promiscuous mode
[  248.617562][T15022] netlink: 'syz.0.2456': attribute type 29 has an invalid length.
[  248.623149][T15022] lo: Caught tx_queue_len zero misconfig
[  248.714234][T15032] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  248.908176][T15050] ip6gretap0: entered promiscuous mode
[  248.912536][T15050] syz_tun: entered promiscuous mode
[  248.916375][T15050] debugfs: 'hsr0' already exists in 'hsr'
[  248.918663][T15050] Cannot create hsr debugfs directory
[  248.920386][T15050] hsr0: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network
[  248.924157][T15050] hsr0: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network
[  248.990372][T15056] netlink: 'syz.2.2467': attribute type 29 has an invalid length.
[  248.993274][T15056] netlink: 'syz.2.2467': attribute type 29 has an invalid length.
[  248.998488][T15056] unsupported nla_type 58
[  249.095964][T15061] __nla_validate_parse: 34 callbacks suppressed
[  249.095973][T15061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2469'.
[  249.110097][T15061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2469'.
[  249.128332][T15061] ip6gretap0: left promiscuous mode
[  249.131296][T15061] syz_tun: left promiscuous mode
[  249.144814][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 27679 - 0
[  249.149696][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 27679 - 0
[  249.153236][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 27679 - 0
[  249.157149][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 27679 - 0
[  249.291226][T15073] netlink: 'syz.2.2472': attribute type 1 has an invalid length.
[  249.302677][T15070] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2472'.
[  249.340053][T15077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2473'.
[  249.352616][T15079] batadv_slave_1: entered promiscuous mode
[  249.370637][T15079] batadv_slave_1: left promiscuous mode
[  249.378157][T15080] 8021q: adding VLAN 0 to HW filter on device batadv0
[  249.409782][T15079] batadv_slave_1: entered promiscuous mode
[  249.412555][T15079] batadv_slave_1: left promiscuous mode
[  249.448581][T15085] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2476'.
[  249.471631][T15079] batadv_slave_1: entered promiscuous mode
[  249.475005][T15079] batadv_slave_1: left promiscuous mode
[  249.561383][T15079] batadv_slave_1: entered promiscuous mode
[  249.575963][T15079] batadv_slave_1: left promiscuous mode
[  249.613187][T15079] batadv_slave_1: entered promiscuous mode
[  249.618987][T15079] batadv_slave_1: left promiscuous mode
[  249.621390][T15095] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2479'.
[  249.645525][T15096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2478'.
[  249.671876][T15096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2478'.
[  249.675352][T15096] bond0: left promiscuous mode
[  249.678152][T15096] batadv0: left promiscuous mode
[  249.700623][T15079] batadv_slave_1: entered promiscuous mode
[  249.706364][T15079] batadv_slave_1: left promiscuous mode
[  249.772822][T15079] batadv_slave_1: entered promiscuous mode
[  249.776687][T15079] batadv_slave_1: left promiscuous mode
[  249.820434][T15079] batadv_slave_1: entered promiscuous mode
[  249.825345][T15079] batadv_slave_1: left promiscuous mode
[  249.849592][T15107] netlink: 'syz.0.2482': attribute type 10 has an invalid length.
[  249.871408][T15079] batadv_slave_1: entered promiscuous mode
[  249.875471][T15079] batadv_slave_1: left promiscuous mode
[  249.931351][T15079] batadv_slave_1: entered promiscuous mode
[  249.935895][T15079] batadv_slave_1: left promiscuous mode
[  249.999799][T15079] batadv_slave_1: entered promiscuous mode
[  250.003232][T15079] batadv_slave_1: left promiscuous mode
[  250.058647][T15079] batadv_slave_1: entered promiscuous mode
[  250.061540][T15079] batadv_slave_1: left promiscuous mode
[  250.130524][T15079] batadv_slave_1: entered promiscuous mode
[  250.133226][T15079] batadv_slave_1: left promiscuous mode
[  250.388466][T15123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2486'.
[  250.500559][T15128] geneve5: left promiscuous mode
[  250.502548][T15128] geneve5: left allmulticast mode
[  250.516662][T15128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2487'.
[  250.598779][T15143] netlink: 'syz.1.2491': attribute type 10 has an invalid length.
[  250.619485][T15142] netlink: 'syz.2.2490': attribute type 13 has an invalid length.
[  250.850505][T15177] bond0: entered promiscuous mode
[  250.853472][T15177] batadv0: entered promiscuous mode
[  250.861186][T15177] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  250.865357][T15177] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  250.869780][T15177] 8021q: adding VLAN 0 to HW filter on device hsr0
[  250.877224][T15177] 8021q: adding VLAN 0 to HW filter on device batadv0
[  251.088359][T15205] netlink: 'syz.2.2507': attribute type 7 has an invalid length.
[  251.091629][T15205] netlink: 'syz.2.2507': attribute type 8 has an invalid length.
[  251.110050][T15205] ip6gretap0: entered promiscuous mode
[  251.120018][T15205] syz_tun: entered promiscuous mode
[  251.129205][T15205] ip6gretap0: left promiscuous mode
[  251.134716][T15205] syz_tun: left promiscuous mode
[  251.244714][T15211] syzkaller1: tun_chr_ioctl cmd 1074025677
[  251.247598][T15211] syzkaller1: linktype set to 823
[  251.536912][T15222] erspan0: entered promiscuous mode
[  251.539318][T15222] erspan0: left promiscuous mode
[  251.716245][T15239] netlink: 'syz.1.2515': attribute type 178 has an invalid length.
[  252.243353][T15259] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  252.479358][T15272] 8021q: adding VLAN 0 to HW filter on device batadv0
[  252.602895][T15285] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  252.693943][T15295] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  252.698042][T15295] syzkaller0: entered promiscuous mode
[  252.700092][T15295] syzkaller0: entered allmulticast mode
[  252.731452][T15295] tipc: Resetting bearer <eth:syzkaller0>
[  252.752166][T15295] tipc: Disabling bearer <eth:syzkaller0>
[  252.790604][T15310] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  253.017563][T15324] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  253.021916][T15324] netlink: 'syz.1.2538': attribute type 4 has an invalid length.
[  253.281011][T15349] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  253.373214][T15353] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  254.207394][T15363] __nla_validate_parse: 18 callbacks suppressed
[  254.207406][T15363] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2546'.
[  254.212524][T15363] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2546'.
[  254.215876][T15363] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2546'.
[  254.218624][T15363] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2546'.
[  254.597316][T15376] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2549'.
[  254.720312][T15381] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2551'.
[  254.723500][T15381] bridge_slave_0: entered allmulticast mode
[  254.743126][T15381] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2551'.
[  254.747061][T15381] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2551'.
[  254.753275][T15381] syz_tun: entered promiscuous mode
[  254.760734][T15381] syz_tun: left promiscuous mode
[  254.769299][T15383] openvswitch: netlink: Missing valid actions attribute.
[  254.771587][T15383] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  254.894808][T15387] syzkaller1: entered promiscuous mode
[  254.896689][T15387] syzkaller1: entered allmulticast mode
[  255.007847][T15404] veth1_to_bridge: Caught tx_queue_len zero misconfig
[  255.017266][T15406] netlink: 'syz.0.2559': attribute type 13 has an invalid length.
[  255.160006][T15425] syzkaller0: Caught tx_queue_len zero misconfig
[  255.162759][T15424] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2562'.
[  255.226658][T15427] netlink: 'syz.2.2563': attribute type 8 has an invalid length.
[  255.229390][T15427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2563'.
[  255.310068][T15433] lo: Caught tx_queue_len zero misconfig
[  255.312468][T15433] sch_tbf: burst 5 is lower than device lo mtu (65499) !
[  255.340702][T15433] syzkaller0: entered promiscuous mode
[  255.343096][T15433] syzkaller0: entered allmulticast mode
[  255.347044][T15433] tipc: Resetting bearer <eth:syzkaller0>
[  255.477706][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  256.088817][T15474] nbd: must specify at least one socket
[  256.234129][T15480] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  256.455629][T15496] IPv6: Can't replace route, no match found
[  256.546085][T15500] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  256.757498][T15511] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  256.940913][T15520] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  257.131623][T15526] netlink: 'syz.0.2592': attribute type 13 has an invalid length.
[  257.172606][T15529] netlink: 'syz.0.2593': attribute type 1 has an invalid length.
[  257.198877][T15529] bond2: entered promiscuous mode
[  257.200999][T15529] 8021q: adding VLAN 0 to HW filter on device bond2
[  257.214069][T15529] bond2: (slave bridge19): making interface the new active one
[  257.216717][T15529] bridge19: entered promiscuous mode
[  257.219368][T15529] bond2: (slave bridge19): Enslaving as an active interface with an up link
[  257.307658][T15539] bond0: Caught tx_queue_len zero misconfig
[  257.488072][T15561] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  257.575753][T15564] netlink: 'syz.1.2602': attribute type 4 has an invalid length.
[  257.648273][T15567] netlink: 'syz.0.2603': attribute type 13 has an invalid length.
[  257.972824][T15588] tipc: Resetting bearer <eth:syzkaller0>
[  257.984352][T15588] syzkaller0: left promiscuous mode
[  257.986319][T15588] syzkaller0: left allmulticast mode
[  258.017971][T15592] lo speed is unknown, defaulting to 1000
[  258.159508][T15602] netlink: 'syz.0.2614': attribute type 178 has an invalid length.
[  258.220719][T15608] netlink: 'syz.0.2616': attribute type 13 has an invalid length.
[  258.342157][T15615] tc_dump_action: action bad kind
[  258.503478][T15623] syz.0.2620: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  258.518696][T15623] CPU: 1 UID: 0 PID: 15623 Comm: syz.0.2620 Not tainted syzkaller #0 PREEMPT(full) 
[  258.518710][T15623] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  258.518716][T15623] Call Trace:
[  258.518719][T15623]  <TASK>
[  258.518724][T15623]  dump_stack_lvl+0x189/0x250
[  258.518740][T15623]  ? __pfx_dump_stack_lvl+0x10/0x10
[  258.518750][T15623]  ? __pfx__printk+0x10/0x10
[  258.518775][T15623]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  258.518787][T15623]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  258.518819][T15623]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  258.518835][T15623]  warn_alloc+0x214/0x310
[  258.518854][T15623]  ? stack_depot_save_flags+0x40/0x860
[  258.518868][T15623]  ? __pfx_warn_alloc+0x10/0x10
[  258.518881][T15623]  ? kasan_save_track+0x4f/0x80
[  258.518891][T15623]  ? xskq_create+0x56/0x170
[  258.518899][T15623]  ? xsk_init_queue+0xb0/0x110
[  258.518904][T15623]  ? xsk_setsockopt+0x4dc/0x8d0
[  258.518915][T15623]  ? do_sock_setsockopt+0x17c/0x1b0
[  258.518925][T15623]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  258.518934][T15623]  ? do_syscall_64+0xfa/0x3b0
[  258.518942][T15623]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.518953][T15623]  __vmalloc_node_range_noprof+0x125/0x12f0
[  258.518979][T15623]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  258.518990][T15623]  ? xskq_create+0x56/0x170
[  258.518999][T15623]  ? __kasan_kmalloc+0x93/0xb0
[  258.519010][T15623]  vmalloc_user_noprof+0xad/0xf0
[  258.519022][T15623]  ? xskq_create+0xbf/0x170
[  258.519029][T15623]  xskq_create+0xbf/0x170
[  258.519039][T15623]  xsk_init_queue+0xb0/0x110
[  258.519047][T15623]  xsk_setsockopt+0x4dc/0x8d0
[  258.519060][T15623]  ? __pfx_xsk_setsockopt+0x10/0x10
[  258.519072][T15623]  ? __pfx_aa_sk_perm+0x10/0x10
[  258.519086][T15623]  ? aa_sock_opt_perm+0xff/0x1b0
[  258.519095][T15623]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  258.519104][T15623]  ? __pfx_xsk_setsockopt+0x10/0x10
[  258.519116][T15623]  do_sock_setsockopt+0x17c/0x1b0
[  258.519128][T15623]  __x64_sys_setsockopt+0x13f/0x1b0
[  258.519140][T15623]  do_syscall_64+0xfa/0x3b0
[  258.519148][T15623]  ? lockdep_hardirqs_on+0x9c/0x150
[  258.519156][T15623]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.519163][T15623]  ? exc_page_fault+0x9f/0xf0
[  258.519171][T15623]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.519179][T15623] RIP: 0033:0x7f11bff8ec29
[  258.519187][T15623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  258.519193][T15623] RSP: 002b:00007f11c0ed7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  258.519202][T15623] RAX: ffffffffffffffda RBX: 00007f11c01d5fa0 RCX: 00007f11bff8ec29
[  258.519208][T15623] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009
[  258.519213][T15623] RBP: 00007f11c0011e41 R08: 0000000000000004 R09: 0000000000000000
[  258.519217][T15623] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  258.519222][T15623] R13: 00007f11c01d6038 R14: 00007f11c01d5fa0 R15: 00007fff311634a8
[  258.519235][T15623]  </TASK>
[  258.520455][T15623] Mem-Info:
[  258.634606][T15623] active_anon:13782 inactive_anon:0 isolated_anon:0
[  258.634606][T15623]  active_file:1630 inactive_file:38315 isolated_file:0
[  258.634606][T15623]  unevictable:1768 dirty:88 writeback:0
[  258.634606][T15623]  slab_reclaimable:10810 slab_unreclaimable:61022
[  258.634606][T15623]  mapped:18516 shmem:3611 pagetables:987
[  258.634606][T15623]  sec_pagetables:0 bounce:0
[  258.634606][T15623]  kernel_misc_reclaimable:0
[  258.634606][T15623]  free:278534 free_pcp:19425 free_cma:0
[  258.657198][T15623] Node 0 active_anon:31660kB inactive_anon:0kB active_file:3880kB inactive_file:135808kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:43080kB dirty:196kB writeback:0kB shmem:4816kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8384kB pagetables:1960kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  258.667548][T15623] Node 1 active_anon:18708kB inactive_anon:0kB active_file:2640kB inactive_file:17452kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30984kB dirty:156kB writeback:0kB shmem:4936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6812kB pagetables:1920kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  258.678395][T15623] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  258.689483][T15623] lowmem_reserve[]: 0 811 811 811 811
[  258.691733][T15623] Node 0 DMA32 free:226108kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31708kB inactive_anon:0kB active_file:3880kB inactive_file:135808kB unevictable:3536kB writepending:196kB present:1556484kB managed:830852kB mlocked:0kB bounce:0kB free_pcp:51384kB local_pcp:14768kB free_cma:0kB
[  258.696736][T15628] ip_vti0: entered allmulticast mode
[  258.703447][T15623] lowmem_reserve[]: 0 0 0 0 0
[  258.707115][T15623] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  258.718992][T15623] lowmem_reserve[]: 0 0 854 854 854
[  258.720933][T15623] Node 1 Normal free:413992kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18644kB inactive_anon:0kB active_file:2640kB inactive_file:17452kB unevictable:3536kB writepending:156kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:31572kB local_pcp:11940kB free_cma:0kB
[  258.732243][T15623] lowmem_reserve[]: 0 0 0 0 0
[  258.734629][T15623] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  258.740671][T15623] Node 0 DMA32: 389*4kB (UM) 641*8kB (UE) 242*16kB (UE) 6*32kB (UME) 1*64kB (E) 2*128kB (UE) 28*256kB (U) 0*512kB 3*1024kB (UME) 2*2048kB (UE) 49*4096kB (UM) = 226108kB
[  258.747420][T15623] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  258.752394][T15623] Node 1 Normal: 624*4kB (UM) 259*8kB (UME) 133*16kB (UME) 114*32kB (UME) 69*64kB (UME) 27*128kB (UME) 2*256kB (UE) 2*512kB (UM) 1*1024kB (M) 2*2048kB (UM) 95*4096kB (UM) = 413992kB
[  258.758319][T15623] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  258.761368][T15623] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  258.764312][T15623] 42355 total pagecache pages
[  258.766025][T15623] 0 pages in swap cache
[  258.767471][T15623] Free swap  = 124996kB
[  258.768947][T15623] Total swap = 124996kB
[  258.770362][T15623] 786301 pages RAM
[  258.771677][T15623] 0 pages HighMem/MovableOnly
[  258.773251][T15623] 241356 pages reserved
[  258.774706][T15623] 0 pages cma reserved
[  258.847171][T15632] netlink: 'syz.1.2622': attribute type 8 has an invalid length.
[  258.872113][T15636] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  259.102988][T15670] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  259.227445][T15674] __nla_validate_parse: 32 callbacks suppressed
[  259.227456][T15674] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2635'.
[  259.233283][T15674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2635'.
[  259.268214][T15678] 8021q: adding VLAN 0 to HW filter on device batadv0
[  259.336071][T15688] netlink: 'syz.0.2638': attribute type 178 has an invalid length.
[  259.405616][T15693] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2640'.
[  259.411837][T15691] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  259.412494][T15693] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2640'.
[  259.419344][T15694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2640'.
[  259.467843][T15690] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2639'.
[  259.558805][T15703] lo: Caught tx_queue_len zero misconfig
[  259.571597][T15703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2642'.
[  259.582653][T15700] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2641'.
[  259.587416][T15700] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2641'.
[  259.590930][T15700] netlink: 'syz.2.2641': attribute type 7 has an invalid length.
[  259.595336][T15700] netlink: 'syz.2.2641': attribute type 8 has an invalid length.
[  259.598273][T15700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2641'.
[  259.841593][T15728] syzkaller1: entered promiscuous mode
[  259.844936][T15728] syzkaller1: entered allmulticast mode
[  259.858131][T15734] bridge_slave_0: left allmulticast mode
[  259.872959][T15734] bond2: left promiscuous mode
[  259.875237][T15734] bridge19: left promiscuous mode
[  259.907525][T15734] bond0: left promiscuous mode
[  259.910145][T15734] batadv0: left promiscuous mode
[  259.969321][T15737] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  260.148701][T15748] ip_vti0: left allmulticast mode
[  260.256995][T15762] 8021q: adding VLAN 0 to HW filter on device batadv0
[  260.367848][T15768] lo speed is unknown, defaulting to 1000
[  260.875029][T15785] xt_l2tp: v2 sid > 0xffff: 1114112
[  261.719133][T15831] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  261.808327][T15835] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  261.819217][T15836] syzkaller1: entered promiscuous mode
[  261.821491][T15836] syzkaller1: entered allmulticast mode
[  262.275549][T15860] validate_nla: 46 callbacks suppressed
[  262.275640][T15860] netlink: 'syz.0.2679': attribute type 13 has an invalid length.
[  262.389628][T15874] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  262.907893][T15924] netlink: 'syz.1.2696': attribute type 7 has an invalid length.
[  262.917663][T15924] netlink: 'syz.1.2696': attribute type 8 has an invalid length.
[  263.097178][T15940] syzkaller0: entered promiscuous mode
[  263.099320][T15940] syzkaller0: entered allmulticast mode
[  263.149481][T15946] lo speed is unknown, defaulting to 1000
[  263.212840][T15947] lo: Caught tx_queue_len zero misconfig
[  263.232405][T15947] netlink: 'syz.0.2702': attribute type 12 has an invalid length.
[  263.837743][T15970] 8021q: adding VLAN 0 to HW filter on device batadv0
[  264.037396][T15982] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  264.047741][T15982] netlink: 'syz.0.2711': attribute type 4 has an invalid length.
[  264.058627][T15986] netlink: 'syz.2.2712': attribute type 8 has an invalid length.
[  264.251612][T16007] __nla_validate_parse: 39 callbacks suppressed
[  264.251622][T16007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2720'.
[  264.251645][T16001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2716'.
[  264.289340][T16001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2716'.
[  264.337031][T16008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2719'.
[  264.339409][T16012] bond0: entered promiscuous mode
[  264.343226][T16012] batadv0: entered promiscuous mode
[  264.349046][T16012] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  264.352328][T16012] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  264.357458][T16012] 8021q: adding VLAN 0 to HW filter on device hsr0
[  264.362070][T16012] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2722'.
[  264.410462][T16022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2724'.
[  264.415597][T16021] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2723'.
[  293.801623][T16040] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  293.827849][T16040] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2728'.
[  293.896435][T16049] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2730'.
[  293.958198][T16063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2733'.
[  294.070526][T16069] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2735'.
[  294.154606][T16079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2736'.
[  294.265241][T16085] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  294.267523][T16086] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  294.301015][T16091] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2739'.
[  294.408169][T16104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2744'.
[  294.418541][T16104] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2744'.
[  294.579887][T16113] bond0: Caught tx_queue_len zero misconfig
[  294.674444][T16117] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2747'.
[  294.678381][T16117] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2747'.
[  294.836668][T16122] syzkaller1: entered promiscuous mode
[  294.838747][T16122] syzkaller1: entered allmulticast mode
[  294.973434][T16124] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  294.976670][T16124] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  295.169794][T16133] netlink: 'syz.2.2753': attribute type 2 has an invalid length.
[  295.183931][T16133] netlink: 'syz.2.2753': attribute type 1 has an invalid length.
[  295.189366][T16133] netlink: 'syz.2.2753': attribute type 1 has an invalid length.
[  295.195144][T16133] netlink: 'syz.2.2753': attribute type 13 has an invalid length.
[  295.265473][T16135] tipc: New replicast peer: 0.0.0.0
[  295.267781][T16135] tipc: Enabled bearer <udp:syz2>, priority 10
[  295.270601][T16135] tipc: New replicast peer: 255.255.255.255
[  296.058299][T16178] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_rx_wq": -EINTR
[  296.225529][T16175] block nbd1: server does not support multiple connections per device.
[  296.234859][T16175] block nbd1: shutting down sockets
[  296.384659][ T5880] tipc: Node number set to 2184267376
[  296.762412][T16241] nftables ruleset with unbound chain
[  296.875648][T16254] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  297.244194][T16286] netlink: 'syz.0.2787': attribute type 10 has an invalid length.
[  297.464981][T16300] netlink: 'syz.0.2791': attribute type 1 has an invalid length.
[  297.505763][T16306] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  297.518884][T16306] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  297.622064][T16321] netlink: 'syz.0.2795': attribute type 13 has an invalid length.
[  297.625386][T16319] netlink: 'syz.0.2795': attribute type 13 has an invalid length.
[  298.864484][T16377] mac80211_hwsim hwsim4 wlan0: Caught tx_queue_len zero misconfig
[  298.961305][T16387] __nla_validate_parse: 22 callbacks suppressed
[  298.961331][T16387] netlink: 78 bytes leftover after parsing attributes in process `syz.0.2812'.
[  298.967431][T16393] netlink: 'syz.1.2813': attribute type 9 has an invalid length.
[  298.970141][T16393] netlink: 'syz.1.2813': attribute type 7 has an invalid length.
[  298.977130][T16394] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  299.080232][T16400] tun0: tun_chr_ioctl cmd 1074025672
[  299.082301][T16400] tun0: ignored: set checksum disabled
[  299.169076][T16406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2816'.
[  299.190367][T16406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2816'.
[  299.577941][T16422] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2820'.
[  299.823171][T16438] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2824'.
[  299.827233][T16438] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2824'.
[  299.832190][T16438] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  299.894358][T16440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2825'.
[  300.251704][T16460] lo: Caught tx_queue_len zero misconfig
[  300.332315][T16469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2833'.
[  300.401980][T16474] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2836'.
[  300.407414][T16474] validate_nla: 1 callbacks suppressed
[  300.407426][T16474] netlink: 'syz.0.2836': attribute type 7 has an invalid length.
[  300.414225][T16474] netlink: 'syz.0.2836': attribute type 8 has an invalid length.
[  300.417116][T16474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2836'.
[  300.428321][T16474] syz_tun: entered promiscuous mode
[  300.432270][T16474] syz_tun: left promiscuous mode
[  300.500028][T16482] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  300.720208][T16499] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  301.021680][T16533] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1)
[  301.097879][T16541] netlink: 'syz.2.2853': attribute type 7 has an invalid length.
[  301.100590][T16541] netlink: 'syz.2.2853': attribute type 8 has an invalid length.
[  301.100976][T16542] netlink: 'syz.1.2854': attribute type 178 has an invalid length.
[  301.106557][T16541] dummy0: entered promiscuous mode
[  301.118887][T16541] dummy0: left promiscuous mode
[  301.253402][T16553] syzkaller0: entered promiscuous mode
[  301.256951][T16553] syzkaller0: entered allmulticast mode
[  301.259650][T16553] tipc: Resetting bearer <eth:syzkaller0>
[  301.313073][T16558] Bluetooth: MGMT ver 1.23
[  301.315337][T16558] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  301.318989][T16558] tipc: Resetting bearer <eth:syzkaller0>
[  301.468314][T16571] batadv0: left promiscuous mode
[  301.646696][T16588] netlink: 'syz.0.2866': attribute type 29 has an invalid length.
[  301.650971][T16588] netlink: 'syz.0.2866': attribute type 29 has an invalid length.
[  301.653912][T16588] netlink: 'syz.0.2866': attribute type 29 has an invalid length.
[  301.657018][T16588] netlink: 'syz.0.2866': attribute type 29 has an invalid length.
[  301.660195][T16588] netlink: 'syz.0.2866': attribute type 29 has an invalid length.
[  301.723961][T16580] block nbd1: server does not support multiple connections per device.
[  301.727008][T16580] block nbd1: shutting down sockets
[  301.864212][T16592] 8021q: adding VLAN 0 to HW filter on device batadv0
[  302.501795][T16623] syzkaller1: entered promiscuous mode
[  302.503688][T16623] syzkaller1: entered allmulticast mode
[  302.667788][T16638] bond0: left promiscuous mode
[  303.825560][T16723] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  303.829596][T16725] syzkaller0: entered promiscuous mode
[  303.831680][T16725] syzkaller0: entered allmulticast mode
[  303.849955][T16723] tipc: Resetting bearer <eth:syzkaller0>
[  303.864678][T16723] tipc: Resetting bearer <eth:syzkaller0>
[  303.875656][T16723] tipc: Disabling bearer <eth:syzkaller0>
[  303.925966][T16732] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  303.930224][T16732] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  304.088955][T16739] __nla_validate_parse: 35 callbacks suppressed
[  304.088967][T16739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2908'.
[  304.183278][T16745] syzkaller0: left promiscuous mode
[  304.188894][T16745] syzkaller0: left allmulticast mode
[  304.252254][T16748] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  304.300972][T16750] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2913'.
[  304.569350][T16766] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2916'.
[  304.645459][T16774] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  304.711049][T16789] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2921'.
[  304.717854][T16789] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2921'.
[  304.719491][T16791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2922'.
[  304.728703][T16792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2922'.
[  304.814894][T16795] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2923'.
[  304.871084][T16802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2925'.
[  304.906547][T16805] syzkaller0: entered promiscuous mode
[  304.908932][T16805] syzkaller0: entered allmulticast mode
[  304.913562][T16804] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2926'.
[  305.129242][T16816] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  305.138356][T16820] dvmrp1: tun_chr_ioctl cmd 1074025677
[  305.140584][T16820] dvmrp1: linktype set to 773
[  305.149766][T16816] tipc: New replicast peer: 255.255.255.255
[  305.307743][T16826] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  305.461604][T16847] syzkaller0: entered promiscuous mode
[  305.463551][T16847] syzkaller0: entered allmulticast mode
[  305.466286][T16847] tipc: Resetting bearer <eth:syzkaller0>
[  305.519830][T16852] validate_nla: 54 callbacks suppressed
[  305.519846][T16852] netlink: 'syz.2.2940': attribute type 5 has an invalid length.
[  305.612902][T16852] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  305.752316][T16877] netlink: 'syz.2.2945': attribute type 7 has an invalid length.
[  305.757927][T16877] netlink: 'syz.2.2945': attribute type 8 has an invalid length.
[  305.913127][T16889] tipc: Resetting bearer <eth:syzkaller0>
[  305.977723][T16896] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  305.981911][T16896] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  306.063103][T16901] netlink: 'syz.0.2950': attribute type 10 has an invalid length.
[  306.302497][T16935] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  306.710228][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.712881][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.952907][T16988] netlink: 'syz.1.2973': attribute type 7 has an invalid length.
[  306.957663][T16988] netlink: 'syz.1.2973': attribute type 8 has an invalid length.
[  307.201710][T17002] netlink: 'syz.2.2978': attribute type 178 has an invalid length.
[  307.222989][T16996] bridge_slave_0: invalid flags given to default FDB implementation
[  307.247399][T17004] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  307.306952][T17004] netlink: 'syz.0.2979': attribute type 1 has an invalid length.
[  307.351717][T17008] lo speed is unknown, defaulting to 1000
[  307.398900][T17022] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  307.513095][T17029] 8021q: adding VLAN 0 to HW filter on device batadv0
[  307.619289][T17036] bridge0: entered promiscuous mode
[  307.623037][T17036] bridge0: left promiscuous mode
[  307.631388][T17034] netlink: 'syz.1.2985': attribute type 21 has an invalid length.
[  307.770022][T17049] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  307.850697][T17056] netlink: 'syz.2.2993': attribute type 178 has an invalid length.
[  307.949749][T17060] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  308.059502][T17071] syzkaller0: left promiscuous mode
[  308.061229][T17071] syzkaller0: left allmulticast mode
[  308.827174][T17096] tap0: tun_chr_ioctl cmd 1074025681
[  309.145816][T17113] __nla_validate_parse: 24 callbacks suppressed
[  309.145828][T17113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3008'.
[  309.154901][T17113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3008'.
[  309.362945][T17124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3010'.
[  309.546804][T17142] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3013'.
[  309.712850][T17145] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3013'.
[  309.989615][T17165] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3019'.
[  309.992870][T17165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3019'.
[  309.999978][T17165] syz_tun: entered promiscuous mode
[  310.002800][T17165] syz_tun: left promiscuous mode
[  310.091095][T17167] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  310.094420][T17167] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3020'.
[  310.129020][T17169] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3021'.
[  310.144883][T17169] syzkaller0: entered promiscuous mode
[  310.146692][T17169] syzkaller0: entered allmulticast mode
[  310.149748][T17169] tipc: Resetting bearer <eth:syzkaller0>
[  310.357873][T17177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3023'.
[  310.362470][T17177] tipc: Resetting bearer <eth:syzkaller0>
[  310.367565][T17177] syzkaller0: left promiscuous mode
[  310.482534][T17191] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  310.788964][T17206] lo speed is unknown, defaulting to 1000
[  310.789634][T17211] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  311.186871][T17242] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  311.200506][T17242] veth0_virt_wifi: entered promiscuous mode
[  311.203138][T17242] veth0_virt_wifi: left promiscuous mode
[  311.288771][T17251] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  311.495095][T17259] validate_nla: 49 callbacks suppressed
[  311.495113][T17259] netlink: 'syz.0.3042': attribute type 29 has an invalid length.
[  311.540683][T17259] netlink: 'syz.0.3042': attribute type 29 has an invalid length.
[  311.907404][T17298] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  311.913037][T17298] netlink: 'syz.0.3051': attribute type 8 has an invalid length.
[  311.927192][T17298] bond0: entered promiscuous mode
[  311.929949][T17298] bond0: left promiscuous mode
[  312.133042][T17326] 8021q: adding VLAN 0 to HW filter on device batadv0
[  312.637837][T17352] 8021q: adding VLAN 0 to HW filter on device batadv0
[  312.737992][T17357] netlink: 'syz.1.3061': attribute type 7 has an invalid length.
[  312.743633][T17357] netlink: 'syz.1.3061': attribute type 8 has an invalid length.
[  312.878566][T17365] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  313.058347][T17369] lo speed is unknown, defaulting to 1000
[  313.162140][T17374] netlink: 'syz.0.3067': attribute type 29 has an invalid length.
[  313.180264][T17374] netlink: 'syz.0.3067': attribute type 29 has an invalid length.
[  313.183518][T17374] netlink: 'syz.0.3067': attribute type 29 has an invalid length.
[  313.189967][T17374] netlink: 'syz.0.3067': attribute type 29 has an invalid length.
[  313.204615][T17374] netlink: 'syz.0.3067': attribute type 29 has an invalid length.
[  313.959291][T17395] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  314.167304][T17417] __nla_validate_parse: 28 callbacks suppressed
[  314.167319][T17417] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3077'.
[  314.174794][T17417] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3077'.
[  314.178415][T17417] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3077'.
[  314.266820][T17421] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  314.292209][T17421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3079'.
[  314.357374][T17432] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3081'.
[  314.360193][T17432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3081'.
[  314.448355][T17440] openvswitch: netlink: VXLAN extension 4 out of range max 1
[  314.542103][T17444] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20000
[  315.092770][T17446] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3086'.
[  315.096488][T17446] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3086'.
[  315.222337][T17452] syzkaller1: entered promiscuous mode
[  315.224576][T17452] syzkaller1: entered allmulticast mode
[  315.317389][T17455] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3088'.
[  315.461726][T17470] lo speed is unknown, defaulting to 1000
[  315.731137][T17485] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3097'.
[  315.910713][T17504] lo speed is unknown, defaulting to 1000
[  316.000517][   T33] audit: type=1107 audit(1758540934.315:4): pid=17510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  316.011960][   T33] audit: type=1107 audit(1758540934.315:5): pid=17510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  316.016658][   T33] audit: type=1107 audit(1758540934.315:6): pid=17510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  316.020416][   T33] audit: type=1107 audit(1758540934.315:7): pid=17510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  316.034239][   T33] audit: type=1107 audit(1758540934.315:8): pid=17510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  316.039126][   T33] audit: type=1107 audit(1758540934.315:9): pid=17510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  316.044034][   T33] audit: type=1107 audit(1758540934.315:10): pid=17510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  316.048646][   T33] audit: type=1107 audit(1758540934.315:11): pid=17510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  316.058421][   T33] audit: type=1107 audit(1758540934.315:12): pid=17510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  316.062343][   T33] audit: type=1107 audit(1758540934.315:13): pid=17510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  316.540319][T17529] syzkaller0: entered promiscuous mode
[  316.542663][T17529] syzkaller0: entered allmulticast mode
[  316.547916][T17531] validate_nla: 100 callbacks suppressed
[  316.547926][T17531] netlink: 'syz.0.3108': attribute type 8 has an invalid length.
[  316.552083][T17529] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  316.555727][T17531] bond0: entered promiscuous mode
[  316.556088][T17529] netlink: 'syz.1.3107': attribute type 1 has an invalid length.
[  316.560049][T17531] bond0: left promiscuous mode
[  316.926372][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  317.870766][T17549] lo speed is unknown, defaulting to 1000
[  317.886025][T17555] netlink: 'syz.0.3111': attribute type 11 has an invalid length.
[  317.895482][T17555] bond0: entered promiscuous mode
[  317.898313][T17555] batadv0: entered promiscuous mode
[  317.901302][T17555] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  317.911848][T17555] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  317.917224][T17555] 8021q: adding VLAN 0 to HW filter on device hsr0
[  318.026994][T17561] 8021q: adding VLAN 0 to HW filter on device batadv0
[  318.130095][T17568] netlink: 'syz.0.3117': attribute type 29 has an invalid length.
[  318.134291][T17568] netlink: 'syz.0.3117': attribute type 29 has an invalid length.
[  318.137437][T17568] netlink: 'syz.0.3117': attribute type 29 has an invalid length.
[  318.140540][T17568] netlink: 'syz.0.3117': attribute type 29 has an invalid length.
[  318.144176][T17568] netlink: 'syz.0.3117': attribute type 29 has an invalid length.
[  318.148157][T17568] netlink: 'syz.0.3117': attribute type 29 has an invalid length.
[  318.151309][T17568] netlink: 'syz.0.3117': attribute type 29 has an invalid length.
[  318.520497][T17584] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  318.768825][T17610] syzkaller0: left allmulticast mode
[  318.822191][T17615] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  319.690743][T17653] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001
[  319.823110][T17660] IPv6: NLM_F_CREATE should be specified when creating new route
[  319.827678][T17660] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  319.830163][T17660] IPv6: NLM_F_CREATE should be set when creating new route
[  319.832604][T17660] IPv6: NLM_F_CREATE should be set when creating new route
[  319.835131][T17660] IPv6: NLM_F_CREATE should be set when creating new route
[  319.918094][    T9] IPVS: starting estimator thread 0...
[  320.004082][T17668] IPVS: using max 63 ests per chain, 151200 per kthread
[  320.017814][T17674] __nla_validate_parse: 27 callbacks suppressed
[  320.017825][T17674] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.3143'.
[  320.026041][T17674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3143'.
[  320.158052][T17687] lo speed is unknown, defaulting to 1000
[  320.193670][T17697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3148'.
[  320.300907][T17709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3151'.
[  320.307330][T17709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3151'.
[  320.316070][T17709] 8021q: adding VLAN 0 to HW filter on device batadv0
[  320.476272][T17728] : renamed from wg2
[  320.489073][T17728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3158'.
[  320.527552][T17727] 8021q: adding VLAN 0 to HW filter on device batadv0
[  320.625086][T17736] dvmrp8: entered allmulticast mode
[  320.647476][T17736] lo speed is unknown, defaulting to 1000
[  320.677518][T17739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3160'.
[  320.692781][T17741] sctp: [Deprecated]: syz.1.3159 (pid 17741) Use of int in maxseg socket option.
[  320.692781][T17741] Use struct sctp_assoc_value instead
[  320.745059][T17739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3160'.
[  320.749128][T17739] bond0: left promiscuous mode
[  320.752016][T17739] batadv0: left promiscuous mode
[  320.873613][T17734] dvmrp8: left allmulticast mode
[  321.040914][T17751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3162'.
[  321.082471][T17751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3162'.
[  321.106030][T17753] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  321.504849][T17794] 8021q: adding VLAN 0 to HW filter on device batadv0
[  321.602832][T17802] gretap0: entered promiscuous mode
[  321.606391][T17802] gretap0: left promiscuous mode
[  321.701884][T17816] validate_nla: 46 callbacks suppressed
[  321.701895][T17816] netlink: 'syz.1.3179': attribute type 13 has an invalid length.
[  321.771611][T17818] IPVS: Unknown mcast interface: nr0
[  321.837593][T17829] netlink: 'syz.2.3185': attribute type 7 has an invalid length.
[  321.840482][T17829] netlink: 'syz.2.3185': attribute type 8 has an invalid length.
[  321.840810][T17827] ip6gretap0: entered promiscuous mode
[  321.847682][T17827] syz_tun: entered promiscuous mode
[  321.851186][T17827] hsr0: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network
[  321.855082][T17827] hsr0: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network
[  322.001241][T17845] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  322.236710][T17870] syzkaller0: entered promiscuous mode
[  322.238671][T17870] syzkaller0: entered allmulticast mode
[  322.369102][T17874] netlink: 'syz.2.3200': attribute type 7 has an invalid length.
[  322.374042][T17874] netlink: 'syz.2.3200': attribute type 8 has an invalid length.
[  322.377801][T17874] netlink: 'syz.2.3200': attribute type 7 has an invalid length.
[  322.380858][T17874] netlink: 'syz.2.3200': attribute type 8 has an invalid length.
[  322.387621][T17874] netlink: 'syz.2.3200': attribute type 7 has an invalid length.
[  322.391174][T17874] netlink: 'syz.2.3200': attribute type 8 has an invalid length.
[  322.401347][T17874] netlink: 'syz.2.3200': attribute type 7 has an invalid length.
[  322.640631][T17897] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  322.830185][T17907] ip6gretap0: left promiscuous mode
[  322.833251][T17907] syz_tun: left promiscuous mode
[  323.722593][T17958] sch_tbf: burst 43029 is lower than device ip6gre0 mtu (65485) !
[  324.167797][T17967] 8021q: adding VLAN 0 to HW filter on device batadv0
[  324.776536][T18006] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  325.116270][T18029] bond0: entered promiscuous mode
[  325.119278][T18029] batadv0: entered promiscuous mode
[  325.122767][T18029] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  325.127681][T18029] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  325.133368][T18029] 8021q: adding VLAN 0 to HW filter on device hsr0
[  325.141487][T18029] 8021q: adding VLAN 0 to HW filter on device batadv0
[  325.237826][T18033] __nla_validate_parse: 72 callbacks suppressed
[  325.237843][T18033] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3235'.
[  325.526073][T18043] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  325.540975][T18044] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  325.603319][T18052] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3239'.
[  325.638045][T18055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3240'.
[  325.751286][T18061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3242'.
[  326.107052][T18082] veth0: entered promiscuous mode
[  326.109606][T18081] veth0: left promiscuous mode
[  326.350166][T18093] 8021q: adding VLAN 0 to HW filter on device batadv0
[  326.530521][T18102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3255'.
[  326.542112][T18102] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3255'.
[  326.598028][T18104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3256'.
[  326.601583][T18104] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3256'.
[  326.612113][T18104] geneve6: entered promiscuous mode
[  326.615656][T18104] geneve6: entered allmulticast mode
[  326.616613][T18063] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  326.620695][ T5871] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  326.620954][ T5871] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  326.627632][ T5871] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  326.632097][ T5871] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  326.859353][T18119] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  326.925339][T18119] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  327.015921][T18121] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3260'.
[  327.022377][T18119] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  327.071529][T18119] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  327.213437][ T5871] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  327.231994][ T5871] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  327.246300][ T5871] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  327.256716][ T5871] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  327.695823][T18157] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3268'.
[  327.701115][T18157] validate_nla: 68 callbacks suppressed
[  327.701129][T18157] netlink: 'syz.1.3268': attribute type 8 has an invalid length.
[  327.794992][T18160] 8021q: adding VLAN 0 to HW filter on device batadv0
[  328.604907][T18168] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  328.715017][T18179] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  328.751088][T18179] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  328.815562][T18179] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  328.858903][T18179] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  328.945480][ T5871] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  328.948354][ T5871] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  328.972025][ T5871] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  328.975845][ T5871] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  329.045796][T18204] bond0: left promiscuous mode
[  329.048167][T18204] batadv0: left promiscuous mode
[  329.831270][T18245] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  330.639713][T18252] netlink: 'syz.1.3290': attribute type 1 has an invalid length.
[  330.640738][T18253] netlink: 'syz.1.3290': attribute type 1 has an invalid length.
[  330.660786][T18252] 8021q: adding VLAN 0 to HW filter on device bond5
[  330.691080][T18253] bond5: (slave veth7): Enslaving as an active interface with a down link
[  330.722272][T18252] bond5: (slave veth9): Enslaving as an active interface with a down link
[  330.872132][T18263] __nla_validate_parse: 14 callbacks suppressed
[  330.872150][T18263] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3292'.
[  330.927189][T18277] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3295'.
[  330.930892][T18277] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3295'.
[  330.935194][T18276] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3296'.
[  330.945703][T18276] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3296'.
[  330.969775][T18276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3296'.
[  330.976071][T18276] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3296'.
[  330.980753][T18276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3296'.
[  330.985834][T18276] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3296'.
[  331.003008][T18276] netlink: 'syz.2.3296': attribute type 10 has an invalid length.
[  331.099239][T18287] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3299'.
[  331.132616][T18291] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  331.138680][T18291] ip6gretap1: entered allmulticast mode
[  331.204387][T18300] netlink: 'syz.1.3302': attribute type 8 has an invalid length.
[  331.205820][T18301] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  331.220504][T18295] netlink: 'syz.0.3301': attribute type 13 has an invalid length.
[  331.400134][T18317] netlink: 'syz.1.3306': attribute type 4 has an invalid length.
[  331.471124][T18341] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  331.474620][T18341] syzkaller0: entered promiscuous mode
[  331.476500][T18341] syzkaller0: entered allmulticast mode
[  331.481526][T18341] tipc: Resetting bearer <eth:syzkaller0>
[  331.503650][T18341] tipc: Resetting bearer <eth:syzkaller0>
[  331.569487][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  331.573113][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  331.576019][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  331.578733][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  331.621967][T18354] netlink: 'syz.2.3316': attribute type 13 has an invalid length.
[  331.627242][T18352] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  331.631339][T18354] tipc: Resetting bearer <eth:syzkaller0>
[  331.713912][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  331.721463][T18359] netlink: 'syz.2.3317': attribute type 13 has an invalid length.
[  331.742485][T18359] tipc: Resetting bearer <eth:syzkaller0>
[  331.767741][T18359] netlink: 'syz.2.3317': attribute type 4 has an invalid length.
[  331.906060][T18368] lo speed is unknown, defaulting to 1000
[  331.949521][T18370] veth0: entered promiscuous mode
[  332.029964][T18370] 8021q: adding VLAN 0 to HW filter on device bond0
[  332.036113][T18370] 8021q: adding VLAN 0 to HW filter on device team0
[  332.042996][T18370] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  332.052083][   T24] lo speed is unknown, defaulting to 1000
[  332.055650][   T24] syz0: Port: 1 Link ACTIVE
[  332.064340][   T24] lo speed is unknown, defaulting to 1000
[  332.140081][T18370] veth0: left promiscuous mode
[  332.500633][T18393] sch_tbf: burst 2 is lower than device lo mtu (65499) !
[  332.592177][T18404] bond0: entered promiscuous mode
[  332.600136][T18404] bond0: left promiscuous mode
[  332.790872][T18413] syzkaller0: entered promiscuous mode
[  332.792804][T18413] syzkaller0: entered allmulticast mode
[  333.445710][T18424] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  333.575291][    T9] lo speed is unknown, defaulting to 1000
[  333.577134][    T9] syz0: Port: 1 Link DOWN
[  333.578591][    T9] lo speed is unknown, defaulting to 1000
[  333.699267][T18429] bond0: entered promiscuous mode
[  333.702455][T18429] batadv0: entered promiscuous mode
[  333.706848][T18429] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  333.710726][T18429] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  333.715504][T18429] 8021q: adding VLAN 0 to HW filter on device hsr0
[  333.722404][T18429] 8021q: adding VLAN 0 to HW filter on device batadv0
[  333.776195][T18431] validate_nla: 6 callbacks suppressed
[  333.776211][T18431] netlink: 'syz.1.3337': attribute type 13 has an invalid length.
[  333.966200][T18435] netlink: 'syz.1.3339': attribute type 7 has an invalid length.
[  333.969488][T18435] netlink: 'syz.1.3339': attribute type 8 has an invalid length.
[  334.310438][T18447] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  334.320579][T18447] lo: entered promiscuous mode
[  334.322790][T18447] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  334.884658][T18489] tipc: Resetting bearer <eth:syzkaller0>
[  334.887754][T18494] tunl0: Caught tx_queue_len zero misconfig
[  334.890758][T18495] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  334.912466][T18501] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  334.954682][T18501] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  335.109174][T18520] tipc: Resetting bearer <eth:syzkaller0>
[  335.111023][T18520] tipc: Resetting bearer <eth:syzkaller0>
[  335.264919][T18543] netlink: 'syz.2.3362': attribute type 178 has an invalid length.
[  335.273689][T18542] tipc: Resetting bearer <eth:syzkaller0>
[  335.619455][T18576] netlink: 'syz.2.3368': attribute type 8 has an invalid length.
[  335.680706][T18580] lo: left promiscuous mode
[  335.688319][T18580] tipc: Resetting bearer <eth:syzkaller0>
[  335.691238][T18580] syzkaller0: left promiscuous mode
[  335.693020][T18580] syzkaller0: left allmulticast mode
[  335.699218][T18580] ip6gretap1: left allmulticast mode
[  336.001488][T18602] __nla_validate_parse: 31 callbacks suppressed
[  336.001500][T18602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3376'.
[  336.019877][T18602] team1: entered promiscuous mode
[  336.021621][T18602] team1: entered allmulticast mode
[  336.058838][T18604] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3377'.
[  336.063511][T18604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3377'.
[  336.067944][T18604] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3377'.
[  336.122168][T18606] 8021q: adding VLAN 0 to HW filter on device bond4
[  336.124944][T18606] bridge0: port 3(bond4) entered blocking state
[  336.127124][T18606] bridge0: port 3(bond4) entered disabled state
[  336.129275][T18606] bond4: entered allmulticast mode
[  336.132293][T18606] bond4: entered promiscuous mode
[  336.142610][T18606] netlink: 'syz.2.3378': attribute type 13 has an invalid length.
[  336.248664][T18612] geneve6: left promiscuous mode
[  336.250372][T18612] geneve6: left allmulticast mode
[  336.299506][T18619] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  336.325216][T18616] team1: left promiscuous mode
[  336.327268][T18616] team1: left allmulticast mode
[  336.344670][T18616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3379'.
[  336.347544][T18619] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3381'.
[  336.420570][T18623] lo speed is unknown, defaulting to 1000
[  336.590541][T18632] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3384'.
[  336.673225][T18640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3386'.
[  336.889282][T18642] lo speed is unknown, defaulting to 1000
[  336.967372][T18652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3388'.
[  336.975985][T18653] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3387'.
[  337.535992][T18682] syz.1.3394: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  337.540748][T18682] CPU: 1 UID: 0 PID: 18682 Comm: syz.1.3394 Not tainted syzkaller #0 PREEMPT(full) 
[  337.540760][T18682] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  337.540765][T18682] Call Trace:
[  337.540770][T18682]  <TASK>
[  337.540775][T18682]  dump_stack_lvl+0x189/0x250
[  337.540792][T18682]  ? __pfx_dump_stack_lvl+0x10/0x10
[  337.540802][T18682]  ? __pfx__printk+0x10/0x10
[  337.540813][T18682]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  337.540823][T18682]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  337.540833][T18682]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  337.540843][T18682]  warn_alloc+0x214/0x310
[  337.540856][T18682]  ? stack_depot_save_flags+0x40/0x860
[  337.540870][T18682]  ? __pfx_warn_alloc+0x10/0x10
[  337.540883][T18682]  ? kasan_save_track+0x4f/0x80
[  337.540893][T18682]  ? xskq_create+0x56/0x170
[  337.540901][T18682]  ? xsk_init_queue+0xb0/0x110
[  337.540907][T18682]  ? xsk_setsockopt+0x4dc/0x8d0
[  337.540917][T18682]  ? do_sock_setsockopt+0x17c/0x1b0
[  337.540926][T18682]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  337.540935][T18682]  ? do_syscall_64+0xfa/0x3b0
[  337.540943][T18682]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.540955][T18682]  __vmalloc_node_range_noprof+0x125/0x12f0
[  337.540980][T18682]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  337.540994][T18682]  ? __kasan_kmalloc+0x93/0xb0
[  337.541006][T18682]  vmalloc_user_noprof+0xad/0xf0
[  337.541032][T18682]  ? xskq_create+0xbf/0x170
[  337.541041][T18682]  xskq_create+0xbf/0x170
[  337.541050][T18682]  xsk_init_queue+0xb0/0x110
[  337.541059][T18682]  xsk_setsockopt+0x4dc/0x8d0
[  337.541071][T18682]  ? __pfx_xsk_setsockopt+0x10/0x10
[  337.541083][T18682]  ? __pfx_aa_sk_perm+0x10/0x10
[  337.541097][T18682]  ? aa_sock_opt_perm+0xff/0x1b0
[  337.541107][T18682]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  337.541115][T18682]  ? __pfx_xsk_setsockopt+0x10/0x10
[  337.541128][T18682]  do_sock_setsockopt+0x17c/0x1b0
[  337.541140][T18682]  __x64_sys_setsockopt+0x13f/0x1b0
[  337.541152][T18682]  do_syscall_64+0xfa/0x3b0
[  337.541160][T18682]  ? lockdep_hardirqs_on+0x9c/0x150
[  337.541168][T18682]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.541175][T18682]  ? exc_page_fault+0x9f/0xf0
[  337.541184][T18682]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.541191][T18682] RIP: 0033:0x7facca18ec29
[  337.541199][T18682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  337.541206][T18682] RSP: 002b:00007faccaf76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  337.541215][T18682] RAX: ffffffffffffffda RBX: 00007facca3d5fa0 RCX: 00007facca18ec29
[  337.541221][T18682] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  337.541226][T18682] RBP: 00007facca211e41 R08: 0000000000000004 R09: 0000000000000000
[  337.541230][T18682] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  337.541235][T18682] R13: 00007facca3d6038 R14: 00007facca3d5fa0 R15: 00007ffccb9db7c8
[  337.541248][T18682]  </TASK>
[  337.541718][T18682] Mem-Info:
[  337.647513][T18682] active_anon:12399 inactive_anon:0 isolated_anon:0
[  337.647513][T18682]  active_file:1630 inactive_file:38339 isolated_file:0
[  337.647513][T18682]  unevictable:1768 dirty:39 writeback:0
[  337.647513][T18682]  slab_reclaimable:10924 slab_unreclaimable:64404
[  337.647513][T18682]  mapped:18482 shmem:2437 pagetables:950
[  337.647513][T18682]  sec_pagetables:0 bounce:0
[  337.647513][T18682]  kernel_misc_reclaimable:0
[  337.647513][T18682]  free:277781 free_pcp:17542 free_cma:0
[  337.667750][T18682] Node 0 active_anon:31356kB inactive_anon:0kB active_file:3860kB inactive_file:135864kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:43336kB dirty:76kB writeback:0kB shmem:4812kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8684kB pagetables:2128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  337.679351][T18682] Node 1 active_anon:18240kB inactive_anon:0kB active_file:2660kB inactive_file:17492kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30592kB dirty:80kB writeback:0kB shmem:4936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6844kB pagetables:1672kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  337.689597][T18682] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  337.699279][T18682] lowmem_reserve[]: 0 811 811 811 811
[  337.701445][T18682] Node 0 DMA32 free:237316kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31356kB inactive_anon:0kB active_file:3860kB inactive_file:135864kB unevictable:3536kB writepending:76kB present:1556484kB managed:830852kB mlocked:0kB bounce:0kB free_pcp:29824kB local_pcp:14116kB free_cma:0kB
[  337.711299][T18682] lowmem_reserve[]: 0 0 0 0 0
[  337.712829][T18682] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  337.722385][T18682] lowmem_reserve[]: 0 0 854 854 854
[  337.724316][T18682] Node 1 Normal free:399832kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18240kB inactive_anon:0kB active_file:2660kB inactive_file:17492kB unevictable:3536kB writepending:80kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:40488kB local_pcp:19648kB free_cma:0kB
[  337.736571][T18682] lowmem_reserve[]: 0 0 0 0 0
[  337.738555][T18682] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  337.743285][T18682] Node 0 DMA32: 497*4kB (M) 404*8kB (UME) 298*16kB (UME) 78*32kB (UME) 43*64kB (UME) 29*128kB (UM) 25*256kB (UME) 6*512kB (M) 8*1024kB (UME) 2*2048kB (ME) 48*4096kB (UM) = 237316kB
[  337.750287][T18682] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  337.757894][T18682] Node 1 Normal: 990*4kB (UM) 410*8kB (UME) 85*16kB (UME) 58*32kB (M) 18*64kB (UME) 7*128kB (UME) 3*256kB (UME) 9*512kB (UME) 3*1024kB (UME) 3*2048kB (UME) 91*4096kB (UM) = 399832kB
[  337.765375][T18682] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  337.769328][T18682] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  337.773176][T18682] 42406 total pagecache pages
[  337.775269][T18682] 0 pages in swap cache
[  337.776961][T18682] Free swap  = 124996kB
[  337.778632][T18682] Total swap = 124996kB
[  337.780335][T18682] 786301 pages RAM
[  337.781878][T18682] 0 pages HighMem/MovableOnly
[  337.783898][T18682] 241356 pages reserved
[  337.785571][T18682] 0 pages cma reserved
[  337.862358][T18694] netlink: 'syz.1.3398': attribute type 1 has an invalid length.
[  338.136513][T18720] netlink: 'syz.0.3407': attribute type 16 has an invalid length.
[  338.139165][T18720] netlink: 'syz.0.3407': attribute type 17 has an invalid length.
[  338.143315][T18720] lo: Caught tx_queue_len zero misconfig
[  338.206172][T18720] 8021q: adding VLAN 0 to HW filter on device batadv0
[  338.420448][T18735] syzkaller1: entered allmulticast mode
[  339.072231][T18747] netlink: 'syz.1.3413': attribute type 178 has an invalid length.
[  339.395912][T18782] veth7: entered promiscuous mode
[  339.436029][T18785] netlink: 'syz.2.3420': attribute type 8 has an invalid length.
[  339.586947][T18793] 8021q: adding VLAN 0 to HW filter on device bond4
[  339.649744][   T33] kauditd_printk_skb: 23 callbacks suppressed
[  339.649758][   T33] audit: type=1800 audit(1758540957.965:37): pid=18800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3425" name="memory.events" dev="tmpfs" ino=5812 res=0 errno=0
[  339.747035][T18806] 8021q: adding VLAN 0 to HW filter on device batadv0
[  339.869193][T18813] syzkaller0: entered promiscuous mode
[  339.871147][T18813] syzkaller0: entered allmulticast mode
[  340.036697][T18821] veth7: left promiscuous mode
[  340.070203][T18821] bond0: left promiscuous mode
[  340.074502][T18821] batadv0: left promiscuous mode
[  340.299515][T18836] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  340.398419][T18849] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  340.400595][T18850] netlink: 'syz.1.3441': attribute type 4 has an invalid length.
[  340.506744][T18855] netlink: 'syz.1.3443': attribute type 29 has an invalid length.
[  340.509605][T18854] netlink: 'syz.1.3443': attribute type 29 has an invalid length.
[  340.512186][T18854] netlink: 'syz.1.3443': attribute type 29 has an invalid length.
[  340.515131][T18854] netlink: 'syz.1.3443': attribute type 29 has an invalid length.
[  340.518377][T18854] netlink: 'syz.1.3443': attribute type 29 has an invalid length.
[  340.547199][T18857] bond0: Caught tx_queue_len zero misconfig
[  340.653099][T18862] netlink: 'syz.1.3446': attribute type 13 has an invalid length.
[  341.031274][T18874] __nla_validate_parse: 28 callbacks suppressed
[  341.031290][T18874] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3449'.
[  341.037780][T18874] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3449'.
[  341.065997][T18876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3450'.
[  341.161308][T18878] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  341.165665][T18878] netlink: 'syz.2.3451': attribute type 4 has an invalid length.
[  341.213345][T18884] sch_tbf: burst 43029 is lower than device ip6gre0 mtu (65485) !
[  341.591544][T18900] sctp: [Deprecated]: syz.2.3456 (pid 18900) Use of int in max_burst socket option.
[  341.591544][T18900] Use struct sctp_assoc_value instead
[  341.641603][T18903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3457'.
[  341.648043][T18905] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3457'.
[  341.648416][T18904] sctp: [Deprecated]: syz.1.3458 (pid 18904) Use of struct sctp_assoc_value in delayed_ack socket option.
[  341.648416][T18904] Use struct sctp_sack_info instead
[  341.651536][T18905] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3457'.
[  341.651554][T18905] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3457'.
[  341.652141][T18906] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3457'.
[  341.739869][T18908] lo speed is unknown, defaulting to 1000
[  341.868616][T18913] lo speed is unknown, defaulting to 1000
[  341.952838][T18918] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3461'.
[  342.087458][T18923] team0: Caught tx_queue_len zero misconfig
[  342.985916][T18952] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  343.025286][T18952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3468'.
[  344.123555][T18978] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  344.673345][T18991] validate_nla: 2 callbacks suppressed
[  344.673358][T18991] netlink: 'syz.0.3479': attribute type 13 has an invalid length.
[  344.985864][T19001] netlink: 'syz.1.3482': attribute type 13 has an invalid length.
[  345.087985][T19008] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  345.193451][T19017] dummy0: entered promiscuous mode
[  345.199277][T19017] batadv_slave_0: entered promiscuous mode
[  345.202547][T19017] hsr0: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network
[  345.207307][T19017] hsr0: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network
[  345.211618][T19017] hsr0: entered allmulticast mode
[  345.213675][T19017] dummy0: entered allmulticast mode
[  345.216262][T19017] batadv_slave_0: entered allmulticast mode
[  345.234166][    C0] ==================================================================
[  345.237335][    C0] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  345.240429][    C0] Read of size 1 at addr ffff8881060a3db0 by task syz.2.3487/19017
[  345.244118][    C0] 
[  345.245409][    C0] CPU: 0 UID: 0 PID: 19017 Comm: syz.2.3487 Not tainted syzkaller #0 PREEMPT(full) 
[  345.245429][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  345.245439][    C0] Call Trace:
[  345.245446][    C0]  <IRQ>
[  345.245454][    C0]  dump_stack_lvl+0x189/0x250
[  345.245474][    C0]  ? __kasan_check_byte+0x12/0x40
[  345.245495][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  345.245512][    C0]  ? lock_release+0x4b/0x3e0
[  345.245534][    C0]  ? __virt_addr_valid+0x4a5/0x5c0
[  345.245554][    C0]  print_report+0xca/0x240
[  345.245568][    C0]  ? xfrm_state_find+0x2cf2/0x5400
[  345.245587][    C0]  kasan_report+0x118/0x150
[  345.245607][    C0]  ? xfrm_state_find+0x2cf2/0x5400
[  345.245628][    C0]  xfrm_state_find+0x2cf2/0x5400
[  345.245646][    C0]  ? __lock_acquire+0xab9/0xd20
[  345.245665][    C0]  ? unwind_next_frame+0xa5/0x2390
[  345.245679][    C0]  ? xfrm_state_find+0x1da/0x5400
[  345.245698][    C0]  ? __pfx_xfrm_state_find+0x10/0x10
[  345.245722][    C0]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  345.245745][    C0]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  345.245761][    C0]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  345.245777][    C0]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  345.245793][    C0]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  345.245827][    C0]  ? xfrm_expand_policies+0x41f/0x6a0
[  345.245844][    C0]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  345.245861][    C0]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  345.245877][    C0]  ? dst_cache_get+0x10e/0x5b0
[  345.245890][    C0]  xfrm_lookup_route+0x3c/0x1c0
[  345.245928][    C0]  tipc_udp_xmit+0x1c3/0xb60
[  345.245950][    C0]  ? tipc_udp_xmit+0xa4/0xb60
[  345.245969][    C0]  ? __pfx_tipc_udp_xmit+0x10/0x10
[  345.245989][    C0]  ? __pskb_copy_fclone+0x9b5/0xfb0
[  345.246009][    C0]  ? __asan_memcpy+0x40/0x70
[  345.246025][    C0]  ? __pskb_copy_fclone+0x9b5/0xfb0
[  345.246050][    C0]  tipc_udp_send_msg+0x27f/0x3f0
[  345.246071][    C0]  tipc_bearer_xmit_skb+0x2b3/0x400
[  345.246089][    C0]  ? tipc_bearer_xmit_skb+0xa9/0x400
[  345.246106][    C0]  ? __pfx_tipc_bearer_xmit_skb+0x10/0x10
[  345.246127][    C0]  tipc_disc_timeout+0x580/0x6d0
[  345.246145][    C0]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  345.246167][    C0]  call_timer_fn+0x17e/0x5f0
[  345.246187][    C0]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  345.246202][    C0]  ? call_timer_fn+0xbe/0x5f0
[  345.246221][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  345.246244][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  345.246258][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  345.246272][    C0]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  345.246288][    C0]  __run_timer_base+0x61a/0x860
[  345.246306][    C0]  ? ktime_get+0x3e/0x1f0
[  345.246326][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  345.246343][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  345.246367][    C0]  run_timer_softirq+0xb7/0x180
[  345.246385][    C0]  handle_softirqs+0x286/0x870
[  345.246401][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  345.246417][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  345.246437][    C0]  __irq_exit_rcu+0xca/0x1f0
[  345.246455][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  345.246473][    C0]  irq_exit_rcu+0x9/0x30
[  345.246485][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  345.246500][    C0]  </IRQ>
[  345.246505][    C0]  <TASK>
[  345.246510][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  345.246527][    C0] RIP: 0010:lock_release+0x2b5/0x3e0
[  345.246547][    C0] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 0b 5f 03 11 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e
[  345.246561][    C0] RSP: 0018:ffffc900068af010 EFLAGS: 00000206
[  345.246575][    C0] RAX: 0b01e0db1f355400 RBX: 0000000000000202 RCX: 0b01e0db1f355400
[  345.246586][    C0] RDX: 0000000000000001 RSI: ffffffff8dba9906 RDI: ffffffff8be33f00
[  345.246596][    C0] RBP: ffff88803d02a7d8 R08: ffffc900068af230 R09: 0000000000000000
[  345.246607][    C0] R10: ffffc900068af1f8 R11: fffff52000d15e41 R12: 0000000000000001
[  345.246616][    C0] R13: 0000000000000001 R14: ffffffff8e13a0e0 R15: ffff88803d029cc0
[  345.246635][    C0]  ? unwind_next_frame+0xa5/0x2390
[  345.246657][    C0]  ? unwind_next_frame+0xa5/0x2390
[  345.246671][    C0]  unwind_next_frame+0x19a9/0x2390
[  345.246693][    C0]  ? unwind_next_frame+0xa5/0x2390
[  345.246708][    C0]  ? arch_stack_walk+0xe4/0x150
[  345.246728][    C0]  __unwind_start+0x5b9/0x760
[  345.246745][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  345.246762][    C0]  arch_stack_walk+0xe4/0x150
[  345.246780][    C0]  ? stack_trace_save+0x9c/0xe0
[  345.246798][    C0]  stack_trace_save+0x9c/0xe0
[  345.246813][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  345.246835][    C0]  ? css_rstat_updated+0x23a/0x4f0
[  345.246851][    C0]  kasan_save_track+0x3e/0x80
[  345.246890][    C0]  __kasan_kmalloc+0x93/0xb0
[  345.246933][    C0]  __kmalloc_cache_noprof+0x230/0x3d0
[  345.246953][    C0]  ? kmem_cache_free+0x166/0x400
[  345.246972][    C0]  ? __put_anon_vma+0x12b/0x2d0
[  345.246992][    C0]  kmem_cache_free+0x166/0x400
[  345.247013][    C0]  __put_anon_vma+0x12b/0x2d0
[  345.247034][    C0]  unlink_anon_vmas+0x503/0x670
[  345.247056][    C0]  free_pgtables+0x72b/0x9c0
[  345.247073][    C0]  ? __pfx_free_pgtables+0x10/0x10
[  345.247089][    C0]  ? __pfx_down_write+0x10/0x10
[  345.247107][    C0]  ? __mas_set_range+0x12f/0x3c0
[  345.247129][    C0]  exit_mmap+0x444/0xb50
[  345.247147][    C0]  ? uprobe_clear_state+0x20f/0x290
[  345.247165][    C0]  ? __pfx_exit_mmap+0x10/0x10
[  345.247182][    C0]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  345.247203][    C0]  ? __pfx_exit_aio+0x10/0x10
[  345.247228][    C0]  ? uprobe_clear_state+0x274/0x290
[  345.247245][    C0]  __mmput+0x118/0x430
[  345.247260][    C0]  exit_mm+0x1da/0x2c0
[  345.247278][    C0]  ? __pfx_exit_mm+0x10/0x10
[  345.247296][    C0]  ? rcu_is_watching+0x15/0xb0
[  345.247312][    C0]  do_exit+0x648/0x2300
[  345.247332][    C0]  ? cgroup_freezing+0x20/0x350
[  345.247349][    C0]  ? __pfx_do_exit+0x10/0x10
[  345.247368][    C0]  ? cgroup_freezing+0x20/0x350
[  345.247383][    C0]  ? cgroup_freezing+0x20/0x350
[  345.247404][    C0]  do_group_exit+0x21c/0x2d0
[  345.247422][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  345.247437][    C0]  get_signal+0x1286/0x1340
[  345.247459][    C0]  arch_do_signal_or_restart+0x9a/0x750
[  345.247482][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  345.247509][    C0]  ? exit_to_user_mode_loop+0x40/0x110
[  345.247530][    C0]  exit_to_user_mode_loop+0x75/0x110
[  345.247550][    C0]  do_syscall_64+0x2bd/0x3b0
[  345.247565][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  345.247578][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.247592][    C0]  ? exc_page_fault+0x9f/0xf0
[  345.247606][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.247620][    C0] RIP: 0033:0x7fda0d38ec29
[  345.247632][    C0] Code: Unable to access opcode bytes at 0x7fda0d38ebff.
[  345.247640][    C0] RSP: 002b:00007fda0e18b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  345.247655][    C0] RAX: 0000000000000001 RBX: 00007fda0d5d5fa8 RCX: 00007fda0d38ec29
[  345.247665][    C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fda0d5d5fac
[  345.247674][    C0] RBP: 00007fda0d5d5fa0 R08: 7fffffffffffffff R09: 0000000000000000
[  345.247684][    C0] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000000
[  345.247693][    C0] R13: 00007fda0d5d6038 R14: 00007ffd577f97a0 R15: 00007ffd577f9888
[  345.247709][    C0]  </TASK>
[  345.247714][    C0] 
[  345.516616][    C0] Allocated by task 16119:
[  345.518402][    C0]  kasan_save_track+0x3e/0x80
[  345.520336][    C0]  __kasan_slab_alloc+0x6c/0x80
[  345.522275][    C0]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  345.524290][    C0]  xfrm_state_alloc+0x24/0x2f0
[  345.526142][    C0]  __find_acq_core+0x8a7/0x1c00
[  345.528017][    C0]  xfrm_find_acq+0x78/0xa0
[  345.529794][    C0]  xfrm_alloc_userspi+0x6b3/0xc90
[  345.531752][    C0]  xfrm_user_rcv_msg+0x7a3/0xab0
[  345.533692][    C0]  netlink_rcv_skb+0x208/0x470
[  345.535513][    C0]  xfrm_netlink_rcv+0x79/0x90
[  345.537307][    C0]  netlink_unicast+0x82f/0x9e0
[  345.539198][    C0]  netlink_sendmsg+0x805/0xb30
[  345.541057][    C0]  __sock_sendmsg+0x21c/0x270
[  345.542896][    C0]  ____sys_sendmsg+0x505/0x830
[  345.544652][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  345.546328][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  345.548294][    C0]  do_syscall_64+0xfa/0x3b0
[  345.550184][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.552397][    C0] 
[  345.553243][    C0] Freed by task 24:
[  345.554747][    C0]  kasan_save_track+0x3e/0x80
[  345.556548][    C0]  kasan_save_free_info+0x46/0x50
[  345.558451][    C0]  __kasan_slab_free+0x5b/0x80
[  345.560315][    C0]  kmem_cache_free+0x18f/0x400
[  345.562197][    C0]  xfrm_state_gc_task+0x52d/0x6b0
[  345.564082][    C0]  process_scheduled_works+0xae1/0x17b0
[  345.566169][    C0]  worker_thread+0x8a0/0xda0
[  345.567941][    C0]  kthread+0x711/0x8a0
[  345.569500][    C0]  ret_from_fork+0x439/0x7d0
[  345.571238][    C0]  ret_from_fork_asm+0x1a/0x30
[  345.573072][    C0] 
[  345.574056][    C0] The buggy address belongs to the object at ffff8881060a3a80
[  345.574056][    C0]  which belongs to the cache xfrm_state of size 928
[  345.579279][    C0] The buggy address is located 816 bytes inside of
[  345.579279][    C0]  freed 928-byte region [ffff8881060a3a80, ffff8881060a3e20)
[  345.584334][    C0] 
[  345.585275][    C0] The buggy address belongs to the physical page:
[  345.587689][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8881060a1680 pfn:0x1060a0
[  345.591519][    C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  345.594742][    C0] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  345.597651][    C0] page_type: f5(slab)
[  345.599198][    C0] raw: 057ff00000000040 ffff88801af42dc0 dead000000000122 0000000000000000
[  345.602460][    C0] raw: ffff8881060a1680 00000000800e000c 00000000f5000000 0000000000000000
[  345.605785][    C0] head: 057ff00000000040 ffff88801af42dc0 dead000000000122 0000000000000000
[  345.609181][    C0] head: ffff8881060a1680 00000000800e000c 00000000f5000000 0000000000000000
[  345.612567][    C0] head: 057ff00000000002 ffffea0004182801 00000000ffffffff 00000000ffffffff
[  345.615966][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  345.619051][    C0] page dumped because: kasan: bad access detected
[  345.621012][    C0] page_owner tracks the page as allocated
[  345.623106][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6316, tgid 6314 (syz.2.111), ts 68090174874, free_ts 68080828026
[  345.629546][    C0]  post_alloc_hook+0x240/0x2a0
[  345.631013][    C0]  get_page_from_freelist+0x21e4/0x22c0
[  345.632696][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[  345.634449][    C0]  alloc_pages_mpol+0x232/0x4a0
[  345.635980][    C0]  allocate_slab+0x8a/0x370
[  345.637519][    C0]  ___slab_alloc+0xbeb/0x1420
[  345.639018][    C0]  kmem_cache_alloc_noprof+0x283/0x3c0
[  345.640722][    C0]  xfrm_state_alloc+0x24/0x2f0
[  345.642324][    C0]  xfrm_add_sa+0x17d1/0x4070
[  345.643753][    C0]  xfrm_user_rcv_msg+0x7a3/0xab0
[  345.645297][    C0]  netlink_rcv_skb+0x208/0x470
[  345.647135][    C0]  xfrm_netlink_rcv+0x79/0x90
[  345.648969][    C0]  netlink_unicast+0x82f/0x9e0
[  345.650699][    C0]  netlink_sendmsg+0x805/0xb30
[  345.652343][    C0]  __sock_sendmsg+0x21c/0x270
[  345.653843][    C0]  ____sys_sendmsg+0x505/0x830
[  345.655355][    C0] page last free pid 5846 tgid 5846 stack trace:
[  345.657360][    C0]  __free_frozen_pages+0xbc4/0xd30
[  345.659029][    C0]  __slab_free+0x303/0x3c0
[  345.660588][    C0]  qlist_free_all+0x97/0x140
[  345.662059][    C0]  kasan_quarantine_reduce+0x148/0x160
[  345.663743][    C0]  __kasan_slab_alloc+0x22/0x80
[  345.665460][    C0]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  345.667546][    C0]  getname_flags+0xb8/0x540
[  345.669147][    C0]  vfs_fstatat+0x43/0x170
[  345.670641][    C0]  __x64_sys_newfstatat+0x116/0x190
[  345.672494][    C0]  do_syscall_64+0xfa/0x3b0
[  345.674172][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.676438][    C0] 
[  345.677374][    C0] Memory state around the buggy address:
[  345.679783][    C0]  ffff8881060a3c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  345.683092][    C0]  ffff8881060a3d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  345.686097][    C0] >ffff8881060a3d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  345.689437][    C0]                                      ^
[  345.691797][    C0]  ffff8881060a3e00: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  345.695216][    C0]  ffff8881060a3e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  345.698636][    C0] ==================================================================
[  345.702187][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  345.705494][    C0] CPU: 0 UID: 0 PID: 19017 Comm: syz.2.3487 Not tainted syzkaller #0 PREEMPT(full) 
[  345.709154][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  345.713194][    C0] Call Trace:
[  345.714373][    C0]  <IRQ>
[  345.715436][    C0]  dump_stack_lvl+0x99/0x250
[  345.717058][    C0]  ? __asan_memcpy+0x40/0x70
[  345.718556][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  345.720364][    C0]  ? __pfx__printk+0x10/0x10
[  345.721885][    C0]  vpanic+0x281/0x750
[  345.723186][    C0]  ? __pfx_vpanic+0x10/0x10
[  345.724702][    C0]  ? irqentry_exit+0x74/0x90
[  345.726274][    C0]  panic+0xb9/0xc0
[  345.727562][    C0]  ? __pfx_panic+0x10/0x10
[  345.729122][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  345.731043][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  345.733207][    C0]  ? xfrm_state_find+0x2cf2/0x5400
[  345.734947][    C0]  check_panic_on_warn+0x89/0xb0
[  345.736704][    C0]  ? xfrm_state_find+0x2cf2/0x5400
[  345.738676][    C0]  end_report+0x78/0x160
[  345.740269][    C0]  kasan_report+0x129/0x150
[  345.741957][    C0]  ? xfrm_state_find+0x2cf2/0x5400
[  345.743686][    C0]  xfrm_state_find+0x2cf2/0x5400
[  345.745457][    C0]  ? __lock_acquire+0xab9/0xd20
[  345.747180][    C0]  ? unwind_next_frame+0xa5/0x2390
[  345.748875][    C0]  ? xfrm_state_find+0x1da/0x5400
[  345.750539][    C0]  ? __pfx_xfrm_state_find+0x10/0x10
[  345.752321][    C0]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  345.754449][    C0]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  345.756544][    C0]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  345.758933][    C0]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  345.761259][    C0]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  345.763617][    C0]  ? xfrm_expand_policies+0x41f/0x6a0
[  345.765744][    C0]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  345.767780][    C0]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  345.770053][    C0]  ? dst_cache_get+0x10e/0x5b0
[  345.771958][    C0]  xfrm_lookup_route+0x3c/0x1c0
[  345.773834][    C0]  tipc_udp_xmit+0x1c3/0xb60
[  345.775698][    C0]  ? tipc_udp_xmit+0xa4/0xb60
[  345.777557][    C0]  ? __pfx_tipc_udp_xmit+0x10/0x10
[  345.779616][    C0]  ? __pskb_copy_fclone+0x9b5/0xfb0
[  345.781353][    C0]  ? __asan_memcpy+0x40/0x70
[  345.782978][    C0]  ? __pskb_copy_fclone+0x9b5/0xfb0
[  345.784686][    C0]  tipc_udp_send_msg+0x27f/0x3f0
[  345.786380][    C0]  tipc_bearer_xmit_skb+0x2b3/0x400
[  345.788055][    C0]  ? tipc_bearer_xmit_skb+0xa9/0x400
[  345.789831][    C0]  ? __pfx_tipc_bearer_xmit_skb+0x10/0x10
[  345.791887][    C0]  tipc_disc_timeout+0x580/0x6d0
[  345.793729][    C0]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  345.795769][    C0]  call_timer_fn+0x17e/0x5f0
[  345.797339][    C0]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  345.799180][    C0]  ? call_timer_fn+0xbe/0x5f0
[  345.800794][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  345.802713][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  345.804711][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  345.806733][    C0]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  345.808917][    C0]  __run_timer_base+0x61a/0x860
[  345.810583][    C0]  ? ktime_get+0x3e/0x1f0
[  345.812029][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  345.813767][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  345.816185][    C0]  run_timer_softirq+0xb7/0x180
[  345.818069][    C0]  handle_softirqs+0x286/0x870
[  345.819935][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  345.821671][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  345.823566][    C0]  __irq_exit_rcu+0xca/0x1f0
[  345.825341][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  345.827320][    C0]  irq_exit_rcu+0x9/0x30
[  345.828925][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  345.831002][    C0]  </IRQ>
[  345.832030][    C0]  <TASK>
[  345.833197][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  345.835471][    C0] RIP: 0010:lock_release+0x2b5/0x3e0
[  345.837560][    C0] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 0b 5f 03 11 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e
[  345.844312][    C0] RSP: 0018:ffffc900068af010 EFLAGS: 00000206
[  345.846384][    C0] RAX: 0b01e0db1f355400 RBX: 0000000000000202 RCX: 0b01e0db1f355400
[  345.848981][    C0] RDX: 0000000000000001 RSI: ffffffff8dba9906 RDI: ffffffff8be33f00
[  345.851604][    C0] RBP: ffff88803d02a7d8 R08: ffffc900068af230 R09: 0000000000000000
[  345.854010][    C0] R10: ffffc900068af1f8 R11: fffff52000d15e41 R12: 0000000000000001
[  345.856414][    C0] R13: 0000000000000001 R14: ffffffff8e13a0e0 R15: ffff88803d029cc0
[  345.858928][    C0]  ? unwind_next_frame+0xa5/0x2390
[  345.860775][    C0]  ? unwind_next_frame+0xa5/0x2390
[  345.862549][    C0]  unwind_next_frame+0x19a9/0x2390
[  345.864455][    C0]  ? unwind_next_frame+0xa5/0x2390
[  345.866246][    C0]  ? arch_stack_walk+0xe4/0x150
[  345.867684][    C0]  __unwind_start+0x5b9/0x760
[  345.869127][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  345.870961][    C0]  arch_stack_walk+0xe4/0x150
[  345.872493][    C0]  ? stack_trace_save+0x9c/0xe0
[  345.874123][    C0]  stack_trace_save+0x9c/0xe0
[  345.875568][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  345.877551][    C0]  ? css_rstat_updated+0x23a/0x4f0
[  345.879356][    C0]  kasan_save_track+0x3e/0x80
[  345.881198][    C0]  __kasan_kmalloc+0x93/0xb0
[  345.883028][    C0]  __kmalloc_cache_noprof+0x230/0x3d0
[  345.885165][    C0]  ? kmem_cache_free+0x166/0x400
[  345.887127][    C0]  ? __put_anon_vma+0x12b/0x2d0
[  345.889038][    C0]  kmem_cache_free+0x166/0x400
[  345.890923][    C0]  __put_anon_vma+0x12b/0x2d0
[  345.892659][    C0]  unlink_anon_vmas+0x503/0x670
[  345.894304][    C0]  free_pgtables+0x72b/0x9c0
[  345.895874][    C0]  ? __pfx_free_pgtables+0x10/0x10
[  345.897647][    C0]  ? __pfx_down_write+0x10/0x10
[  345.899189][    C0]  ? __mas_set_range+0x12f/0x3c0
[  345.900820][    C0]  exit_mmap+0x444/0xb50
[  345.902199][    C0]  ? uprobe_clear_state+0x20f/0x290
[  345.903984][    C0]  ? __pfx_exit_mmap+0x10/0x10
[  345.905734][    C0]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  345.907917][    C0]  ? __pfx_exit_aio+0x10/0x10
[  345.909753][    C0]  ? uprobe_clear_state+0x274/0x290
[  345.911701][    C0]  __mmput+0x118/0x430
[  345.913237][    C0]  exit_mm+0x1da/0x2c0
[  345.914786][    C0]  ? __pfx_exit_mm+0x10/0x10
[  345.916636][    C0]  ? rcu_is_watching+0x15/0xb0
[  345.918515][    C0]  do_exit+0x648/0x2300
[  345.920207][    C0]  ? cgroup_freezing+0x20/0x350
[  345.922136][    C0]  ? __pfx_do_exit+0x10/0x10
[  345.923912][    C0]  ? cgroup_freezing+0x20/0x350
[  345.925789][    C0]  ? cgroup_freezing+0x20/0x350
[  345.927721][    C0]  do_group_exit+0x21c/0x2d0
[  345.929584][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  345.931627][    C0]  get_signal+0x1286/0x1340
[  345.933497][    C0]  arch_do_signal_or_restart+0x9a/0x750
[  345.935767][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  345.938137][    C0]  ? exit_to_user_mode_loop+0x40/0x110
[  345.940169][    C0]  exit_to_user_mode_loop+0x75/0x110
[  345.941793][    C0]  do_syscall_64+0x2bd/0x3b0
[  345.943247][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  345.944821][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.946963][    C0]  ? exc_page_fault+0x9f/0xf0
[  345.948449][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.950285][    C0] RIP: 0033:0x7fda0d38ec29
[  345.951668][    C0] Code: Unable to access opcode bytes at 0x7fda0d38ebff.
[  345.953808][    C0] RSP: 002b:00007fda0e18b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  345.956478][    C0] RAX: 0000000000000001 RBX: 00007fda0d5d5fa8 RCX: 00007fda0d38ec29
[  345.959168][    C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fda0d5d5fac
[  345.962142][    C0] RBP: 00007fda0d5d5fa0 R08: 7fffffffffffffff R09: 0000000000000000
[  345.964889][    C0] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000000
[  345.967652][    C0] R13: 00007fda0d5d6038 R14: 00007ffd577f97a0 R15: 00007ffd577f9888
[  345.970728][    C0]  </TASK>
[  345.972610][    C0] Kernel Offset: disabled
[  345.974029][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:36:03  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002f RBX=000000000000002f RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000006990
R8 =ffff888107a68237 R9 =1ffff11020f4d046 R10=dffffc0000000000 R11=ffffffff854fac30
R12=dffffc0000000000 R13=ffffffff99b02912 R14=ffffffff99df7480 R15=0000000000000000
RIP=ffffffff854facac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fda0e18b6c0 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3a5f7b CR3=0000000029ba0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fda0d412e7b
XMM06=0000000000000000 00007fda0d412e75 XMM07=0000000000000000 00007fda0d412e89
XMM08=0000000000000000 00007fda0d412f0f XMM09=0000000000000000 00007fda0d412fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffffffff822c8e55 RCX=5396843e99bfd800 RDX=0000000000000000
RSI=ffffffff8be33ee0 RDI=ffffffff8be33ea0 RBP=dffffc0000000000 RSP=ffffc9000411ead8
R8 =0000000000000000 R9 =ffffffff8172c195 R10=ffffc9000411ebf8 R11=ffffffff81ac3b00
R12=1ffff92000823d75 R13=ffffc9000411ebe0 R14=ffffc9000411eba8 R15=ffffffff8172c195
RIP=ffffffff8172c1fe RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556d254500 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f11c0d056c0 CR3=0000000029ba6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000010955 00000000000009bf XMM03=00000000000091bf 0000000008000095
XMM04=9500000000000000 b700000085000000 XMM05=8553b5e743000002 b700000000000091
XMM06=bf00000000080000 9500000000000109 XMM07=5500000000000009 bf00000083000000
XMM08=0000000000000000 00007facca212f0f XMM09=0000000000000000 00007facca212fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
