last executing test programs:

1.890393609s ago: executing program 1 (id=2565):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="0df04074a14d907c38f84c53f61ea31e", 0x10)
getsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x0, @empty, 'veth0_vlan\x00'}}, 0x1e)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000100)=""/28, &(0x7f0000000140)=0x1c)
r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800)
sendmsg$alg(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)="4224e409586e6fe2e9f0b1a3f95f83cbecc0868839bb0100dd8e50971518e3fb5bfe6312acb5cdd8455b7d5294c9ef4044e80cf0447a781518d7ea6d178d3205f3e2386f20a8efad1b10c285d2e4be5d1d5454fb28625c7cef31745ab80f194aac8a93dd91068f6f40bd89b39fca20585baf80e7142269970d5c526e6ed02abebfc63a3cb494ee65404685db76f2f6e84314dfcf0aff25791d6997ce73ed11e3c6a6c2d1f754f00ef60304808219d360546dddaa04be5f7737a1e7313c9e7ef9ab9edab17a09368d49773db21559ac6738b0f297de51c34c31d47447ac8489c0462a", 0xe2}, {&(0x7f0000000280)="dd2e354b76dc1cfc5d18d4edb0c0c0b8405f7d38291a194bf7c1c75e4b4984de6e75b97e32aa9625d515210e904ba4681bf73cca187b4d4af177487c20a4931ef2ea585138f0ffc267cc4aa862f71ef2017b4c7a686281a5830fcea11e85c3ba66da53825164118503ecd1defcc62e52dba53714fa059346ebd39b8fa1a163a4e75e6ba7f9a606b7ee4f5bbf20672f9f3a7c8b7a158d489846ac81345cb41c45e1002b93eac1084bf39374fc38e802313a52c30dc326f9654694e80b7deeffb34e6f120ac3b356c38a27ba220e76d0371ad04520c89d", 0xd6}, {&(0x7f0000000380)="45bdb3b66cdf63e4c71a7c054c0e2bb99b40f3ddcb3859c8a73162fb46bc2443310085c763d30ef77c52f266cf1df3f4d706a34d158c80c61da3d698065854f5aa6ccb0c53def57195a18ea4b08211871486aa811e0f4853aa263cdba31f64820d2506d06b87e1441c079dba999cff17d13b703bd6bf328d0ea8f4123fa0006304ce9e1129ff326b98d826b70e61", 0x8e}, {&(0x7f0000000440)="93f3e2cf2310917cdce97a1973e452e62ef5c2061f9dc2bd8f28c59efef2c9b6c05c152ada1fa5e73cf9f790bb1e9be9aa59233213e56c13c2e7f86822118786f169414cf897bef619037e58d9967ef9865635a809aa20e86dd4d049f8dd23a4b23d607916610fca5e437e1e6b66dcd5d445b6ec07d7c6891103aa7b3c1b07e7a06c349e8101cc7cd476cf74bade55785b062e1a7f", 0x95}, {&(0x7f0000000500)="e778e7d7bdaf1b2c741564966ed2347199bc8934430a05d89eac661f0ce170d413a7db1889712856fed9a8b6579d", 0x2e}, {&(0x7f0000000540)="4276d5ec218f81bf25853298197fe1f49e7a8db97910ea45d6f86749d9a4904edb1201462089d718665caeac9c61c25a1ed02f3cfd1937f27e5ed1e24092e9d00240d05959459bf3df3c67ad91854afa0f93103e49fa73f4be40666f3b94fe88a7a413e8ef6a1133e000a848cc0afe3975eaf75223ebe5920d5041251460b98d2a4a790da62156280fef04075f7111796a6790dedd824fd7831d63fae45058fc67d9638fe4b1bf3353dec41dfec07b7157ea84d55ab63795f4ace58b425452042691f21482c7881cfc2050e3", 0xcc}], 0x6, &(0x7f00000006c0)=[@assoc={0x18, 0x117, 0x4, 0x56cb}, @assoc={0x18, 0x117, 0x4, 0x15b81829}], 0x30}, 0x44802)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000740))
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x1, &(0x7f00000007c0)=""/26, &(0x7f0000000800)=0x1a)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000840)={0x3, 0x7f, 0x5, 0x400, 0x80000001})
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000000bc0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b80)={&(0x7f00000008c0)={0x2a4, 0x13, 0x4, 0x70bd25, 0x25dfdbfc, {0xa, 0x7, 0xbe, 0x9, {0x4e22, 0x4e23, [0x4, 0x2, 0x1, 0x1000], [0x0, 0x8, 0x80000000, 0x7], 0x0, [0x9]}, 0x8, 0x6}, [@INET_DIAG_REQ_BYTECODE={0xbd, 0x1, "e3c3e6fc7568e8a6a371446091b827bfcaf855163afd8fb3039b08b9f25d4919e8a1591bfb8f18116d3ea7f921a93bf8db6ba28ddf0bf497be60a8f640986b1ac55986a08af97bdc46d3a30505b0982a0e1db1c3b99f57814707ff57523d53c789e7b939e635464a63561e17d7a2b7708bd38fa8282bc7a2e7cd291e25d3a3a79eaab2eeb30ce8ee39fa12963ce28588ca9f46ceab740cae9bac87a55eabb529da1c3da276ee49a0e371622cf2cba796652fe2314a01646b2c"}, @INET_DIAG_REQ_BYTECODE={0x30, 0x1, "74a2ed44a677ae4487619bd7d90cdd1d635d3c9835d1c47bf18710ed1938e1741990067b7d3b20159205437d"}, @INET_DIAG_REQ_BYTECODE={0xa8, 0x1, "9ae2d75c8e05c2236fa4b86f8600f97795bb2a8724d5eec7c06ace521df1c685eec21f715f603bc98e56d66ee2f94cd42ab1e24184769c5a25f130c8e262507959b3d2866320f6eeef8e7f7c3e0d36dc2bc49ef5b96f847b7020dc4a1f5d891885d5f7f8747e5136fc0a38fab296246c6270b5ea4b916b030f8f1b54728e36298ce0caf91f0c06f8d52092abc6d3022aabdecb54c70c03a62bd061112837ed64e1f22e4b"}, @INET_DIAG_REQ_BYTECODE={0xbe, 0x1, "0d435f19dcaf7c563caaf0a10bc65191905aa533cf653f8ca37405734a46a041d7c9e38a32f726df25212f381668d6961aa92f3ea2b5f7e4c75a22dd39c1592b533f87c64cd517403129f7edff222f95f0180a1e3c6d663af3f2efe2f6747310c3a491d2218de14669ad0f417a847a8e1e7d994e48adcf31586dc865e8ee8866ec3d09ddcc9c61a0b56c27ea58f1f048da7aa4326dde816390277a30747e95da3b3ba7f577e955a7adc60a3d9526b2a0d319077b0ef27f0b4461"}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x44000}, 0x800)
ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000c00)={0x2, 0xc, "c882799d8b77d883a7db5912"})
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000c40)=0xf, 0x4)
ioctl$int_out(0xffffffffffffffff, 0x2, &(0x7f0000000c80))
sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x4}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x2, 0xa}}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c844}, 0x8000)
r5 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r5, &(0x7f0000000dc0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r6 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f0000000e00)=0x96dcc83ba156231a, 0x4)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$FS_IOC_GETFSSYSFSPATH(r7, 0x80811501, &(0x7f0000000e40)={0x80})
r8 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_LOOPBACK(r8, 0x65, 0x3, &(0x7f0000000f00), &(0x7f0000000f40)=0x4)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x1a, 0x1b, &(0x7f0000000f80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @exit, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_fd={0x18, 0xa, 0x1, 0x0, 0x1}]}, &(0x7f0000001080)='GPL\x00', 0x2ea, 0x6, &(0x7f00000010c0)=""/6, 0x41100, 0x23, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000001100)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000001140)={0x2, 0xb, 0x1, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000013c0)={r9, 0x0, 0x4d, 0x39, &(0x7f0000001240)="f18e933380a9c8be690094cfc17b5835da137d4651db93e9e8a9a762afc2d406175acf1fd8e1ec34233c38e32bbfcfc48a1b95190ed4f9f4cc70b1574dc8ee5fcb34609d93ee953479385953d8", &(0x7f00000012c0)=""/57, 0xa, 0x0, 0x0, 0x57, &(0x7f0000001300), &(0x7f0000001340)="101ae577cc29090cacf21cc14f34089852590466425b0cc9dab28d5a888de3b61cb80314c9a359037582c0255a9be2d4bd19f0734285c36006e97a02344b9dfbf14afaa32a6d2e2851c66dc5ec832724802640bcbff9bd", 0x0, 0x0, 0xfffffff5}, 0x50)
ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000001440))

1.82060518s ago: executing program 1 (id=2566):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400})
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xac, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2fdc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf9fc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x49}, 0x0) (async)
sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)={0xac, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2fdc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf9fc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x49}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9}, 0x20)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'geneve0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r6=>0x0})
sendto$packet(r5, &(0x7f0000000180)="0b031200e0ff64000200475400f6a13b88a8", 0x36, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r6, 0x1, 0x0, 0x6, @local}, 0x14)
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400})
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x2, 0x4, 0x1004, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x2, 0x4, 0x1004, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r7}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r8}, &(0x7f0000000840), &(0x7f0000000880)=r7}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r8, &(0x7f0000000cc0)="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"}, 0x20)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x350, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x320, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8, 0x5, 0x3}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_STAB={0xfffffffffffffd7f, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x7}, @TCA_GRED_PARMS={0x0, 0x1, {0x87, 0x7b2a, 0x6, 0x9, 0x5, 0x2, 0x6e5, 0x7, 0x6, 0x5, 0x9, 0x1c, 0xd, 0x6, 0x7, 0x200}}, @TCA_GRED_STAB={0x0, 0x2, "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"}]}}]}, 0x350}}, 0x0) (async)
sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x350, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x320, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8, 0x5, 0x3}, @TCA_GRED_STAB={0x104, 0x2, "a7487241196ee8037a503169b80e84ecd0f80d3fcd1b8160ba840072dab7552ff8adcfe74792a15b4a7e95038885c31b45eea82cd0e07711972c23c1525ce9a3db6fb4d31cb43c51559c6cca4adabc76161105525064c05fe7d1f07b4a479bcbece7513a099115b8ccd6935833e79ff6e083b2840ac23ef7e6314e1c209904d56f2786252cb765b849b21a8ceccdc3c0e217816bc3868802b59320fcc4cc2a6bd6eb499b4fa71f5a2efb94e8264b027708015e8b40404ae8c0ec4df9a04bc1eb019686860092ce8575aa69b760a96e939e3b3db9ab0e28b2a77ba39b9bbe0723daeaab2ed34c31aaa9a4bb81a5de29deb37edf62b85b5bb12ab93a6e25acc5f7"}, @TCA_GRED_STAB={0xfffffffffffffd7f, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x7}, @TCA_GRED_PARMS={0x0, 0x1, {0x87, 0x7b2a, 0x6, 0x9, 0x5, 0x2, 0x6e5, 0x7, 0x6, 0x5, 0x9, 0x1c, 0xd, 0x6, 0x7, 0x200}}, @TCA_GRED_STAB={0x0, 0x2, "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"}]}}]}, 0x350}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x18, 0x1410, 0x20, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x54881}, 0x8000) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x18, 0x1410, 0x20, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x54881}, 0x8000)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
close(r12)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r12, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})

1.760614924s ago: executing program 0 (id=2567):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x90)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe90, 0x30, 0x25, 0x0, 0x0, {}, [{0xe7c, 0x1, [@m_pedit={0xe78, 0x1, 0x0, 0x0, {{0xa}, {0xe4c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x28, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {0x0, 0x8001}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x5, 0x80000}, {0xffff0000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2fa}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {0x80000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe90}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000240)={[0xc6]}, 0x8})
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="285e54c4e44988a923000000000000000000000035e88d4e3d9e225b", @ANYRES32=0x0, @ANYBLOB="008000000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe8000"], 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="05000040006405000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000000000000000000005b979e01d2038d84"], 0x48}}, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x5, 0x3, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9dfc47318ccc3455"}}, 0x48}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274000000ff5b3b87675a"], 0x4c}}, 0x2)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4de32", 0x51)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0xf00)

1.758127514s ago: executing program 1 (id=2568):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0x84}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0xfffffffffffffef8}}, 0x28}}, 0x4000040)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x18)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wg1\x00', <r3=>0x0})
setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000000)=0xf41, 0x4)
sendto$packet(r2, &(0x7f0000000280)="4732cc5c57db5a576e1eb8202aaa1a2048f92339", 0x14, 0x800, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}}, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2f}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x24}, 0x94)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="ffffffffffffffff08"], 0x1b)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r5, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0)

1.757671986s ago: executing program 2 (id=2569):
socket$isdn_base(0x22, 0x3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
unshare(0x62040200)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'gre0\x00', 0x0})
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38)
socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xe0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1.64025652s ago: executing program 1 (id=2570):
r0 = socket(0x9, 0xa, 0xff)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async)
r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) (async, rerun: 32)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async, rerun: 32)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r3 = socket$inet(0xa, 0x801, 0x84)
listen(r3, 0x8) (async, rerun: 64)
socket$inet(0xa, 0x801, 0x84) (rerun: 64)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000003c0)='kmem_cache_free\x00', r5, 0x0, 0x2000000000}, 0x18) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYRES8=r3], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) (async)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x4a, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e24, 0x9, @private2, 0x200}}, 0x0, 0x0, 0x400, 0x4000000, 0x32}, 0x9c) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x6, 0x8a}, 0x9c)
accept(r2, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) (async)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 64)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x4000005, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (rerun: 64)
shutdown(r2, 0x2) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x3, &(0x7f0000000400)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x29, '\x00', 0x0, 0x2a}, 0x94) (async)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000800)=ANY=[@ANYRES32=r7], 0x4c}}, 0x0)
close(r1) (async, rerun: 64)
openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x1c0c0, 0x0) (rerun: 64)
write$cgroup_pressure(r1, 0x0, 0x0) (async)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x2a, &(0x7f0000000540)=ANY=[@ANYRES32=r4], 0x190)

1.559773869s ago: executing program 1 (id=2571):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {}, 0xa}}, 0x26)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26)
sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001a00)=""/4121, 0x1019}], 0x1}, 0x100004dd}], 0x4000154, 0x102, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r9, 0x1, 0x0, 0x0, {0x2}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0x0, 0xe}, {0x7, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048080}, 0x2008c014)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060086dd0000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x5, 0x4)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000)
socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x98, r11, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x6c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "00000080"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_BITS={0x58, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_\xd6\x8d\x90\x9c'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+]\xd6@\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x36}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x89\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x98}}, 0x90)

1.212696504s ago: executing program 0 (id=2572):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000240)={0x0, 0x1, 0x0, 0xa5f}, &(0x7f0000000080)=0x18)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r1, &(0x7f0000000f40)={{0x6, @rose}, [@default, @bcast, @netrom, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48)
sendto(r1, 0x0, 0x0, 0x80, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000dcf3490000000000000007850000080000000e00000095000000000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
r10 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
sendmsg$nl_route(r10, 0x0, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000052c0)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000006080)=""/4074, 0xfea}, {&(0x7f0000000240)=""/103, 0x67}, {&(0x7f0000000140)=""/55, 0x37}, {&(0x7f0000000340)=""/107, 0x6b}, {0x0}, {&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f00000001c0)=""/54, 0x36}], 0x8}, 0x4db}, {{0x0, 0x0, 0x0}, 0x20008}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000840)=""/158, 0x9e}, {&(0x7f0000000900)=""/220, 0xdc}, {&(0x7f0000000a00)=""/11, 0xb}, {&(0x7f0000000a40)=""/80, 0x50}, {&(0x7f0000000b40)=""/97, 0x61}, {&(0x7f0000000bc0)=""/123, 0x7b}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/171, 0xab}], 0x8, &(0x7f0000003e00)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000000dc0)=@generic, 0x80, &(0x7f0000001400)=[{&(0x7f0000000e40)=""/223, 0xdf}, {&(0x7f0000000fc0)=""/166, 0xa6}, {&(0x7f0000001100)=""/212, 0xd4}, {&(0x7f0000001200)=""/108, 0x6c}, {&(0x7f0000001280)=""/134, 0x86}, {&(0x7f0000001340)=""/95, 0x5f}, {&(0x7f00000013c0)=""/57, 0x39}], 0x7, &(0x7f0000001480)=""/175, 0xaf}, 0x9}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000015c0)=""/27, 0x1b}, {&(0x7f00000016c0)=""/218, 0xda}], 0x2, &(0x7f0000001800)=""/222, 0xde}, 0x4}, {{&(0x7f0000001900)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000001980)=[{&(0x7f0000002a40)=""/143, 0x8f}], 0x1, &(0x7f0000004e00)=""/181, 0xb5}, 0xb68d}, {{&(0x7f0000004ec0)=@generic, 0x80, &(0x7f0000005180)=[{&(0x7f0000004f40)=""/179, 0xb3}, {&(0x7f0000005000)=""/240, 0xf0}, {&(0x7f0000005100)=""/124, 0x7c}, {&(0x7f00000019c0)=""/21, 0x15}], 0x4, &(0x7f00000051c0)=""/247, 0xf7}, 0x6}], 0xc, 0x40002000, 0x0)
socket$igmp(0x2, 0x3, 0x2)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r3)
sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000001540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000010c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x890)

1.109686223s ago: executing program 2 (id=2573):
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000000)={0x3, {{0xa, 0x4e20, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}}, 0x88)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0x2a, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}, @alu={0x4, 0x1, 0x9, 0x4, 0x2, 0xfffffffffffffffe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @jmp={0x5, 0x1, 0x5, 0x6, 0x2, 0xffffffffffffffe0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x6, 0xa1, &(0x7f0000000280)=""/161, 0x41100, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x5, 0x1, 0xffff}, 0x10, 0xfecc, 0xffffffffffffffff, 0x3, 0x0, &(0x7f00000003c0)=[{0x3, 0x4, 0x10, 0x3}, {0x4, 0x1, 0xe, 0x2}, {0x2, 0x4, 0xb, 0xa}]}, 0x94)
write(r0, &(0x7f00000004c0)="367b2a7fc6dcd47abf6d93437db778bdba54a9b3aa3f4f2e4243cf4a816d2fe3f27be67554e76d5847bac48b0d7b3f2e1a0303699ded0075d06774da1ce6d753b25fe18138bae72fe11ec30f1d51", 0x4e) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000540)={'wpan4\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r3, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x2c}}, 0x4)
sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x40000) (async)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r1)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x74, r4, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3ff}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x800}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x84810}, 0xd0)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{0x1, <r5=>0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)=r0}, 0x20) (async)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='memory.numa_stat\x00', 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000cc0)={<r7=>r0, 0x8000000000000000, 0x100, 0x5}) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e00)={{0xffffffffffffffff, <r8=>0xffffffffffffffff}, &(0x7f0000000d80), &(0x7f0000000dc0)=r0}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ec0)={0x6, 0x14, &(0x7f0000000b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @map_fd={0x18, 0x3, 0x1, 0x0, r6}, @alu={0x7, 0x0, 0x6, 0x5, 0x8, 0x4, 0xfffffffffffffff0}, @generic={0xb, 0x1, 0x4, 0x377, 0x1ff}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffff8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000c00)='GPL\x00', 0x1, 0x5f, &(0x7f0000000c40)=""/95, 0x40f00, 0x20, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f0000000d00)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000d40)={0x3, 0x8, 0x8, 0x1}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000e40)=[r8], &(0x7f0000000e80)=[{0x2, 0x1, 0xf, 0x4}, {0x2, 0x2, 0x7, 0x5}], 0x10, 0x7fff}, 0x94)
sendto$rose(r6, &(0x7f0000000f80)="528a0ae3fe8ac81cc067c8ceb956f1cb8a4d1ab0246d5a96c0007f9c5a491daf3f7ffb17bbb65842fcdc55f8e3748e14952cba0f5a30d42f85f4c5c59e5a8620b4960541c457fcf7dc6bd219246523e8a12230fc010fd0c18585c5dc4ce2c4fe753febc8707f6721a213773e4c6e045de45c469108bb70b38c604ba288d736c89f8cec8dbfbcfb07b7dc7e41266b58a4da50", 0x92, 0x4040080, &(0x7f0000001040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @null}, 0x1c) (async)
r9 = accept$netrom(r7, 0x0, &(0x7f0000001080))
setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000010c0)=r6, 0x4) (async)
ioctl$sock_SIOCBRADDBR(r6, 0x89a0, &(0x7f0000001100)='ip6_vti0\x00') (async)
ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000001180)={0x4, &(0x7f0000001140)=[{0x3, 0xd, 0x9, 0x100}, {0x5, 0x8, 0x6, 0x4}, {0x800, 0x5, 0x3, 0x80000000}, {0x6, 0x40, 0x4, 0x3}]})
sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x1c, r4, 0x22, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040884) (async)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r6, 0x8010661b, &(0x7f00000012c0)) (async)
bind$ax25(0xffffffffffffffff, &(0x7f0000001300)={{0x3, @null, 0x3}, [@null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) (async)
setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000001380)=0xa, 0x4) (async)
getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, &(0x7f00000013c0)=<r10=>0x0, &(0x7f0000001400)=0x4)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000001540)={'ip_vti0\x00', &(0x7f0000001440)={'syztnl0\x00', r10, 0x80, 0x80, 0x8, 0x10, {{0x29, 0x4, 0x1, 0x4, 0xa4, 0x65, 0x0, 0x7, 0x4, 0x0, @private=0xa010100, @local, {[@ssrr={0x89, 0xf, 0x5a, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @rr={0x7, 0x1f, 0x8d, [@multicast2, @dev={0xac, 0x14, 0x14, 0x3f}, @local, @empty, @empty, @multicast2, @multicast1]}, @timestamp_addr={0x44, 0x14, 0x78, 0x1, 0x4, [{@loopback, 0xd}, {@broadcast, 0x27}]}, @lsrr={0x83, 0x3, 0xb1}, @generic={0x88, 0x10, "39c6489ee5194617ed5cce49fefa"}, @lsrr={0x83, 0x17, 0x78, [@multicast2, @rand_addr=0x64010100, @empty, @multicast2, @multicast2]}, @rr={0x7, 0x1b, 0xf, [@remote, @multicast2, @private=0xa010102, @local, @private=0xa010101, @multicast1]}, @lsrr={0x83, 0x7, 0xf0, [@private=0xa010100]}]}}}}})
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r7, &(0x7f0000001740)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001700)={&(0x7f00000015c0)={0x11c, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb95e}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10001}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xb}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x24004800}, 0x8044)
connect$qrtr(r7, &(0x7f0000001780)={0x2a, 0x2, 0x7ffe}, 0xc) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=@bloom_filter={0x1e, 0x30000, 0x8, 0x9, 0x23040, 0xffffffffffffffff, 0x7, '\x00', r10, r7, 0x4, 0x1, 0x4, 0x5}, 0x50)

1.050295224s ago: executing program 0 (id=2574):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', <r2=>0x0}) (rerun: 32)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000006070806aae9f361e1610e4e41a12b6704f1e9012a1e698db5ea1e0544e377c7599913162e569203c032b8b62b472f65a1d217b1d7262c2d54bd61320e7ceda81d3ee", @ANYRES16=r1, @ANYBLOB="050427bd7000fadbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040001000000"], 0x58}, 0x1, 0x0, 0x0, 0x10008001}, 0x44080) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)
r4 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) (async, rerun: 32)
r5 = socket$inet6(0xa, 0x80002, 0x0) (rerun: 32)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) (async)
bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) (async)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xa, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0)

958.698628ms ago: executing program 0 (id=2575):
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, @remote, @empty, 0x7800, 0x1, 0xfffffffc, 0xdc67}})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000140), 0x0)
getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000240), &(0x7f00000002c0)=0x4)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in, @in6=@local}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xe8)
write$cgroup_int(r1, 0x0, 0x0)
write$tun(r1, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000580)='ext4_remove_blocks\x00', r3}, 0x18)
r4 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
accept4$llc(r0, &(0x7f0000000480)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000004c0)=0x10, 0x80000)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
socket(0x15, 0x5, 0x0)
socket$rds(0x15, 0x5, 0x0)
socket(0x15, 0x5, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
recvmmsg(r4, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0)
recvmmsg$unix(r4, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000020, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={<r5=>0xffffffffffffffff})
getsockopt$sock_buf(r5, 0x1, 0x3b, 0xffffffffffffffff, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0})

958.136752ms ago: executing program 2 (id=2576):
r0 = socket(0x10, 0x3, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004804) (async)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) (async)
ioctl$sock_netdev_private(r3, 0x89f2, &(0x7f0000000000))
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r4=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="c3ac6645d6ae830670b42f264000b57714ad49eddbab0600ffdbdf25000000006e58fc4d1cacdbd21a481085cc1949c0ca659dea5e87a21980151125b52eef419438a196a98edabff5fa2ba458ec7bcb60b068e432142f54b0ecf646845ebc191cc9aa6e9f59cb33c15e", @ANYRES32=r4, @ANYBLOB="0000000000000000200012800b0001006d61637365630000100002800c0001000000000000000000"], 0x40}}, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)={0x3c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x15, 0x2, 0x0, 0x1, [@nested={0x10, 0x14, 0x0, 0x1, [@typed={0x8, 0x19, 0x0, 0x0, @u32=0x9}, @nested={0x4, 0x117}]}, @generic='V']}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc040) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0069ae000000000000000023"], 0x1c}}, 0x0) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x2, 0x2, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc040}, 0x4008000)
socket$inet_udp(0x2, 0x2, 0x0)

720.803699ms ago: executing program 2 (id=2577):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r1 = socket(0x8, 0x3, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, 0x0, 0x0)
ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000b80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
socket$pppl2tp(0x18, 0x1, 0x1)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x39, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x4000000)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00'})
socketpair(0x1a, 0x6, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20048010}, 0x30)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r8)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r8, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, r10, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xd}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r10, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x32}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14000}, 0x404c001)
syz_init_net_socket$ax25(0x3, 0x2, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f0000001080)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})

720.140719ms ago: executing program 0 (id=2578):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x2, 0x1, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_spirange={0x2, 0x10, 0x2, 0x4d5}, @sadb_address={0x5, 0x7, 0x0, 0xc0, 0x0, @in6={0xa, 0x4e21, 0x9ce, @loopback, 0x5}}, @sadb_address={0x5, 0x6, 0x2b, 0x20, 0x0, @in6={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x10}}]}, 0x70}}, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
syz_emit_ethernet(0xa7, &(0x7f00000003c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @void, {@ipv4={0x800, @generic={{0x24, 0x4, 0x1, 0x5, 0x99, 0x68, 0x0, 0xb9, 0x8, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x3b}, {[@timestamp={0x44, 0x28, 0xfd, 0x0, 0x6, [0xf128, 0x40, 0x6ae, 0x5, 0x38000000, 0x7fff, 0x2, 0x0, 0x3]}, @generic={0x44, 0x5, "bd530d"}, @timestamp={0x44, 0x14, 0x24, 0x0, 0x4, [0x4, 0x5, 0x0, 0x6]}, @rr={0x7, 0x23, 0xf3, [@local, @rand_addr=0x64010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x2f}, @multicast2, @local]}, @lsrr={0x83, 0x13, 0x2c, [@loopback, @multicast1, @empty, @private=0xa010100]}, @generic={0x44, 0x5, "0714f8"}]}}, "d30ec3eac048ac4966"}}}}, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmmsg(r4, &(0x7f0000009640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="10", 0x1}], 0x1}}], 0x1, 0x8810)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x800000000000}, &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200), 0x12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r6, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000200), 0x12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r7, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=<r8=>r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r11=>0x0})
r12 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r12, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000000000000000000010500000008000000000000000000000300000000020000000200000004000000000000000000000b03"], 0x0, 0x5a}, 0x28)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="ffff000000000000000000000000000000ff070000000000004a1c5f19a93aab6d7148b0f2ebc1977a6d46ad42b1b591077dd5816dc44f0afdfa6cffb2037bcf1e35c9281f4c89573b14af0bfa5e1ea28878e50a2c7d4a015c99ae4277ad3509dc5368b3fc48edc9ce690593cb87369bf0b3c0a7e1179b95fe3d44096fa12e322b4a13b3bb4832b2d31d356478d15aab9dcb58ef3847c7f64a36a558a3e1bc08ee55ac", @ANYRES32=0x0, @ANYRES32=r13, @ANYBLOB="040000000400"/28], 0x50)
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRES64=0x0, @ANYRES8=r12, @ANYRES64=r11, @ANYRESDEC=r13, @ANYBLOB, @ANYRES8=r8, @ANYBLOB="73d1a44453a540cd43dc5ac73f5008947bbbb5538635a930e73f281415045c8365de34ad424894ed200cfaaa0739fe7e91efd57430c1aa81dd35aac5661fe5319d12d59e74bc6c9f3e05d232be2717d90247aa51eced053e6c53418d52845f0b66f8f2ecbf87d086583ed6936930584ea0f2f3e0b5dd9b26b5149f607aaa2c09d3eaea7a56557c2227bf38faad6972515c0fe9cb25179aa96a9854b87c05a271c32e14519f14262b65dea621be31d1734819e36648abbe576ee344105235bce3981a442623661ce1e633e8e815338f9f24242270993e763e8aaf0ab728a181fe4febfb8af9a5383d5bcf60ab85ea"], 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x10)

480.519018ms ago: executing program 0 (id=2579):
socket$isdn_base(0x22, 0x3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
unshare(0x62040200)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'gre0\x00', 0x0})
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38)
socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

268.270923ms ago: executing program 2 (id=2580):
r0 = socket(0x10, 0x803, 0x0) (async, rerun: 64)
pipe(&(0x7f0000001200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (rerun: 64)
splice(r1, &(0x7f00000064c0)=0x8, r2, 0x0, 0x2000000000000e, 0x0) (async, rerun: 32)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x5120b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xfffffffffffffe3f}}}]}, 0x3c}}, 0x4000010) (rerun: 32)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async)
r4 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r4, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400})
sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000880)={<r6=>0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0xc, 0x4, 0x8000000000000000, 0x83f, 0xfd, 0x7fffffff, 0x9, 0x0, 0x5, 0x83, 0x40, 0x400, 0x4, 0xc, 0x2]}, &(0x7f0000000500)=0x100)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000600)={0x6, 0xb, 0x0, 0x0, 0x1, 0x1, 0x6, 0x6240, r6}, 0x20) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={0xffffffffffffffff, 0x0, 0x0, 0x4000}, 0x20) (async)
close(0x3)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x15, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, [@map_val={0x18, 0x13, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_val={0x18, 0x8, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}]}, &(0x7f0000000140)='GPL\x00', 0x6, 0xf9, &(0x7f0000000180)=""/249, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x4, 0x42, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000340)=[0x1, 0x1, 0xffffffffffffffff, 0x1, r5, r5], &(0x7f00000003c0)=[{0x3, 0x5, 0x6, 0x7}, {0x4, 0x5, 0xe, 0x1}, {0x3, 0x1, 0x10, 0x2}, {0x0, 0x1, 0xf, 0xc}, {0x2, 0x4, 0x6, 0x3}], 0x10, 0x100}, 0x94)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000780)={{{@in=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4}}, &(0x7f0000000080)=0xe8)
sendmsg$nl_generic(r3, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xfffffe5e, &(0x7f0000000540)={&(0x7f0000003200)={0x146c, 0x31, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@typed={0x8, 0xb6, 0x0, 0x0, @fd=r7}, @typed={0x8, 0xa3, 0x0, 0x0, @str='GPL\x00'}, @generic="1157ec931f058f0fbcc448ee0a28adce1d21da8d4b98c8e8a0c5af5c559973b2adc7e86e2debfba1bdc9947e8178aa3704b23e5c8e91581e5872b4976dbe34bc0a88895859d2ee6e0aa7fb13ba51023d36bd3a325209ccf58e40669080aad8e40e5f1d3030f996582843614be5b0f14ecf9e73595e9d1f7688bc0bfb4b2ff79e9a09e754b5bcb21055bad5d8ac8ee2dacd88609ef445b2c26ed1269bd8806ce41b9adee4015454070605a977aa5c0c0f3321cd708bcd84bde4cc45cf2513b62c5ae5ed6ae7039916a09dfc07355442", @generic="9e5842a37a4509501bfeed5f9a9bacb8de78a01e74e7d237c9361fc4a49a0d399ce1020975aab7854ab27e33ae2649113e629564ef002a1b51ecc33fa29534418a14b33e328954942f159807c22f40a6f4ca3ae77323a0fc492bf24ee37c68c6a8f30324455d4326aeee8337e0eb1c84d5485494db1342dbfd347e123dab22e96539bd8f11524bdace2b4eed", @nested={0x12ec, 0x14d, 0x0, 0x1, [@typed={0x4, 0x5c}, @nested={0x10ad, 0x2, 0x0, 0x1, [@nested={0x4, 0xb}, @typed={0x8, 0x10e, 0x0, 0x0, @uid=r8}, @generic="6bf04076a2ab655a02ae649f1db16e88ab2d29bd93a8649fc051cdb0275869478330beedd5db550c9867567d839991a1573de837a1d36d82522270226f15dc2ff5129ecb4510a1963e6d7418273758f828722f159aa42169b5e55528e7a8b722d1cf8716788f9d543489aa11b1d59187282d33885d48ca3654df670484bdb66de0d35537c24ba1e43b8f327782421df0fa86ab65be779e4cac1c2a9fcd", @generic="17774bfb46fe8e77b78a9e5a4fb3f07b0c1dd9e5e077e1e14e020f7d853e4d9ece1794c9d853fcbc7db7b0bb59a30dcafd60ca23445d309dd719dfa89406a787e88afcbc5ddb199bec5db1c44c5399d4d2e115e893fa142d03607439da7b5dc000fcc524b219d3251f8b99994c7320419d7241732ffa32cd3ea45d47c16487989fe60cb040b2a0b26ebb24c7e6484c9f454fb360ea04d3f3a7a14faa33404ca1f61212c0e430b64750da830f16b4c79e9dc7383aa3c57c86b2d94b581a7c8b5ffe2e1ca6c0f6b1e003a8e4e81b6bd8f16d765681faa53d55881876c830cecf6b7f05008cf30ab0fcdbe2d61b8d445e8099829381307c8b953263433717bcc193ee62680368937d24617836e690288f0ddf9cc1fd7a7aadb4c0c8c801efb3a2f1a5276ec6a81f1a7716908d2330c370d6f26346aa62e0162bfc23ac7bf64116316bf9a9f5169341ad069dc2d2acb94c05ca0f39eb4095bb05b77033f918e12fad17aede4a66a637bf50edc6adf6698cb00cdbcaf073a0786afb4e99a4de2fd0bb5c656005311a2484c5780b79f2a78e4800ddc2701fa49a4a25d679e6089cc3bbff9675ef405bfdabde8823f7198535a16b070ad991cb1984a6b7d4ed6263c3f979807689948cf5c0c6c96ab6495af22e0b63891e552595ce9272308f1644286b99d2162b5d50b1d6bcde96f961c17027a8673ca25f608d021f4c0445306a745493384ed991d213c902a77c6b6e6fb4e9061d7802a83963043bd908d33ac5b2391e91725384a2a7e03d1e11933744930af529e4253489f370aed8dc2e086b53a34e75a6639a5c66c291ba9a4ac7a25e41d0394178cfa0e681460b2ce1ec0fe1647c160a7fe9ce0c738f56cb82ad095c3bcaf193bec1488886c2606a4beb43085bc7a0a4a3446f5cf522ab0af247ecf9cd1b2789a46361b7fb9ea420a080992e76d3fd9a1f4c383f86a7d79ac53aa270969c147f09e95589010c53c1fd727646359d312bbdf364f139103f51206182a4616bbbf4a683c65a336424112c1ad0f392141814c9d0f5d80489b73a16d763e46ebb4d320030304359780b88c939ad63673abb2821d316a7dddca25b1bf9f808111bcb72f19f0d58c6a24d0096e7f9cfb31822c438f8591a67ac1fc2233e13b71fb074126df8c2f72ff9b3e6426207af120ff6b6d72fe485cf5285f4697367ecec25e1f6d6e025f29926d5f2b20789364ca3383daa0b4cc547fa7cf1bd0a7c1cc1013e1384fa9782cd3c5857bb354ffa016238b83bdedcbf9e1750849b0e5c1afbbf0e4b07835b9a5819ce2600345e1d65c7c51c9f37a50fbd996077cd59cd9ef9850ce8dab5073df7f7dad1b3a6694f88447a5ee5af2115daeed200b867ff26521068219e5d6bcfec87a9e42f4f313e01c6ccc125c0a84b1fab709e04d4a919f470d688336e6b3ffddb039e43b39b1ee405313d735c2ddc22e19b03a24f6e4ece6e4595b9eced9b4d95b190be7fbdf282919255077e94ce1f900d0349f1da27da16a140195d8e27add9dcaed868677f50f2c6a06fbdaa99b40e8fad4704d22f577a4c981638bce6a41b57ca25d3e7bb7f2574bb87a9f4eff441a2406022bb733c6a1b3be5e36f50012102502c82bcb53b5273919826a277c0eb4deb8fffc85aef2b475eecc4d24d6e76f37e8c0661ff68706672e663ea1d2c13b418eea2929fee9f093dec401e2655c9c64264dc3b311b0f908cd1a8c17bcd4ec25c7ebc02a41979d739202d37a8d73b591decfc705beef3b50c660eb961f198919c2b1b49ff59285071258778a4e9c4cc101e9d0320ecf10af6d46baef1e7d576c8d8e52432baf9843a27c8e62fe876a399761895a4ec009a02881ede26ab8de6d1f241241e5e3e8638d9ced8c73344a13a1e1ae46d3bf22a6b110e3592b16513f3863c4dd53a9e24c7d0a0010311c09659e6f567396912a36d6b2cdf9ac3477773c41edcf8d74b97655a9501ba924241392859f26f8b5e2f54333ffed6fd20e3268f4039db66b065e1895b1ed27173d1904d96aedb69e6e11f8dd04aa1a0f36b5cf2f4f34e254a663c520c5584430105662077d8df4326dcb34938066520d2bb834ce0f9fd3359231586682b8eb725a57e92ceb6040752311318fdedd5bf27bff42c48166b1bfc3ebc90c1a9117ac0be91d08a39afc61e45efa9ca96363d4a3b996aeb3cfca6f9d9e4abdca9a5e9c1a6296f4134ac7635586ae948ddc11eba765b01763fe8b45521395ff3edcbae54711521237f25e42affabf98119f873a3e2a50ec733d8dd127b5ed97c4e336db40356a6225a31da6bdb9823fe7c24e4acc438a9554336a8aea75c5a58c72d3074d736f281115f8a6aa09fe4ee63204ba0468a2a0381cd852d9f49b1c267acafdacfbc8ff6bf8ace2c50d49e33f4d2e00020199420c50656b67ef7574ab7eebdf8be9130d9af72739905eee646fb4ac5e5426588dcea154a5f62c297b88907862322e7060896344fa7eabb3c29e0eb790510357d5b28a6304eb01ed8ea4a5b4cb2a64bfb8d487fdb816e24207bded5252fd9ad346229274ecf5c3130c7f1ebff048ca075a51d580c3685ab8d6d5776f3ac1e24e572e64e264e6f799821f1b5fc77d8625871d22edc6a6187471955de6340f19d316b22d94e349c2532712503bc3fb4004312e820c9e7084fc9876e3508e37ddc3cca54152a5fa602600a2d649a88463a513efa303642b0307a397f72ba1646ca78179f6f9d11a3796dbdb69764edda64a50e70bdbfb098b158e6541911c3cd55f9dcccfa28f2f32174a0370592775a070efb592f19f924ea2437e57a36356c83af0dd287be0bff6083e7018e8c061e6bbf7b4b767479b39501968e87286a4ab12840e4fce5b48874175afb525f4b955ecb2c37918c116d3eee228ceb4fb80f993feedc6ec942bec13076ff21d72a95f9240d426d4e2b82a56a362d12beba87d8816fa250b12f4c0c14b9fb0e9b992ab0f29c77eda05762877685f6b1ddbb6b04ab6fdded2a1a26f148f02bd09f22d2c1276a1be9f8932445efc8a8634df8d91eec800f8e19a3ccb42c732d57f7ae0ded1e7077ca4b82c98f4b3ecc4b1f11e447b19027af85587c102467042dc72b2c68edf83c849a9dbc9cfb87b52a3a4793e92cd9e74ecf3b0f722da619c2cd151a7478530da766048a171ff0c41bb256af035d523202ddc1567e42eb6415ee0e6b5f05c06c5df25fabe34ee7084c2ed391496e4048d1a313c2655769423e61f727d9a8e7cab228358927a80b2ddb538065297f91338e480b09c488a5114ae30e494072ef615008cf30a4082cc0c507198f1ed50f228cccb0ed1a5ef43eb435e0a28ee017a3f2f89cea8835f5a57513accea80c1a43a73b51763a71c1e1436384076691f4eeb86e993f466c27c650ff78cf0624519169b854c5550de0b4a767da994ec309d81bc59f4e592183e9210315d3f36004be9d19bafb61b13df4c8c2f7743cb883bf0319e6dfc4297946676db8c95dd310d18ab936c2ee0e208a7269ee48d6fb14f9b136d88bd8fa9bdc22a64bf1563fcc6937060c07eb224d555fa4f9910142578269458ef1d0b7c15e1e2c34d8e476a5300a6e95d918a0057e6d3909373758dffd08813cc51b4bac8254022f4d20b674e2f3a51c57fdc8df11c052ad887325d9c14c886cf52dfb6e20477f4f92f94d45771f5c072fb48b09bb4dcc26844e99208697058046efb0ed7b661f8092cbcec51388a7801002e3314704c1a90b9ad443acd0b9a88f645dfdac31fb731d47556e62b8fb2d5a70bc6c499d7a9571f41466bedf953bfa2f8c3af37262eeb21abd665a8a4a11ab63131d9284bb2dc6c68fd7f15ff57b4172e7a7eed1842efb1fab9671e91e3fd828b4554ae6893f7af0c8eff9c91ede7cb2b7b683d86a420d34570ba31354038cb74b28f3d3d0b3390fc6b696b4bad09c532aee98757088404392690608c1c19f1538bcef254a599cc6dcb229caa72a31d4a0562fb9b4ccf264103f2ecd4390aef2c2656f50691ca4c574c31b48f82f3376ee8dfbc41602b1e5c658db9e0ddeeb38195f840e56ebae97b9baa2697f07eb7e9b9356e9205e6ff38fe1f129abc8e59e58f32bdc5d475a3ab299773cbe30a8b80d100d9a8426d28a2c07d1f5dcc26d170a6e48904044b48f36b6be6a872cd1639d7d3150b70ab3460437f28a9082555823caee2853057d9331615952263599e158b892a5308ad5d2e1d37e2db06bb6b233c9eb52558b948d14994ee0835d8645507ba5495e59469e415a59b21ee33389936b5eebb20391d03e302668b3a35dad3a354af7e9a4a699138554b06eb5324d911eb65b6de4c4f9c7516c1fefa185c98f7f235cde14b770d6ad3de3016a1940f52ac899a8fca3ee790af164a5ce69a98e9e87159b5b72e391ddfb2154001b56c444ec9fbda803f33d48c1202dffafa3fa777eb0432ecf243ceac410fe581f8c831a0190f35895c8d28de9736670e4314ada472e0cab6710ae958d1c58152e70981fd060470d99f863ed545961d1f069862ab6c7dfd23d01d5aed61b72b7e05d6c58cafe773b584d668acef80bd67206459f300ea9e5d04b5844ea00d337377d139fbc534e3c24aa168da438d63fd013b0e0fbe6c673d2eafc77524a0ddece43b199181fdecf4d5a04003aeeee1813bfc486dec1da651d4f3799ba717a5f0670cbccb90524b06a367005e5492bb02819f57fef3a8a6804708f393a8a5fc7ca3a1ed965ad9c58047f5fd0775bc17d1cd0f7790333dbb531fbf91c1e46673285b5d1827258c9d56a399a2892b6f1f15345445cb95d27feec955c445182e1cc14e85fe99dc909dff4acd766b46c3b302dbfe3b3d3b55de6bca508005a2d041562a697b92bb14ab070dcd4c9dd854c8c8c1cfd93e3e763f9f260513e8c61384d0a09c90a380db38d69f7bc771755225e367bf0c342ea5ce72fe82f58b479c1f074caf9717b8e55031f83e5d081a8317cf0458d2039417a21c651b2e88380fa4457da82f8703b2a7a0209a0bbe2d976df416bc0e3eacf2992165191f78bca714471378ab3af31c657f84fb190ece1a614405e285e72ea8ffa834b0aef3396b4e1625be3e0d145c61ef6190ade19bee8e50c1ab5c322c306e2f646d9b883963ff507af3c5564b6366d86702b2085d1eac4e0c0ea1b795cfc706e7ebfefd8016c243ee463fab82642ecf8b3e6c96440246795a36783467cddc050cb5a1449b5d6547122eaab4c7bb200d436aff96500fb6dbef1441fcfc70cbc9402bad0eb328567e25061ea32a19066ec30a8125fb961e7f0048147bb7b3b83b2a6e1808816ae42ebb995f2533543f1af017519cb1ae9a522bfa5419f883abd14cd1872ecd9be5fec88645d81814e141a2a3f0642e451ebadde0439c0500d687cd8b776d65491573caec48be1610b82e07ddb5fef96a0e34ab6d6bbc1581697a351949b91c019de9154fee5b2c126b4a599d9ae2709d584f4133cdec698b89808f2905c29279cb629beb3cee30193533dfb4613a771ae53b5cb361a173e1b54bdbd0ae691ff30f035ab8da4219d0c67a6df83a43804b1943e34645335428f475c88ec2153c307eea1b37dcd30e3d4e240b09cd1700b33f325689beede2830e4fcce53cd40cd3281239073b677989c77f62f2a4c86dd24d9ad26ad1b47599f7cfc4975fa95408675cf50ee1f11c45b302f890c96ecc447db01ce6d69a8b01bff97b702d046cf304c4bb979d1f3ea38aa99e896f6f739664a7bea1b4745e47a41746b68cb687a325cf576e83d4673de775f384fcfccf8b3"]}, @nested={0x218, 0x10b, 0x0, 0x1, [@generic="b18714ae4428524a165c351a88211543c23c09231e7437262ce3ed0657815c2e224e2d5f770cad1af112bba2a9ad72369f06de22e9a19e9e0d94aaa5cef3d1dd18b61f8a3f7fe54cdd9514a46e4ef6c83713714f5d09008fb1988fb2b1cfb73aede514f021143699fc618560666606e03ca9140857779f9136c5cb2819681f67b0003aa362bd00a41596b65428eed89f2a9212410eacec1274090af5b51e034df20162bd112165428a46972fe313d93ab9a81b1937d3349bee85acfb899e554bc318b8feec7ab9e45ab1f03546b168d0423def3e90d84898ff", @typed={0x8, 0x110, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic, @nested={0x4, 0x82}, @typed={0x28, 0x97, 0x0, 0x0, @str='\xc4,:]\x00\xfb\xb8\x96&\x9a)\xd1\xe7H\x96\x8f\xa0\x96=y0\x97[y8l\xbc\xfb\x80\xbb\x0eh\xb6\x19\x103'}, @nested={0x4, 0x112}, @typed={0x8, 0x28, 0x0, 0x0, @fd=r5}, @generic="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"]}, @typed={0x8, 0x1d, 0x0, 0x0, @u32=0x10001}, @nested={0x8, 0xec, 0x0, 0x1, [@nested={0x4, 0x77}]}, @typed={0xc, 0x92, 0x0, 0x0, @u64}]}]}, 0x146c}}, 0x20000000)

416.52µs ago: executing program 1 (id=2581):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$alg(0x26, 0x5, 0x0) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x800)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f600008100000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00'})
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r4, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) (async)
setsockopt$inet6_udp_int(r4, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2, 0xa, 0x2) (async)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) (async)
write$tun(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b)
sendmsg$inet_sctp(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)="cf8b5205", 0x4}, {&(0x7f0000000440)="e5", 0x1}], 0x2, 0x0, 0x0, 0x10}, 0x24040010) (async)
sendmsg$inet_sctp(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)="cf8b5205", 0x4}, {&(0x7f0000000440)="e5", 0x1}], 0x2, 0x0, 0x0, 0x10}, 0x24040010)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_buf(r10, 0x1, 0x1f, 0x0, &(0x7f0000001000)=0x1e)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r11, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f400000005000200020000000800030005ac0f0005000900010000001c"], 0x58}}, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c00018006000600060600000800028004007280080007"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
r12 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$int_out(r12, 0x5460, &(0x7f0000000080))

0s ago: executing program 2 (id=2582):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x4000}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x5, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x36)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r3}, 0x10)
epoll_create1(0x0)
close(0xffffffffffffffff)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
socket(0x10, 0x803, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1b00040000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000040)
sendmsg$nl_route(r1, 0x0, 0x40000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)

kernel console output (not intermixed with test programs):

9997] ip6erspan1: left promiscuous mode
[  133.517642][ T9997] bridge0: port 1(ip6erspan1) entered disabled state
[  133.582146][ T5849] Bluetooth: hci2: command 0x0405 tx timeout
[  133.632751][T10001] tipc: Resetting bearer <eth:syzkaller0>
[  133.768037][T10007] 8021q: adding VLAN 0 to HW filter on device bond13
[  133.773058][T10007] bond0: (slave bond13): Enslaving as an active interface with a down link
[  133.839971][T10010] __nla_validate_parse: 19 callbacks suppressed
[  133.839986][T10010] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1090'.
[  134.125344][T10031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1095'.
[  134.130492][T10031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1095'.
[  134.263849][T10040] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1096'.
[  134.271079][T10040] validate_nla: 2 callbacks suppressed
[  134.271087][T10040] netlink: 'syz.1.1096': attribute type 2 has an invalid length.
[  134.281213][T10040] netlink: 'syz.1.1096': attribute type 1 has an invalid length.
[  134.290729][T10040] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1096'.
[  134.337022][T10048] dvmrp1: tun_chr_ioctl cmd 1074025677
[  134.339049][T10048] dvmrp1: linktype set to 768
[  134.374822][T10048] netlink: 'syz.2.1099': attribute type 1 has an invalid length.
[  134.391943][T10048] bond16: entered promiscuous mode
[  134.394203][T10048] 8021q: adding VLAN 0 to HW filter on device bond16
[  134.409351][T10048] bond16: (slave bridge0): making interface the new active one
[  134.414127][T10048] bridge0: entered promiscuous mode
[  134.416656][T10048] bond16: (slave bridge0): Enslaving as an active interface with an up link
[  134.419712][T10060] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  134.431582][T10059] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  134.528407][T10068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1105'.
[  134.552992][T10068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1105'.
[  134.563789][T10068] bridge5: entered promiscuous mode
[  134.566386][T10068] macsec1: entered promiscuous mode
[  134.568899][T10068] macsec1: entered allmulticast mode
[  134.571266][T10068] bridge5: entered allmulticast mode
[  134.575641][T10068] bridge5: port 1(macsec1) entered blocking state
[  134.578635][T10068] bridge5: port 1(macsec1) entered disabled state
[  134.585384][T10068] bridge5: left allmulticast mode
[  134.587915][T10068] bridge5: left promiscuous mode
[  135.733042][T10099] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1113'.
[  135.810146][T10108] netlink: 'syz.2.1116': attribute type 1 has an invalid length.
[  135.835162][T10108] 8021q: adding VLAN 0 to HW filter on device bond17
[  135.877715][T10108] 8021q: adding VLAN 0 to HW filter on device bond17
[  135.891961][T10108] bond17: (slave vxcan5): The slave device specified does not support setting the MAC address
[  135.899011][T10108] bond17: (slave vxcan5): Error -95 calling set_mac_address
[  135.916424][T10117] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1119'.
[  135.933096][T10115] bond17: (slave bridge5): Enslaving as an active interface with a down link
[  135.943099][T10117] batadv2: entered promiscuous mode
[  135.943949][T10119] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1121'.
[  135.944798][T10117] batadv2: entered allmulticast mode
[  136.066245][T10125] lo: MTU too low for tipc bearer
[  136.068299][T10125] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  136.158328][T10139] netlink: 'syz.2.1126': attribute type 3 has an invalid length.
[  136.648374][T10166] openvswitch: netlink: Flow actions attr not present in new flow.
[  136.797045][T10177] netlink: 'syz.1.1137': attribute type 8 has an invalid length.
[  137.002888][T10190] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  137.007075][T10190] tipc: Resetting bearer <eth:syzkaller0>
[  137.227974][T10201] netlink: 'syz.0.1144': attribute type 13 has an invalid length.
[  137.231371][T10201] netlink: 'syz.0.1144': attribute type 17 has an invalid length.
[  137.252558][T10201] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  137.281370][T10201] lo speed is unknown, defaulting to 1000
[  137.285749][T10201] wg1 speed is unknown, defaulting to 1000
[  137.289646][T10201] lo speed is unknown, defaulting to 1000
[  137.379051][T10203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.857543][T10225] batadv_slave_1: entered promiscuous mode
[  137.860392][T10225] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  137.871138][T10224] batadv_slave_1: left promiscuous mode
[  138.080823][T10246] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.100306][T10249] tipc: Resetting bearer <eth:syzkaller0>
[  138.128003][T10249] vlan0: left promiscuous mode
[  138.143559][T10248] pim6reg1: entered promiscuous mode
[  138.145438][T10248] pim6reg1: entered allmulticast mode
[  138.875608][T10262] __nla_validate_parse: 13 callbacks suppressed
[  138.875617][T10262] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1162'.
[  138.947660][T10265] sctp: [Deprecated]: syz.2.1163 (pid 10265) Use of int in maxseg socket option.
[  138.947660][T10265] Use struct sctp_assoc_value instead
[  138.999485][T10274] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1165'.
[  139.062182][T10277] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1165'.
[  139.068849][T10277] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1165'.
[  139.156815][T10281] netlink: 'syz.2.1166': attribute type 9 has an invalid length.
[  139.296487][T10301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1174'.
[  139.302862][T10301] ipvlan2: entered promiscuous mode
[  139.343258][T10299] netlink: 'syz.1.1172': attribute type 1 has an invalid length.
[  139.368310][T10305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1174'.
[  139.373318][T10302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1174'.
[  139.387396][T10299] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address
[  139.396435][T10299] bond6: (slave vxcan5): Error -95 calling set_mac_address
[  139.490237][T10307] netlink: 'syz.1.1175': attribute type 5 has an invalid length.
[  139.584962][T10310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1176'.
[  139.806523][T10312] netlink: 'syz.1.1177': attribute type 13 has an invalid length.
[  139.809854][T10312] netlink: 'syz.1.1177': attribute type 17 has an invalid length.
[  139.845135][T10312] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  139.872656][T10315] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1178'.
[  139.877417][T10315] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1178'.
[  139.910864][T10317] ip6gre1: entered allmulticast mode
[  139.974047][T10322] syzkaller0: Caught tx_queue_len zero misconfig
[  140.046338][T10335] tipc: Resetting bearer <eth:syzkaller0>
[  140.074053][T10335] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  140.185501][T10344] siw: device registration error -23
[  140.188093][T10343] netlink: 'syz.2.1186': attribute type 1 has an invalid length.
[  140.190746][T10343] netlink: 'syz.2.1186': attribute type 1 has an invalid length.
[  140.266465][T10353] bond16: (slave bridge0): Releasing backup interface
[  140.269100][T10353] bridge0: left promiscuous mode
[  140.276507][T10353] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  140.313849][T10359] siw: device registration error -23
[  140.401095][T10367] netlink: 'syz.2.1195': attribute type 1 has an invalid length.
[  140.429016][T10365] bond0: entered promiscuous mode
[  140.431288][T10365] bond13: entered promiscuous mode
[  140.442837][T10365] batadv0: entered promiscuous mode
[  140.445810][T10365] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  140.455268][T10365] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  140.466035][T10365] 8021q: adding VLAN 0 to HW filter on device hsr0
[  140.476298][T10372] netlink: 'syz.1.1197': attribute type 5 has an invalid length.
[  140.488558][T10372] netlink: 'syz.1.1197': attribute type 1 has an invalid length.
[  140.506814][T10372] bond7: entered promiscuous mode
[  140.508769][T10372] 8021q: adding VLAN 0 to HW filter on device bond7
[  140.529680][T10372] 8021q: adding VLAN 0 to HW filter on device bond8
[  140.539292][T10372] bond7: (slave bond8): making interface the new active one
[  140.544791][T10372] bond8: entered promiscuous mode
[  140.550531][T10372] bond7: (slave bond8): Enslaving as an active interface with an up link
[  140.580562][T10372] bond7: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  140.592135][T10372] bond7: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  140.734634][T10395] netlink: 'syz.1.1205': attribute type 1 has an invalid length.
[  140.740237][T10389] lo speed is unknown, defaulting to 1000
[  140.749444][T10389] wg1 speed is unknown, defaulting to 1000
[  140.758026][T10389] lo speed is unknown, defaulting to 1000
[  141.060731][T10406] batadv0 (unregistering): left promiscuous mode
[  141.151022][T10409] pimreg: entered allmulticast mode
[  141.954823][T10434] tipc: Resetting bearer <eth:team0>
[  142.075470][T10438] IPVS: sh: UDP 172.20.20.187:0 - no destination available
[  142.206808][T10445] lo speed is unknown, defaulting to 1000
[  142.209391][T10445] wg1 speed is unknown, defaulting to 1000
[  142.222995][T10445] lo speed is unknown, defaulting to 1000
[  142.293118][T10453] netem: unknown loss type 0
[  142.295175][T10453] netem: change failed
[  142.388165][T10463] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  142.464340][T10469] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  142.601216][T10476] dvmrp0: entered allmulticast mode
[  142.732414][T10487] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  143.210830][T10521] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  143.609697][T10542] tipc: Resetting bearer <eth:syzkaller0>
[  143.613738][T10542] bond0: (slave bond13): Releasing backup interface
[  143.617930][T10542] bond13: left promiscuous mode
[  143.678749][T10543] bond0: (slave wlan1): refused to change device type
[  143.687177][T10543] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  143.690260][T10543] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  144.097294][T10563] __nla_validate_parse: 22 callbacks suppressed
[  144.097304][T10563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1254'.
[  144.331678][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.338874][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.345506][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.350227][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  144.455973][T10578] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  144.475653][T10582] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1257'.
[  144.500090][T10584] validate_nla: 4 callbacks suppressed
[  144.500103][T10584] netlink: 'syz.0.1259': attribute type 13 has an invalid length.
[  144.509863][T10584] netlink: 'syz.0.1259': attribute type 17 has an invalid length.
[  144.518242][T10584] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  144.544861][T10584] lo speed is unknown, defaulting to 1000
[  144.547671][T10584] wg1 speed is unknown, defaulting to 1000
[  144.550570][T10584] lo speed is unknown, defaulting to 1000
[  144.639893][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  144.892930][T10591] lo speed is unknown, defaulting to 1000
[  144.896768][T10591] wg1 speed is unknown, defaulting to 1000
[  144.900721][T10591] lo speed is unknown, defaulting to 1000
[  145.119221][T10596] syzkaller0: Caught tx_queue_len zero misconfig
[  145.298526][T10606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  145.305814][T10606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1265'.
[  145.313708][T10606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1265'.
[  145.327787][T10606] 8021q: adding VLAN 0 to HW filter on device bond18
[  145.355976][T10616] netlink: 'syz.0.1267': attribute type 1 has an invalid length.
[  145.358719][T10616] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1267'.
[  145.390869][T10610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1266'.
[  145.390915][T10617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1266'.
[  146.132862][T10608] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  146.196286][T10624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1270'.
[  146.236312][T10628] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1271'.
[  146.292253][T10636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1274'.
[  146.297895][T10636] !: entered promiscuous mode
[  146.300194][T10636] !: left promiscuous mode
[  146.419558][T10654] tap0: tun_chr_ioctl cmd 1074025677
[  146.424577][T10654] tap0: linktype set to 772
[  147.858718][T10699] 8021q: adding VLAN 0 to HW filter on device batadv3
[  147.865205][T10699] team0: Failed to send port change of device batadv3 via netlink (err -105)
[  147.869202][T10699] team0: Failed to send options change via netlink (err -105)
[  147.873586][T10699] team0: Port device batadv3 added
[  148.293552][T10736] team0: entered promiscuous mode
[  148.295834][T10736] team0: entered allmulticast mode
[  148.298459][T10736] 8021q: adding VLAN 0 to HW filter on device team0
[  148.561402][T10752] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  148.564891][T10752] veth0_to_bridge: entered promiscuous mode
[  148.567129][T10752] veth0_to_bridge: entered allmulticast mode
[  148.708954][T10766] batadv0: entered promiscuous mode
[  148.819360][T10769] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  149.021153][T10790] netlink: 'syz.1.1316': attribute type 11 has an invalid length.
[  149.134843][T10811] netlink: 'syz.0.1321': attribute type 1 has an invalid length.
[  149.137490][T10811] __nla_validate_parse: 12 callbacks suppressed
[  149.137497][T10811] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1321'.
[  149.145084][T10811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1321'.
[  149.149576][T10801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1319'.
[  149.155520][T10801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1319'.
[  149.184648][T10810] lo speed is unknown, defaulting to 1000
[  149.187275][T10810] wg1 speed is unknown, defaulting to 1000
[  149.189890][T10810] lo speed is unknown, defaulting to 1000
[  149.219666][T10818] 8021q: adding VLAN 0 to HW filter on device bond8
[  149.227679][T10823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1323'.
[  149.248858][T10823] 8021q: adding VLAN 0 to HW filter on device bond9
[  149.253032][T10823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1323'.
[  149.740400][T10854] lo speed is unknown, defaulting to 1000
[  149.743175][T10854] wg1 speed is unknown, defaulting to 1000
[  149.745687][T10854] lo speed is unknown, defaulting to 1000
[  150.223589][T10868] IPVS: set_ctl: invalid protocol: 44 172.30.0.1:20001
[  150.286616][T10876] netlink: 'syz.0.1340': attribute type 32 has an invalid length.
[  150.294824][T10877] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1340'.
[  150.295774][T10878] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1340'.
[  150.298776][T10877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1340'.
[  150.304612][T10878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1340'.
[  150.738159][T10896] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  150.741310][T10897] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  150.931069][T10909] netlink: 'syz.0.1350': attribute type 3 has an invalid length.
[  150.934485][T10909] netlink: 'syz.0.1350': attribute type 2 has an invalid length.
[  150.937896][T10909] netlink: 'syz.0.1350': attribute type 2 has an invalid length.
[  151.187536][T10919] veth0_to_bond: left allmulticast mode
[  151.194730][T10919] tipc: Resetting bearer <eth:syzkaller0>
[  151.197299][T10919] syzkaller0: left promiscuous mode
[  151.199279][T10919] syzkaller0: left allmulticast mode
[  151.207265][T10919] macvlan2: left promiscuous mode
[  151.211297][T10919] veth13: left promiscuous mode
[  151.213538][T10919] bond16: left promiscuous mode
[  151.216022][T10919] ipvlan2: left promiscuous mode
[  151.235822][T10919] hsr_slave_0: left promiscuous mode
[  151.371708][T10927] netlink: 'syz.2.1355': attribute type 13 has an invalid length.
[  151.376157][T10927] netlink: 'syz.2.1355': attribute type 17 has an invalid length.
[  151.414064][T10927] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.417769][T10927] 8021q: adding VLAN 0 to HW filter on device team0
[  151.420807][T10927] tipc: Resetting bearer <eth:team0>
[  151.427526][T10927] tipc: Resetting bearer <eth:team0>
[  151.437553][T10927] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  151.445632][ T5908] lo speed is unknown, defaulting to 1000
[  151.452091][ T5908] syz2: Port: 1 Link ACTIVE
[  151.788770][T10970] lo speed is unknown, defaulting to 1000
[  151.797849][T10970] wg1 speed is unknown, defaulting to 1000
[  151.800642][T10973] lo speed is unknown, defaulting to 1000
[  151.807793][T10970] lo speed is unknown, defaulting to 1000
[  151.829354][T10973] wg1 speed is unknown, defaulting to 1000
[  151.839891][T10973] lo speed is unknown, defaulting to 1000
[  152.349216][T11010] bridge0: entered promiscuous mode
[  152.765957][T11030] netlink: 'syz.2.1381': attribute type 9 has an invalid length.
[  152.790670][T11030] netlink: 'syz.2.1381': attribute type 9 has an invalid length.
[  152.913493][T11040] ip6tnl1: entered promiscuous mode
[  152.915391][T11040] ip6tnl1: entered allmulticast mode
[  152.923176][T11040] netlink: 'syz.1.1384': attribute type 1 has an invalid length.
[  152.931548][T11040] netlink: 'syz.1.1384': attribute type 1 has an invalid length.
[  152.949434][T11046] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  153.035708][T11052] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  153.038858][T11052] syzkaller0: entered promiscuous mode
[  153.040791][T11052] syzkaller0: entered allmulticast mode
[  153.217301][T11064] lo speed is unknown, defaulting to 1000
[  153.220724][T11064] wg1 speed is unknown, defaulting to 1000
[  153.223571][T11064] lo speed is unknown, defaulting to 1000
[  153.899980][T11085] pim6reg1: entered promiscuous mode
[  153.902512][T11085] pim6reg1: entered allmulticast mode
[  154.207021][T11108] __nla_validate_parse: 45 callbacks suppressed
[  154.207032][T11108] netlink: 37 bytes leftover after parsing attributes in process `syz.1.1403'.
[  154.311862][T11108] nbd1: detected capacity change from 0 to 127
[  154.316336][   T56] block nbd1: Receive control failed (result -32)
[  154.316609][T10339] block nbd1: Send control failed (result -32)
[  154.322373][T10339] block nbd1: Request send failed, requeueing
[  154.332882][T10339] block nbd1: Dead connection, failed to find a fallback
[  154.335815][T10339] block nbd1: shutting down sockets
[  154.337890][T10339] blk_print_req_error: 138 callbacks suppressed
[  154.337900][T10339] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  154.347436][   T60] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  154.351937][   T60] buffer_io_error: 138 callbacks suppressed
[  154.351948][   T60] Buffer I/O error on dev nbd1, logical block 0, async page read
[  154.358557][T10339] Buffer I/O error on dev nbd1, logical block 1, async page read
[  154.362012][T10339] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  154.365216][T10339] Buffer I/O error on dev nbd1, logical block 2, async page read
[  154.367777][T10339] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  154.371193][T10339] Buffer I/O error on dev nbd1, logical block 3, async page read
[  154.379580][T10339] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  154.383141][T10339] Buffer I/O error on dev nbd1, logical block 0, async page read
[  154.385755][T10339] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  154.388997][T10339] Buffer I/O error on dev nbd1, logical block 1, async page read
[  154.394704][T10339] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  154.397764][T10339] Buffer I/O error on dev nbd1, logical block 2, async page read
[  154.400534][T10339] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  154.404018][T10339] Buffer I/O error on dev nbd1, logical block 3, async page read
[  154.407195][T10339] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  154.410564][T10339] Buffer I/O error on dev nbd1, logical block 0, async page read
[  154.415953][T10339] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  154.418866][T10339] Buffer I/O error on dev nbd1, logical block 1, async page read
[  154.423342][T10339] ldm_validate_partition_table(): Disk read failed.
[  154.426717][T10339] Dev nbd1: unable to read RDB block 0
[  154.428796][T11115] netlink: zone id is out of range
[  154.429467][T10339]  nbd1: unable to read partition table
[  154.431150][T11115] netlink: zone id is out of range
[  154.435136][T11115] netlink: zone id is out of range
[  154.436955][T11115] netlink: zone id is out of range
[  154.437230][T10339] ldm_validate_partition_table(): Disk read failed.
[  154.438742][T11115] netlink: zone id is out of range
[  154.444373][T11115] netlink: zone id is out of range
[  154.445307][T10339] Dev nbd1: unable to read RDB block 0
[  154.446306][T11115] netlink: zone id is out of range
[  154.449355][T10339]  nbd1: unable to read partition table
[  154.470329][T11115] netlink: set zone limit has 4 unknown bytes
[  154.488798][T11115] netlink: del zone limit has 4 unknown bytes
[  154.498721][T11119] lo: entered allmulticast mode
[  154.506404][T11119] dvmrp8: entered allmulticast mode
[  154.515622][T11119] lo: left allmulticast mode
[  154.517669][T11119] dvmrp8: left allmulticast mode
[  154.584344][T11123] lo speed is unknown, defaulting to 1000
[  154.588068][T11123] wg1 speed is unknown, defaulting to 1000
[  154.589202][T11124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1409'.
[  154.592574][T11123] lo speed is unknown, defaulting to 1000
[  154.599661][T11124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1409'.
[  154.609833][T11124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1409'.
[  154.825487][T11130] dvmrp10: entered allmulticast mode
[  154.938869][T11137] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1413'.
[  154.948250][T11137] rdma_rxe: rxe_newlink: failed to add veth1_to_hsr
[  155.195693][T11153] syzkaller0: left promiscuous mode
[  155.197468][T11153] syzkaller0: left allmulticast mode
[  155.211962][T11151] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1418'.
[  155.283644][T11153] syzkaller1: entered promiscuous mode
[  155.285999][T11153] syzkaller1: entered allmulticast mode
[  155.295284][T11153] validate_nla: 4 callbacks suppressed
[  155.295292][T11153] netlink: 'syz.1.1417': attribute type 1 has an invalid length.
[  155.299650][T11153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1417'.
[  155.303009][T11153] netlink: 45 bytes leftover after parsing attributes in process `syz.1.1417'.
[  155.341620][ T5858] Bluetooth: hci2: command 0x0405 tx timeout
[  155.359039][T11164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1421'.
[  155.382687][T11163] syz.2.1421: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  155.391390][T11163] CPU: 1 UID: 0 PID: 11163 Comm: syz.2.1421 Not tainted syzkaller #0 PREEMPT(full) 
[  155.391408][T11163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  155.391415][T11163] Call Trace:
[  155.391420][T11163]  <TASK>
[  155.391426][T11163]  dump_stack_lvl+0x189/0x250
[  155.391469][T11163]  ? __pfx_dump_stack_lvl+0x10/0x10
[  155.391483][T11163]  ? __pfx__printk+0x10/0x10
[  155.391499][T11163]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  155.391512][T11163]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  155.391526][T11163]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  155.391541][T11163]  warn_alloc+0x214/0x310
[  155.391562][T11163]  ? __pfx_warn_alloc+0x10/0x10
[  155.391585][T11163]  ? __get_vm_area_node+0x28f/0x300
[  155.391601][T11163]  ? xskq_create+0xbf/0x170
[  155.391620][T11163]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  155.391657][T11163]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  155.391678][T11163]  ? __kasan_kmalloc+0x93/0xb0
[  155.391695][T11163]  vmalloc_user_noprof+0xad/0xf0
[  155.391711][T11163]  ? xskq_create+0xbf/0x170
[  155.391727][T11163]  xskq_create+0xbf/0x170
[  155.391744][T11163]  xsk_init_queue+0xb0/0x110
[  155.391761][T11163]  xsk_setsockopt+0x57b/0x8d0
[  155.391777][T11163]  ? __pfx_xsk_setsockopt+0x10/0x10
[  155.391792][T11163]  ? __pfx_aa_sk_perm+0x10/0x10
[  155.391811][T11163]  ? __fget_files+0x2a/0x420
[  155.391826][T11163]  ? aa_sock_opt_perm+0xff/0x1b0
[  155.391840][T11163]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  155.391852][T11163]  ? __pfx_xsk_setsockopt+0x10/0x10
[  155.391868][T11163]  do_sock_setsockopt+0x17c/0x1b0
[  155.391884][T11163]  __x64_sys_setsockopt+0x13f/0x1b0
[  155.391899][T11163]  do_syscall_64+0xfa/0x3b0
[  155.391909][T11163]  ? lockdep_hardirqs_on+0x9c/0x150
[  155.391925][T11163]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.391936][T11163]  ? exc_page_fault+0x9f/0xf0
[  155.391953][T11163]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.391964][T11163] RIP: 0033:0x7f08a9d8eba9
[  155.391975][T11163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  155.391985][T11163] RSP: 002b:00007f08aac40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  155.391998][T11163] RAX: ffffffffffffffda RBX: 00007f08a9fd5fa0 RCX: 00007f08a9d8eba9
[  155.392006][T11163] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000008
[  155.392013][T11163] RBP: 00007f08a9e11e19 R08: 0000000000000004 R09: 0000000000000000
[  155.392019][T11163] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  155.392027][T11163] R13: 00007f08a9fd6038 R14: 00007f08a9fd5fa0 R15: 00007fff13c50508
[  155.392046][T11163]  </TASK>
[  155.491321][T11163] Mem-Info:
[  155.494311][T11163] active_anon:5269 inactive_anon:0 isolated_anon:0
[  155.494311][T11163]  active_file:1554 inactive_file:38281 isolated_file:0
[  155.494311][T11163]  unevictable:1768 dirty:84 writeback:0
[  155.494311][T11163]  slab_reclaimable:10691 slab_unreclaimable:89480
[  155.494311][T11163]  mapped:18262 shmem:2447 pagetables:973
[  155.494311][T11163]  sec_pagetables:0 bounce:0
[  155.494311][T11163]  kernel_misc_reclaimable:0
[  155.494311][T11163]  free:257680 free_pcp:21180 free_cma:0
[  155.517004][T11163] Node 0 active_anon:11540kB inactive_anon:0kB active_file:4768kB inactive_file:23380kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29956kB dirty:240kB writeback:0kB shmem:4764kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6468kB pagetables:1948kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  155.528385][T11163] Node 1 active_anon:9672kB inactive_anon:0kB active_file:1448kB inactive_file:129744kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:43092kB dirty:96kB writeback:0kB shmem:5024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6880kB pagetables:1812kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  155.540923][T11163] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  155.553126][T11163] lowmem_reserve[]: 0 811 811 811 811
[  155.555499][T11163] Node 0 DMA32 free:283996kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11540kB inactive_anon:0kB active_file:4768kB inactive_file:23380kB unevictable:3536kB writepending:240kB present:1556484kB managed:830928kB mlocked:0kB bounce:0kB free_pcp:49372kB local_pcp:14652kB free_cma:0kB
[  155.593961][T11163] lowmem_reserve[]: 0 0 0 0 0
[  155.598067][T11163] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  155.616224][T11163] lowmem_reserve[]: 0 0 854 854 854
[  155.623542][T11163] Node 1 Normal free:272728kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9684kB inactive_anon:0kB active_file:1448kB inactive_file:129744kB unevictable:3536kB writepending:96kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:35380kB local_pcp:16204kB free_cma:0kB
[  155.637680][T11163] lowmem_reserve[]: 0 0 0 0 0
[  155.639593][T11163] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  155.644378][T11163] Node 0 DMA32: 40*4kB (ME) 416*8kB (UME) 235*16kB (UME) 131*32kB (UME) 62*64kB (UME) 4*128kB (UME) 2*256kB (UE) 2*512kB (UM) 2*1024kB (UE) 3*2048kB (M) 63*4096kB (UM) = 283696kB
[  155.646300][T11169] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1422'.
[  155.650820][T11163] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  155.661987][T11163] Node 1 Normal: 144*4kB (UME) 317*8kB (UME) 555*16kB (UME) 298*32kB (UM) 74*64kB (UME) 55*128kB (UM) 23*256kB (UME) 6*512kB (UM) 5*1024kB (UM) 4*2048kB (UME) 53*4096kB (UM) = 272664kB
[  155.668018][T11163] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  155.671100][T11163] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  155.674793][T11163] 42267 total pagecache pages
[  155.676733][T11163] 0 pages in swap cache
[  155.678505][T11163] Free swap  = 124996kB
[  155.680147][T11163] Total swap = 124996kB
[  155.682028][T11163] 786301 pages RAM
[  155.683360][T11163] 0 pages HighMem/MovableOnly
[  155.685094][T11163] 241337 pages reserved
[  155.686565][T11163] 0 pages cma reserved
[  155.688031][T11179] lo speed is unknown, defaulting to 1000
[  155.690728][T11179] wg1 speed is unknown, defaulting to 1000
[  155.694805][T11179] lo speed is unknown, defaulting to 1000
[  155.831804][T11190] syzkaller1: entered promiscuous mode
[  155.834018][T11190] syzkaller1: entered allmulticast mode
[  155.965430][T11205] netlink: 'syz.2.1433': attribute type 9 has an invalid length.
[  156.295021][T11217] netlink: 'syz.0.1436': attribute type 6 has an invalid length.
[  156.299911][T11217] netlink: 'syz.0.1436': attribute type 12 has an invalid length.
[  156.336640][T11219] lo speed is unknown, defaulting to 1000
[  156.361198][T11219] wg1 speed is unknown, defaulting to 1000
[  156.367432][T11219] lo speed is unknown, defaulting to 1000
[  156.402610][T11220] netlink: 'syz.2.1437': attribute type 39 has an invalid length.
[  156.432589][T11222] lo speed is unknown, defaulting to 1000
[  156.435171][T11222] wg1 speed is unknown, defaulting to 1000
[  156.437714][T11222] lo speed is unknown, defaulting to 1000
[  156.794275][T11228] siw: device registration error -23
[  157.050600][T11246] sit3: entered promiscuous mode
[  157.119216][T11251] lo speed is unknown, defaulting to 1000
[  157.123281][T11251] wg1 speed is unknown, defaulting to 1000
[  157.132263][T11251] lo speed is unknown, defaulting to 1000
[  157.235157][T11258] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  157.599347][T11274] syzkaller1: entered promiscuous mode
[  157.603128][T11274] syzkaller1: entered allmulticast mode
[  157.748624][T11279] macsec1: entered promiscuous mode
[  157.751786][T11279] veth1_to_hsr: entered promiscuous mode
[  157.783563][T11281] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  157.859020][T11290] gretap0: entered promiscuous mode
[  157.995992][T11300] lo speed is unknown, defaulting to 1000
[  157.998792][T11300] wg1 speed is unknown, defaulting to 1000
[  158.003845][T11300] lo speed is unknown, defaulting to 1000
[  158.118845][T11316] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  158.440709][T11334] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  158.507481][T11341] netlink: 'syz.1.1468': attribute type 2 has an invalid length.
[  158.626487][T11349] netlink: 'syz.1.1472': attribute type 1 has an invalid length.
[  158.628713][T11348] netlink: 'syz.2.1471': attribute type 10 has an invalid length.
[  158.647243][T11348] netlink: 'syz.2.1471': attribute type 1 has an invalid length.
[  158.665838][T11348] veth17: entered promiscuous mode
[  158.686891][T11349] bond10: (slave geneve5): making interface the new active one
[  158.690245][T11349] bond10: (slave geneve5): Enslaving as an active interface with an up link
[  158.697331][   T13] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  158.701334][   T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  158.705279][   T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  158.713042][   T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  158.804203][T11360] netlink: 'syz.1.1475': attribute type 1 has an invalid length.
[  158.827379][T11360] 8021q: adding VLAN 0 to HW filter on device bond11
[  159.230968][T11371] lo speed is unknown, defaulting to 1000
[  159.236041][T11371] wg1 speed is unknown, defaulting to 1000
[  159.239751][T11371] lo speed is unknown, defaulting to 1000
[  159.695162][T11383] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  159.698174][T11383] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  159.728645][T11386] __nla_validate_parse: 12 callbacks suppressed
[  159.728653][T11386] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1481'.
[  159.735986][T11387] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1478'.
[  159.738975][T11386] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1481'.
[  159.770536][T11390] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1482'.
[  159.773703][T11387] bond12: entered promiscuous mode
[  159.773955][T11387] 8021q: adding VLAN 0 to HW filter on device bond12
[  159.781097][T11390] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1482'.
[  159.797749][T11390] netlink: 1172 bytes leftover after parsing attributes in process `syz.0.1482'.
[  159.853233][T11397] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  159.864936][T11400] Bluetooth: MGMT ver 1.23
[  159.931184][T11402] lo speed is unknown, defaulting to 1000
[  159.940572][T11402] wg1 speed is unknown, defaulting to 1000
[  159.940984][T11397] lo speed is unknown, defaulting to 1000
[  159.948671][T11402] lo speed is unknown, defaulting to 1000
[  159.948963][T11397] wg1 speed is unknown, defaulting to 1000
[  159.959942][T11397] lo speed is unknown, defaulting to 1000
[  160.082032][T11413] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1490'.
[  160.105634][T11413] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1490'.
[  160.139650][T11413] bond14: entered promiscuous mode
[  160.142215][T11413] 8021q: adding VLAN 0 to HW filter on device bond14
[  160.208706][T11413] bond14 (unregistering): Released all slaves
[  160.327108][T11417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1491'.
[  160.426876][T11421] validate_nla: 4 callbacks suppressed
[  160.426886][T11421] netlink: 'syz.0.1493': attribute type 6 has an invalid length.
[  160.512286][T11428] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1495'.
[  160.750808][T11433] lo speed is unknown, defaulting to 1000
[  160.776573][T11433] wg1 speed is unknown, defaulting to 1000
[  160.781033][T11435] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  160.786240][T11433] lo speed is unknown, defaulting to 1000
[  161.276793][T11397] delete_channel: no stack
[  161.278873][T11397] delete_channel: no stack
[  161.446667][T11457] bridge9: entered promiscuous mode
[  161.448793][T11457] bridge9: entered allmulticast mode
[  161.467730][T11457] team0: Port device bridge9 added
[  161.535938][T11470] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2)
[  161.798246][T11495] !: entered promiscuous mode
[  161.800078][T11495] vlan1: entered promiscuous mode
[  162.011272][T11506] netlink: 'syz.1.1519': attribute type 5 has an invalid length.
[  162.802389][T11513] bridge0: port 1(erspan0) entered blocking state
[  162.804969][T11513] bridge0: port 1(erspan0) entered disabled state
[  162.807278][T11513] erspan0: entered allmulticast mode
[  162.810262][T11513] erspan0: entered promiscuous mode
[  162.814279][T11513] erspan0: left allmulticast mode
[  162.816080][T11513] erspan0: left promiscuous mode
[  162.818830][T11513] bridge0: port 1(erspan0) entered disabled state
[  163.114962][T11529] netlink: 'syz.2.1526': attribute type 10 has an invalid length.
[  163.120091][   T27] tipc: Resetting bearer <eth:team0>
[  163.124237][T11529] netlink: 'syz.2.1526': attribute type 10 has an invalid length.
[  163.128558][T11529] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  163.137160][T11529] team0: Port device dummy0 removed
[  163.145676][T11529] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  163.172472][   T12] bond0: (slave dummy0): interface is now down
[  163.186195][   T12] bond0: now running without any active interface!
[  163.208528][T11534] netlink: 'syz.2.1527': attribute type 1 has an invalid length.
[  163.218330][T11531] netlink: 'syz.0.1528': attribute type 13 has an invalid length.
[  163.239541][T11534] 8021q: adding VLAN 0 to HW filter on device bond19
[  163.269766][T11531] tipc: Resetting bearer <eth:syzkaller0>
[  163.298958][T11538] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  163.404182][T11544] lo speed is unknown, defaulting to 1000
[  163.407783][T11544] wg1 speed is unknown, defaulting to 1000
[  163.412293][T11544] lo speed is unknown, defaulting to 1000
[  163.766062][T11548] netlink: 'syz.1.1532': attribute type 1 has an invalid length.
[  163.920226][T11558] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  163.967699][T11561] netlink: 'syz.2.1534': attribute type 11 has an invalid length.
[  164.103842][T11565] lo speed is unknown, defaulting to 1000
[  164.106492][T11565] wg1 speed is unknown, defaulting to 1000
[  164.120330][T11565] lo speed is unknown, defaulting to 1000
[  164.273628][T11576] lo speed is unknown, defaulting to 1000
[  164.277556][T11576] wg1 speed is unknown, defaulting to 1000
[  164.280688][T11576] lo speed is unknown, defaulting to 1000
[  164.872644][T11589] __nla_validate_parse: 21 callbacks suppressed
[  164.872654][T11589] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1541'.
[  164.909570][T11589] openvswitch: netlink: IP tunnel dst address not specified
[  164.988764][T11598] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1543'.
[  165.058139][T11600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1544'.
[  165.181363][T11614] lo speed is unknown, defaulting to 1000
[  165.185376][T11614] wg1 speed is unknown, defaulting to 1000
[  165.189017][T11614] lo speed is unknown, defaulting to 1000
[  165.212964][T11620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1549'.
[  165.216553][T11620] netlink: 'syz.1.1549': attribute type 1 has an invalid length.
[  165.334554][T11630] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1552'.
[  165.340403][T11626] lo speed is unknown, defaulting to 1000
[  165.347410][T11626] wg1 speed is unknown, defaulting to 1000
[  165.351017][T11626] lo speed is unknown, defaulting to 1000
[  165.414454][T11633] lo speed is unknown, defaulting to 1000
[  165.417459][T11633] wg1 speed is unknown, defaulting to 1000
[  165.429603][T11633] lo speed is unknown, defaulting to 1000
[  165.709740][T11636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1553'.
[  165.722423][T11648] tipc: Enabled bearer <udp:s>, priority 10
[  165.760919][T11651] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  165.792246][T11651] tipc: Resetting bearer <eth:team0>
[  165.803874][T11654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1558'.
[  166.008753][T11662] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  166.126668][T11669] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1562'.
[  166.130484][T11670] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1562'.
[  166.139180][T11672] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1563'.
[  166.422721][T11692] netlink: 'syz.2.1567': attribute type 6 has an invalid length.
[  166.440346][T11692] netlink: 'syz.2.1567': attribute type 12 has an invalid length.
[  166.786357][T11705] netlink: 'syz.1.1568': attribute type 10 has an invalid length.
[  166.923511][T11709] lo: Caught tx_queue_len zero misconfig
[  166.943408][T11709] vlan0: entered allmulticast mode
[  166.945540][T11709] bridge_slave_0: entered allmulticast mode
[  167.093991][T11714] tipc: Resetting bearer <eth:syzkaller0>
[  167.100214][T11714] team0: Port device batadv3 removed
[  167.110285][T11714] team0: Port device bridge9 removed
[  167.129960][T11714] netlink: 'syz.0.1574': attribute type 10 has an invalid length.
[  167.135759][T11714] bond0: (slave wlan1): refused to change device type
[  167.139886][T11714] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  167.143835][T11714] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  167.604752][T11732] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  167.733422][T11739] veth0_to_team: left promiscuous mode
[  167.735419][T11739] veth0_to_team: left allmulticast mode
[  167.743497][T11739] tipc: Resetting bearer <eth:syzkaller0>
[  167.746662][T11739] bond5: left promiscuous mode
[  167.748917][T11739] bridge3: left promiscuous mode
[  167.750613][T11739] bridge3: left allmulticast mode
[  167.755841][T11739] ip6gre1: left allmulticast mode
[  167.760317][T11739] bond7: left promiscuous mode
[  167.762766][T11739] bond8: left promiscuous mode
[  167.770122][T11739] team0: left promiscuous mode
[  167.776098][T11739] team0: left allmulticast mode
[  167.783874][T11739] ip6tnl1: left promiscuous mode
[  167.788781][T11739] ip6tnl1: left allmulticast mode
[  167.808930][T11739] bond12: left promiscuous mode
[  167.823824][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.829805][   T13] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20004 - 0
[  167.836321][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.839458][   T13] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20004 - 0
[  167.843975][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.847316][   T13] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20004 - 0
[  167.855414][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.858726][   T13] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20004 - 0
[  168.136358][T11775] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig
[  168.435725][T11816] pim6reg: entered allmulticast mode
[  168.545458][T11831] team0: Device gtp1 is up. Set it down before adding it as a team port
[  168.565672][   T33] audit: type=1107 audit(1757565885.577:3): pid=11828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  168.845337][T11846] 8021q: adding VLAN 0 to HW filter on device bond14
[  169.230453][T11857] sctp: [Deprecated]: syz.2.1614 (pid 11857) Use of int in max_burst socket option.
[  169.230453][T11857] Use struct sctp_assoc_value instead
[  169.276524][T11860] syzkaller1: entered promiscuous mode
[  169.278617][T11860] syzkaller1: entered allmulticast mode
[  169.586622][T11885] netlink: 'syz.1.1621': attribute type 6 has an invalid length.
[  169.680400][T11898] lo speed is unknown, defaulting to 1000
[  169.685519][T11898] wg1 speed is unknown, defaulting to 1000
[  169.688156][T11898] lo speed is unknown, defaulting to 1000
[  169.694804][T11900] smc: net device bond0 applied user defined pnetid SYZ0
[  169.697457][T11900] smc: net device bond0 erased user defined pnetid SYZ0
[  169.734743][T11895] veth1_to_hsr: Caught tx_queue_len zero misconfig
[  169.797756][T11908] netlink: 'syz.1.1630': attribute type 1 has an invalid length.
[  169.955952][T11925] __nla_validate_parse: 16 callbacks suppressed
[  169.955962][T11925] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1634'.
[  170.190989][T11927] netlink: 'syz.2.1635': attribute type 12 has an invalid length.
[  170.366753][T11946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1642'.
[  170.403920][T11949] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1643'.
[  170.494967][T11956] netlink: 'syz.2.1646': attribute type 2 has an invalid length.
[  170.497710][T11956] netlink: 4856 bytes leftover after parsing attributes in process `syz.2.1646'.
[  170.504404][T11956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1646'.
[  170.513117][T11956] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  170.544797][T11958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1647'.
[  171.265768][T11978] dvmrp0: left allmulticast mode
[  171.267761][T11978] pimreg: left allmulticast mode
[  171.320746][T11979] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  171.326103][T11979] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1652'.
[  171.397121][T11979] bond0 (unregistering): Released all slaves
[  171.565808][T11985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1655'.
[  171.641935][T11993] tipc: Resetting bearer <eth:syzkaller0>
[  171.691069][T11987] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  171.772813][T12007] tipc: Resetting bearer <eth:syzkaller0>
[  171.787457][T12007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1660'.
[  171.864809][T12013] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004
[  171.954289][T12021] netlink: 'syz.0.1665': attribute type 1 has an invalid length.
[  172.026780][T12022] veth9: entered promiscuous mode
[  172.032571][T12022] bond0: (slave veth9): Enslaving as an active interface with a down link
[  172.051420][T12022] tipc: Resetting bearer <eth:syzkaller0>
[  172.067054][T12022] bond0: (slave veth9): Releasing backup interface
[  172.078217][T12021] tipc: Resetting bearer <eth:syzkaller0>
[  172.195359][ T5849] Bluetooth: hci2: link tx timeout
[  172.197549][ T5849] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  172.214048][ T5849] Bluetooth: hci2: link tx timeout
[  172.216023][ T5849] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  172.220371][T12044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1671'.
[  172.556339][ T5849] Bluetooth: hci2: link tx timeout
[  172.558072][ T5849] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  172.848104][T12073] bond0: Caught tx_queue_len zero misconfig
[  173.435333][T12101] netlink: 'syz.0.1685': attribute type 3 has an invalid length.
[  173.438518][T12101] netlink: 'syz.0.1685': attribute type 1 has an invalid length.
[  173.757352][T12131] openvswitch: netlink: Flow actions attr not present in new flow.
[  173.800942][T12131] syzkaller0: entered promiscuous mode
[  173.804837][T12131] syzkaller0: entered allmulticast mode
[  173.965912][T12151] pimreg: entered allmulticast mode
[  173.987623][T12151] pimreg: left allmulticast mode
[  174.228387][ T5849] Bluetooth: hci2: command 0x0405 tx timeout
[  174.278597][T12169] lo speed is unknown, defaulting to 1000
[  174.289471][T12169] wg1 speed is unknown, defaulting to 1000
[  174.293417][T12169] lo speed is unknown, defaulting to 1000
[  174.533646][T12183] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  174.599621][T12187] tap0: tun_chr_ioctl cmd 1074025677
[  174.602946][T12187] tap0: linktype set to 769
[  174.605386][T12186] tap0: tun_chr_ioctl cmd 1074025677
[  174.608026][T12186] tap0: linktype set to 769
[  174.653230][T12186] netlink: 'syz.1.1709': attribute type 25 has an invalid length.
[  174.741136][T12190] netlink: 'syz.1.1710': attribute type 1 has an invalid length.
[  174.758936][T12190] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.989925][T12198] netlink: 'syz.1.1713': attribute type 1 has an invalid length.
[  174.994121][T12198] __nla_validate_parse: 16 callbacks suppressed
[  174.994134][T12198] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1713'.
[  175.148359][T12202] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  175.291072][T12218] lo speed is unknown, defaulting to 1000
[  175.301631][T12218] wg1 speed is unknown, defaulting to 1000
[  175.304306][T12218] lo speed is unknown, defaulting to 1000
[  175.420823][T12227] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1721'.
[  175.444739][T12227] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1721'.
[  175.448020][T12227] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1721'.
[  175.861778][T12241] netlink: 'syz.0.1725': attribute type 1 has an invalid length.
[  175.864385][T12241] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1725'.
[  175.931196][T12243] syzkaller1: entered promiscuous mode
[  175.936326][T12243] syzkaller1: entered allmulticast mode
[  175.957143][T12251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1728'.
[  176.075569][T12261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1732'.
[  176.078421][T12261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1732'.
[  176.086522][T12261] netlink: 'syz.1.1732': attribute type 20 has an invalid length.
[  176.139952][T12264] tipc: New replicast peer: 255.255.255.255
[  176.144761][T12264] tipc: Enabled bearer <udp:syz2>, priority 10
[  176.192187][T12268] netlink: 'syz.0.1735': attribute type 29 has an invalid length.
[  176.213210][T12268] netlink: 'syz.0.1735': attribute type 29 has an invalid length.
[  176.217881][T12268] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1735'.
[  176.221762][T12268] unsupported nla_type 58
[  176.300380][T12273] netlink: 'syz.0.1736': attribute type 11 has an invalid length.
[  176.523082][T12294] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  176.580959][T12304] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1744'.
[  176.727394][T12320] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  176.731192][T12320] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  176.736163][T12320] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  176.740370][T12320] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  176.761872][T12320] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  176.764859][T12320] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  176.767749][T12320] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  176.771786][T12320] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  176.778217][T12320] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  177.194374][T12347] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[  177.238182][T12350] sit0: entered promiscuous mode
[  177.240276][T12350] netlink: 'syz.1.1758': attribute type 1 has an invalid length.
[  177.670746][T12385] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  177.704073][T12387] syzkaller1: entered promiscuous mode
[  177.706406][T12387] syzkaller1: entered allmulticast mode
[  177.765774][T12395] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  177.834277][T12397] netlink: 'syz.0.1771': attribute type 3 has an invalid length.
[  177.837778][T12397] netlink: 'syz.0.1771': attribute type 1 has an invalid length.
[  177.856341][T12401] netlink: 'syz.1.1772': attribute type 12 has an invalid length.
[  177.906965][T12405] netlink: 'syz.0.1773': attribute type 1 has an invalid length.
[  178.023613][   T56] block nbd2: Receive control failed (result -107)
[  178.062187][T12410] nbd2: detected capacity change from 0 to 32
[  178.068231][T11928] block nbd2: Dead connection, failed to find a fallback
[  178.070936][T11928] block nbd2: shutting down sockets
[  178.074094][T11928] blk_print_req_error: 138 callbacks suppressed
[  178.074105][T11928] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  178.080253][T11928] buffer_io_error: 138 callbacks suppressed
[  178.080261][T11928] Buffer I/O error on dev nbd2, logical block 0, async page read
[  178.086002][T11928] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  178.089531][T11928] Buffer I/O error on dev nbd2, logical block 0, async page read
[  178.092942][T11928] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  178.096680][T11928] Buffer I/O error on dev nbd2, logical block 0, async page read
[  178.099756][T11928] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  178.104713][T11928] Buffer I/O error on dev nbd2, logical block 0, async page read
[  178.105625][   T55] block nbd3: Receive control failed (result -107)
[  178.107811][T11928] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  178.115403][T11928] Buffer I/O error on dev nbd2, logical block 0, async page read
[  178.118637][T11928] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  178.122681][T11928] Buffer I/O error on dev nbd2, logical block 0, async page read
[  178.125911][T11928] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  178.129624][T11928] Buffer I/O error on dev nbd2, logical block 0, async page read
[  178.133278][T11928] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  178.137015][T11928] Buffer I/O error on dev nbd2, logical block 0, async page read
[  178.140166][T11928] ldm_validate_partition_table(): Disk read failed.
[  178.143286][T12415] nbd3: detected capacity change from 0 to 32
[  178.146567][T10339] block nbd3: Dead connection, failed to find a fallback
[  178.151767][T10339] block nbd3: shutting down sockets
[  178.156237][T11928] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  178.159886][T10339] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  178.169515][T11928] Buffer I/O error on dev nbd2, logical block 0, async page read
[  178.173007][T10339] Buffer I/O error on dev nbd3, logical block 0, async page read
[  178.176577][T11928] Dev nbd2: unable to read RDB block 0
[  178.185650][T10339] ldm_validate_partition_table(): Disk read failed.
[  178.188710][T10339] Dev nbd3: unable to read RDB block 0
[  178.192037][T11928]  nbd2: unable to read partition table
[  178.192297][T10339]  nbd3: unable to read partition table
[  178.211411][T11928] ldm_validate_partition_table(): Disk read failed.
[  178.217020][T10339] ldm_validate_partition_table(): Disk read failed.
[  178.218563][T11928] Dev nbd2: unable to read RDB block 0
[  178.225707][T11928]  nbd2: unable to read partition table
[  178.233039][T10339] Dev nbd3: unable to read RDB block 0
[  178.241315][T10339]  nbd3: unable to read partition table
[  178.382094][T12445] netlink: 'syz.2.1784': attribute type 1 has an invalid length.
[  178.385313][T12445] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  178.436566][T12447] netlink: 'syz.0.1785': attribute type 2 has an invalid length.
[  178.440271][T12451] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  178.461044][T12447] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  178.470583][T12451] netem: change failed
[  178.527879][T12462] netlink: 'syz.2.1790': attribute type 1 has an invalid length.
[  178.573466][T12462] 8021q: adding VLAN 0 to HW filter on device bond21
[  178.600520][T12462] veth19: entered promiscuous mode
[  178.609358][T12462] bond21: (slave veth19): Enslaving as an active interface with a down link
[  178.638958][T12462] erspan0: entered allmulticast mode
[  178.652344][T12462] bond21: (slave erspan0): making interface the new active one
[  178.658921][T12462] erspan0: entered promiscuous mode
[  178.661298][T12462] bond21: (slave erspan0): Enslaving as an active interface with an up link
[  179.099496][T12515] lo speed is unknown, defaulting to 1000
[  179.110737][T12515] wg1 speed is unknown, defaulting to 1000
[  179.117535][T12515] lo speed is unknown, defaulting to 1000
[  179.219380][T12527] netlink: 'syz.0.1802': attribute type 6 has an invalid length.
[  179.720084][T12547] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  179.840472][T12560] IPv6: Can't replace route, no match found
[  179.896617][T12568] netlink: 'syz.1.1812': attribute type 9 has an invalid length.
[  180.000219][T12573] lo speed is unknown, defaulting to 1000
[  180.004001][T12573] wg1 speed is unknown, defaulting to 1000
[  180.007445][T12573] lo speed is unknown, defaulting to 1000
[  180.213773][T12590] lo speed is unknown, defaulting to 1000
[  180.235525][T12592] __nla_validate_parse: 27 callbacks suppressed
[  180.235534][T12592] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1818'.
[  180.338683][T12594] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  180.483035][T12612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1825'.
[  180.558432][T12602] tipc: Resetting bearer <eth:syzkaller0>
[  180.590692][T12620] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.681280][T12619] lo speed is unknown, defaulting to 1000
[  180.691803][T12619] wg1 speed is unknown, defaulting to 1000
[  180.695459][T12619] lo speed is unknown, defaulting to 1000
[  180.704933][ T5858] Bluetooth: hci1: command 0x0406 tx timeout
[  180.775993][T12625] netlink: 'syz.0.1828': attribute type 11 has an invalid length.
[  180.806995][T12625] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1828'.
[  180.817001][T12633] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1828'.
[  180.865130][T12633] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1828'.
[  180.868788][T12625] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1828'.
[  180.897987][T12635] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1831'.
[  180.901204][T12635] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1831'.
[  180.995042][T12640] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  181.031410][T12639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1833'.
[  181.047108][T12645] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1834'.
[  181.181029][   T33] audit: type=1107 audit(1757565898.187:4): pid=12653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='D(BŜ)iHe=~'
[  181.469723][T12675] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  182.088794][T12734] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[  182.095382][T12734] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  182.102320][T12734] bond1: (slave vcan1): making interface the new active one
[  182.124779][T12732] 8021q: adding VLAN 0 to HW filter on device bond8
[  182.139462][T12732] bond8: (slave ip6gretap4): Enslaving as a backup interface with an up link
[  182.147310][T12736] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[  182.152719][T12736] bond1: (slave vcan1): making interface the new active one
[  182.190552][T12734] 8021q: adding VLAN 0 to HW filter on device bond1
[  182.231733][   T13] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  182.292650][T12744] validate_nla: 4 callbacks suppressed
[  182.292662][T12744] netlink: 'syz.1.1854': attribute type 58 has an invalid length.
[  182.342188][   T12] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  182.740280][T12774] netlink: 'syz.2.1864': attribute type 1 has an invalid length.
[  182.748613][T12775] bond21: (slave erspan0): Releasing active interface
[  182.750748][T12775] erspan0: left promiscuous mode
[  182.760917][T12775] tipc: Resetting bearer <eth:team0>
[  182.767266][T12775] bond0: (slave dummy0): Releasing backup interface
[  182.774034][T12775] bond14: (slave ip6gretap3): Releasing active interface
[  182.777681][T12775] bond17: (slave bridge5): Releasing active interface
[  182.785218][T12775] bond21: (slave veth19): Releasing active interface
[  182.791568][T12775] bond8: (slave ip6gretap4): Removing an active aggregator
[  182.794784][   T12] bond8: Warning: Found an uninitialized port
[  182.797021][T12775] bond8: (slave ip6gretap4): Releasing backup interface
[  182.840457][T12780] bond8: option mode: unable to set because the bond device is up
[  183.020723][T12794] 8021q: adding VLAN 0 to HW filter on device ipvlan4
[  183.026532][T12794] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  183.156718][T12792] tipc: Resetting bearer <eth:syzkaller0>
[  183.185998][T12792] veth1_to_hsr: left promiscuous mode
[  183.196337][ T5895] lo speed is unknown, defaulting to 1000
[  183.198466][ T5895] syz1: Port: 1 Link DOWN
[  183.242514][T12798] netlink: 'syz.2.1871': attribute type 4 has an invalid length.
[  183.321224][T12808] veth0: Caught tx_queue_len zero misconfig
[  183.383322][T12812] veth0_to_bridge: left promiscuous mode
[  183.385729][T12812] veth0_to_bridge: left allmulticast mode
[  183.389378][T12812] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  183.393856][T12812] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  183.396510][T12812] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  183.400896][T12812] bond11: left promiscuous mode
[  183.406167][T12812] sit3: left promiscuous mode
[  183.408193][T12812] macsec1: left promiscuous mode
[  183.410441][T12812] bridge9: left promiscuous mode
[  183.412727][T12812] bridge9: left allmulticast mode
[  183.415183][T12812] veth9: left promiscuous mode
[  183.430400][T12814] bond0: (slave ip6tnl0): Error: Device type is different from other slaves
[  183.549764][T12824] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  183.560938][T12828] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  183.836121][T12858] syz.1.1890 uses old SIOCAX25GETINFO
[  184.077629][T12877] : renamed from vlan1
[  184.111150][T12880] netlink: 'syz.0.1895': attribute type 1 has an invalid length.
[  184.120870][T12882] netlink: 'syz.1.1896': attribute type 1 has an invalid length.
[  184.139748][T12882] 8021q: adding VLAN 0 to HW filter on device bond1
[  184.142996][T12882] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[  184.148207][T12882] bond1: (slave vcan1): making interface the new active one
[  184.196279][T12886] netlink: 'syz.0.1897': attribute type 6 has an invalid length.
[  184.247936][T12888] openvswitch: netlink: Message has 8 unknown bytes.
[  184.264989][T12890] 8021q: adding VLAN 0 to HW filter on device bond15
[  184.398291][T12900] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  184.411029][T12900] pimreg3: entered allmulticast mode
[  185.016828][T12912] openvswitch: netlink: Flow key attr not present in new flow.
[  185.463584][T12936] __nla_validate_parse: 16 callbacks suppressed
[  185.463594][T12936] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1913'.
[  185.492995][T12936] netlink: 'syz.1.1913': attribute type 1 has an invalid length.
[  185.495525][T12936] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1913'.
[  185.778804][T12947] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1917'.
[  185.800026][T12947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1917'.
[  185.908208][T12952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1920'.
[  185.919343][T12952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1920'.
[  185.923347][T12952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1920'.
[  185.995667][T12954] lo speed is unknown, defaulting to 1000
[  186.001356][T12954] wg1 speed is unknown, defaulting to 1000
[  186.008874][T12954] lo speed is unknown, defaulting to 1000
[  186.016684][T12957] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1922'.
[  186.148738][T12962] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1923'.
[  186.153925][T12962] openvswitch: netlink: Flow key attr not present in new flow.
[  186.241028][T12971] netlink: 'syz.0.1926': attribute type 1 has an invalid length.
[  186.311013][T12974] bond16: (slave vcan1): The slave device specified does not support setting the MAC address
[  186.336011][T12974] bond16: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  186.358781][T12974] bond16: (slave vcan1): making interface the new active one
[  186.362536][T12974] bond16: (slave vcan1): Enslaving as an active interface with an up link
[  186.395453][T12977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1927'.
[  186.484061][T12986] netlink: 'syz.0.1930': attribute type 83 has an invalid length.
[  186.487319][T12986] netlink: 'syz.0.1930': attribute type 1 has an invalid length.
[  186.562027][   T13] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  186.565215][   T13] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  186.592430][ T5908] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  186.747324][T13013] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[  186.751690][ T5908] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  186.754368][T13013] bond1: (slave vcan1): making interface the new active one
[  186.871211][T13016] bridge0: port 1(gretap2) entered blocking state
[  186.874217][T13016] bridge0: port 1(gretap2) entered disabled state
[  186.876898][T13016] gretap2: entered allmulticast mode
[  186.879582][T13016] gretap2: entered promiscuous mode
[  186.901692][ T5908] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  187.395167][T13036] lo speed is unknown, defaulting to 1000
[  187.397830][T13030] validate_nla: 3 callbacks suppressed
[  187.397838][T13030] netlink: 'syz.0.1942': attribute type 1 has an invalid length.
[  187.397909][T13036] wg1 speed is unknown, defaulting to 1000
[  187.413653][T13036] lo speed is unknown, defaulting to 1000
[  187.427313][T13030] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  187.444522][T13030] gretap1: entered promiscuous mode
[  187.504031][T13040] batadv3: entered promiscuous mode
[  187.749601][T13050] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  188.011199][T13069] rdma_rxe: rxe_newlink: failed to add vxcan1
[  188.043867][T13072] netlink: 'syz.0.1952': attribute type 1 has an invalid length.
[  188.058197][T13072] bond17: entered promiscuous mode
[  188.060428][T13072] 8021q: adding VLAN 0 to HW filter on device bond17
[  188.189690][T13085] netlink: 'syz.0.1956': attribute type 9 has an invalid length.
[  188.400301][T13100] geneve6: entered promiscuous mode
[  188.626401][T13102] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  189.247458][T13123] netlink: zone id is out of range
[  189.249743][T13123] netlink: zone id is out of range
[  189.253431][T13123] netlink: zone id is out of range
[  189.255862][T13123] netlink: zone id is out of range
[  189.258042][T13123] netlink: zone id is out of range
[  189.260232][T13123] netlink: zone id is out of range
[  189.263835][T13123] netlink: zone id is out of range
[  189.266142][T13123] netlink: zone id is out of range
[  190.175199][T13147] tipc: Resetting bearer <eth:syzkaller0>
[  190.269683][T13152] netlink: 'syz.0.1974': attribute type 29 has an invalid length.
[  190.274568][T13152] netlink: 'syz.0.1974': attribute type 29 has an invalid length.
[  190.416674][T13155] lo speed is unknown, defaulting to 1000
[  190.420631][T13155] wg1 speed is unknown, defaulting to 1000
[  190.425964][T13155] lo speed is unknown, defaulting to 1000
[  190.669257][T13171] __nla_validate_parse: 18 callbacks suppressed
[  190.669267][T13171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1978'.
[  190.887893][T13179] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1980'.
[  191.009710][T13191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1982'.
[  191.182418][T13208] tipc: Resetting bearer <eth:team0>
[  191.217824][T13215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1988'.
[  191.281611][T13226] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  191.296120][T13228] netlink: 'syz.1.1992': attribute type 10 has an invalid length.
[  191.301799][T13228] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1992'.
[  191.307738][T13232] IPVS: set_ctl: invalid protocol: 92 172.30.1.3:19999
[  191.312499][T13228] veth0_vlan: left promiscuous mode
[  191.314737][T13228] veth0_vlan: entered promiscuous mode
[  191.317764][T13228] veth0_vlan: entered allmulticast mode
[  191.329793][T13235] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1993'.
[  191.370060][T13237] netlink: 'syz.1.1994': attribute type 1 has an invalid length.
[  191.404714][T13237] 8021q: adding VLAN 0 to HW filter on device bond16
[  191.425507][T13237] veth11: entered promiscuous mode
[  191.432288][T13237] bond16: (slave veth11): Enslaving as a backup interface with a down link
[  191.438554][T13237] sit0: left promiscuous mode
[  191.442423][T13237] veth0_to_bond: left allmulticast mode
[  191.444787][T13237] veth0_to_bond: left promiscuous mode
[  191.447339][T13237] bridge2: port 2(veth0_to_bond) entered disabled state
[  191.455007][T13237] veth0_vlan: left allmulticast mode
[  191.464020][T13237] syzkaller0: left promiscuous mode
[  191.466141][T13237] syzkaller0: left allmulticast mode
[  191.469262][T13237] veth5: left allmulticast mode
[  191.471227][T13237] veth5: left promiscuous mode
[  191.473548][T13237] bridge2: port 1(veth5) entered disabled state
[  191.480757][T13237] bond7: (slave bond8): Releasing backup interface
[  191.487508][T13237] bond10: (slave geneve5): Releasing active interface
[  191.493616][T13237] gretap2: left allmulticast mode
[  191.495669][T13237] gretap2: left promiscuous mode
[  191.497844][T13237] bridge0: port 1(gretap2) entered disabled state
[  191.522440][T13237] veth11: left promiscuous mode
[  191.532941][T13237] bond16: (slave veth11): Releasing backup interface
[  191.656822][T13248] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  191.660139][T13248] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  191.724779][T13253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1998'.
[  191.755184][T13258] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2000'.
[  191.761189][T13258] netlink: 'syz.1.2000': attribute type 2 has an invalid length.
[  191.800156][T13260] lo speed is unknown, defaulting to 1000
[  191.802976][T13260] wg1 speed is unknown, defaulting to 1000
[  191.806222][T13260] lo speed is unknown, defaulting to 1000
[  191.945215][T13268] netlink: 'syz.0.2004': attribute type 8 has an invalid length.
[  191.948265][T13268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2004'.
[  191.988943][T13271] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  191.993721][T13271] batman_adv: batadv0: Adding interface: gretap3
[  191.996024][T13271] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  192.008949][T13271] batman_adv: batadv0: Interface activated: gretap3
[  192.161681][T13284] netlink: 'syz.2.2009': attribute type 1 has an invalid length.
[  192.164415][T13284] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2009'.
[  192.658948][T13324] nbd: must specify at least one socket
[  192.698709][T13335] lo speed is unknown, defaulting to 1000
[  192.703304][T13335] wg1 speed is unknown, defaulting to 1000
[  192.706175][T13335] lo speed is unknown, defaulting to 1000
[  193.000701][T13344] validate_nla: 2 callbacks suppressed
[  193.000714][T13344] netlink: 'syz.0.2021': attribute type 13 has an invalid length.
[  193.007038][T13344] netlink: 'syz.0.2021': attribute type 17 has an invalid length.
[  193.018156][T13344] gretap0: left promiscuous mode
[  193.038739][T13344] 8021q: adding VLAN 0 to HW filter on device team0
[  193.043649][T13344] net_ratelimit: 2 callbacks suppressed
[  193.043653][T13344] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  193.053613][   T51] lo speed is unknown, defaulting to 1000
[  193.056095][   T51] syz1: Port: 1 Link ACTIVE
[  193.445745][T13369] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  193.445893][T13363] lo speed is unknown, defaulting to 1000
[  193.450875][T13363] wg1 speed is unknown, defaulting to 1000
[  193.463709][T13363] lo speed is unknown, defaulting to 1000
[  193.508972][T13376] netlink: 'syz.2.2031': attribute type 3 has an invalid length.
[  193.528094][T13374] lo speed is unknown, defaulting to 1000
[  193.538268][T13374] wg1 speed is unknown, defaulting to 1000
[  193.541403][T13374] lo speed is unknown, defaulting to 1000
[  193.677363][T13387] netlink: 'syz.2.2034': attribute type 5 has an invalid length.
[  194.028127][T13393] lo speed is unknown, defaulting to 1000
[  194.041080][T13393] wg1 speed is unknown, defaulting to 1000
[  194.070975][T13393] lo speed is unknown, defaulting to 1000
[  194.096383][T13403] dvmrp0: entered allmulticast mode
[  194.610641][T13431] bridge0: port 1(batadv3) entered blocking state
[  194.613131][T13431] bridge0: port 1(batadv3) entered disabled state
[  194.615274][T13431] batadv3: entered allmulticast mode
[  194.618092][T13431] batadv3: entered promiscuous mode
[  194.679397][T13430] tap0: tun_chr_ioctl cmd 1074025677
[  194.686765][T13430] tap0: linktype set to 270
[  194.710923][T13438] syzkaller0: entered promiscuous mode
[  194.716378][T13438] syzkaller0: entered allmulticast mode
[  194.797168][T13442] netlink: 'syz.1.2051': attribute type 11 has an invalid length.
[  194.830291][T13445] nbd: must specify at least one socket
[  194.990088][T13456] netlink: 'syz.1.2055': attribute type 2 has an invalid length.
[  194.998165][T13456] : entered promiscuous mode
[  195.113068][   T12] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled
[  195.116722][   T12] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled
[  195.145507][T13464] batman_adv: batadv0: Interface deactivated: gretap3
[  195.148478][T13464] batman_adv: batadv0: Removing interface: gretap3
[  195.153426][T13464] batadv3: left allmulticast mode
[  195.155565][T13464] batadv3: left promiscuous mode
[  195.157797][T13464] bridge0: port 1(batadv3) entered disabled state
[  195.326822][T13476] netlink: 'syz.1.2061': attribute type 6 has an invalid length.
[  195.386285][T13477] netlink: 'syz.1.2061': attribute type 12 has an invalid length.
[  195.764618][T13484] tipc: Resetting bearer <eth:syzkaller0>
[  195.892883][T13489] __nla_validate_parse: 19 callbacks suppressed
[  195.892931][T13489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2066'.
[  195.900589][T13489] bond0: left promiscuous mode
[  196.132937][T13501] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2070'.
[  196.136591][T13501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2070'.
[  196.139946][T13501] bridge0: port 1(wlan0) entered blocking state
[  196.142342][T13501] bridge0: port 1(wlan0) entered disabled state
[  196.144580][T13501] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  196.148140][T13501] mac80211_hwsim hwsim5 wlan0: left allmulticast mode
[  196.179816][T13503] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2071'.
[  196.289158][T13512] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2075'.
[  196.326991][T13516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2077'.
[  196.468175][T13528] netlink: 'syz.2.2079': attribute type 1 has an invalid length.
[  196.567341][T13533] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2080'.
[  196.599636][T13528] bond23: (slave vxcan5): The slave device specified does not support setting the MAC address
[  196.606809][T13528] bond23: (slave vxcan5): Error -95 calling set_mac_address
[  196.633311][T13529] bond23: (slave vxcan5): The slave device specified does not support setting the MAC address
[  196.638559][T13529] bond23: (slave vxcan5): Error -95 calling set_mac_address
[  196.797327][T13552] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2085'.
[  196.800509][T13552] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2085'.
[  196.807217][T13550] netlink: 'syz.2.2084': attribute type 6 has an invalid length.
[  196.846682][T13560] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2087'.
[  196.861374][T13558] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  196.873079][T13558] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  196.886214][T13558] tipc: Resetting bearer <eth:syzkaller0>
[  197.118999][T13593] veth0: entered promiscuous mode
[  197.126239][T13593] veth0 (unregistering): left promiscuous mode
[  197.164158][T13595] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  197.416533][T13614] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  197.906385][T13642] syzkaller0: mtu less than device minimum
[  197.915166][T13642] tipc: Resetting bearer <eth:syzkaller0>
[  197.990101][T13646] lo speed is unknown, defaulting to 1000
[  197.994815][T13646] wg1 speed is unknown, defaulting to 1000
[  197.997939][T13646] lo speed is unknown, defaulting to 1000
[  198.463267][T13682] validate_nla: 1 callbacks suppressed
[  198.463280][T13682] netlink: 'syz.1.2121': attribute type 13 has an invalid length.
[  198.468262][T13682] netlink: 'syz.1.2121': attribute type 17 has an invalid length.
[  198.521255][T13682] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  198.554281][T13683] lo speed is unknown, defaulting to 1000
[  198.557855][T13683] wg1 speed is unknown, defaulting to 1000
[  198.560958][T13683] lo speed is unknown, defaulting to 1000
[  198.632653][T13682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  199.910336][T13715] lo speed is unknown, defaulting to 1000
[  199.913863][T13715] wg1 speed is unknown, defaulting to 1000
[  199.916567][T13715] lo speed is unknown, defaulting to 1000
[  200.307486][T13725] netlink: zone id is out of range
[  200.310486][T13725] netlink: zone id is out of range
[  200.313960][T13725] netlink: zone id is out of range
[  200.315761][T13725] netlink: zone id is out of range
[  200.317795][T13725] netlink: zone id is out of range
[  200.319551][T13725] netlink: zone id is out of range
[  200.321253][T13725] netlink: zone id is out of range
[  200.323122][T13725] netlink: zone id is out of range
[  200.325027][T13725] netlink: zone id is out of range
[  200.437481][T13737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  200.485657][T13741] lo speed is unknown, defaulting to 1000
[  200.488895][T13741] wg1 speed is unknown, defaulting to 1000
[  200.516034][T13741] lo speed is unknown, defaulting to 1000
[  200.823617][T13748] netlink: 'syz.2.2143': attribute type 1 has an invalid length.
[  200.865859][T13748] bond24: entered promiscuous mode
[  200.868257][T13748] 8021q: adding VLAN 0 to HW filter on device bond24
[  200.889388][T13748] 8021q: adding VLAN 0 to HW filter on device bond24
[  200.893347][T13748] bond24: (slave vxcan5): The slave device specified does not support setting the MAC address
[  200.896965][T13748] bond24: (slave vxcan5): Setting fail_over_mac to active for active-backup mode
[  200.905769][T13748] bond24: (slave vxcan5): making interface the new active one
[  200.909178][T13748] vxcan5: entered promiscuous mode
[  200.911809][T13748] bond24: (slave vxcan5): Enslaving as an active interface with an up link
[  200.948910][T13754] __nla_validate_parse: 14 callbacks suppressed
[  200.948919][T13754] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2144'.
[  200.949771][T13755] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2144'.
[  200.993441][T13757] tipc: Resetting bearer <eth:syzkaller0>
[  201.175528][T13761] tipc: Resetting bearer <eth:syzkaller0>
[  201.740788][T13770] netlink: 'syz.0.2149': attribute type 4 has an invalid length.
[  201.747355][T13770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2149'.
[  201.843653][T13773] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2150'.
[  202.800732][T13785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2154'.
[  202.968443][T13803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2156'.
[  203.178924][T13823] netlink: 'syz.0.2163': attribute type 1 has an invalid length.
[  203.183669][T13821] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2162'.
[  203.196474][T13825] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2164'.
[  203.199843][T13823] bond16: (slave vcan2): The slave device specified does not support setting the MAC address
[  203.207997][T13823] bond16: (slave vcan2): Enslaving as a backup interface with an up link
[  203.217927][T13823] bond16: (slave vcan3): The slave device specified does not support setting the MAC address
[  203.223155][T13827] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2165'.
[  203.226609][T13823] bond16: (slave vcan3): Enslaving as a backup interface with an up link
[  203.243313][T13823] 8021q: adding VLAN 0 to HW filter on device bond16
[  203.294211][T13828] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2165'.
[  203.300939][T13837] 8021q: VLANs not supported on ipvlan0
[  203.410510][T13849] netlink: 'syz.0.2174': attribute type 9 has an invalid length.
[  203.456396][T13851] netlink: 'syz.2.2175': attribute type 1 has an invalid length.
[  203.473754][T13851] 8021q: adding VLAN 0 to HW filter on device bond8
[  203.476567][T13851] bond8: (slave vcan1): The slave device specified does not support setting the MAC address
[  203.482311][T13851] bond8: (slave vcan1): Error -95 calling set_mac_address
[  203.518888][T13858] bond8: (slave vcan1): The slave device specified does not support setting the MAC address
[  203.525378][T13858] bond8: (slave vcan1): Error -95 calling set_mac_address
[  203.569032][T13851] 8021q: adding VLAN 0 to HW filter on device bond8
[  203.588644][T13865] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  203.628698][T13869] netlink: 'syz.2.2180': attribute type 29 has an invalid length.
[  203.637103][T13869] netlink: 'syz.2.2180': attribute type 29 has an invalid length.
[  203.640317][T13869] netlink: 'syz.2.2180': attribute type 29 has an invalid length.
[  203.643217][T13869] netlink: 'syz.2.2180': attribute type 29 has an invalid length.
[  203.646072][T13869] netlink: 'syz.2.2180': attribute type 29 has an invalid length.
[  203.648731][T13869] netlink: 'syz.2.2180': attribute type 29 has an invalid length.
[  203.652038][T13869] netlink: 'syz.2.2180': attribute type 29 has an invalid length.
[  203.654714][T13869] netlink: 'syz.2.2180': attribute type 29 has an invalid length.
[  203.657651][T13869] netlink: 'syz.2.2180': attribute type 29 has an invalid length.
[  203.660640][T13869] netlink: 'syz.2.2180': attribute type 29 has an invalid length.
[  203.695106][T13871] 8021q: VLANs not supported on wg2
[  204.277155][T13889] net_ratelimit: 17 callbacks suppressed
[  204.277165][T13889] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  204.289334][T13889] bridge10: entered promiscuous mode
[  204.291003][T13889] bridge10: entered allmulticast mode
[  204.296215][T13889] team0: Port device bridge10 added
[  204.453362][T13894] veth0_to_bridge: entered promiscuous mode
[  204.455880][T13894] veth0_to_bridge: entered allmulticast mode
[  204.673612][T13909] bond0: (slave batadv_slave_0): Enslaving as an active interface with a down link
[  204.797985][T13916] lo speed is unknown, defaulting to 1000
[  204.800580][T13916] wg1 speed is unknown, defaulting to 1000
[  204.803723][T13916] lo speed is unknown, defaulting to 1000
[  205.377351][T13945] lo speed is unknown, defaulting to 1000
[  205.393404][T13945] wg1 speed is unknown, defaulting to 1000
[  205.398966][T13945] lo speed is unknown, defaulting to 1000
[  205.987778][T13992] __nla_validate_parse: 13 callbacks suppressed
[  205.987792][T13992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2216'.
[  205.994200][T13990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2217'.
[  206.036780][T13996] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2218'.
[  206.097302][T14002] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2219'.
[  206.129537][T14005] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  206.133941][T14005] netlink: 320 bytes leftover after parsing attributes in process `syz.1.2221'.
[  206.141024][T14006] batadv4: entered promiscuous mode
[  206.178497][T14008] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.2222'.
[  206.184888][T14008] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  206.188435][T14008] openvswitch: netlink: Message has 252 unknown bytes.
[  206.211087][T14010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2223'.
[  206.218647][T14010] pim6reg1: entered promiscuous mode
[  206.220531][T14010] pim6reg1: entered allmulticast mode
[  206.340447][T14024] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2226'.
[  206.381013][T14024] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2226'.
[  206.588590][T14050] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  206.591722][T14050] IPv6: NLM_F_CREATE should be set when creating new route
[  206.594724][T14050] IPv6: NLM_F_CREATE should be set when creating new route
[  206.597828][T14050] IPv6: NLM_F_CREATE should be set when creating new route
[  206.615823][T14050] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  206.631045][T14052] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2236'.
[  206.638808][T14052] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4
[  206.648318][T14052] gretap4: entered promiscuous mode
[  206.650472][T14052] gretap4: entered allmulticast mode
[  206.687142][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.690350][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.700267][T14057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  207.403671][T14082] bond0: (slave batadv_slave_0): Releasing backup interface
[  207.410259][T14082] bond16: (slave vcan1): Releasing backup interface
[  207.413779][T14082] bond16: (slave vcan2): making interface the new active one
[  207.420163][T14082] bond16: (slave vcan2): Releasing backup interface
[  207.423653][T14082] bond16: (slave vcan3): making interface the new active one
[  207.430556][T14082] bond16: (slave vcan3): Releasing backup interface
[  207.511766][T14083] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  207.535882][T14095] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  207.583101][ T1088] wlan0: Trigger new scan to find an IBSS to join
[  207.681241][T14099] lo speed is unknown, defaulting to 1000
[  207.687546][T14099] wg1 speed is unknown, defaulting to 1000
[  207.691190][T14099] lo speed is unknown, defaulting to 1000
[  208.118550][ T5865] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  208.127902][ T5865] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  208.131888][ T5865] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  208.135303][ T5865] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  208.404151][T14109] 8021q: adding VLAN 0 to HW filter on device bond18
[  208.446371][T14109] bond18: (slave gretap2): making interface the new active one
[  208.450461][T14109] bond18: (slave gretap2): Enslaving as an active interface with an up link
[  208.718447][T14139] veth0_to_bridge: left promiscuous mode
[  208.720474][T14139] veth0_to_bridge: left allmulticast mode
[  208.728696][T14139] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  208.731026][T14139] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  208.738358][T14139] gretap1: left promiscuous mode
[  208.740374][T14139] bond17: left promiscuous mode
[  208.754356][   T51] lo speed is unknown, defaulting to 1000
[  208.762101][   T51] syz1: Port: 1 Link DOWN
[  208.900081][T14157] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  209.002432][T14157] tipc: Resetting bearer <eth:syzkaller0>
[  209.045554][T14162] validate_nla: 65 callbacks suppressed
[  209.045564][T14162] netlink: 'syz.0.2269': attribute type 12 has an invalid length.
[  209.051385][T14162] netlink: 'syz.0.2269': attribute type 12 has an invalid length.
[  209.220453][T14178] netlink: 'syz.0.2272': attribute type 1 has an invalid length.
[  209.489764][T14184] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  209.493455][T14184] openvswitch: netlink: Message has 6332 unknown bytes.
[  209.998619][T14206] netlink: 'syz.1.2279': attribute type 2 has an invalid length.
[  210.007856][T14206] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  210.068688][T14210] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  210.083655][T14211] veth0_to_team: entered promiscuous mode
[  210.086749][T14211] veth0_to_team: entered allmulticast mode
[  210.176325][T14217] netlink: 'syz.2.2282': attribute type 2 has an invalid length.
[  210.180103][T14217] netlink: 'syz.2.2282': attribute type 2 has an invalid length.
[  210.288123][T14223] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  210.330884][T14226] netlink: 'syz.1.2286': attribute type 3 has an invalid length.
[  210.433611][T14239] netlink: 'syz.1.2291': attribute type 12 has an invalid length.
[  210.518859][T14237] netlink: 'syz.2.2290': attribute type 4 has an invalid length.
[  210.534368][   T51] lo speed is unknown, defaulting to 1000
[  210.537166][   T51] syz2: Port: 1 Link DOWN
[  210.579442][T14250] lo speed is unknown, defaulting to 1000
[  210.585699][T14250] wg1 speed is unknown, defaulting to 1000
[  210.589003][T14250] lo speed is unknown, defaulting to 1000
[  210.622071][ T6581] wlan0: Trigger new scan to find an IBSS to join
[  210.732408][T14258] lo speed is unknown, defaulting to 1000
[  210.743454][T14258] wg1 speed is unknown, defaulting to 1000
[  210.750524][T14258] lo speed is unknown, defaulting to 1000
[  211.202317][T14266] __nla_validate_parse: 20 callbacks suppressed
[  211.202327][T14266] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2296'.
[  211.277946][T14269] lo speed is unknown, defaulting to 1000
[  211.297624][T14269] wg1 speed is unknown, defaulting to 1000
[  211.318808][T14269] lo speed is unknown, defaulting to 1000
[  211.513418][T14276] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2298'.
[  211.937204][T14285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2299'.
[  211.944572][T14285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2299'.
[  212.005629][T14292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2300'.
[  212.103963][T14299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2304'.
[  212.398644][T14318] syzkaller0: left promiscuous mode
[  212.400916][T14318] syzkaller0: left allmulticast mode
[  212.942455][T14324] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  212.975853][T14326] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  212.979243][T14326] netlink: 'syz.0.2314': attribute type 1 has an invalid length.
[  212.982252][T14326] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2314'.
[  213.030130][T14328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2315'.
[  213.065330][T14332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2316'.
[  213.069967][T14331] veth0_to_bridge: entered promiscuous mode
[  213.073136][T14332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2316'.
[  213.074272][T14331] veth0_to_bridge: entered allmulticast mode
[  213.136148][T14335] dvmrp8: entered allmulticast mode
[  213.170141][T14335] lo speed is unknown, defaulting to 1000
[  213.173971][T14335] wg1 speed is unknown, defaulting to 1000
[  213.177614][T14335] lo speed is unknown, defaulting to 1000
[  213.238288][T14338] bond19: (slave vxcan3): The slave device specified does not support setting the MAC address
[  213.253072][T14338] bond19: (slave vxcan3): Error -95 calling set_mac_address
[  213.443128][T14334] dvmrp8: left allmulticast mode
[  213.581982][   T27] wlan0: Trigger new scan to find an IBSS to join
[  214.309117][T14356] lo speed is unknown, defaulting to 1000
[  214.312911][T14356] wg1 speed is unknown, defaulting to 1000
[  214.316627][T14356] lo speed is unknown, defaulting to 1000
[  214.464907][T14366] siw: device registration error -23
[  214.534144][ T6586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.577522][T14377] validate_nla: 4 callbacks suppressed
[  214.577536][T14377] netlink: 'syz.0.2330': attribute type 10 has an invalid length.
[  214.584424][T14379] lo speed is unknown, defaulting to 1000
[  214.593949][T14379] wg1 speed is unknown, defaulting to 1000
[  214.597391][T14379] lo speed is unknown, defaulting to 1000
[  214.988442][T14404] lo speed is unknown, defaulting to 1000
[  214.992871][T14404] wg1 speed is unknown, defaulting to 1000
[  214.999494][T14404] lo speed is unknown, defaulting to 1000
[  215.948958][T14422] lo speed is unknown, defaulting to 1000
[  215.966618][T14422] wg1 speed is unknown, defaulting to 1000
[  215.993389][T14422] lo speed is unknown, defaulting to 1000
[  216.245205][T14424] lo speed is unknown, defaulting to 1000
[  216.248831][T14424] wg1 speed is unknown, defaulting to 1000
[  216.255722][T14424] lo speed is unknown, defaulting to 1000
[  216.480905][T14432] netlink: 'syz.0.2344': attribute type 4 has an invalid length.
[  216.548616][T14432] : entered promiscuous mode
[  217.015350][T14457] __nla_validate_parse: 13 callbacks suppressed
[  217.015478][T14457] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2350'.
[  217.020573][T14458] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2350'.
[  217.044554][T14461] netlink: 'syz.0.2351': attribute type 1 has an invalid length.
[  217.058377][T14461] 8021q: adding VLAN 0 to HW filter on device bond20
[  217.075057][T14461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2351'.
[  217.078308][T14464] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2352'.
[  217.078951][T14461] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2351'.
[  217.151085][T14469] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  217.169374][T14470] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2354'.
[  217.169533][T14469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2355'.
[  217.189300][T14469] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2355'.
[  217.192725][T14469] openvswitch: netlink: Flow key attr not present in new flow.
[  217.208435][T14469] pim6reg1: entered promiscuous mode
[  217.211969][T14469] pim6reg1: entered allmulticast mode
[  217.249604][T14472] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  217.297629][T14476] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (255)
[  217.306047][T14476] bridge0: port 1(erspan0) entered blocking state
[  217.308429][T14476] bridge0: port 1(erspan0) entered disabled state
[  217.318552][T14476] erspan0: entered promiscuous mode
[  217.395562][T14481] pim6reg1: entered promiscuous mode
[  217.399523][T14481] pim6reg1: entered allmulticast mode
[  217.401573][T14482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2359'.
[  217.493890][T14492] netlink: 'syz.0.2361': attribute type 1 has an invalid length.
[  217.507637][T14492] 8021q: adding VLAN 0 to HW filter on device bond21
[  217.588700][T14500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2362'.
[  217.609652][T14499] syzkaller0: entered promiscuous mode
[  217.615131][T14499] syzkaller0: entered allmulticast mode
[  217.634105][T14495] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  217.639623][   T51] lo speed is unknown, defaulting to 1000
[  217.646926][   T51] syz1: Port: 1 Link ACTIVE
[  217.685140][T14505] syzkaller0: Caught tx_queue_len zero misconfig
[  217.898879][T14524] netlink: 'syz.2.2369': attribute type 2 has an invalid length.
[  217.903054][T14524] netlink: 'syz.2.2369': attribute type 1 has an invalid length.
[  218.065984][T14538] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  218.173754][T14546] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  218.176919][T14546] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  218.181079][T14546] tipc: Resetting bearer <eth:syzkaller0>
[  218.261008][T14551] lo speed is unknown, defaulting to 1000
[  218.264889][T14551] wg1 speed is unknown, defaulting to 1000
[  218.267477][T14551] lo speed is unknown, defaulting to 1000
[  218.319524][T14560] erspan0: left promiscuous mode
[  218.324996][T14560] bridge0: port 1(erspan0) entered disabled state
[  218.361736][T14560] bond24: (slave vxcan5): Releasing backup interface
[  218.364148][T14560] vxcan5: left promiscuous mode
[  218.387952][T14562] syzkaller1: entered promiscuous mode
[  218.389756][T14562] syzkaller1: entered allmulticast mode
[  218.498841][T14571] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  219.006432][T14593] lo speed is unknown, defaulting to 1000
[  219.010206][T14593] wg1 speed is unknown, defaulting to 1000
[  219.014637][T14593] lo speed is unknown, defaulting to 1000
[  219.078463][T14596] lo speed is unknown, defaulting to 1000
[  219.083425][T14596] wg1 speed is unknown, defaulting to 1000
[  219.089387][T14596] lo speed is unknown, defaulting to 1000
[  219.247601][T14602] netlink: 'syz.2.2390': attribute type 14 has an invalid length.
[  219.250739][T14602] netlink: 'syz.2.2390': attribute type 13 has an invalid length.
[  219.319836][T14604] netlink: 'syz.2.2391': attribute type 1 has an invalid length.
[  219.367378][T14604] 8021q: adding VLAN 0 to HW filter on device bond27
[  219.462077][T14604] veth23: entered promiscuous mode
[  219.468749][T14604] bond27: (slave veth23): Enslaving as an active interface with a down link
[  220.327836][T14667] bridge14: entered promiscuous mode
[  220.330226][T14667] bridge14: entered allmulticast mode
[  220.537393][T14677] lo speed is unknown, defaulting to 1000
[  220.540350][T14677] wg1 speed is unknown, defaulting to 1000
[  220.543405][T14677] lo speed is unknown, defaulting to 1000
[  220.782507][T14681] mac80211_hwsim hwsim7 wlan1: Caught tx_queue_len zero misconfig
[  221.146120][T14698] netlink: 'syz.1.2419': attribute type 29 has an invalid length.
[  221.240271][T14704] lo speed is unknown, defaulting to 1000
[  221.244929][T14704] wg1 speed is unknown, defaulting to 1000
[  221.263544][T14704] lo speed is unknown, defaulting to 1000
[  221.347371][T14709] netlink: 'syz.1.2423': attribute type 1 has an invalid length.
[  221.397292][T14709] 8021q: adding VLAN 0 to HW filter on device bond20
[  221.584069][T14724] team0 (unregistering): Port device bridge10 removed
[  222.073709][T14731] __nla_validate_parse: 23 callbacks suppressed
[  222.073718][T14731] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2427'.
[  222.090953][T14731] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2427'.
[  222.116487][T14731] lo speed is unknown, defaulting to 1000
[  222.121042][T14731] wg1 speed is unknown, defaulting to 1000
[  222.124552][T14731] lo speed is unknown, defaulting to 1000
[  222.146166][T14733] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  222.267359][T14738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2429'.
[  222.598423][T14743] netem: incorrect gi model size
[  222.600870][T14743] netem: change failed
[  222.795580][T14762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2434'.
[  222.830339][T14762] netlink: 'syz.1.2434': attribute type 1 has an invalid length.
[  222.886308][T14765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2435'.
[  222.913882][T14767] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  222.922192][T14767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2436'.
[  222.950503][T14769] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  223.073674][T14772] syzkaller1: entered promiscuous mode
[  223.075541][T14772] syzkaller1: entered allmulticast mode
[  223.096964][T14784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2439'.
[  223.107508][   T33] audit: type=1800 audit(1757565940.117:5): pid=14785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2440" name="blkio.bfq.time_recursive" dev="tmpfs" ino=4114 res=0 errno=0
[  223.485492][T14790] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  223.488338][T14790] IPv6: NLM_F_CREATE should be set when creating new route
[  223.491105][T14790] IPv6: NLM_F_CREATE should be set when creating new route
[  223.493670][T14790] IPv6: NLM_F_CREATE should be set when creating new route
[  223.501184][T14790] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  223.554668][T14796] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2444'.
[  223.558599][T14796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2444'.
[  223.572078][T14796] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2444'.
[  223.576337][T14796] netlink: 'syz.0.2444': attribute type 3 has an invalid length.
[  223.581314][T14796] netlink: 'syz.0.2444': attribute type 2 has an invalid length.
[  223.587231][T14796] netlink: 'syz.0.2444': attribute type 2 has an invalid length.
[  224.417561][T14785] syz.2.2440: vmalloc error: size 35651584, failed to allocated page array size 69632, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  224.425158][T14785] CPU: 1 UID: 0 PID: 14785 Comm: syz.2.2440 Not tainted syzkaller #0 PREEMPT(full) 
[  224.425175][T14785] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  224.425183][T14785] Call Trace:
[  224.425188][T14785]  <TASK>
[  224.425194][T14785]  dump_stack_lvl+0x189/0x250
[  224.425216][T14785]  ? __pfx_dump_stack_lvl+0x10/0x10
[  224.425231][T14785]  ? __pfx__printk+0x10/0x10
[  224.425248][T14785]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  224.425264][T14785]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  224.425278][T14785]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  224.425294][T14785]  warn_alloc+0x214/0x310
[  224.425315][T14785]  ? __pfx_warn_alloc+0x10/0x10
[  224.425340][T14785]  ? __get_vm_area_node+0x28f/0x300
[  224.425357][T14785]  ? hash_netport4_resize+0x235/0x1b60
[  224.425375][T14785]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  224.425413][T14785]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  224.425436][T14785]  ? rcu_is_watching+0x15/0xb0
[  224.425449][T14785]  ? hash_netport4_resize+0x235/0x1b60
[  224.425461][T14785]  ? hash_netport4_resize+0x235/0x1b60
[  224.425472][T14785]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  224.425488][T14785]  ? hash_netport4_resize+0x235/0x1b60
[  224.425507][T14785]  hash_netport4_resize+0x235/0x1b60
[  224.425520][T14785]  ? hash_netport4_uadt+0xc97/0xf30
[  224.425536][T14785]  ? __pfx_hash_netport4_add+0x10/0x10
[  224.425550][T14785]  ? __pfx_hash_netport4_uadt+0x10/0x10
[  224.425568][T14785]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  224.425589][T14785]  call_ad+0x44e/0xb00
[  224.425612][T14785]  ? __pfx_call_ad+0x10/0x10
[  224.425637][T14785]  ? __nla_parse+0x40/0x60
[  224.425659][T14785]  ip_set_ad+0x791/0x930
[  224.425682][T14785]  ? __pfx_ip_set_ad+0x10/0x10
[  224.425725][T14785]  nfnetlink_rcv_msg+0xb4d/0x1130
[  224.425743][T14785]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  224.425800][T14785]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  224.425815][T14785]  ? kasan_save_free_info+0x46/0x50
[  224.425866][T14785]  netlink_rcv_skb+0x208/0x470
[  224.425885][T14785]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  224.425902][T14785]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  224.425928][T14785]  ? bpf_lsm_capable+0x9/0x20
[  224.425944][T14785]  ? security_capable+0x7e/0x2e0
[  224.425972][T14785]  nfnetlink_rcv+0x26a/0x2520
[  224.425991][T14785]  ? __dev_queue_xmit+0x1d79/0x3b50
[  224.426013][T14785]  ? __dev_queue_xmit+0x27b/0x3b50
[  224.426036][T14785]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  224.426051][T14785]  ? __pfx___dev_queue_xmit+0x10/0x10
[  224.426077][T14785]  ? ref_tracker_free+0x63a/0x7d0
[  224.426094][T14785]  ? __asan_memcpy+0x40/0x70
[  224.426107][T14785]  ? __pfx_ref_tracker_free+0x10/0x10
[  224.426134][T14785]  ? skb_clone+0x246/0x3a0
[  224.426152][T14785]  ? __netlink_deliver_tap+0x807/0x850
[  224.426169][T14785]  ? netlink_deliver_tap+0x2e/0x1b0
[  224.426190][T14785]  ? netlink_deliver_tap+0x2e/0x1b0
[  224.426212][T14785]  netlink_unicast+0x82f/0x9e0
[  224.426234][T14785]  ? __pfx_netlink_unicast+0x10/0x10
[  224.426252][T14785]  ? netlink_sendmsg+0x642/0xb30
[  224.426262][T14785]  ? skb_put+0x11b/0x210
[  224.426277][T14785]  netlink_sendmsg+0x805/0xb30
[  224.426294][T14785]  ? __pfx_netlink_sendmsg+0x10/0x10
[  224.426308][T14785]  ? aa_sock_msg_perm+0xf1/0x1d0
[  224.426321][T14785]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  224.426335][T14785]  ? __pfx_netlink_sendmsg+0x10/0x10
[  224.426346][T14785]  __sock_sendmsg+0x21c/0x270
[  224.426365][T14785]  ____sys_sendmsg+0x505/0x830
[  224.426381][T14785]  ? __pfx_____sys_sendmsg+0x10/0x10
[  224.426402][T14785]  ? import_iovec+0x74/0xa0
[  224.426419][T14785]  ___sys_sendmsg+0x21f/0x2a0
[  224.426434][T14785]  ? __pfx____sys_sendmsg+0x10/0x10
[  224.426473][T14785]  ? __fget_files+0x2a/0x420
[  224.426489][T14785]  ? __fget_files+0x3a0/0x420
[  224.426513][T14785]  __x64_sys_sendmsg+0x19b/0x260
[  224.426528][T14785]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  224.426549][T14785]  ? rcu_is_watching+0x15/0xb0
[  224.426565][T14785]  ? do_syscall_64+0xbe/0x3b0
[  224.426580][T14785]  do_syscall_64+0xfa/0x3b0
[  224.426590][T14785]  ? lockdep_hardirqs_on+0x9c/0x150
[  224.426606][T14785]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.426618][T14785]  ? exc_page_fault+0x9f/0xf0
[  224.426636][T14785]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.426648][T14785] RIP: 0033:0x7f08a9d8eba9
[  224.426660][T14785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  224.426670][T14785] RSP: 002b:00007f08aac1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  224.426683][T14785] RAX: ffffffffffffffda RBX: 00007f08a9fd6090 RCX: 00007f08a9d8eba9
[  224.426692][T14785] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000008
[  224.426699][T14785] RBP: 00007f08a9e11e19 R08: 0000000000000000 R09: 0000000000000000
[  224.426707][T14785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  224.426714][T14785] R13: 00007f08a9fd6128 R14: 00007f08a9fd6090 R15: 00007fff13c50508
[  224.426735][T14785]  </TASK>
[  224.426740][T14785] Mem-Info:
[  224.625625][T14785] active_anon:4424 inactive_anon:0 isolated_anon:0
[  224.625625][T14785]  active_file:1554 inactive_file:38311 isolated_file:0
[  224.625625][T14785]  unevictable:1768 dirty:58 writeback:0
[  224.625625][T14785]  slab_reclaimable:11187 slab_unreclaimable:134847
[  224.625625][T14785]  mapped:18076 shmem:2578 pagetables:911
[  224.625625][T14785]  sec_pagetables:0 bounce:0
[  224.625625][T14785]  kernel_misc_reclaimable:0
[  224.625625][T14785]  free:210506 free_pcp:17972 free_cma:0
[  224.643102][T14785] Node 0 active_anon:9720kB inactive_anon:0kB active_file:4576kB inactive_file:23436kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28968kB dirty:136kB writeback:0kB shmem:5324kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6928kB pagetables:1944kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  224.654608][T14785] Node 1 active_anon:7976kB inactive_anon:0kB active_file:1640kB inactive_file:129808kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:43336kB dirty:96kB writeback:0kB shmem:4988kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7172kB pagetables:1768kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  224.665285][T14785] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  224.675687][T14785] lowmem_reserve[]: 0 811 811 811 811
[  224.679053][T14785] Node 0 DMA32 free:178340kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9788kB inactive_anon:0kB active_file:4576kB inactive_file:23436kB unevictable:3536kB writepending:136kB present:1556484kB managed:830928kB mlocked:0kB bounce:0kB free_pcp:40124kB local_pcp:18880kB free_cma:0kB
[  224.691345][T14785] lowmem_reserve[]: 0 0 0 0 0
[  224.693270][T14785] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  224.711707][T14785] lowmem_reserve[]: 0 0 854 854 854
[  224.714183][T14785] Node 1 Normal free:189708kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7976kB inactive_anon:0kB active_file:1640kB inactive_file:129808kB unevictable:3536kB writepending:96kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:32064kB local_pcp:12212kB free_cma:0kB
[  224.724677][T14785] lowmem_reserve[]: 0 0 0 0 0
[  224.726228][T14785] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  224.730476][T14785] Node 0 DMA32: 997*4kB (UME) 698*8kB (UME) 288*16kB (UE) 166*32kB (UME) 64*64kB (UE) 7*128kB (UME) 7*256kB (UM) 7*512kB (UME) 3*1024kB (UM) 5*2048kB (M) 33*4096kB (UM) = 178340kB
[  224.739334][T14785] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  224.749230][T14785] Node 1 Normal: 999*4kB (UME) 368*8kB (UME) 201*16kB (UME) 291*32kB (UME) 82*64kB (UME) 83*128kB (UM) 29*256kB (UME) 9*512kB (UME) 3*1024kB (M) 4*2048kB (UM) 32*4096kB (M) = 189708kB
[  224.767497][T14785] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  224.770510][T14785] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  224.786394][T14785] 42443 total pagecache pages
[  224.788038][T14785] 0 pages in swap cache
[  224.789655][T14785] Free swap  = 124996kB
[  224.791214][T14785] Total swap = 124996kB
[  224.797893][T14785] 786301 pages RAM
[  224.799306][T14785] 0 pages HighMem/MovableOnly
[  224.810150][T14823] veth0_to_team: left promiscuous mode
[  224.817350][T14823] veth0_to_team: left allmulticast mode
[  224.822597][T14823] tipc: Resetting bearer <eth:syzkaller0>
[  224.825006][T14823] syzkaller0: left promiscuous mode
[  224.826716][T14823] syzkaller0: left allmulticast mode
[  224.827934][T14785] 241337 pages reserved
[  224.830132][T14785] 0 pages cma reserved
[  224.839208][T14823] bridge10: left promiscuous mode
[  224.841152][T14823] bridge10: left allmulticast mode
[  224.972679][T14832] lo speed is unknown, defaulting to 1000
[  224.984497][T14832] wg1 speed is unknown, defaulting to 1000
[  224.992860][T14832] lo speed is unknown, defaulting to 1000
[  225.048624][T14846] xt_policy: too many policy elements
[  225.502488][T14882] 8021q: adding VLAN 0 to HW filter on device bond22
[  225.506267][T14882] bond0: (slave bond22): Enslaving as an active interface with a down link
[  225.700903][T14899] bridge3: entered allmulticast mode
[  225.760555][T14901] lo speed is unknown, defaulting to 1000
[  225.767907][T14901] wg1 speed is unknown, defaulting to 1000
[  225.775294][T14901] lo speed is unknown, defaulting to 1000
[  228.005773][T14909] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  228.676678][T14894] bridge3: left allmulticast mode
[  228.759610][T14920] __nla_validate_parse: 6 callbacks suppressed
[  228.759624][T14920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2473'.
[  228.790537][T14917] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2472'.
[  228.803591][T14917] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2472'.
[  228.819355][T14923] lo speed is unknown, defaulting to 1000
[  228.823692][T14923] wg1 speed is unknown, defaulting to 1000
[  228.827833][T14923] lo speed is unknown, defaulting to 1000
[  228.872876][T14925] lo speed is unknown, defaulting to 1000
[  228.877176][T14925] wg1 speed is unknown, defaulting to 1000
[  228.880902][T14925] lo speed is unknown, defaulting to 1000
[  229.253930][T14929] lo speed is unknown, defaulting to 1000
[  229.297439][T14929] wg1 speed is unknown, defaulting to 1000
[  229.326565][T14929] lo speed is unknown, defaulting to 1000
[  229.861163][T14946] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2480'.
[  230.043839][T14950] netlink: 'syz.0.2481': attribute type 1 has an invalid length.
[  230.094336][T14959] netlink: 'syz.0.2483': attribute type 10 has an invalid length.
[  230.097514][T14959] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  230.289096][T14969] netlink: 'syz.0.2487': attribute type 1 has an invalid length.
[  230.334912][T14978] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2489'.
[  230.345089][T14978] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2489'.
[  230.354117][T14978] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2489'.
[  230.360049][T14978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2489'.
[  230.364105][T14978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2489'.
[  230.379936][T14980] lo speed is unknown, defaulting to 1000
[  230.383235][T14980] wg1 speed is unknown, defaulting to 1000
[  230.385974][T14980] lo speed is unknown, defaulting to 1000
[  230.427478][T14984] netlink: 'syz.0.2492': attribute type 4 has an invalid length.
[  230.433096][ T5908] lo speed is unknown, defaulting to 1000
[  230.435555][ T5908] syz1: Port: 1 Link DOWN
[  230.438463][T14984] netlink: 'syz.0.2492': attribute type 4 has an invalid length.
[  230.459093][ T5908] lo speed is unknown, defaulting to 1000
[  230.463923][ T5908] syz1: Port: 1 Link ACTIVE
[  230.580218][T14986] erspan0: left allmulticast mode
[  230.605444][T14986] tipc: Resetting bearer <eth:syzkaller0>
[  230.608807][T14986] syzkaller0: left promiscuous mode
[  230.611314][T14986] syzkaller0: left allmulticast mode
[  230.637197][T14986] veth19: left promiscuous mode
[  230.652535][T14986] bond24: left promiscuous mode
[  230.662845][T14986] gretap4: left promiscuous mode
[  230.665021][T14986] gretap4: left allmulticast mode
[  230.694038][T15000] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2495'.
[  230.698014][T14986] veth23: left promiscuous mode
[  230.705798][ T9195] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  230.709657][T14997] netlink: 'syz.1.2494': attribute type 1 has an invalid length.
[  230.747009][ T9195] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  230.775130][ T9195] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  230.779797][ T9195] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  230.807550][T15003] bond21: (slave gretap4): making interface the new active one
[  230.816028][T15003] bond21: (slave gretap4): Enslaving as an active interface with an up link
[  230.983325][T15015] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  231.044444][T15031] lo speed is unknown, defaulting to 1000
[  231.047043][T15031] wg1 speed is unknown, defaulting to 1000
[  231.049945][T15031] lo speed is unknown, defaulting to 1000
[  231.439322][T15046] syzkaller0: entered promiscuous mode
[  231.448623][T15046] syzkaller0: entered allmulticast mode
[  231.510195][T15053] netlink: zone id is out of range
[  231.515776][T15053] netlink: zone id is out of range
[  231.518575][T15053] netlink: zone id is out of range
[  231.520445][T15053] netlink: zone id is out of range
[  231.525015][T15053] netlink: zone id is out of range
[  231.527775][T15053] netlink: zone id is out of range
[  231.529764][T15053] netlink: zone id is out of range
[  231.532914][T15053] netlink: zone id is out of range
[  231.566063][T15059] netlink: 'syz.2.2512': attribute type 12 has an invalid length.
[  231.569312][T15059] netlink: 'syz.2.2512': attribute type 12 has an invalid length.
[  231.654135][T15068] lo speed is unknown, defaulting to 1000
[  231.657268][T15068] wg1 speed is unknown, defaulting to 1000
[  231.659852][T15068] lo speed is unknown, defaulting to 1000
[  231.742207][T15071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  232.005043][T15077] syzkaller1: entered promiscuous mode
[  232.006893][T15077] syzkaller1: entered allmulticast mode
[  232.171049][T15086] lo speed is unknown, defaulting to 1000
[  232.176344][T15086] wg1 speed is unknown, defaulting to 1000
[  232.179856][T15086] lo speed is unknown, defaulting to 1000
[  232.467248][T15091] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  232.473854][T15091] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  232.532035][T15094] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  232.557853][T15094] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  232.696392][T15111] netlink: 'syz.2.2526': attribute type 1 has an invalid length.
[  232.751322][T15120] dvmrp10: left allmulticast mode
[  232.768954][T15111] 8021q: adding VLAN 0 to HW filter on device bond0
[  232.883889][T15135] netlink: 'syz.2.2532': attribute type 6 has an invalid length.
[  233.051868][T15151] IPVS: Error connecting to the multicast addr
[  233.181308][T15160] : renamed from bond_slave_0
[  233.306893][T15167] IPv6: sit4: Disabled Multicast RS
[  233.309894][T15167] sit4: entered allmulticast mode
[  233.803878][T15185] tipc: Failed to remove unknown binding: 66,1,1/37071872:3168036352/3168036354
[  233.810371][T15185] tipc: Failed to remove unknown binding: 66,1,1/37071872:3168036352/3168036354
[  233.814669][T15185] tipc: Failed to remove unknown binding: 66,1,1/37071872:3168036352/3168036354
[  234.652556][T15195] __nla_validate_parse: 23 callbacks suppressed
[  234.652572][T15195] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2553'.
[  234.813770][T15203] lo speed is unknown, defaulting to 1000
[  234.817734][T15203] wg1 speed is unknown, defaulting to 1000
[  234.832736][T15203] lo speed is unknown, defaulting to 1000
[  234.981011][T15207] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  235.263030][T15209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2558'.
[  235.475475][T15216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2561'.
[  235.668755][T15216] lo speed is unknown, defaulting to 1000
[  235.679791][T15225] lo speed is unknown, defaulting to 1000
[  235.679877][T15216] wg1 speed is unknown, defaulting to 1000
[  235.702279][T15225] wg1 speed is unknown, defaulting to 1000
[  235.703173][T15216] lo speed is unknown, defaulting to 1000
[  235.714938][T15225] lo speed is unknown, defaulting to 1000
[  236.290790][T15236] netlink: 268 bytes leftover after parsing attributes in process `syz.1.2566'.
[  236.295792][T15237] netlink: 268 bytes leftover after parsing attributes in process `syz.1.2566'.
[  236.346118][T15242] validate_nla: 8 callbacks suppressed
[  236.346141][T15242] netlink: 'syz.1.2568': attribute type 1 has an invalid length.
[  236.355650][T15242] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2568'.
[  236.428076][T15244] lo speed is unknown, defaulting to 1000
[  236.445218][T15244] wg1 speed is unknown, defaulting to 1000
[  236.448990][T15244] lo speed is unknown, defaulting to 1000
[  236.619383][T15254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2571'.
[  236.623868][T15254] net_ratelimit: 17 callbacks suppressed
[  236.623882][T15254] openvswitch: netlink: Missing key (keys=40, expected=100)
[  236.911936][T15256] netlink: 'syz.0.2572': attribute type 1 has an invalid length.
[  236.939098][T15256] bond24: (slave vxcan7): The slave device specified does not support setting the MAC address
[  236.952333][T15256] bond24: (slave vxcan7): Error -95 calling set_mac_address
[  236.993006][T15259] gretap3: entered promiscuous mode
[  237.003143][T15259] bond24: (slave gretap3): making interface the new active one
[  237.005937][T15259] bond24: (slave gretap3): Enslaving as an active interface with an up link
[  237.257548][T15274] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  237.480004][T15282] lo speed is unknown, defaulting to 1000
[  237.483788][T15282] wg1 speed is unknown, defaulting to 1000
[  237.488560][T15282] lo speed is unknown, defaulting to 1000
[  237.586129][T15286] netlink: 'syz.2.2577': attribute type 1 has an invalid length.
[  237.606543][T15286] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2577'.
[  237.617181][T15286] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  237.872131][T15297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2580'.
[  237.895867][T15297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2580'.
[  237.952405][T15291] lo speed is unknown, defaulting to 1000
[  237.962800][T15291] wg1 speed is unknown, defaulting to 1000
[  237.966232][T15291] lo speed is unknown, defaulting to 1000
[  238.217945][T15305] netlink: 'syz.2.2582': attribute type 22 has an invalid length.
[  238.224819][T15300] openvswitch: netlink: Message has 4 unknown bytes.
[  238.267923][T15305] netlink: 'syz.2.2582': attribute type 22 has an invalid length.
[  238.280746][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  238.296919][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  238.329642][    C0] ==================================================================
[  238.333076][    C0] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  238.333785][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  238.336397][    C0] Write of size 8 at addr ffff88811f554030 by task kworker/u8:0/12
[  238.341190][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  238.343935][    C0] 
[  238.343947][    C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  238.343962][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  238.343970][    C0] Workqueue: netns cleanup_net
[  238.343985][    C0] Call Trace:
[  238.343990][    C0]  <IRQ>
[  238.343996][    C0]  dump_stack_lvl+0x189/0x250
[  238.344012][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  238.344026][    C0]  ? rcu_is_watching+0x15/0xb0
[  238.344036][    C0]  ? __kasan_check_byte+0x12/0x40
[  238.344052][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  238.344064][    C0]  ? rcu_is_watching+0x15/0xb0
[  238.344075][    C0]  ? lock_release+0x4b/0x3e0
[  238.344092][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  238.344106][    C0]  ? __virt_addr_valid+0x4a5/0x5c0
[  238.344119][    C0]  print_report+0xca/0x240
[  238.344131][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  238.344142][    C0]  kasan_report+0x118/0x150
[  238.344157][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  238.344170][    C0]  __xfrm_state_delete+0x696/0xca0
[  238.344185][    C0]  xfrm_timer_handler+0x18f/0xa00
[  238.344205][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  238.344221][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  238.344237][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  238.344253][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  238.344267][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  238.344284][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  238.344300][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  238.344316][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  238.344333][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  238.344344][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  238.344358][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  238.344371][    C0]  handle_softirqs+0x286/0x870
[  238.344383][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  238.344395][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  238.344409][    C0]  __irq_exit_rcu+0xca/0x1f0
[  238.344419][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  238.344433][    C0]  irq_exit_rcu+0x9/0x30
[  238.344443][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  238.344458][    C0]  </IRQ>
[  238.344462][    C0]  <TASK>
[  238.344466][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  238.344478][    C0] RIP: 0010:lock_release+0x2b5/0x3e0
[  238.344494][    C0] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 cb 11 03 11 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e
[  238.344504][    C0] RSP: 0018:ffffc900000f77d8 EFLAGS: 00000206
[  238.344514][    C0] RAX: 6f80a4ff24d6e600 RBX: 0000000000000202 RCX: 6f80a4ff24d6e600
[  238.344523][    C0] RDX: 0000000000000003 RSI: ffffffff8dba74b7 RDI: ffffffff8be33800
[  238.344531][    C0] RBP: ffff88801c2f61a8 R08: 0000000000000000 R09: ffffffff89e1ff37
[  238.344538][    C0] R10: dffffc0000000000 R11: fffff5200001ef05 R12: 0000000000000003
[  238.344546][    C0] R13: 0000000000000003 R14: ffffffff8e139ee0 R15: ffff88801c2f5640
[  238.344556][    C0]  ? cond_resched_rcu+0x87/0x170
[  238.344575][    C0]  ? cond_resched_rcu+0x87/0x170
[  238.344588][    C0]  ? cond_resched_rcu+0x87/0x170
[  238.344602][    C0]  cond_resched_rcu+0x96/0x170
[  238.344616][    C0]  ip_vs_conn_net_cleanup+0x397/0x560
[  238.344630][    C0]  ? ip_vs_conn_net_cleanup+0x40/0x560
[  238.344645][    C0]  __ip_vs_cleanup_batch+0x73/0x100
[  238.344662][    C0]  ? __pfx___ip_vs_cleanup_batch+0x10/0x10
[  238.344678][    C0]  ops_undo_list+0x525/0x990
[  238.344690][    C0]  ? __pfx_ops_undo_list+0x10/0x10
[  238.344728][    C0]  ? do_raw_spin_unlock+0x4d/0x240
[  238.344742][    C0]  cleanup_net+0x4c5/0x800
[  238.344753][    C0]  ? __pfx_cleanup_net+0x10/0x10
[  238.344764][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  238.344778][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  238.344789][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  238.344800][    C0]  process_scheduled_works+0xae1/0x17b0
[  238.344819][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  238.344836][    C0]  worker_thread+0x8a0/0xda0
[  238.344856][    C0]  kthread+0x711/0x8a0
[  238.344876][    C0]  ? __pfx_worker_thread+0x10/0x10
[  238.344887][    C0]  ? __pfx_kthread+0x10/0x10
[  238.344900][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  238.344914][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  238.344928][    C0]  ? __pfx_kthread+0x10/0x10
[  238.344941][    C0]  ret_from_fork+0x3fc/0x770
[  238.344953][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  238.344966][    C0]  ? __switch_to_asm+0x39/0x70
[  238.344980][    C0]  ? __switch_to_asm+0x33/0x70
[  238.344993][    C0]  ? __pfx_kthread+0x10/0x10
[  238.345006][    C0]  ret_from_fork_asm+0x1a/0x30
[  238.345025][    C0]  </TASK>
[  238.345029][    C0] 
[  238.358339][    C0] Allocated by task 12919:
[  238.536293][    C0]  kasan_save_track+0x3e/0x80
[  238.538306][    C0]  __kasan_slab_alloc+0x6c/0x80
[  238.540410][    C0]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  238.542715][    C0]  xfrm_state_alloc+0x24/0x2f0
[  238.544690][    C0]  __find_acq_core+0x8a7/0x1c00
[  238.546727][    C0]  xfrm_find_acq+0x78/0xa0
[  238.548535][    C0]  xfrm_alloc_userspi+0x6b3/0xc90
[  238.550628][    C0]  xfrm_user_rcv_msg+0x7a3/0xab0
[  238.552750][    C0]  netlink_rcv_skb+0x208/0x470
[  238.554808][    C0]  xfrm_netlink_rcv+0x79/0x90
[  238.556809][    C0]  netlink_unicast+0x82f/0x9e0
[  238.558897][    C0]  netlink_sendmsg+0x805/0xb30
[  238.560933][    C0]  __sock_sendmsg+0x21c/0x270
[  238.562897][    C0]  ____sys_sendmsg+0x505/0x830
[  238.564994][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  238.567039][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  238.569167][    C0]  do_syscall_64+0xfa/0x3b0
[  238.571148][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.573716][    C0] 
[  238.574784][    C0] Freed by task 5908:
[  238.576499][    C0]  kasan_save_track+0x3e/0x80
[  238.578509][    C0]  kasan_save_free_info+0x46/0x50
[  238.580642][    C0]  __kasan_slab_free+0x5b/0x80
[  238.582750][    C0]  kmem_cache_free+0x18f/0x400
[  238.584830][    C0]  xfrm_state_gc_task+0x52d/0x6b0
[  238.587001][    C0]  process_scheduled_works+0xae1/0x17b0
[  238.589363][    C0]  worker_thread+0x8a0/0xda0
[  238.591302][    C0]  kthread+0x711/0x8a0
[  238.593086][    C0]  ret_from_fork+0x3fc/0x770
[  238.595041][    C0]  ret_from_fork_asm+0x1a/0x30
[  238.597080][    C0] 
[  238.598100][    C0] The buggy address belongs to the object at ffff88811f554000
[  238.598100][    C0]  which belongs to the cache xfrm_state of size 928
[  238.603652][    C0] The buggy address is located 48 bytes inside of
[  238.603652][    C0]  freed 928-byte region [ffff88811f554000, ffff88811f5543a0)
[  238.609317][    C0] 
[  238.610372][    C0] The buggy address belongs to the physical page:
[  238.613128][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88811f556d00 pfn:0x11f554
[  238.617326][    C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  238.620929][    C0] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  238.624050][    C0] page_type: f5(slab)
[  238.625751][    C0] raw: 057ff00000000040 ffff88801c72ab40 dead000000000122 0000000000000000
[  238.629311][    C0] raw: ffff88811f556d00 00000000800e0008 00000000f5000000 0000000000000000
[  238.631999][    C0] head: 057ff00000000040 ffff88801c72ab40 dead000000000122 0000000000000000
[  238.634709][    C0] head: ffff88811f556d00 00000000800e0008 00000000f5000000 0000000000000000
[  238.637501][    C0] head: 057ff00000000002 ffffea00047d5501 00000000ffffffff 00000000ffffffff
[  238.640608][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  238.644205][    C0] page dumped because: kasan: bad access detected
[  238.646776][    C0] page_owner tracks the page as allocated
[  238.649091][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6403, tgid 6400 (syz.1.140), ts 70331429296, free_ts 69629601680
[  238.656097][    C0]  post_alloc_hook+0x240/0x2a0
[  238.657900][    C0]  get_page_from_freelist+0x21e4/0x22c0
[  238.659870][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[  238.661715][    C0]  alloc_pages_mpol+0x232/0x4a0
[  238.663214][    C0]  allocate_slab+0x8a/0x370
[  238.664681][    C0]  ___slab_alloc+0xbeb/0x1410
[  238.666221][    C0]  kmem_cache_alloc_noprof+0x283/0x3c0
[  238.668107][    C0]  xfrm_state_alloc+0x24/0x2f0
[  238.669938][    C0]  xfrm_add_sa+0x17d1/0x4070
[  238.671559][    C0]  xfrm_user_rcv_msg+0x7a3/0xab0
[  238.673207][    C0]  netlink_rcv_skb+0x208/0x470
[  238.674802][    C0]  xfrm_netlink_rcv+0x79/0x90
[  238.676364][    C0]  netlink_unicast+0x82f/0x9e0
[  238.678124][    C0]  netlink_sendmsg+0x805/0xb30
[  238.679734][    C0]  __sock_sendmsg+0x21c/0x270
[  238.681247][    C0]  ____sys_sendmsg+0x505/0x830
[  238.682775][    C0] page last free pid 6382 tgid 6381 stack trace:
[  238.684831][    C0]  __free_frozen_pages+0xbc4/0xd30
[  238.686443][    C0]  stack_depot_save_flags+0x436/0x860
[  238.688506][    C0]  kasan_save_track+0x4f/0x80
[  238.690079][    C0]  __kasan_kmalloc+0x93/0xb0
[  238.691922][    C0]  __kmalloc_cache_noprof+0x230/0x3d0
[  238.693871][    C0]  __sta_info_destroy_part2+0x2e9/0x450
[  238.695678][    C0]  __sta_info_flush+0x5e4/0x710
[  238.697364][    C0]  ieee80211_ibss_disconnect+0x2da/0x7c0
[  238.699178][    C0]  ieee80211_ibss_leave+0x47/0x150
[  238.700877][    C0]  cfg80211_leave_ibss+0x1e7/0x410
[  238.702509][    C0]  cfg80211_netdev_notifier_call+0x1b3/0x1450
[  238.704457][    C0]  notifier_call_chain+0x1b6/0x3e0
[  238.706075][    C0]  __dev_close_many+0x106/0x6f0
[  238.707741][    C0]  netif_close_many+0x225/0x410
[  238.709352][    C0]  netif_close+0x158/0x210
[  238.710881][    C0]  dev_close+0x10a/0x220
[  238.712285][    C0] 
[  238.713065][    C0] Memory state around the buggy address:
[  238.714879][    C0]  ffff88811f553f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  238.717536][    C0]  ffff88811f553f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  238.720580][    C0] >ffff88811f554000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  238.723941][    C0]                                      ^
[  238.726350][    C0]  ffff88811f554080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  238.729671][    C0]  ffff88811f554100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  238.732590][    C0] ==================================================================
[  238.736026][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  238.739051][    C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  238.742970][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  238.747106][    C0] Workqueue: netns cleanup_net
[  238.749158][    C0] Call Trace:
[  238.750613][    C0]  <IRQ>
[  238.751877][    C0]  dump_stack_lvl+0x99/0x250
[  238.753905][    C0]  ? __asan_memcpy+0x40/0x70
[  238.755771][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  238.757667][    C0]  ? __pfx__printk+0x10/0x10
[  238.759663][    C0]  vpanic+0x281/0x750
[  238.761419][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  238.763680][    C0]  ? __pfx_vpanic+0x10/0x10
[  238.765571][    C0]  ? irqentry_exit+0x74/0x90
[  238.767508][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  238.769761][    C0]  panic+0xb9/0xc0
[  238.771332][    C0]  ? __pfx_panic+0x10/0x10
[  238.773238][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  238.775721][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  238.778218][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  238.780537][    C0]  check_panic_on_warn+0x89/0xb0
[  238.782247][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  238.784359][    C0]  end_report+0x78/0x160
[  238.786170][    C0]  kasan_report+0x129/0x150
[  238.788147][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  238.790435][    C0]  __xfrm_state_delete+0x696/0xca0
[  238.792648][    C0]  xfrm_timer_handler+0x18f/0xa00
[  238.794850][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  238.797237][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  238.799795][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  238.802055][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  238.804544][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  238.807239][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  238.809639][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  238.812052][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  238.814184][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  238.816340][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  238.818242][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  238.819920][    C0]  handle_softirqs+0x286/0x870
[  238.821501][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  238.823107][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  238.824839][    C0]  __irq_exit_rcu+0xca/0x1f0
[  238.826347][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  238.828256][    C0]  irq_exit_rcu+0x9/0x30
[  238.829734][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  238.831675][    C0]  </IRQ>
[  238.832670][    C0]  <TASK>
[  238.833668][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  238.835769][    C0] RIP: 0010:lock_release+0x2b5/0x3e0
[  238.838013][    C0] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 cb 11 03 11 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e
[  238.845875][    C0] RSP: 0018:ffffc900000f77d8 EFLAGS: 00000206
[  238.848420][    C0] RAX: 6f80a4ff24d6e600 RBX: 0000000000000202 RCX: 6f80a4ff24d6e600
[  238.851800][    C0] RDX: 0000000000000003 RSI: ffffffff8dba74b7 RDI: ffffffff8be33800
[  238.855167][    C0] RBP: ffff88801c2f61a8 R08: 0000000000000000 R09: ffffffff89e1ff37
[  238.858421][    C0] R10: dffffc0000000000 R11: fffff5200001ef05 R12: 0000000000000003
[  238.861183][    C0] R13: 0000000000000003 R14: ffffffff8e139ee0 R15: ffff88801c2f5640
[  238.863763][    C0]  ? cond_resched_rcu+0x87/0x170
[  238.865317][    C0]  ? cond_resched_rcu+0x87/0x170
[  238.867181][    C0]  ? cond_resched_rcu+0x87/0x170
[  238.869344][    C0]  cond_resched_rcu+0x96/0x170
[  238.871170][    C0]  ip_vs_conn_net_cleanup+0x397/0x560
[  238.873412][    C0]  ? ip_vs_conn_net_cleanup+0x40/0x560
[  238.875849][    C0]  __ip_vs_cleanup_batch+0x73/0x100
[  238.878130][    C0]  ? __pfx___ip_vs_cleanup_batch+0x10/0x10
[  238.880532][    C0]  ops_undo_list+0x525/0x990
[  238.882316][    C0]  ? __pfx_ops_undo_list+0x10/0x10
[  238.884072][    C0]  ? do_raw_spin_unlock+0x4d/0x240
[  238.886157][    C0]  cleanup_net+0x4c5/0x800
[  238.887710][    C0]  ? __pfx_cleanup_net+0x10/0x10
[  238.889588][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  238.891716][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  238.894020][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  238.896329][    C0]  process_scheduled_works+0xae1/0x17b0
[  238.898556][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  238.901013][    C0]  worker_thread+0x8a0/0xda0
[  238.902916][    C0]  kthread+0x711/0x8a0
[  238.904579][    C0]  ? __pfx_worker_thread+0x10/0x10
[  238.906598][    C0]  ? __pfx_kthread+0x10/0x10
[  238.908490][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  238.910612][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  238.912654][    C0]  ? __pfx_kthread+0x10/0x10
[  238.914448][    C0]  ret_from_fork+0x3fc/0x770
[  238.916310][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  238.918400][    C0]  ? __switch_to_asm+0x39/0x70
[  238.920278][    C0]  ? __switch_to_asm+0x33/0x70
[  238.922133][    C0]  ? __pfx_kthread+0x10/0x10
[  238.924020][    C0]  ret_from_fork_asm+0x1a/0x30
[  238.925950][    C0]  </TASK>
[  238.927895][    C0] Kernel Offset: disabled
[  238.929678][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:45:55  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81a02395 RBX=ffffffff81a02354 RCX=ffff88801c2f5640 RDX=0000000000000100
RSI=ffffffff81a02370 RDI=1ffffffff1c25c24 RBP=ffffc900000078d0 RSP=ffffc900000077c0
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=fffffbfff1c25c19
R12=dffffc0000000000 R13=1ffff92000000efc R14=0000000000000000 R15=0000000000000040
RIP=ffffffff81a02383 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c36fea0 CR3=000000010a4e0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f29ffc12e53
XMM06=0000000000000000 00007f29ffc12e4d XMM07=0000000000000000 00007f29ffc12e61
XMM08=0000000000000000 00007f29ffc12ee7 XMM09=0000000000000000 00007f29ffc12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000074 RBX=0000000000000074 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000106f30
R8 =ffff8881065a8237 R9 =1ffff11020cb5046 R10=dffffc0000000000 R11=ffffffff854f38c0
R12=dffffc0000000000 R13=ffffffff99afd911 R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f393c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3d1deb CR3=00000000365e4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f29ffda7498 00007f29ffda7470 XMM03=00007f29ffda74a8 00007f29ffda74a0
XMM04=00007f2a0090d100 00007f29ffda7460 XMM05=00007f29ffda7478 00007f29ffda74c0
XMM06=00007f29ffda74b8 00007f29ffda74b0 XMM07=00007f29ffda74a8 00007f29ffda74a0
XMM08=0000000000000000 00007f29ffc12ee7 XMM09=0000000000000000 00007f29ffc12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
