last executing test programs:

42.949174965s ago: executing program 0 (id=740):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', <r2=>0x0})
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x2}, {0x10, 0x80004, 0x10100}], 0x10, 0x1}, 0x94)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000000)=0x1, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x26340, 0xe008}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}]}, 0x58}, 0x1, 0xba01}, 0x810)

42.101100496s ago: executing program 0 (id=752):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66", 0x79}], 0x1, 0x0, 0x6b}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="760100001b"], 0x188}, 0x1, 0x0, 0x0, 0x2000c045}, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000940)={0x0, ""/256, 0x0, <r2=>0x0}) (async)
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000011c0)={{<r3=>0x0, 0x101, 0x7, 0x400, 0x0, 0xf, 0x101, 0x4, 0x7, 0xdb2b, 0x100, 0x9, 0x0, 0x7, 0x7ed}})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000021c0)={r2, r3, "30972dfd111102a304bf266b39f6f9e4f351c31b7bb30ec4789098c611dd85dc9de602baa700ef6976defe757d3925f938a59820034353f65b40d940570a9579aebd9dbfae9c5cbc52e089e062f0231979390b13ba6ab860bd8fa86958e1244759f55a440c2626951b27c416abfe14154f42e84394fb6bbc5ad627c2a2ef7260278d0dd6e2e57745caf2fd3718f3052a2ecb7c03c769362d0f58071a1d35f60c461a30a713cb4827f80f0cfd71ff59005d6ac1bad7acbb9afcd4405b8a63b7e83b8cc2d284e25e0d637ac8998be1b8c81b87be305389b64a7ed9aeb30681aacdddbf6cdf7e5db3f0722249ce34def9f194b12323eee9b89e93b2a32c5dce4656", "2ac6a79813f53792c8f536ca1a9009bacbd5bca9ac9e94dd1432b0b7c991d8efdcf3d31af93105a10b68785746879f46375ce6e4abaaa8b488ed415ff1db10fb4316be3a78940a06e688f965c7b4b21e677a7ec3b80af59462c9e2b0456e1667a3d59b61cde23dfe8cac3e150c2ba9ad3fef26daa64bbef9ed9bf8c783f67ab716b33142fed2e69a0a343bf4b3bf142ba3e798cf2832156a00045e15295f2440970dfcded98eeb76ac0f754f3bd0d796eeaf77d6d306661d5ee1b9d1cf44a66370a18dab876f4d89f6e5ada9e8bb72370f4fc1effe8ee419d0fef53e3a133558860f463e8a9498a745e6e7fe0ecf5d449a886ce04afa9a7949309d5221e9f89af2866d6a467e451afe40891907fcbc3ed1f8266866438d82b4cc40844c4d668c898ae0f6322d1d6fe3f45a2e93dcdcd6856e1940013b3c481722fd7fe848dd662e9f04bf3628809c2400152804dbe990de1e875aafebb6e930c6a785955ee2af30797c21c8783160cd58c2c6a3973232e256e35fda5d7a041069311ab2f22e645540df90508449337727c1f1ff298e9bbb5a06279d3fab26f215c9b5a2715cd4d94044542208bcf6ccf028778f626b38fa02c65c9c683755ce8e33bca9302a1ba314d50df2fbca7dc85df6ce21122ceaf86b0c4a055d96102ce6570dd175c8491af4c607baf18c1b32c4041f6c068f3820f045734ee29bb3c47addf44528ff045865d094d9590698ea488a9eaf8baab3729f4208661abea0a462f8715593be8ec2b35634cce10c270e968408a0d40b97df12412b750cdbd075649e280c5348bb55e2210ab223850a7df51cef149a6c00541757a353e8cbacf9f3476c2d356c135686b69b4fe77d7ede6791c1169e19ad85ec2229c05c5545937e0f8c577c860e26b670dd91dfff866c88c178a2513965c03b248a3bf839d221b987b3cd0f25d2b27a947fbba74591afec7a9069558fc34e5804fc5f179c1ebfaea06ee6a6ca0e0d9663943fd967c3020da340e852de6a0bc9ef7c58b1f4b819c1247ac59bc9439d29ad0b1cecf8a14468da0bcce5a16c31b2c4ef39cf5b8d2090da2d7f914627461dce1f023a5848c239ca18c41cbfedb3d03ba49a40776579a41a59e356ef1a54004ac978b4a4b485520ce12cc7cbcddd84a255c2b0fadc2503d4bf1cd52d92a62651cbbf0db321b75d62acf76a98e244c1c36b054d9dce3a1b483dd80d345f87c2829e219802c9ed820c4e68ea733d0c7cee1ddfdd69314b1fecdd0e7d2aa23865e25456decb3839edada36834520c7c3ff67218cd2817a86a08a9c07fb86804c4fb5ab2bb955dd237e18b8eb7a003f03ad4436a7290765856720fef4b05bf3dca7acc7590776a768274440518d8ad64f1f53df1b9de772c3327553316b733aaea5a3f01a2e56be0dab224a35437849da4504b4ac813ebb60e1d7d7c29b97aad7507e6f8f6c6287d48086990ebc940290d796a87398f27d7f6f67349ef38620289de2e9f65bd40c370733b6b1040e786614a4f270ec4d19bdd5fdd57f511e6c2a48b5c474fcc2da02a2240c5ab0e4d82ec9a9fae5bc0789b9451a8d4f66ef04814559cc50ce58817c5baf7c883c0a6fecacae8b9df39a62ce5f362e1277836f063b1bafeeb0578c8d0278cb21a150ab57a90576132ae419cd815b9f6b1f0a7ef9d4aa9969dd8a60dc4591c442d800c7f5c684e427e678e5019a30ec0fbcbf789a7d5242ae8f06fdde91889ad08f98aab5ff43b28cad60ae9860eccc08b26fe63d5ce871df1404a00eeaccaa66d7c776fce7595383a750624688d8033c827e9ff31230cf2905ac2d7309e86d20ced07d3b17266fd951486d61eb6ef0f5bf9d6d68ca1b844effd91347a36dec62759432cf10637df931ed601e8ea38d73553dd11336c673c20b0093a75e92cc2f86142998794c52ca3dcecbe7a57a2d10bd2556a500b9dd907a483b266ac16c494e422c184b9f0dd3d715f2c311e9d4db79d15a64894429d5e94bff938c72029adf556ba93b8736bf9c72b7b9c8f4462dfacbb3106454f651454669fff840d238e943469b2094ff6336c13c15501322a788c07cf02fb89e6454854115d680cf83438d77378c5b402941a3c8ecac72606d8ab32ef8eb44b19f40310f8962a77001398a33e5948e6544608e8b508986c495fd5813c6a292850cd98483d06f31c37d4cc1823d3758e7f8306b2194a3f8ed2d7cb2ad24d7de7f775008a084b62bb07e7085ec7ccca937222672ac55ccf6af57d5b042d863107dac4fffeb1b40c8d8c0ebaf181627eb72f4f0b661757f265567c730fb7a06d8dbbf2cb5935c7e4e88d9b4cfb62e4ba93d7692e7b79a9daf506fcf6e6ac9fb258559a7d35cf9f6d8aad8e9f2376f198bb5162302f9c58151e153a93b7fb46ef00c3372668559ddd54ef702d2ea8cba6f4ab258deffaf0a75903927fdc49bf4fce5bdcbb84d87b4dcab5ea1f8bd19aebb46920eb743a04bf4a33716b293a2432c3a0070ce20cb65679401be260ac7fe5157ec835a0e80d4f2128f0ba87408802de842dec15ad0e25dc9ac96b55dda4b86ca6b85ce862e014b41702cb55bff9f89f7670f2e49c31d3ec97cc627789c689a6b2ce80e911171823472ee66b349553e884b26c6718712676d771f5cad3a31b69424fcb24663f344056b3f8b923a56f71478911e396b6ddc571438447c029076b22cf78a278ecb6f34386712288039dfe82d4fb63f5af87a01d604022d7b2d792ec73717e1db9d744c0016cb057e358d4db016b6aa48585d817767d2c3f8f0b1ca39f24e5e3ad40af60c1c6987eb3697ffb50a93f56a7076cede8b5416002af2c0ccc3be7b5f7199b8253ffc6d465dc8813fddfe5ac0124e9f728c826bcf3989dbd6832877e9bfab859edd71367f2cf4b2ad22ed4a06c1a73b0bc2424394ad7f911f140ae6baf404f5527d13b57d92e9fb1ef0d6d46caec0de950da3fcd84aefa3390ac81ae6358dac442fe52063d12a29ab5de787f3b8f1936dfd124c57c7ca82e8d9b226fb0de70d5adf23234fccb6c37da97082a5a5b6b1422cc1b8d9833eef44e3c2a2dd544b09c3d6e56943e11ffe1235a81eedba8bddb4ce539ef52971021e9fec1bfc5197d1e78646ea908bab157ec722233294764537af3ed13d69b8824e76783c197ebdc548a8634cdad1cc60f6ff959acc795cd4aacbd287d394640e92acb22e8309d0e69e3ce61e1135a05c789020a862282c729217776b76d212eea432d7c3ec1203a248ae0c36cacf35bd4e4d087255cf0ea28861b7fdf0de67b71b7c129c547c51e052f986de3891832d5cd75192ab87af63a75b2a3d5428e97bf9d6348710614207f5479146400484e024072b93804dd99f6a7a3aad2ec53906bd056c786cf5cb709f16712acc75b01d61ba34930958d78394103d0d7ed69712593c3fae93f0f736ee0788b158638a95ee732d85c00c2dc7cffb5f81d1ee4c3cd610c6c9906fef0ecc1b71acf423a1bc28e501732e63bf1ee14423811c572fc012210d96167699e184b3416938248e31135cafe3a9f5c5d20d8d1465ed4193f968812714662bad954bccf452c1a38c815e48dc1d170d1ba6ea906a514b8a5477838081fc45e6742c895d2cf5a1042fd3056add202c39937b1a1b71f5278c897fbf9c9b334650b50acee1e9a33498de2cb1af718d0cdb4b206ba70f97092b525ff11b42b104353fc49393b8609b2cba1949e82104996f00b48477b3607fd9d05b634c7f15433bd3686cdbb0a9ca2377d629aa5f634a0420d742e15a05c83c16df217c90ef871e4e2a00b7c5aa9058c1a60320009c4d54df8c3481f4510c3806b3a0a68e03cb4da871e7b51bb3630c07e79abd98ca7282035d0bde57c974ceb69a85eb0c0c71156109fe0467735dc31aad6992b3a34bdd37ec0e466c2aec6703c314e60f7d37f4ff99b8e2f66856fd3fa62f109004dee2096253af5be98c32a5ab214a64d86ebeeef33d317afaece69fc33eb5a3b490cc3babdbb83e6a6f69866e498da6f69ee9feec237d684cd6f3fd706f453757bca3355fd69179bd4798a760c973ce0486edc1d96d51c510ccb987cae011b3b4e930a7c1ec1b0f3f32ae0b6e5c11bc0d269d11596280ae7e2fa5972ea87bced4d451de6bca14d9b17831da83424c36b3ef9bf473c0d9cf92a75b5973a6830f4c673681e5752ae519d379c4cb7c47a7210d8f5cc4d3d5d8345591182acacc3a1e5194dd02ec22523a789c02c4fcf735f5b04e0292737cf9244f24dc1854ba7e155548a9051a2b11d659e4e573d9a93147a4331425e39707b48e770ce246326bcf8965bccf850864d846933a15c6f5da3074bdf0c57dd54c501d3dfede8022bd833c1dddc03760b287521cb6b1f43c4bca3b3aadc05f1d21668eed9aa9bae96140fc54bbfc7937e3559e6afd560196699d836a48712ccaf44b60d429f5b99590e501a294ac69d7a300ab11210b5b621e09ab5d5d312f1900b033627110c93941d846ca182b74d485d5fab92546bb33bf0535896c9d4db3c81e4a465e9c22b3c9438f2acc602ad070d8ce09ab4a8ef934137196fb15893d9b70369d931ea3ad4c40900e43e14c8746480e35fc8b7749e18d4a24fd39eeaccc2c5de0622c6f4c6a7009e1155583cd82b15065f40d84e5aa05239372a9bcefc5b22f1b8ae893ea457e9c73cf58a7e7e813fc853aad98d446270d21d79474a0cbc7d45e8ad4d35fc05cb2781afc93d59eb11ec3c884b98c2f3ea8ad27cbd4aee4104a7cba2044a7ef87a76326bc06cb481dcd82b0af8fca66a935ebfe64ef7fa03a52de012c7691ab388f8cccac1078a4807e067f4b401e7dffa3e095c1ede4d29ff74ae45fc0ff26aed5d70938e95d736019b9c0ca9e602fd0b245a63b98dd215cd9e839849be29b6bb86ae9333ec7710fb6e1b7181fe0b85021410439b1eff13d8245c48b5c42ae1d442968e730987cde2e41fbef306faa62edb167a671fb0575fd956494f7361eb5ef1880b75ec85e345e3873a468a5f04a1c0e64e62f53602a0ca9d9aa808422013ba588f7c4a1f9a92bf3d707304b1b430df948a32e801c4da514bff579d2e2a7bbea34c3b6d6eb4463e71377dc0955809ac51a8e799cf9edd5fadc1d3f3791848741a241e6e6753df52fe083c975ef83cacb890a431e8fc684da74f6e1fb89e00ee2bb837d5447f6cd8ce3c81240c22ff670424a716cd8b1be6ce4ff7e0da1aa1d71b0dd22a06c24acadfce89c0cc951e9839758460ab3f24db4637bb3ffb11c357e321f737c32bfc7c74e3b1b05801ec5f0ec060e3302d1d3d0e760bda0c5c9f2b5fd6e1164f09c5ea3511ffd7a5c597aa15a88003158a030af52c5187237e12cf5dcdc8af7c1002f12ec1fd8b63b444f4ba5de7b26d6a88abcd4966831f98f74d86e8fc6902c2"})
syz_emit_ethernet(0x62, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000054000000000006907800000000ffffffff00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0000000090780000010a040000fe06e2d4c3d9050e0000000000000c000000000013122b58ea71e70b7ec40843c97fb62cd17100"], 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x21, @remote}, {0x2, 0x0, @local}, {0x2, 0x4e28, @private=0xa010101}, 0xb831e24b46db9db7, 0x0, 0x0, 0x0, 0xfffd})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {}, {0x8, 0x10}}}, 0x24}}, 0x0) (async)
ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000001c0)) (async)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000002580)) (async)
gettid() (async)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020200020c00000001000000ffdbdf25031048470006000000000002004e24ac1414aa000000000000180002000100000000000000fb000000000005000500f300000000000000fe8000000000000000000000000000bb0000000000"], 0xfffffcef}, 0x1, 0x7}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, <r6=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="240000002e0001002abd70000000000008000000", @ANYRES32=r6, @ANYBLOB="ea849129eb49c4a3ff000000"], 0x24}], 0x1}, 0x0) (async)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002700)={{{@in=@initdev, @in6}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f0000002800)=0xe8) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x1f, 0xa, 0x1, 0x0, 0xfffffffe}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x0, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x3e, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x12}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @uid=0xee00}, @typed={0x8, 0x10, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x2c}}, 0x0) (async)
sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000280)={<r11=>0x0, <r12=>0x0, <r13=>0x0}, &(0x7f00000013c0)=0xc)
sendmmsg$unix(r10, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}], 0x20, 0x40044}}], 0x1, 0x4)

42.099277868s ago: executing program 0 (id=754):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x15, 0x9, 0x1d}, 0x2c)

42.098926407s ago: executing program 0 (id=755):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e5ff00000000000071118200000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001000000000010000000ac1414bb000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000900000000000000080000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000010000030000000084010500ac1414aa000000000000000000000000000000003200000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000002b00000000000000fe800000000000000000000000000000000000000000000000080000000000000000000020010000000000000000000000000001000000003200"], 0x23c}}, 0x0)

42.051090484s ago: executing program 0 (id=757):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000000400)={@void, @val={0x2, 0x4, 0x6, 0x7, 0x8, 0x3}, @llc={@snap={0xaa, 0xaa, "15", "c3d762", 0x6004}}}, 0x12) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, &(0x7f00000001c0)) (async)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000240)={{0x2, 0x4e23, @empty}, {0x306, @local}, 0x4, {0x2, 0x4e20, @multicast1}})
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, &(0x7f0000000240)) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x20000050}, 0x80)

42.050377506s ago: executing program 0 (id=758):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, 0x0, 0x2, {0x2, 0xf0, 0x2}, 0xfe}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
unshare(0x24020400)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)
r3 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r3, 0x0, 0x0)
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d0400000004000000040000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x20)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0xfffffff1, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)={[{0x2b, 'devices'}, {0x2d, 'cpu'}, {0x2b, 'net_prio'}, {0x2b, 'pids'}, {0x2b, 'blkio'}, {0x2d, 'net_cls'}, {0x2b, 'net_prio'}, {0x2b, 'io'}]}, 0x3c)
setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000580)=[{0x1, 0x1, {0x0, 0x0, 0x2}, {0x0, 0xff}, 0x2, 0xfd}, {0x1, 0x3, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x1}, 0x1, 0xff}, {0x3, 0x1, {0x2, 0x1, 0x4}, {0x1, 0xf0, 0x4}, 0x0, 0xff}, {0x0, 0x0, {0x2, 0xff, 0x4}, {}, 0x1, 0x2}], 0x80)
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000180)={0x1, 0x800})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={<r4=>0x0}, &(0x7f0000000280)=0xc)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000300)=r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000100), 0x4)
r6 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r6, &(0x7f0000000b80)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x7ffc, @mcast2, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000400)=[@rthdr_2292={{0x0, 0x29, 0x39, {0x2f, 0x0, 0x2, 0x9, 0x0, [@dev={0xfe, 0x80, '\x00', 0x1b}, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @local, @remote, @mcast1, @local, @private0]}}}], 0xfff4}}], 0x1, 0x4000084)
unshare(0x20000400)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1024}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x14000004}, 0x2000000)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSNPMODE(r7, 0x4008744b, &(0x7f0000000000)={0x80fb, 0x1})
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000019c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x74, r2, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0x2, 0xfff3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050)

26.80412944s ago: executing program 32 (id=758):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r1, &(0x7f0000000080)={0x1d, 0x0, 0x2, {0x2, 0xf0, 0x2}, 0xfe}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
unshare(0x24020400)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)
r3 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r3, 0x0, 0x0)
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d0400000004000000040000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x20)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0xfffffff1, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)={[{0x2b, 'devices'}, {0x2d, 'cpu'}, {0x2b, 'net_prio'}, {0x2b, 'pids'}, {0x2b, 'blkio'}, {0x2d, 'net_cls'}, {0x2b, 'net_prio'}, {0x2b, 'io'}]}, 0x3c)
setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000580)=[{0x1, 0x1, {0x0, 0x0, 0x2}, {0x0, 0xff}, 0x2, 0xfd}, {0x1, 0x3, {0x2, 0x0, 0x2}, {0x0, 0xf0, 0x1}, 0x1, 0xff}, {0x3, 0x1, {0x2, 0x1, 0x4}, {0x1, 0xf0, 0x4}, 0x0, 0xff}, {0x0, 0x0, {0x2, 0xff, 0x4}, {}, 0x1, 0x2}], 0x80)
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000180)={0x1, 0x800})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={<r4=>0x0}, &(0x7f0000000280)=0xc)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000300)=r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000100), 0x4)
r6 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r6, &(0x7f0000000b80)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x7ffc, @mcast2, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000400)=[@rthdr_2292={{0x0, 0x29, 0x39, {0x2f, 0x0, 0x2, 0x9, 0x0, [@dev={0xfe, 0x80, '\x00', 0x1b}, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @local, @remote, @mcast1, @local, @private0]}}}], 0xfff4}}], 0x1, 0x4000084)
unshare(0x20000400)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1024}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x14000004}, 0x2000000)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSNPMODE(r7, 0x4008744b, &(0x7f0000000000)={0x80fb, 0x1})
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000019c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x74, r2, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0x2, 0xfff3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050)

2.120978316s ago: executing program 1 (id=1362):
r0 = socket$netlink(0x10, 0x3, 0xb)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket(0x10, 0x803, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x4, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c00000000010102"], 0x2c}}, 0x4000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
unshare(0x2c020400)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r3, 0x20)
poll(&(0x7f0000000040)=[{r3, 0x8000}], 0x1, 0x11ff)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
writev(r6, &(0x7f0000000400)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e9539f35", 0xc7}], 0x1)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
readv(r6, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.787576101s ago: executing program 3 (id=1367):
r0 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x33c86039957813b9}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x8001}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x8}]}}]}, 0x40}}, 0x48180) (async)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xf}]}, 0x10) (async)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000010201082e97b8dd000000000000000001000005"], 0x14}, 0x1, 0x0, 0x0, 0x8011}, 0x400) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000002000030128bd7000fbdbdf250aa10407050000050800010014000200fe8000000000000000d952c2000000000000bb14000100fe8000000000000000000000007bf798b699442d60d5002205c183e37d82f3c357fdf9c56e7d56ef248c481e03a14c42d97feb04c7c45ce705f7a992b258e4a277f97c5f3249c1a5f343ed92d2dd2381015c84b709eaaf3772"], 0x44}}, 0x20000000)

1.786149262s ago: executing program 3 (id=1368):
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r4, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688a84d7208", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r5, &(0x7f0000000000)={0x24, @long}, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
preadv(r6, &(0x7f0000000100), 0x0, 0x726, 0x7)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = syz_init_net_socket$llc(0x1a, 0x802, 0x1800000000000000)
bind$llc(r8, &(0x7f0000000000)={0x1a, 0x200, 0x0, 0x0, 0x0, 0x42}, 0x10)
close(r8)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000e40)={{}, {0x8}, 0x10, 0x0, 0x0, &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)="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", 0x16b, 0x0, &(0x7f0000001880)={0x2, 0x1075, {0x1, 0xc, 0x1000, "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", 0x68, "3c952e2f7c4ce31ceed5ed7550b8bc008e9b575b2ea9af11daa603502c4a05adef704c1621367344d1a01ecbb6449c9316e76c69bb26a20f72c66013324d45c477c0bafe6d4526b1c334db8103c9684c426b64da2ddcda8ebab9b6d2b1cc88d24283ff4b9e74456d"}, 0x65, "5a2345937cc7accb00e1507c5d9721ca2c9a0df9c88ee2936e0eaf68e66b4b62b876155631766713f8d8aa566a16555617e335290bac7b6c62f09d75197b355634b4943a6a75207cc5f29b43f4864796b1ff7b06d69887107abb79205a9f7675ee9bd7b6dc"}, 0x10e6})
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000003042abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="b4a5af8840000000140012800b00010062617461647600000400028008001f0003000000"], 0x3c}}, 0x0)
socket$alg(0x26, 0x5, 0x0)
r10 = accept4(r7, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r10, 0x0, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={0x0}, 0x1, 0x0, 0x0, 0x20048814}, 0x0)
ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000040)=0x5)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
close(r0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000010006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36504001ac00800400004000500020000000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

1.200983777s ago: executing program 1 (id=1369):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r1}, 0x38)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRESDEC=r1, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r5, 0x5)
ioctl$sock_SIOCINQ(r5, 0x541b, 0x0)
sendmsg$inet6(r4, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7f}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x18}, 0x24004800)
bind$802154_raw(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x39, 0x0, 0xffffffffffffffff, 0x8}, 0x48)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r6, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB], 0x30}], 0x1}, 0x0)
r7 = socket(0x2, 0x80805, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x36}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x48b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x8, 0x20000001, 0x6, 0x101}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4048000}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x10, 0x0, {0xa, 0x37}, [@IFAL_ADDRESS={0x14, 0x5, @loopback}]}, 0x30}}, 0x0)
r11 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x1)
ioctl$sock_ax25_SIOCDELRT(r7, 0x890c, &(0x7f00000004c0)={@bcast, @default, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000740)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="ff00000000000000000000000000000053071d7944fe8960db32584bcdc1e74e2a951d26208a0dddca9a63f402916b1183d1852650a3b73dfae77771cfc4c804f9463cbcff9ae803265929c145bd4aafe190ccaed2f9e36867c1438bcd8a7c11f88eced51053bbaba5b1dce96788362cbbac73e0dc560694b00f52db64961efa8981d4c67b2cc590a15847944d73e1d64e5fb8593f239c5674c96de581548dbabc732c7f3355333da2a80f9fe3621d"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)

1.200309394s ago: executing program 2 (id=1370):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)="d6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)='%e', 0x2}], 0x1}}], 0x2, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49, <r2=>0x0}, 0x30)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r2, @ANYRES32, @ANYRES16=r0], 0x50) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r2, @ANYRES32, @ANYRES16=r0], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r3}, 0x38)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup(r4, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async)
openat$cgroup(r4, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
mkdirat$cgroup(r4, &(0x7f0000000a00)='syz0\x00', 0x1ff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x32, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x32, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000005001b"], 0x44}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000005001b"], 0x44}}, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=<r8=>0x0, &(0x7f0000000340)=0x4)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@private0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, {{@in6=@loopback}}}, &(0x7f0000000380)=0xe8)
getsockopt$inet6_mreq(r1, 0x29, 0x372d24b76b22dae7, &(0x7f0000000580)={@empty}, &(0x7f0000000600)=0xffffffeb)
sendmsg$nl_route(r7, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="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", @ANYBLOB="a5e2335810da804d7975c5638a1ecb0e49aae4637fd83cfcabddae501e6c346f91583050eacdf040c30a9be4f5fe7317315b3f4ccd2138412372c42c42c9bf4569b446448393042bd64d5defdb1d962a435f7f3960bad85836077fecab4e369592a60fd26f83ec6782f9d9f1830e11c789", @ANYBLOB="1500030000000000000100009b209279017df26102000000080005000602fa"], 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x24004090)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) (async)
bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6)
write(r6, &(0x7f0000000140)="41000200010001", 0x7)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='net_prio.prioidx\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

1.081684589s ago: executing program 2 (id=1371):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYRES32], 0x38}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="680000000206050000000000000000000a000000120003006269746d61703a69702c6d616300000005000400000000000900035568d47945310d0c8007ea0db1a4bd020073797a30000000001c0007800c00028008000100640101020c000180080001400000000005000500020000000500010006000000f5d2d0ddfb6608b26af2bdb73dc0d768726dfed7186d92bff032f4a53507f72cb39982b597e65a1231398d16614ead3d5cabd55903514bba28298c74eaed75831ad0d68010ad8a332973deab9e8ddb92e6"], 0x68}}, 0x0)
r3 = socket(0x2a, 0x2, 0xffffffff)
getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000100)=0x1000, &(0x7f0000000180)=0x4)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r4, {0xffff}, {}, {0x9, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_DIVISOR={0x8, 0x4, 0x10}]}}]}, 0x40}}, 0x40808c4)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.029899085s ago: executing program 2 (id=1372):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_ifreq(r1, 0x8970, &(0x7f0000000040)={'veth1_macvtap\x00', @ifru_settings={0x80000000, 0x100009, @sync=0x0}})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@gettaction={0x30, 0x32, 0xe72c5f922f23cad9, 0x70bd27, 0x25dfdbf7, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffffa8b4}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc844}, 0x4000000)
sendto(r0, &(0x7f00000001c0)="0b673dbdb06b45a269936dd36df132b3eaa4ff8841db6314ba680271754e95dc255e259f8ada862d7df7b2af3df792f7d6610ab54e10171b58f3130650db14ae6856dda00698523cc421f91adfe2fdd7ff660475245e58c684bd40d23233ddfa6b353b435c9fd9242b5f05a69e114fc5ef355f547b402bb5ab5a62372fb0b19dfd2f4f8b094a76a300d8251dc7e1cd4f65fabb226f2a", 0x96, 0x20000000, &(0x7f0000000280)=@rc={0x1f, @any, 0x88}, 0x80)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x24}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x90)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001400030500008000ffa563a52d"], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_PHYS_SWITCH_ID={0x22, 0x24, "5c34ab4e95eac9b418765e6a97552aa4d0be7628a4dee9e013b389148146"}]}, 0x44}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x9c}}, 0x0)

901.14421ms ago: executing program 3 (id=1373):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100), 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback, 0x2}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x5, @mcast1}}, 0x0, 0x0, 0x3e, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb499419be4f9142da0bc21470e441225642855b5f2b4b67efbff2fdf98328de9434031348589b763d46d14810acc5f7000000e3ffffff00"}, 0xd8) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRESDEC=r0, @ANYRESDEC=r1, @ANYRES16=r1], 0x50) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kmem_cache_free\x00', r5, 0x0, 0x4}, 0x18) (async)
socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) (async)
setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x1, 0x4000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7fffc, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r8, 0x0) (async)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r9, 0x0) (async)
r10 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r10, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)

900.782014ms ago: executing program 2 (id=1374):
r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0)
connect(r0, &(0x7f0000000080)=@generic={0x2c, "d9d11b7a6bf4b1b740a28ee8a2bd278c5cd22cab0dee311f129b8b727f0d9c5befa3b9848606db5d0ceb5f157d78136f4001a06c09caf9e5bfa368ad342dcc098927df6a3792e7a14322debd61bdb86dccc2fcd8d479091051333ab1cfc04f1192428360ef06621fba0aacf8136d5b3417392f3017688e1b8dfda0250be7"}, 0x80)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0)
r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000140), 0x2, 0x0)
ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f0000000180))
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000580)={0x14, @rand_addr=0x64010102, 0x4e21, 0x2, 'ovf\x00', 0x33, 0x8001, 0x62}, 0x2c)
bind$bt_hci(r1, &(0x7f00000005c0)={0x1f, 0x1, 0x1}, 0x6)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628)
ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000600)=<r5=>0x0)
ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000006c0)={<r6=>0x0, 0xa, 0x0, 0x1})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000ac0)={{}, r5, 0x0, @inherit={0x70, &(0x7f0000000640)={0x1, 0x5, 0x4, 0x13, {0x24, 0x78, 0x3, 0x5, 0xe0}, [0x3, 0xfffffffffffffffa, 0x100000000, 0x18d4, 0x6]}}, @devid=r6})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001ac0)={<r7=>0xffffffffffffffff})
connect$unix(r7, &(0x7f0000001b00)=@file={0x0, './file0\x00'}, 0x6e)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000001b80), r8)
r9 = openat$cgroup_ro(r2, &(0x7f0000001bc0)='freezer.parent_freezing\x00', 0x0, 0x0)
ioctl$PPPIOCCONNECT(r9, 0x4004743a, &(0x7f0000001c00))
ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f0000001c40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r9, &(0x7f0000001f40)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x20, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x62}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x20004000)
listen(r4, 0x8)
setsockopt$inet6_icmp_ICMP_FILTER(r9, 0x1, 0x1, &(0x7f0000001f80), 0x4)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000002000)={'geneve0\x00', &(0x7f0000001fc0)=@ethtool_modinfo={0x42, 0x55b9, 0x5}})
r10 = accept$nfc_llcp(r9, &(0x7f0000002040), &(0x7f00000020c0)=0x60)
write(r10, &(0x7f0000002100)="3af99fb1801724f5eed088c82b18f2797b07721950dd2d83cf6ac7ea0916958db9a7edaa254b536c318bd77bad636d4aa428680f2ebba84df826d85e57a1b62c31388c4f998367348606db6ca3830f5825b4039d12532fa0afe86eb431b7fc5d0ab3896d0c8fbbebd14b02d465e9b1a50c5675675aa3ff66a485ab47d964006195e4f1a2623742d44a60022c5c824165d4a974cd8d5f2b6bd30c52129bea70bbf3f7c1a0831a96499572ea2055c98e27c65b1d15154fc9bb4367e38d0918ad78d329e594986d96d8d767dc4f", 0xcc)
getsockopt$MISDN_TIME_STAMP(r9, 0x0, 0x1, &(0x7f0000002200), &(0x7f0000002240)=0x4)
r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r11, &(0x7f0000002280)={0x2, 0x4e21, @private=0xa010100}, 0x10)
sendmmsg$inet6(r9, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f00000022c0)="8f0ed173895e270e93e5e08234772218a58d5bc87c9b658ca86de938062b67c13b18f501ccf50e9a28abc2d028ecfb69fa37a2a0643311c3f550b391992c6bf3b24155d4688bc53bc3992b05c5e79b279c52af0825f9428d0afef40f6bb41486e75aa59729b6511e8637ea0c70120b12d42e845a2063308a3a8bf127c4c05cd8c7ecd46e2c2e367c434790914e28c599ecbe3f7329683e3efadb493714f85d55620f78485a9fe4e1e4704b7dbc5e47475c5a8bd9ff8847d3d3778260", 0xbc}, {&(0x7f0000002380)="ebe942eb30b53aa6918c743c0f04b4c6762ee34ad2266b12fc32316d076fdbe55b28fd0609fce77c270798a74267c627ecd2dd57046bd1cab426", 0x3a}, {&(0x7f00000023c0)="7716ab6bfa386ff9a370818718cd4c5a8e3edffcc62c594e73e7f8", 0x1b}], 0x3, &(0x7f0000002440)=[@hopopts={{0x68, 0x29, 0x36, {0x2f, 0x9, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @pad1, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x1, 0x6, 0xac, 0x9, [0x58, 0x0, 0x6]}}, @ra={0x5, 0x2, 0xfff}]}}}, @hopopts={{0x158, 0x29, 0x36, {0x2b, 0x27, '\x00', [@calipso={0x7, 0x38, {0x1, 0xc, 0x3, 0x1ff, [0xc, 0xa73, 0xa61, 0xc, 0xffffffffffffffff, 0x5]}}, @generic={0x81, 0xe7, "caa0ea74dcc837fe126f13d851adf32b9345951face6c26e9e33342cebe7b6495afd23c8b5bdafb6fe8a40a30df31baddb82c1f6ee2c8d4c7a2e05009ba8bee9f67e74d95e3a44bc43763ef978640ece1bdec362d2a7fbac189d52925966475c6235692e224501e72d20bfae38ae412f08c4944a3f910093a605d17ad75ed721b6bd9f450c04a725c7f9f26919efc76d1466fe58fc26f71b0c0f3d1671b06da39115fe86ddcfa3480bcb7518034f95913d1f11976849693e346592507abd982b1d4a5f8090b51975a6e3d8f165ef33e572e695a159949b9cb4ad79f1810c77624c1bb404e5961a"}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @ra={0x5, 0x2, 0xfff7}, @jumbo={0xc2, 0x4, 0x400}]}}}], 0x1c0}}], 0x1, 0x20004008)

900.355006ms ago: executing program 3 (id=1375):
r0 = socket(0x2c, 0x3, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x5, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@private=0xa010100, 0x4e23, 0x1, 0x1, 0x12d59, 0x12d5c}}, 0x44)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r3=>0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0)
write$nci(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="40050201070903"], 0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40800000000000061106a00000000000600004e000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000370400000000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="0b1205000000000097d06a7c1c0012800b00010062766964676500000c0002800500180001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x0)

899.660799ms ago: executing program 2 (id=1376):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x4, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3, 0x0, 0x2}, 0x18)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$AUDIT_ADD_RULE(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000540)={0x420, 0x3f3, 0x1, 0x70bd2d, 0x25dfdbff, {0x5, 0x2, 0xe, [0x7f, 0x2, 0x4, 0x3, 0x8001, 0x5c09, 0x3056, 0x8, 0xc, 0x5, 0x7, 0x2, 0x3, 0x4, 0x4, 0x100, 0xbe9, 0x0, 0x1, 0x14de, 0x5, 0x4, 0xfffffff8, 0xd6, 0xfffffffb, 0x7, 0x5, 0x8, 0x8001, 0xeab, 0x8, 0x4, 0x1, 0x80000000, 0x8, 0x839, 0x3, 0xc7d7, 0x3, 0xfffffffe, 0x2, 0x5, 0x9, 0x9, 0x5dfb, 0xfffffff8, 0x0, 0x5, 0x1, 0x0, 0xe, 0x1ff, 0x4, 0x9f, 0x0, 0x9, 0x3, 0xff, 0x9, 0xfffffffb, 0x1, 0x200, 0x894, 0x3ff], [0xc0000000, 0x7, 0x9c, 0x7f, 0x16, 0x48, 0x7713729e, 0x6, 0x2, 0x8, 0xffffffff, 0x9, 0x3, 0x10000, 0x7fffffff, 0x3, 0x2, 0x80000000, 0x2, 0x92ed, 0x8, 0x6, 0xbe2, 0x1, 0x7, 0x7fffffff, 0x10000, 0x709, 0x7, 0x9, 0x4, 0x1, 0x9, 0x4, 0x2, 0x1, 0x2f4, 0x7, 0xfffffff7, 0x40, 0x4, 0x7, 0x1, 0x9, 0x7ff, 0x9, 0x3, 0x4, 0x7, 0x3, 0x1a, 0xff, 0x8, 0xfffffffb, 0x200, 0xfffffff9, 0x6, 0x7, 0x3, 0x0, 0x1, 0x8, 0x6, 0xd], [0x9, 0x9, 0x31d, 0x10, 0x26c, 0x6, 0x8, 0x3, 0x4, 0x400, 0x80000000, 0x8, 0xf, 0x1, 0x7fff, 0x6, 0x1000, 0x9, 0x1, 0x800, 0x5, 0x2, 0x9, 0x4a, 0x636e40a9, 0x2, 0x3, 0x3, 0x4, 0x4, 0x97, 0x40, 0xfffffffb, 0xfffffff9, 0x7, 0x4, 0x9, 0x1fa, 0x0, 0x2, 0x4, 0x9, 0x6, 0xac3e, 0x81, 0x0, 0x3, 0x5, 0xc, 0x5, 0xb, 0x1ff, 0x5, 0x6, 0x78, 0xfffffff6, 0x1d0, 0x8, 0x9, 0x5, 0x7, 0x2, 0x81, 0xfffffffa], [0xfffffffd, 0x3, 0x6d1, 0x1, 0xffffffab, 0x8, 0x1, 0x101, 0x4, 0xff, 0x5, 0x101, 0xc, 0x80000000, 0x7, 0xfff, 0xfffffffa, 0x101, 0x7, 0x4, 0x6, 0x6, 0x2, 0x4, 0x3, 0x1, 0xffffff4a, 0xfffffff7, 0x1, 0x7b819665, 0x8, 0x1000, 0x6, 0x8, 0x7, 0x0, 0x5, 0x2, 0x1, 0x1, 0x942, 0xfffffffb, 0x8, 0xfffffff7, 0x3, 0x2, 0x101, 0x9, 0x7, 0x1, 0xb, 0x10, 0x9, 0xfffffffd, 0x8, 0x329, 0xf7e, 0x4, 0x48, 0x0, 0x56, 0x7fffffff, 0x92c, 0x400]}}, 0x420}, 0x1, 0x0, 0x0, 0x240000c1}, 0x8000)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c00000000010102"], 0x2c}}, 0x4000)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
unshare(0x2c020400)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r7, 0x20)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000100)={<r8=>0x0}, &(0x7f00000001c0)=0x8)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000280)={r8, @in={{0x2, 0x4e21, @local}}}, 0x84)
poll(&(0x7f0000000040)=[{r7, 0x8000}], 0x1, 0x11ff)
r9 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10)
setsockopt$packet_int(r9, 0x107, 0x13, &(0x7f0000000080)=0x8, 0x4)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0)

892.584242ms ago: executing program 1 (id=1377):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$inet6_int(r1, 0x29, 0x16, 0x0, &(0x7f0000000080))
sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x8004}, 0x20000050)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$inet(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20000801)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'wlan1\x00'})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x1c, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r3, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r12 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r12, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e)
r13 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
write$tcp_mem(r13, &(0x7f00000003c0)={0x2, 0x20, 0xfffffffffffffffe, 0x20, 0x8}, 0x48)
sendmmsg(r12, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r15=>0x0})
sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r15, 0x21eae}}, 0x20}}, 0x0)

838.488528ms ago: executing program 3 (id=1378):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$caif_seqpacket(0x25, 0x5, 0x0)
setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000080)=0x5, 0x4)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r4 = accept(r2, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x4, 0x4, 0xa4, 0x0, 0xffffffffffffffff, 0x7fffffff}, 0x50)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r4}, 0x47)
recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x12020, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000680)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r2, @ANYBLOB="0217c47d897e25dcf563ca890061d6b6b1e05a5cd3fefbbf15acd03a6182d5cf2cca0775bac65d2b809ee05be2f0fc86863821eb32f4932419c31115128f98a5ee3d3a1caa96b04b8c807dc0c2449e94ae092bfdae3da242f20463707e1bffa6ca68a16753bfbccd74e5f1f101b30bfbae10ea0a4466446b97bfdde6fc0accc15582d160c76266e34de5615ed6c880f974651d26f66dd4e8796d558e1100c668924cf6ca4f8cca2229fac27b0811d94133fccfc9790835d30ee3a8f974b239d40b7ed16b77b72f25ff1688a4452249f5585232ece30ffc1bcb94d6bb", @ANYRESDEC=r1, @ANYRESOCT=r5, @ANYRESDEC=r7], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sys_exit\x00', r8}, 0x18)
getpeername$netlink(r4, 0x0, &(0x7f0000000080))
sendmsg$IPSET_CMD_DESTROY(r4, 0x0, 0x40810)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r11=>0x0})
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x38, r9, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x2c, r9, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x65}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008810}, 0x20004000)
syz_extract_tcp_res(&(0x7f0000000000)={0x41424344, <r13=>0x41424344}, 0x4, 0x3)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x2, 0x2e, 0x3c, 0x65, 0x0, 0x2, 0x6, 0x0, @private=0xa010102, @remote, {[@timestamp_addr={0x44, 0xc, 0x9d, 0x1, 0x9, [{@broadcast, 0x898}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4, 0x91, 0x1, 0x1}]}}, {{0x4e24, 0x4e23, 0x41424344, r13, 0x1, 0x0, 0x5, 0x8, 0xfffd, 0x0, 0x57}}}}}}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000e00)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @local, {[@rr={0x7, 0x17, 0x12, [@private, @broadcast, @dev, @private=0xa010102, @loopback]}]}}, {{0x0, 0x4e23, 0x41424344, r13, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)

837.9016ms ago: executing program 1 (id=1379):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYRES32], 0x38}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="680000000206050000000000000000000a000000120003006269746d61703a69702c6d616300000005000400000000000900035568d47945310d0c8007ea0db1a4bd020073797a30000000001c0007800c00028008000100640101020c000180080001400000000005000500020000000500010006000000f5d2d0ddfb6608b26af2bdb73dc0d768726dfed7186d92bff032f4a53507f72cb39982b597e65a1231398d16614ead3d5cabd55903514bba28298c74eaed75831ad0d68010ad8a332973deab9e8ddb92e6"], 0x68}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)=@newqdisc={0x24, 0x24, 0x10, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {}, {0xb, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4004081)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x9, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_DIVISOR={0x8, 0x4, 0x10}]}}]}, 0x40}}, 0x40808c4)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

771.652573ms ago: executing program 1 (id=1380):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f00000006c0)=0x400, 0x4)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="757cc6e41c6cb41c4b30b918998769a19a25b87e240c962cefd1260bba9ad25b9f5c775160531b9b343ba795ec54482b621c297adbf58ab9537ae3075d0cead43926e075ace59b517b8437978ed74e6f091a9929b5dfecf4334b65", 0x5b}, {&(0x7f0000000700)="2965022046e36931a0b90db23b481881688416922a4208e556953bd5c9bede306c8a0f90ad813f17308dfa20a4fd3fa849b7889642b836e81c8b3dad74e39cca9d03b5edec32a860b19d8d21cb8930dc3046b5db478a79a52e822a8fb0d834f866b9b065bc46a20412b8a9f6db3e4e93bf0aaec1ebc19873a640e204218df4987cce941ed296559c707d36d74be83fc1a420094ae0322f598d6e261f89803a81ae7669e50f8f24fc2c5794dea77993b00fad57608f5f179b28ee3424fb03fdbca20f1b1d7c3181e0c0b194f04b1e569e7015bebc88edcb1ba5b727fac80b", 0xde}], 0x2}}], 0x1, 0x4001c00)

770.821734ms ago: executing program 1 (id=1381):
r0 = epoll_create1(0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r2, 0x21eae}}, 0x20}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r5)
ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r7=>0xffffffffffffffff})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r9=>0x0})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r10, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x44, r8, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)
sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r11 = socket$unix(0x1, 0x2, 0x0)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r13, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r14=>0xffffffffffffffff, <r15=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r14, &(0x7f0000000040))
r16 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r15, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r16, 0x1, r0, &(0x7f0000000000)={0xa0000001})
r17 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_DEL_MIF(r17, 0x29, 0xcb, &(0x7f0000000080)={0x1, 0x0, 0x7, 0x0, 0x100}, 0xc)

413.78µs ago: executing program 2 (id=1382):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet6(0xa, 0x4, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r2, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={0x0, r2, 0x4000, r2}, 0x18)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="54f2ffff0f0003040000000000070000671ee0ac0bf797c86d9088d05af81119792e2b1d2b7674abe799d627c2b583ca73710b5298c11959f63ca73c92662f91663fb768de29be8debf73e91199748ebb151530e4fd5ae7f9b6bc8fcfa8a2fb0075b6a062d7b8a78953af6db34e35fe0738d83", @ANYRES8=r2, @ANYRES16=0x0, @ANYRES32=<r3=>r1], 0x5c}, 0x1, 0xba01, 0x0, 0x20040811}, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast=0xac14140a, @initdev={0xac, 0x1e, 0x0, 0x0}}, '\b\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) (async)
close(0x4) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async, rerun: 32)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0x1000000000000, 0x0, 0x10, r4, 0x0) (async)
r5 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r6=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6}, 0x90) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r3, @ANYRES8=0x0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', r6, @fallback=0x22, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) (async, rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}) (async, rerun: 32)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (rerun: 32)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r12, 0x4)
sendmsg$unix(r9, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000)
r13 = accept4$rose(r0, 0x0, &(0x7f0000000040), 0x0)
ioctl$sock_rose_SIOCDELRT(r13, 0x890c, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1ca, @bcast, @netrom={'nr', 0x0}, 0x8, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast]})

0s ago: executing program 3 (id=1383):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_DEL_RULE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"/1078], 0x420}}, 0x40040)
recvmmsg(r1, &(0x7f00000002c0), 0x220, 0x100, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_int(r4, 0x1, 0x200000010, &(0x7f0000000000)=0xb, 0x4) (async, rerun: 32)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32)
sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) (async)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0x100000000000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) (async)
sendto$unix(r3, &(0x7f0000000240)="0014", 0x2, 0x4040081, 0x0, 0x0) (async, rerun: 64)
recvfrom$unix(r4, 0x0, 0x0, 0x10102, 0x0, 0x0) (async, rerun: 64)
socket$kcm(0x10, 0x2, 0x0)
accept$ax25(0xffffffffffffffff, &(0x7f0000000640)={{0x3, @default}, [@default, @bcast, @null, @bcast, @rose, @null, @rose, @default]}, &(0x7f00000000c0)=0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000100000000000000002000400180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095000000000000000ff227f9df1349a0c5b4059ce534ad5147fa58270fddcc9cf890e4903cc1de2e27d470be4156b4ccf88453c96047e65577e08c6767bd8e320a12799586fe90d645"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async, rerun: 64)
r7 = socket$netlink(0x10, 0x3, 0x14) (rerun: 64)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010002070000000000000900020073797a25000000000800410072786500140033"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), r8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2000}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="0200000000000000741dbf6cdebf89053d09f563dce654dcc3917fabb702d670eb0ba0d5f205488b39b400ee7ba4da7db7ac58e8791f72d763a3d0bdd3bf1f5ef0f8d47ac06209839629c0f7b6539ea5350002d71e19668c6e4ed5daa4203b9b67d918d9cc21d83f77bf95f31c930e3d664ebb05d4af2a7b6ebeea46901116386a27879b35d57d1d072cbd51b7bbff69dce78c6368015826c694cf7c317199728c558332"], 0x1c}}, 0x20000000) (async)
r11 = socket(0x10, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRES64=r5, @ANYRES16, @ANYBLOB="4100000000000000010006b006e8ffffffffffff0700076fcdb33f091400"/43], 0x44}, 0x1, 0x1000000}, 0x0) (async)
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r12, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000047400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e6430eeffffffffffffff000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) (async)
sendmsg$AUDIT_USER_TTY(r7, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x10, 0x464, 0x2, 0x70bd2a, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x8880}, 0x8040)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:24157' (ED25519) to the list of known hosts.
syzkaller login: [   40.733283][ T5814] cgroup: Unknown subsys name 'net'
[   40.852977][ T5814] cgroup: Unknown subsys name 'cpuset'
[   40.856171][ T5814] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.297743][ T5814] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.489641][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.492752][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.495418][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.498909][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.502519][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.506735][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.509211][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.511827][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.515123][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.521382][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.573800][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.576766][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.579846][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.584054][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.587251][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.663476][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   45.687854][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   45.730666][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   45.750626][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.753974][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.756708][ T5844] bridge_slave_0: entered allmulticast mode
[   45.759343][ T5844] bridge_slave_0: entered promiscuous mode
[   45.781758][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.784490][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.787175][ T5844] bridge_slave_1: entered allmulticast mode
[   45.790003][ T5844] bridge_slave_1: entered promiscuous mode
[   45.796964][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.799524][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.802581][ T5849] bridge_slave_0: entered allmulticast mode
[   45.805239][ T5849] bridge_slave_0: entered promiscuous mode
[   45.814831][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.817879][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.820859][ T5849] bridge_slave_1: entered allmulticast mode
[   45.824583][ T5849] bridge_slave_1: entered promiscuous mode
[   45.854210][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.862491][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.865220][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.867992][ T5854] bridge_slave_0: entered allmulticast mode
[   45.870743][ T5854] bridge_slave_0: entered promiscuous mode
[   45.874967][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.879293][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.887911][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.897458][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.900040][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.903976][ T5854] bridge_slave_1: entered allmulticast mode
[   45.906706][ T5854] bridge_slave_1: entered promiscuous mode
[   45.920020][ T5849] team0: Port device team_slave_0 added
[   45.927529][ T5844] team0: Port device team_slave_0 added
[   45.935722][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.939504][ T5849] team0: Port device team_slave_1 added
[   45.946613][ T5844] team0: Port device team_slave_1 added
[   45.953477][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.957166][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.959796][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.969376][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.986791][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.989527][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.999477][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.010559][ T5854] team0: Port device team_slave_0 added
[   46.014601][ T5854] team0: Port device team_slave_1 added
[   46.022882][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.025554][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.035774][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.048332][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.051037][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.061309][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.068902][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.072120][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.080462][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.088760][ T5849] hsr_slave_0: entered promiscuous mode
[   46.091007][ T5849] hsr_slave_1: entered promiscuous mode
[   46.094090][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.096745][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.106915][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.142220][ T5844] hsr_slave_0: entered promiscuous mode
[   46.144743][ T5844] hsr_slave_1: entered promiscuous mode
[   46.147003][ T5844] debugfs: 'hsr0' already exists in 'hsr'
[   46.149182][ T5844] Cannot create hsr debugfs directory
[   46.168315][ T5854] hsr_slave_0: entered promiscuous mode
[   46.170875][ T5854] hsr_slave_1: entered promiscuous mode
[   46.173593][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   46.175478][ T5854] Cannot create hsr debugfs directory
[   46.291557][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.300656][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.305938][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.312187][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.319834][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.332860][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.338732][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.345715][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.362165][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.365125][ T5849] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.368598][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.371385][ T5849] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.377787][ T5854] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.382306][ T5854] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.387635][ T5854] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.395058][ T5854] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.418143][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.420791][ T5844] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.423602][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.426216][ T5844] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.432455][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.435005][ T5854] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.437654][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.440190][ T5854] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.475388][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.492926][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.496505][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.499933][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.504744][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.508575][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.514124][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.530746][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   46.537093][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.545608][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.548044][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.553318][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.559729][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.562295][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.574763][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   46.582267][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   46.589929][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.593036][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.605762][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.608729][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.615623][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.618523][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.633505][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.636357][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.678885][ T5844] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   46.683222][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   46.725509][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.743754][ T5849] veth0_vlan: entered promiscuous mode
[   46.754634][ T5849] veth1_vlan: entered promiscuous mode
[   46.770461][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.778100][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.790125][ T5849] veth0_macvtap: entered promiscuous mode
[   46.796562][ T5849] veth1_macvtap: entered promiscuous mode
[   46.813327][ T5844] veth0_vlan: entered promiscuous mode
[   46.819300][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.827855][ T5844] veth1_vlan: entered promiscuous mode
[   46.830487][ T5854] veth0_vlan: entered promiscuous mode
[   46.834188][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.844886][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.849929][ T5875] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.853522][ T5875] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.858071][ T5854] veth1_vlan: entered promiscuous mode
[   46.862514][ T5875] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.894560][ T5844] veth0_macvtap: entered promiscuous mode
[   46.901604][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.904427][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.910514][ T5844] veth1_macvtap: entered promiscuous mode
[   46.915180][ T5854] veth0_macvtap: entered promiscuous mode
[   46.920097][ T5854] veth1_macvtap: entered promiscuous mode
[   46.929447][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.934193][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.936785][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.940782][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.949481][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.953851][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.959365][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.964341][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.967487][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.978100][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.982493][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   46.990124][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.993733][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.009377][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.014101][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.025327][ T5910] netlink: 'syz.0.1': attribute type 178 has an invalid length.
[   47.037072][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.039687][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.059124][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.062431][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.064234][  T833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.068807][  T833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.069380][ T5914] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   47.082712][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.085419][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.128565][ T5920] netlink: 'syz.0.6': attribute type 1 has an invalid length.
[   47.262923][ T5943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'.
[   47.277980][ T5946] tipc: Started in network mode
[   47.280479][ T5946] tipc: Node identity 120c0fc78893, cluster identity 4711
[   47.283722][ T5946] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   47.286635][ T5946] syzkaller0: entered promiscuous mode
[   47.288798][ T5946] syzkaller0: entered allmulticast mode
[   47.305311][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.307834][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.338749][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   47.350279][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   47.385631][ T5946] tipc: Resetting bearer <eth:syzkaller0>
[   47.388028][ T5945] tipc: Resetting bearer <eth:syzkaller0>
[   47.390489][ T5945] tipc: Disabling bearer <eth:syzkaller0>
[   47.397059][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   47.400433][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   47.405065][ T5943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10'.
[   47.408097][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   47.415307][ T5943] hsr_slave_0: left promiscuous mode
[   47.417879][ T5943] hsr_slave_1: left promiscuous mode
[   47.423937][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   47.449625][ T5965] netlink: 'syz.1.18': attribute type 4 has an invalid length.
[   47.488409][ T5973] Unsupported ieee802154 address type: 0
[   47.495959][ T5973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21'.
[   47.563576][   T54] Bluetooth: hci0: command tx timeout
[   47.570318][ T5850] Bluetooth: hci1: command tx timeout
[   47.593561][   T47] cfg80211: failed to load regulatory.db
[   47.641540][ T5850] Bluetooth: hci2: command tx timeout
[   47.693315][ T5998] netlink: 'syz.1.29': attribute type 83 has an invalid length.
[   47.723983][ T6000] netlink: 96 bytes leftover after parsing attributes in process `syz.1.30'.
[   47.735338][ T6000] netlink: 28 bytes leftover after parsing attributes in process `syz.1.30'.
[   47.759027][ T6006] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   47.790189][ T6002] Zero length message leads to an empty skb
[   47.794341][ T6002] netlink: 20 bytes leftover after parsing attributes in process `syz.0.31'.
[   47.797519][ T6002] ip6_vti0: entered promiscuous mode
[   47.799499][ T6002] ip6_vti0: entered allmulticast mode
[   47.879744][ T6013] tipc: Started in network mode
[   47.884083][ T6013] tipc: Node identity ac14140f, cluster identity 4711
[   47.886417][ T6013] tipc: New replicast peer: 255.255.255.255
[   47.888757][ T6013] tipc: Enabled bearer <udp:s>, priority 10
[   47.939337][ T6023] sctp: [Deprecated]: syz.1.36 (pid 6023) Use of struct sctp_assoc_value in delayed_ack socket option.
[   47.939337][ T6023] Use struct sctp_sack_info instead
[   48.000212][ T6031] pim6reg: entered allmulticast mode
[   48.045789][ T6029] pim6reg: left allmulticast mode
[   48.124341][ T6050] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001
[   48.136875][ T6051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.42'.
[   48.171355][ T6056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.44'.
[   48.175764][ T6054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.44'.
[   48.245139][ T6065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.45'.
[   48.336749][ T6079] syz.1.48 uses obsolete (PF_INET,SOCK_PACKET)
[   48.978604][ T6084] warning: `syz.0.49' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   49.001356][   T47] tipc: Node number set to 2886997007
[   49.058283][ T6087] bridge_slave_0: left allmulticast mode
[   49.060707][ T6087] bridge_slave_0: left promiscuous mode
[   49.063418][ T6087] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.068231][ T6087] bridge_slave_1: left allmulticast mode
[   49.070604][ T6087] bridge_slave_1: left promiscuous mode
[   49.073960][ T6087] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.080039][ T6087] bond0: (slave bond_slave_0): Releasing backup interface
[   49.086794][ T6087] bond0: (slave bond_slave_1): Releasing backup interface
[   49.094209][ T6087] team0: Port device team_slave_0 removed
[   49.099064][ T6087] team0: Port device team_slave_1 removed
[   49.102378][ T6087] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   49.105379][ T6087] batman_adv: batadv0: Removing interface: batadv_slave_0
[   49.109915][ T6087] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   49.114498][ T6087] batman_adv: batadv0: Removing interface: batadv_slave_1
[   49.161819][ T6087] netlink: 'syz.0.50': attribute type 10 has an invalid length.
[   49.167315][ T6087] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   49.641338][   T54] Bluetooth: hci0: command tx timeout
[   49.643899][ T5850] Bluetooth: hci1: command tx timeout
[   49.723015][ T5850] Bluetooth: hci2: command tx timeout
[   49.758883][ T6101] IPVS: length: 49 != 24
[   49.937082][ T6109] 8021q: adding VLAN 0 to HW filter on device bond1
[   49.946276][ T6110] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[   49.949190][ T6110] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   49.957776][ T6110] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[   49.976569][ T6111] bond1: (slave macvlan3): Error -98 calling set_mac_address
[   50.051249][   T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   50.063297][   T12] bond1: (slave macvlan2): link status up again after 0 ms
[   50.068352][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[   50.146765][ T6139] IPVS: Scheduler module ip_vs_sip not found
[   50.156240][ T6139] netlink: 'syz.0.67': attribute type 1 has an invalid length.
[   50.181259][   T13] bond1: (slave macvlan2): failed to get link speed/duplex
[   50.184459][   T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   50.206787][ T6142] netlink: 'syz.1.65': attribute type 10 has an invalid length.
[   50.211553][ T6142] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   50.291527][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[   50.339372][ T6155] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   50.362448][ T6157] netlink: 'syz.0.73': attribute type 3 has an invalid length.
[   50.401552][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[   50.512390][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[   50.580040][ T6170] netlink: 'syz.0.77': attribute type 1 has an invalid length.
[   50.582811][ T6170] netlink: 'syz.0.77': attribute type 2 has an invalid length.
[   50.622357][   T12] bond1: (slave macvlan2): failed to get link speed/duplex
[   50.645097][   T10] IPVS: starting estimator thread 0...
[   50.719856][ T6180] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   50.724062][ T6180] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   50.731242][ T6177] IPVS: using max 134 ests per chain, 321600 per kthread
[   51.002642][ T6182] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.006001][ T6182] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.047881][ T6182] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   51.055061][ T6182] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   51.122518][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   51.126435][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   51.130476][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   51.134976][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   51.286593][ T6192] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[   51.378253][ T6203] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   51.610915][ T6217] geneve2: entered promiscuous mode
[   51.613394][ T6217] geneve2: entered allmulticast mode
[   51.665209][ T6235] IPVS: set_ctl: invalid protocol: 8 224.0.0.1:20004
[   51.722735][   T54] Bluetooth: hci0: command tx timeout
[   51.724510][ T5850] Bluetooth: hci1: command tx timeout
[   51.770802][ T5845] IPVS: starting estimator thread 0...
[   51.812273][ T5850] Bluetooth: hci2: command tx timeout
[   51.871318][ T6240] IPVS: using max 129 ests per chain, 309600 per kthread
[   52.283068][ T6257] netlink: 'syz.0.105': attribute type 13 has an invalid length.
[   52.285699][ T6257] netlink: 'syz.0.105': attribute type 17 has an invalid length.
[   52.320979][ T6264] netlink: 'syz.1.106': attribute type 1 has an invalid length.
[   52.325692][ T6264] netlink: 'syz.1.106': attribute type 1 has an invalid length.
[   52.331400][ T6264] __nla_validate_parse: 14 callbacks suppressed
[   52.331409][ T6264] netlink: 152 bytes leftover after parsing attributes in process `syz.1.106'.
[   52.367690][ T6266] bridge_slave_0: default FDB implementation only supports local addresses
[   52.389712][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.105'.
[   52.426523][ T6275] netlink: 'syz.0.109': attribute type 23 has an invalid length.
[   52.431284][ T6277] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   52.556209][ T6287] bridge0: entered promiscuous mode
[   52.558068][ T6287] vlan2: entered promiscuous mode
[   52.560226][ T6287] bridge0: port 1(vlan2) entered blocking state
[   52.563264][ T6287] bridge0: port 1(vlan2) entered disabled state
[   52.568797][ T6287] vlan2: entered allmulticast mode
[   52.570554][ T6287] bridge0: entered allmulticast mode
[   52.573793][ T6287] vlan2: left allmulticast mode
[   52.575410][ T6287] bridge0: left allmulticast mode
[   52.622998][ T6291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.116'.
[   52.652124][ T6300] syzkaller0: entered promiscuous mode
[   52.654017][ T6300] syzkaller0: entered allmulticast mode
[   52.656392][ T6299] tipc: Started in network mode
[   52.658276][ T6299] tipc: Node identity 9af5cce8db52, cluster identity 4711
[   52.660907][ T6299] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   52.665967][ T6295] netlink: 'syz.1.117': attribute type 10 has an invalid length.
[   52.673686][ T6295] 8021q: adding VLAN 0 to HW filter on device team0
[   52.677578][ T6295] bond0: (slave team0): Enslaving as an active interface with an up link
[   52.687488][ T6301] tipc: Resetting bearer <eth:syzkaller0>
[   52.697574][ T6301] tipc: Disabling bearer <eth:syzkaller0>
[   52.776477][ T6314] netlink: 'syz.2.122': attribute type 1 has an invalid length.
[   52.846562][ T6314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.122'.
[   52.854801][ T6314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.122'.
[   52.859120][ T6314] bond0: (slave bond_slave_1): Releasing backup interface
[   52.935154][ T6314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.122'.
[   52.976131][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.126'.
[   53.057727][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.128'.
[   53.078671][ T6336] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[   53.198489][ T6336] geneve2: left promiscuous mode
[   53.200248][ T6336] geneve2: left allmulticast mode
[   53.206977][ T5874] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   53.211344][ T5874] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   53.214511][ T5874] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   53.221323][ T5874] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   53.232207][ T6351] netlink: 28 bytes leftover after parsing attributes in process `syz.2.130'.
[   53.406104][ T6357] netlink: 68 bytes leftover after parsing attributes in process `syz.2.132'.
[   53.460719][ T6366] netlink: 'syz.2.134': attribute type 21 has an invalid length.
[   53.464072][ T6366] netlink: 'syz.2.134': attribute type 4 has an invalid length.
[   53.466913][ T6366] netlink: 'syz.2.134': attribute type 5 has an invalid length.
[   53.573838][ T6376] syz.2.139 uses old SIOCAX25GETINFO
[   53.609923][ T6378] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   53.614234][ T6378] syzkaller0: entered promiscuous mode
[   53.616068][ T6378] syzkaller0: entered allmulticast mode
[   53.620815][ T6378] tipc: Resetting bearer <eth:syzkaller0>
[   53.623834][ T6377] tipc: Resetting bearer <eth:syzkaller0>
[   53.627067][ T6377] tipc: Disabling bearer <eth:syzkaller0>
[   53.762987][ T6383] IPVS: Error connecting to the multicast addr
[   53.802946][ T5850] Bluetooth: hci0: command tx timeout
[   53.805324][ T5850] Bluetooth: hci1: command tx timeout
[   53.881239][   T54] Bluetooth: hci2: command tx timeout
[   54.029560][ T6409] !: renamed from dummy0
[   54.978455][ T6428] bridge_slave_1: left allmulticast mode
[   54.980398][ T6428] bridge_slave_1: left promiscuous mode
[   54.983633][ T6428] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.987851][ T6428] bridge_slave_0: left allmulticast mode
[   54.990235][ T6428] bridge_slave_0: left promiscuous mode
[   54.992934][ T6428] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.258082][ T6447] lo speed is unknown, defaulting to 1000
[   55.260123][ T6447] lo speed is unknown, defaulting to 1000
[   55.263082][ T6447] lo speed is unknown, defaulting to 1000
[   55.272540][ T6447] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   55.280136][ T6447] lo speed is unknown, defaulting to 1000
[   55.284908][ T6447] lo speed is unknown, defaulting to 1000
[   55.287226][ T6447] lo speed is unknown, defaulting to 1000
[   55.686975][ T6485] net_ratelimit: 25 callbacks suppressed
[   55.686987][ T6485] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   56.279560][ T6519] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   56.282448][ T6519] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   56.294886][ T6519] openvswitch: netlink: IPv4 tun info is not correct
[   56.305313][ T6522] bridge1: port 1(bond2) entered blocking state
[   56.308226][ T6522] bridge1: port 1(bond2) entered disabled state
[   56.311032][ T6522] bond2: entered allmulticast mode
[   56.338396][ T6528] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004
[   56.345620][ T6526] lo speed is unknown, defaulting to 1000
[   56.354512][   T10] IPVS: starting estimator thread 0...
[   56.358171][ T6536] ieee802154 phy0 wpan0: encryption failed: -22
[   56.393269][ T6528] nbd0: detected capacity change from 0 to 127
[   56.395935][   T56] block nbd0: Receive control failed (result -32)
[   56.452395][ T6537] IPVS: using max 135 ests per chain, 324000 per kthread
[   56.681530][ T6558] TCP: TCP_TX_DELAY enabled
[   56.729597][ T6568] syzkaller0: entered promiscuous mode
[   56.732834][ T6568] syzkaller0: entered allmulticast mode
[   57.296681][ T6608] nbd: must specify at least one socket
[   57.455031][ T6625] __nla_validate_parse: 34 callbacks suppressed
[   57.455050][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'.
[   57.539026][ T6628] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   57.542063][ T6628] syzkaller0: entered promiscuous mode
[   57.543997][ T6628] syzkaller0: entered allmulticast mode
[   57.546604][ T6628] netlink: 32 bytes leftover after parsing attributes in process `syz.2.216'.
[   57.551994][ T6628] tipc: Resetting bearer <eth:syzkaller0>
[   57.562913][ T6629] tipc: Resetting bearer <eth:syzkaller0>
[   57.566154][ T6629] tipc: Disabling bearer <eth:syzkaller0>
[   57.699390][ T6635] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[   57.705158][ T6635] bond0: (slave team0): Releasing backup interface
[   57.708274][ T6635] bridge_slave_0: left allmulticast mode
[   57.710111][ T6635] bridge_slave_0: left promiscuous mode
[   57.712176][ T6635] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.715050][ T6635] bridge_slave_1: left allmulticast mode
[   57.716919][ T6635] bridge_slave_1: left promiscuous mode
[   57.718801][ T6635] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.722749][ T6635] bond0: (slave bond_slave_0): Releasing backup interface
[   57.725578][ T6635] bond0: (slave bond_slave_1): Releasing backup interface
[   57.728888][ T6635] team0: Port device team_slave_0 removed
[   57.732142][ T6635] team0: Port device team_slave_1 removed
[   57.734161][ T6635] batman_adv: batadv0: Removing interface: batadv_slave_0
[   57.737101][ T6635] batman_adv: batadv0: Removing interface: batadv_slave_1
[   57.739956][ T6635] bond0: (slave wlan1): Releasing backup interface
[   57.745817][ T6635] validate_nla: 6 callbacks suppressed
[   57.745825][ T6635] netlink: 'syz.1.218': attribute type 10 has an invalid length.
[   57.750124][ T6635] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[   57.753730][ T6635] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   57.757507][ T6636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.217'.
[   57.760359][ T6636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.217'.
[   57.764838][ T6635] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   57.771228][ T6635] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   57.845614][ T6640] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   57.848175][ T6640] syzkaller0: entered promiscuous mode
[   57.850013][ T6640] syzkaller0: entered allmulticast mode
[   57.856031][ T6639] tipc: Resetting bearer <eth:syzkaller0>
[   57.858961][ T6639] tipc: Disabling bearer <eth:syzkaller0>
[   57.993134][ T6648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.223'.
[   57.996038][ T6648] netlink: 48 bytes leftover after parsing attributes in process `syz.2.223'.
[   57.999217][ T6648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.223'.
[   58.024481][ T6648] netlink: 56 bytes leftover after parsing attributes in process `syz.2.223'.
[   58.028860][ T6648] netlink: 16 bytes leftover after parsing attributes in process `syz.2.223'.
[   58.036034][ T6648] syzkaller1: entered promiscuous mode
[   58.038253][ T6648] syzkaller1: entered allmulticast mode
[   58.179295][ T6653] netlink: 'syz.0.224': attribute type 10 has an invalid length.
[   58.184725][ T6653] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   58.377677][ T6676] netem: incorrect gi model size
[   58.411778][ T6678] netlink: 176 bytes leftover after parsing attributes in process `syz.0.232'.
[   58.425971][ T6678] syzkaller0: entered promiscuous mode
[   58.427823][ T6678] syzkaller0: entered allmulticast mode
[   58.510761][ T6688] bond3: entered promiscuous mode
[   58.512695][ T6688] bond3: entered allmulticast mode
[   58.514611][ T6688] 8021q: adding VLAN 0 to HW filter on device bond3
[   58.598978][ T6701] bond1: entered promiscuous mode
[   58.600736][ T6701] bond1: entered allmulticast mode
[   58.603254][ T6701] 8021q: adding VLAN 0 to HW filter on device bond1
[   58.610489][ T6702] bond2: entered promiscuous mode
[   58.613454][ T6702] bond2: entered allmulticast mode
[   58.615328][ T6702] 8021q: adding VLAN 0 to HW filter on device bond2
[   58.641483][ T6701] lo speed is unknown, defaulting to 1000
[   58.660283][ T6720] netlink: 'syz.1.242': attribute type 58 has an invalid length.
[   58.704609][ T6727] netlink: 'syz.0.245': attribute type 7 has an invalid length.
[   58.732704][ T6720] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.735600][ T6720] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   58.742528][   T10] lo speed is unknown, defaulting to 1000
[   58.746425][ T6730] team0: entered promiscuous mode
[   58.748208][ T6730] team_slave_0: entered promiscuous mode
[   58.751829][ T6730] team_slave_1: entered promiscuous mode
[   58.756485][ T6720] syz.1.242 (6720) used greatest stack depth: 19728 bytes left
[   58.761502][   T10] syz2: Port: 1 Link ACTIVE
[   58.765341][ T6729] team0: left promiscuous mode
[   58.766998][ T6729] team_slave_0: left promiscuous mode
[   58.768939][ T6729] team_slave_1: left promiscuous mode
[   58.900460][ T6751] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.907804][ T6751] syzkaller0: entered allmulticast mode
[   58.916460][ T6750] tipc: Disabling bearer <eth:syzkaller0>
[   59.041209][ T6811] Illegal XDP return value 16128 on prog  (id 125) dev syz_tun, expect packet loss!
[   59.090959][ T6817] lo speed is unknown, defaulting to 1000
[   59.144075][ T6830] xt_socket: unknown flags 0x50
[   59.155513][ T6832] lo speed is unknown, defaulting to 1000
[   59.175152][ T6834] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   59.317608][ T6849] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   59.364840][ T6861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   59.667556][ T6866] tipc: MTU too low for tipc bearer
[   59.750761][ T6869] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   59.753838][ T6869] tipc: Enabled bearer <udp:syz2>, priority 10
[   59.860302][ T6871] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.881173][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   59.967974][ T6870] tipc: Disabling bearer <eth:syzkaller0>
[   60.021238][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   60.186436][ T6889] syzkaller1: entered promiscuous mode
[   60.188265][ T6889] syzkaller1: entered allmulticast mode
[   60.260442][ T6888] netlink: 'syz.1.275': attribute type 1 has an invalid length.
[   60.276756][ T6904] syz_tun: entered allmulticast mode
[   60.339672][ T6908] syz_tun (unregistering): left allmulticast mode
[   60.374630][ T6911] netlink: 'syz.1.282': attribute type 1 has an invalid length.
[   60.385592][ T6911] 8021q: adding VLAN 0 to HW filter on device bond2
[   60.392347][ T6911] gretap1: entered promiscuous mode
[   60.396682][ T6911] bond2: (slave gretap1): making interface the new active one
[   60.400052][ T6911] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   60.409180][ T6911] macvlan2: entered promiscuous mode
[   60.411011][ T6911] macvlan2: entered allmulticast mode
[   60.413157][ T6911] bond2: entered promiscuous mode
[   60.415281][ T6911] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   60.417865][ T6911] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   60.423556][ T6911] bond2: left promiscuous mode
[   60.721248][    C0] net_ratelimit: 5 callbacks suppressed
[   60.721267][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   60.861199][  T791] tipc: Node number set to 2594115527
[   61.001371][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   61.195988][ T6930] lo speed is unknown, defaulting to 1000
[   61.271106][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   61.479384][ T6956] netlink: 'syz.2.293': attribute type 5 has an invalid length.
[   61.487194][ T6956] geneve2: entered promiscuous mode
[   61.489254][ T6956] geneve2: entered allmulticast mode
[   61.492120][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   61.494947][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   61.499094][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   61.504384][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   61.619251][ T6989] netlink: 'syz.1.304': attribute type 1 has an invalid length.
[   61.690891][ T7006] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.696189][ T7006] syzkaller0: entered promiscuous mode
[   61.698096][ T7006] syzkaller0: entered allmulticast mode
[   61.709042][ T7006] tipc: Resetting bearer <eth:syzkaller0>
[   61.712608][ T7006] tipc: Disabling bearer <eth:syzkaller0>
[   61.801253][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   61.807251][ T7018] netlink: 'syz.1.313': attribute type 9 has an invalid length.
[   61.810215][ T7018] netlink: 'syz.1.313': attribute type 6 has an invalid length.
[   61.940868][ T7036] Bluetooth: MGMT ver 1.23
[   62.296882][ T7073] batman_adv: batadv0: Adding interface: virt_wifi0
[   62.299187][ T7073] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.307988][ T7073] batman_adv: batadv0: Interface activated: virt_wifi0
[   62.312775][ T7076] openvswitch: netlink: IP tunnel dst address not specified
[   62.405233][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[   62.408111][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[   62.410836][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[   62.421145][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[   62.598095][ T7118] batman_adv: batadv0: Interface deactivated: virt_wifi0
[   62.610118][  T791] lo speed is unknown, defaulting to 1000
[   62.612767][  T791] syz2: Port: 1 Link DOWN
[   62.622260][ T7118] __nla_validate_parse: 43 callbacks suppressed
[   62.622271][ T7118] netlink: 16 bytes leftover after parsing attributes in process `syz.1.348'.
[   62.631478][ T7118] netlink: 16 bytes leftover after parsing attributes in process `syz.1.348'.
[   62.659090][ T7136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.351'.
[   62.669296][ T7136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.351'.
[   62.841172][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   63.578644][ T7173] netlink: 48 bytes leftover after parsing attributes in process `syz.0.361'.
[   63.591743][ T7174] lo speed is unknown, defaulting to 1000
[   63.607295][ T7173] lo speed is unknown, defaulting to 1000
[   63.612004][ T7176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.362'.
[   63.647445][ T7183] validate_nla: 1 callbacks suppressed
[   63.647456][ T7183] netlink: 'syz.2.363': attribute type 1 has an invalid length.
[   63.672069][ T7183] 8021q: adding VLAN 0 to HW filter on device bond3
[   63.691978][ T7183] 8021q: adding VLAN 0 to HW filter on device bond3
[   63.694586][ T7183] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[   63.698417][ T7183] bond3: (slave vxcan3): Error -95 calling set_mac_address
[   63.716113][ T7198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.366'.
[   63.719950][ T7198] netlink: 68 bytes leftover after parsing attributes in process `syz.0.366'.
[   63.726928][ T7200] erspan0: entered allmulticast mode
[   63.753000][ T7205] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.756726][ T7205] tipc: Resetting bearer <eth:syzkaller0>
[   63.819748][ T7219] netlink: 224 bytes leftover after parsing attributes in process `syz.1.371'.
[   63.881230][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   64.013932][ T7241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.378'.
[   64.160630][ T7256] netlink: ct family unspecified
[   64.164413][ T7256] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   64.188167][ T7258] netlink: 'syz.0.383': attribute type 12 has an invalid length.
[   64.304768][ T7260] vlan2: entered promiscuous mode
[   64.306610][ T7260] macvtap0: entered promiscuous mode
[   64.380102][ T7266] openvswitch: netlink: Key type 256 is out of range max 32
[   64.532951][ T7276] vxcan2: entered promiscuous mode
[   64.604505][ T7284] netlink: 'syz.0.392': attribute type 39 has an invalid length.
[   64.757930][ T7290] netlink: 'syz.1.394': attribute type 6 has an invalid length.
[   64.760839][ T7290] netlink: 'syz.1.394': attribute type 46 has an invalid length.
[   64.811427][ T7297] nbd: socks must be embedded in a SOCK_ITEM attr
[   64.813853][ T7297] block nbd1: shutting down sockets
[   64.953538][ T7316] veth3: entered promiscuous mode
[   65.961217][    C0] net_ratelimit: 2 callbacks suppressed
[   65.961239][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   67.001251][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   68.041174][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   69.091182][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   70.121205][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   71.003587][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.161294][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   72.201538][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   73.251233][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   74.291174][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   75.321204][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   76.361212][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   77.401148][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   78.441165][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   79.481219][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   80.531179][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   81.561231][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   82.611190][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   83.641222][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   84.550341][ T7338] __nla_validate_parse: 9 callbacks suppressed
[   84.550361][ T7338] netlink: 24 bytes leftover after parsing attributes in process `syz.1.412'.
[   84.583344][ T7351] netlink: 208128 bytes leftover after parsing attributes in process `syz.0.417'.
[   84.587101][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.418'.
[   84.587188][ T7351] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   84.595256][ T7351] netlink: 'syz.0.417': attribute type 4 has an invalid length.
[   84.649907][ T7354] netlink: 'syz.1.418': attribute type 1 has an invalid length.
[   84.662821][ T7360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.420'.
[   84.878225][ T7386] 8021q: adding VLAN 0 to HW filter on device batadv1
[   84.881825][ T7386] team0: Failed to send port change of device batadv1 via netlink (err -105)
[   84.884827][ T7386] team0: Failed to send options change via netlink (err -105)
[   84.887725][ T7386] team0: Port device batadv1 added
[   84.926787][ T7390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.430'.
[   84.932462][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   84.932485][ T7390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.430'.
[   84.935428][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   84.941394][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   84.944235][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   85.038536][ T7399] gretap1: left promiscuous mode
[   85.044832][   T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   85.048466][   T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   85.052433][   T13] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   85.058430][   T13] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   85.097557][ T7408] netlink: 'syz.0.436': attribute type 6 has an invalid length.
[   85.100508][ T7408] netlink: 'syz.0.436': attribute type 6 has an invalid length.
[   85.103955][ T7410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.437'.
[   85.159701][ T7421] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.440'.
[   85.166248][ T7421] Bluetooth: MGMT ver 1.23
[   85.170672][ T7421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.232970][ T7424] bridge1: entered promiscuous mode
[   85.235035][ T7424] bridge1: entered allmulticast mode
[   85.385584][ T7431] ieee802154 phy0 wpan0: encryption failed: -90
[   85.454952][ T7442] lo speed is unknown, defaulting to 1000
[   85.457151][ T7442] lo speed is unknown, defaulting to 1000
[   85.459269][ T7442] lo speed is unknown, defaulting to 1000
[   85.495625][ T7442] infiniband syz0: set down
[   85.497174][   T10] lo speed is unknown, defaulting to 1000
[   85.499066][ T7442] infiniband syz0: added lo
[   85.507663][ T7442] RDS/IB: syz0: added
[   85.509005][ T7442] smc: adding ib device syz0 with port count 1
[   85.511380][ T7442] smc:    ib device syz0 port 1 has pnetid 
[   85.513413][   T10] lo speed is unknown, defaulting to 1000
[   85.515547][ T7442] lo speed is unknown, defaulting to 1000
[   85.550980][ T7442] lo speed is unknown, defaulting to 1000
[   85.585724][ T7442] lo speed is unknown, defaulting to 1000
[   85.689901][ T7451] netlink: 'syz.1.449': attribute type 2 has an invalid length.
[   85.692527][ T7451] netlink: 119 bytes leftover after parsing attributes in process `syz.1.449'.
[   85.727401][ T7453] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   85.730328][ T7453] IPv6: NLM_F_CREATE should be set when creating new route
[   85.733324][ T7453] IPv6: NLM_F_CREATE should be set when creating new route
[   85.742070][ T7453] netlink: 'syz.2.450': attribute type 3 has an invalid length.
[   85.886033][ T7469] netlink: 24 bytes leftover after parsing attributes in process `syz.1.456'.
[   86.594326][ T7502] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   86.603951][ T7495] smc: net device bond0 applied user defined pnetid SYZ2
[   86.606716][ T7495] smc: net device bond0 erased user defined pnetid SYZ2
[   86.630114][ T7506] pim6reg: entered allmulticast mode
[   86.632562][ T7506] pim6reg: left allmulticast mode
[   86.657722][ T7504] lo speed is unknown, defaulting to 1000
[   86.660646][ T7504] lo speed is unknown, defaulting to 1000
[   86.818880][ T7518] netlink: 'syz.0.472': attribute type 1 has an invalid length.
[   86.875933][ T7537] trusted_key: syz.0.477 sent an empty control message without MSG_MORE.
[   87.026890][ T7553] ip6gre1: entered promiscuous mode
[   87.045664][ T7550] netlink: 'syz.2.482': attribute type 13 has an invalid length.
[   87.048719][ T7550] netlink: 'syz.2.482': attribute type 17 has an invalid length.
[   87.058435][ T7554] netlink: 'syz.2.482': attribute type 13 has an invalid length.
[   87.075881][ T7550] erspan0: left allmulticast mode
[   87.096705][ T7550] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.100457][ T7550] 8021q: adding VLAN 0 to HW filter on device team0
[   87.105908][ T7550] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   87.116843][ T7554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   87.169928][ T7569] openvswitch: netlink: IP tunnel dst address not specified
[   87.177081][ T7570] openvswitch: netlink: IP tunnel dst address not specified
[   87.563564][ T7602] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96
[   87.614584][ T7624] sctp: [Deprecated]: syz.1.501 (pid 7624) Use of int in max_burst socket option deprecated.
[   87.614584][ T7624] Use struct sctp_assoc_value instead
[   87.844433][ T7647] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   88.502917][ T7681] bond4: entered promiscuous mode
[   88.504634][ T7681] bond4: entered allmulticast mode
[   88.506642][ T7681] 8021q: adding VLAN 0 to HW filter on device bond4
[   88.560541][ T7696] delete_channel: no stack
[   88.584539][ T7702] batadv0: entered promiscuous mode
[   88.586546][ T7702] batadv0: entered allmulticast mode
[   88.588606][ T7702] bridge0: port 1(batadv0) entered blocking state
[   88.590861][ T7702] bridge0: port 1(batadv0) entered disabled state
[   88.641708][   T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   88.644723][   T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   88.649624][ T7711] sctp: [Deprecated]: syz.0.526 (pid 7711) Use of int in maxseg socket option.
[   88.649624][ T7711] Use struct sctp_assoc_value instead
[   88.794364][ T7717] hsr_slave_0: left promiscuous mode
[   88.796776][ T7717] hsr_slave_1: left promiscuous mode
[   89.007480][ T7726] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   89.174725][ T7726] lo speed is unknown, defaulting to 1000
[   89.177464][ T7726] lo speed is unknown, defaulting to 1000
[   89.206821][ T7728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   89.266037][ T7726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   89.320506][ T7726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   89.548080][ T7735] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[   89.571400][   T54] Bluetooth: hci2: command tx timeout
[   89.583442][ T7737] __nla_validate_parse: 32 callbacks suppressed
[   89.583456][ T7737] netlink: 60 bytes leftover after parsing attributes in process `syz.1.533'.
[   89.725633][ T7750] netlink: 830 bytes leftover after parsing attributes in process `syz.1.538'.
[   89.789592][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.542'.
[   89.822076][ T7759] bond4: left promiscuous mode
[   89.824150][ T7759] bond4: left allmulticast mode
[   89.837492][ T7762] vxcan2: entered promiscuous mode
[   89.863685][ T7764] netlink: 32 bytes leftover after parsing attributes in process `syz.1.544'.
[   89.912533][ T7766] bond0: (slave bridge0): Releasing backup interface
[   89.917156][ T7766] bond0: (slave wlan1): Releasing backup interface
[   89.920750][ T7766] bond1: (slave macvlan2): Removing an active aggregator
[   89.923951][ T7766] bond1: (slave macvlan2): Releasing backup interface
[   89.926731][ T7766] bond2: left allmulticast mode
[   89.928540][ T7766] bridge1: port 1(bond2) entered disabled state
[   89.934472][ T7766] team0: Port device batadv1 removed
[   90.011349][ T7772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.546'.
[   90.028401][ T7764] validate_nla: 8 callbacks suppressed
[   90.028424][ T7764] netlink: 'syz.1.544': attribute type 1 has an invalid length.
[   90.034482][ T7764] netlink: 224 bytes leftover after parsing attributes in process `syz.1.544'.
[   90.592132][ T7789] netlink: 28 bytes leftover after parsing attributes in process `syz.2.552'.
[   90.595963][ T7789] netlink: 28 bytes leftover after parsing attributes in process `syz.2.552'.
[   90.645899][ T7793] netlink: 44 bytes leftover after parsing attributes in process `syz.2.554'.
[   90.649507][ T7793] netem: unknown loss type 12
[   90.651600][ T7793] netem: change failed
[   90.704704][ T7800] tipc: New replicast peer: 255.255.255.255
[   90.707284][ T7800] tipc: Enabled bearer <udp:s>, priority 10
[   90.715747][ T7802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.557'.
[   91.004735][ T7837] netlink: 'syz.0.567': attribute type 13 has an invalid length.
[   91.007835][ T7837] netlink: 'syz.0.567': attribute type 17 has an invalid length.
[   91.020352][ T7837] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.026684][ T7837] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   91.081604][ T7837] lo speed is unknown, defaulting to 1000
[   91.083978][ T7837] lo speed is unknown, defaulting to 1000
[   91.120981][ T7846] netlink: 'syz.1.573': attribute type 20 has an invalid length.
[   91.123912][ T7846] netlink: 'syz.1.573': attribute type 20 has an invalid length.
[   91.137769][ T7847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.215951][ T7837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.252497][ T7842] netlink: 'syz.2.572': attribute type 13 has an invalid length.
[   91.273273][ T7837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.822123][ T5845] tipc: Node number set to 1101516008
[   91.939595][ T7856] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.040327][ T7858] smc: net device bond0 applied user defined pnetid SYZ2
[   92.109505][ T7873] lo speed is unknown, defaulting to 1000
[   92.113022][ T7873] lo speed is unknown, defaulting to 1000
[   92.269667][ T7837] syz.0.567 (7837) used greatest stack depth: 19648 bytes left
[   92.988578][ T7917] netlink: 'syz.1.589': attribute type 1 has an invalid length.
[   93.003149][ T7917] 8021q: adding VLAN 0 to HW filter on device bond5
[   93.010790][ T7917] bond5: (slave gretap3): making interface the new active one
[   93.014620][ T7917] bond5: (slave gretap3): Enslaving as an active interface with an up link
[   93.020748][ T7919] netlink: 'syz.2.590': attribute type 13 has an invalid length.
[   93.024150][ T7919] netlink: 'syz.2.590': attribute type 17 has an invalid length.
[   93.028690][ T7919] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   93.048590][ T7919] lo speed is unknown, defaulting to 1000
[   93.051410][ T7919] lo speed is unknown, defaulting to 1000
[   93.266086][ T7953] netlink: 'syz.1.600': attribute type 10 has an invalid length.
[   93.269467][ T7953] batman_adv: batadv0: Interface activated: virt_wifi0
[   93.298124][ T7958] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[   93.306249][ T7958] batadv0: left allmulticast mode
[   93.308165][ T7958] batadv0: left promiscuous mode
[   93.309949][ T7958] bridge0: port 1(batadv0) entered disabled state
[   93.314408][ T7958] batman_adv: batadv0: Interface deactivated: virt_wifi0
[   93.316906][ T7958] batman_adv: batadv0: Removing interface: virt_wifi0
[   93.320170][ T7958] bond0: (slave wlan1): Releasing backup interface
[   93.324153][ T7958] bond2: (slave gretap1): Releasing active interface
[   93.327733][ T7958] bond5: (slave gretap3): Releasing active interface
[   93.338574][ T7958] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[   93.344975][ T7958] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   93.349807][ T7958] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   93.353224][ T7958] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   93.547229][ T7975] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[   93.552683][ T7975] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[   93.800948][ T7994] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   94.159661][ T8040] team0: Port device dummy0 added
[   94.173432][ T8040] team0: Port device dummy0 removed
[   94.176406][ T8040] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   95.024420][ T8087] syzkaller1: entered promiscuous mode
[   95.026253][ T8087] syzkaller1: entered allmulticast mode
[   95.029508][ T8087] __nla_validate_parse: 21 callbacks suppressed
[   95.029515][ T8087] netlink: 28 bytes leftover after parsing attributes in process `syz.1.644'.
[   95.111315][ T8097] openvswitch: netlink: Message has 1 unknown bytes.
[   95.114327][ T8097] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.122909][ T8100] validate_nla: 6 callbacks suppressed
[   95.122920][ T8100] netlink: 'syz.1.647': attribute type 6 has an invalid length.
[   95.162945][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.649'.
[   95.177922][ T8106] netlink: 'syz.0.650': attribute type 1 has an invalid length.
[   95.180641][ T8106] netlink: 184 bytes leftover after parsing attributes in process `syz.0.650'.
[   95.201813][ T8111] sctp: [Deprecated]: syz.0.652 (pid 8111) Use of struct sctp_assoc_value in delayed_ack socket option.
[   95.201813][ T8111] Use struct sctp_sack_info instead
[   95.208393][ T8113] tipc: Enabled bearer <ib:caif0>, priority 14
[   95.293532][ T8130] netlink: 16 bytes leftover after parsing attributes in process `syz.0.657'.
[   95.310010][ T8128] netlink: 20 bytes leftover after parsing attributes in process `syz.1.655'.
[   95.315603][ T8128] netlink: 100 bytes leftover after parsing attributes in process `syz.1.655'.
[   95.318630][ T8128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.655'.
[   95.329028][ T8132] netlink: 44 bytes leftover after parsing attributes in process `syz.0.658'.
[   95.334343][ T8132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.658'.
[   95.359295][ T8134] netlink: 28 bytes leftover after parsing attributes in process `syz.0.659'.
[   95.530298][ T8150] sctp: [Deprecated]: syz.2.665 (pid 8150) Use of int in maxseg socket option.
[   95.530298][ T8150] Use struct sctp_assoc_value instead
[   95.621769][ T8161] netlink: 'syz.2.668': attribute type 1 has an invalid length.
[   95.912850][ T8179] lo speed is unknown, defaulting to 1000
[   95.915885][ T8179] lo speed is unknown, defaulting to 1000
[   96.088558][ T8184] pim6reg1: entered promiscuous mode
[   96.090791][ T8184] pim6reg1: entered allmulticast mode
[   96.170231][ T8189] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   96.326554][ T8211] IPVS: Scheduler module ip_vs_sip not found
[   96.644271][ T8244] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[   96.698154][ T8248] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   96.704884][ T8248] syzkaller0: entered promiscuous mode
[   96.706735][ T8248] syzkaller0: entered allmulticast mode
[   96.734390][ T8253] netlink: 'syz.1.695': attribute type 12 has an invalid length.
[   96.737881][ T8253] netlink: 'syz.1.695': attribute type 12 has an invalid length.
[   96.742961][ T8253] smc: net device bond0 erased user defined pnetid SYZ2
[   96.749949][ T8253] bond0 (unregistering): (slave wlan1): Releasing backup interface
[   96.754600][ T8253] bond0 (unregistering): Released all slaves
[   97.058537][ T8286] openvswitch: netlink: Flow key attr not present in new flow.
[   97.178719][ T5874] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   97.188287][ T5874] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   97.194756][ T5874] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   97.205843][ T5874] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   97.234005][ T8303] netlink: 'syz.2.706': attribute type 10 has an invalid length.
[   97.294002][ T8309] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.484376][ T8345] openvswitch: netlink: EtherType 0 is less than min 600
[   97.501758][ T8348] lo speed is unknown, defaulting to 1000
[   97.504774][ T8348] lo speed is unknown, defaulting to 1000
[   97.542914][ T8339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.190944][ T8401] 0X: renamed from caif0
[   98.195891][ T8401] 0X: entered allmulticast mode
[   98.198537][ T8401] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[   98.205786][ T8403] unsupported nla_type 65024
[   98.231896][ T8406] netlink: 'syz.0.737': attribute type 12 has an invalid length.
[   98.305321][ T8415] lo speed is unknown, defaulting to 1000
[   98.308394][ T8415] lo speed is unknown, defaulting to 1000
[   98.334682][ T8417] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.380332][ T8423] vxcan2: entered promiscuous mode
[   98.414246][ T8429] netlink: 'syz.2.743': attribute type 2 has an invalid length.
[   98.442633][ T8431] pim6reg: entered allmulticast mode
[   98.445583][ T8431] pim6reg: left allmulticast mode
[   98.785602][ T8444] vlan2: entered allmulticast mode
[   98.787360][ T8444] veth1: entered allmulticast mode
[   98.855698][ T8450] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[   98.859735][ T8450] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[   98.870420][ T8450] openvswitch: netlink: Missing key (keys=40, expected=80)
[   98.928134][ T8458] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   99.159786][ T8477] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[   99.196027][ T8482] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.199375][ T8482] syzkaller0: entered promiscuous mode
[   99.203475][ T8482] syzkaller0: entered allmulticast mode
[   99.249266][ T8481] tipc: Resetting bearer <eth:syzkaller0>
[   99.253560][ T8481] tipc: Disabling bearer <eth:syzkaller0>
[   99.400954][ T8502] netlink: 'syz.2.763': attribute type 1 has an invalid length.
[   99.408963][ T8502] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[   99.410791][ T8505] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   99.613781][ T8528] netlink: 'syz.1.768': attribute type 21 has an invalid length.
[   99.626366][ T8528] tipc: Resetting bearer <eth:syzkaller0>
[   99.867067][ T8573] 8021q: adding VLAN 0 to HW filter on device bond5
[   99.893890][ T8577] syzkaller0: left promiscuous mode
[   99.896040][ T8577] syzkaller0: left allmulticast mode
[  100.048030][ T8597] __nla_validate_parse: 72 callbacks suppressed
[  100.048043][ T8597] netlink: 224 bytes leftover after parsing attributes in process `syz.1.787'.
[  100.059599][ T8597] netlink: 48 bytes leftover after parsing attributes in process `syz.1.787'.
[  100.182060][ T8616] netlink: 20 bytes leftover after parsing attributes in process `syz.2.791'.
[  100.968438][ T8622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.793'.
[  100.983317][ T8624] netlink: 52 bytes leftover after parsing attributes in process `syz.2.794'.
[  100.989631][ T8632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.795'.
[  101.020202][ T8635] validate_nla: 2 callbacks suppressed
[  101.020309][ T8635] netlink: 'syz.1.796': attribute type 4 has an invalid length.
[  101.106563][ T8648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.800'.
[  101.109807][ T8648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.800'.
[  101.121184][ T8648] netlink: 'syz.2.800': attribute type 19 has an invalid length.
[  101.137238][ T8651] netlink: 24 bytes leftover after parsing attributes in process `syz.2.802'.
[  101.205691][ T8664] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  101.210303][ T8663] IPVS: stopping backup sync thread 8664 ...
[  101.272251][ T8667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.806'.
[  101.285326][ T8670] syzkaller0: entered promiscuous mode
[  101.287708][ T8670] syzkaller0: entered allmulticast mode
[  101.332640][ T8674] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  101.387992][ T8678] netlink: zone id is out of range
[  101.390271][ T8678] netlink: zone id is out of range
[  101.393811][ T8678] netlink: zone id is out of range
[  101.395690][ T8678] netlink: zone id is out of range
[  101.397465][ T8678] netlink: zone id is out of range
[  101.434298][ T6800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.437367][ T6800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.072441][ T8714] bridge0: port 1(batadv2) entered blocking state
[  102.076456][ T8714] bridge0: port 1(batadv2) entered disabled state
[  102.079285][ T8714] batadv2: entered allmulticast mode
[  102.084926][ T8714] batadv2: entered promiscuous mode
[  102.317872][ T8730] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.327599][ T8730] batadv2: left allmulticast mode
[  102.329615][ T8730] batadv2: left promiscuous mode
[  102.332578][ T8730] bridge0: port 1(batadv2) entered disabled state
[  102.363038][ T8735] tipc: Resetting bearer <ib:caif0>
[  102.405259][ T8735] netlink: 'syz.1.826': attribute type 10 has an invalid length.
[  102.409459][ T8735] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  102.413488][ T8735] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  103.208687][ T8741] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  104.117911][ T8763] syzkaller1: entered promiscuous mode
[  104.119875][ T8763] syzkaller1: entered allmulticast mode
[  104.262565][ T8769] netlink: 'syz.1.837': attribute type 1 has an invalid length.
[  104.274714][ T8769] bond6 (unregistering): Released all slaves
[  104.747484][ T8780] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  104.846687][ T8796] IPVS: length: 69 != 24
[  104.865948][ T8802] net_ratelimit: 4 callbacks suppressed
[  104.865960][ T8802] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  104.870188][ T8802] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.946501][ T8816] netlink: 'syz.2.851': attribute type 10 has an invalid length.
[  104.950794][ T8816] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  105.070126][ T8836] __nla_validate_parse: 18 callbacks suppressed
[  105.070141][ T8836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.858'.
[  105.078612][ T8827] IPVS: set_ctl: invalid protocol: 103 10.1.1.0:19997
[  105.078700][ T8836] batman_adv: batadv0: Removing interface: batadv_slave_1
[  105.118709][ T8838] netlink: 'syz.1.859': attribute type 13 has an invalid length.
[  105.121899][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.859'.
[  105.125270][ T8838] netlink: 'syz.1.859': attribute type 13 has an invalid length.
[  105.128131][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.859'.
[  105.249118][ T8844] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  105.252466][ T8844] tipc: Resetting bearer <eth:syzkaller0>
[  105.254901][ T8844] syzkaller0: left promiscuous mode
[  105.959648][ T8846] vlan2: entered promiscuous mode
[  105.962271][ T8846] macvtap0: entered promiscuous mode
[  105.996872][ T8851] netlink: 'syz.1.862': attribute type 1 has an invalid length.
[  105.999987][ T8851] netlink: 'syz.1.862': attribute type 1 has an invalid length.
[  106.003843][ T8851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.862'.
[  106.007830][ T8851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.862'.
[  106.018697][ T8851] 8021q: adding VLAN 0 to HW filter on device bond6
[  106.022958][ T8851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.862'.
[  106.049198][ T8856] netlink: 40 bytes leftover after parsing attributes in process `syz.1.864'.
[  106.069614][ T8859] netlink: 'syz.2.863': attribute type 13 has an invalid length.
[  106.072921][ T8859] netlink: 'syz.2.863': attribute type 17 has an invalid length.
[  106.085095][ T8859] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  106.104118][ T8854] lo speed is unknown, defaulting to 1000
[  106.106696][ T8854] lo speed is unknown, defaulting to 1000
[  106.140352][ T8864] netlink: 32 bytes leftover after parsing attributes in process `syz.1.866'.
[  106.152097][ T8859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.863'.
[  106.157394][ T8866] netlink: 28 bytes leftover after parsing attributes in process `syz.1.867'.
[  106.159953][ T8859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.344539][ T8879] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  106.963554][ T5875] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  106.966387][ T5875] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  106.969098][ T5875] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  106.975550][ T5875] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  107.238371][ T8913] netlink: 'syz.1.883': attribute type 11 has an invalid length.
[  108.089969][ T8915] Bluetooth: hci0: Opcode 0x080f failed: -4
[  108.238140][ T8943] pimreg: entered allmulticast mode
[  108.272624][ T8948] netlink: 'syz.2.895': attribute type 1 has an invalid length.
[  108.498419][ T8967] netlink: 'syz.1.901': attribute type 5 has an invalid length.
[  108.552001][ T8976] netlink: 'syz.1.904': attribute type 12 has an invalid length.
[  108.554785][ T8976] netlink: 'syz.1.904': attribute type 11 has an invalid length.
[  108.675649][ T8982] netlink: 'syz.1.906': attribute type 10 has an invalid length.
[  108.807359][ T8987] sctp: [Deprecated]: syz.1.907 (pid 8987) Use of int in max_burst socket option deprecated.
[  108.807359][ T8987] Use struct sctp_assoc_value instead
[  109.321250][   T54] Bluetooth: hci0: command 0x080f tx timeout
[  109.554871][ T9002] bond0: (slave dummy0): Releasing backup interface
[  109.557629][ T9002] bond0: (slave bond_slave_0): Releasing backup interface
[  109.560692][ T9002] team0: Port device team_slave_0 removed
[  109.564280][ T9002] team0: Port device team_slave_1 removed
[  109.566155][ T9002] batman_adv: batadv0: Removing interface: batadv_slave_0
[  109.570845][ T9002] bond0: (slave wlan1): Releasing backup interface
[  109.575945][ T9002] rdma_op ffff8881123c21f0 conn xmit_rdma 0000000000000000
[  109.579679][ T9002] netlink: 'syz.2.912': attribute type 10 has an invalid length.
[  109.582621][ T9004] syzkaller0: Caught tx_queue_len zero misconfig
[  109.587749][ T9002] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  109.616362][ T9006] netlink: 'syz.2.915': attribute type 1 has an invalid length.
[  109.628310][ T9006] bond7: entered promiscuous mode
[  109.630497][ T9006] 8021q: adding VLAN 0 to HW filter on device bond7
[  109.637970][ T9006] 8021q: adding VLAN 0 to HW filter on device bond7
[  109.641396][ T9006] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address
[  109.645128][ T9006] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  109.652164][ T9006] bond7: (slave wireguard0): making interface the new active one
[  109.655471][ T9006] wireguard0: entered promiscuous mode
[  109.659211][ T9006] bond7: (slave wireguard0): Enslaving as an active interface with an up link
[  109.668447][ T9006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  109.671587][ T9006] IPv6: NLM_F_CREATE should be set when creating new route
[  109.674223][ T9006] IPv6: NLM_F_CREATE should be set when creating new route
[  109.677575][ T9006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  109.700373][ T9015] bond0: (slave gretap0): Opening slave failed
[  109.706008][ T9018] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.754158][ T9027] netlink: 'syz.2.918': attribute type 8 has an invalid length.
[  109.800061][ T9032] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  109.808185][ T9032] syzkaller0: entered promiscuous mode
[  109.873405][ T9045] syzkaller0: Caught tx_queue_len zero misconfig
[  110.096368][ T9072] __nla_validate_parse: 32 callbacks suppressed
[  110.096381][ T9072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.930'.
[  110.125870][ T9076] netlink: 60 bytes leftover after parsing attributes in process `syz.1.931'.
[  110.203180][ T9085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.933'.
[  110.782198][ T9107] tipc: Failed to remove unknown binding: 66,1,1/1101516008:3090473065/3090473067
[  110.785607][ T9107] tipc: Failed to remove unknown binding: 66,1,1/1101516008:3090473065/3090473067
[  110.788654][ T9107] tipc: Failed to remove unknown binding: 66,1,1/1101516008:3090473065/3090473067
[  110.879938][ T9112] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.882827][ T9112] 8021q: adding VLAN 0 to HW filter on device team0
[  110.886911][ T9112] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  110.910579][ T9111] lo speed is unknown, defaulting to 1000
[  110.914862][ T9111] lo speed is unknown, defaulting to 1000
[  110.954273][ T9112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.938'.
[  110.961639][ T9112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.176473][ T9117] netlink: 32 bytes leftover after parsing attributes in process `syz.1.940'.
[  111.198327][ T9120] netlink: 28 bytes leftover after parsing attributes in process `syz.1.941'.
[  111.233781][ T9130] validate_nla: 3 callbacks suppressed
[  111.233790][ T9130] netlink: 'syz.1.943': attribute type 7 has an invalid length.
[  111.238133][ T9130] netlink: 'syz.1.943': attribute type 8 has an invalid length.
[  111.240628][ T9130] netlink: 'syz.1.943': attribute type 15 has an invalid length.
[  111.259645][ T9135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.944'.
[  111.315126][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.945'.
[  111.325721][ T9137] netlink: 268 bytes leftover after parsing attributes in process `syz.1.945'.
[  111.665050][ T9164] netlink: 'syz.1.951': attribute type 1 has an invalid length.
[  111.668246][ T9164] netlink: 224 bytes leftover after parsing attributes in process `syz.1.951'.
[  112.526965][ T9200] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  113.431172][ T9215] openvswitch: netlink: Flow actions attr not present in new flow.
[  113.554739][ T9226] 8021q: VLANs not supported on bond0
[  113.562560][ T5850] Bluetooth: hci2: command 0x0405 tx timeout
[  113.585704][ T9230] netlink: 'syz.1.971': attribute type 4 has an invalid length.
[  113.589471][ T5845] lo speed is unknown, defaulting to 1000
[  113.597439][ T5845] syz0: Port: 1 Link ACTIVE
[  113.599288][ T5845] lo speed is unknown, defaulting to 1000
[  114.214161][ T9245] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  114.557744][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  114.560664][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  114.563517][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  114.566504][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  114.569444][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  114.583609][ T9252] lo speed is unknown, defaulting to 1000
[  114.586610][ T9252] lo speed is unknown, defaulting to 1000
[  114.676963][ T9252] chnl_net:caif_netlink_parms(): no params data found
[  114.702958][ T9252] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.705443][ T9252] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.707834][ T9252] bridge_slave_0: entered allmulticast mode
[  114.710368][ T9252] bridge_slave_0: entered promiscuous mode
[  114.713662][ T9252] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.716244][ T9252] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.718879][ T9252] bridge_slave_1: entered allmulticast mode
[  114.721595][ T9252] bridge_slave_1: entered promiscuous mode
[  114.736883][ T9252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  114.742024][ T9252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  114.753477][ T9252] team0: Port device team_slave_0 added
[  114.756413][ T9252] team0: Port device team_slave_1 added
[  114.767171][ T9252] batman_adv: batadv0: Adding interface: batadv_slave_0
[  114.769877][ T9252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.780081][ T9252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  114.784943][ T9252] batman_adv: batadv0: Adding interface: batadv_slave_1
[  114.787272][ T9252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.795892][ T9252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  114.811133][ T9252] hsr_slave_0: entered promiscuous mode
[  114.813426][ T9252] hsr_slave_1: entered promiscuous mode
[  114.862266][ T9252] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  114.867010][ T9252] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  114.870754][ T9252] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  114.875359][ T9252] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  114.888045][ T9252] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.890499][ T9252] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.893260][ T9252] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.895623][ T9252] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.917733][ T9252] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.922823][   T65] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.925646][   T65] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.932458][ T9252] 8021q: adding VLAN 0 to HW filter on device team0
[  114.937303][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.939841][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.951766][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.954257][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.023417][ T9252] 8021q: adding VLAN 0 to HW filter on device batadv0
[  115.036523][ T9252] veth0_vlan: entered promiscuous mode
[  115.040567][ T9252] veth1_vlan: entered promiscuous mode
[  115.050295][ T9252] veth0_macvtap: entered promiscuous mode
[  115.054269][ T9252] veth1_macvtap: entered promiscuous mode
[  115.060457][ T9252] batman_adv: batadv0: Interface activated: batadv_slave_0
[  115.065949][ T9252] batman_adv: batadv0: Interface activated: batadv_slave_1
[  115.070533][ T5875] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.074011][ T5875] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.077568][ T5875] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.080527][ T5875] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.102068][ T6800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.106719][ T6800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.114930][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.117836][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.159696][ T9273] tipc: Started in network mode
[  115.162497][ T9273] tipc: Node identity caaa9a611b33, cluster identity 4711
[  115.164907][ T9273] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.167960][ T9273] syzkaller0: entered promiscuous mode
[  115.169890][ T9273] syzkaller0: entered allmulticast mode
[  115.175527][ T9273] tipc: Resetting bearer <eth:syzkaller0>
[  115.178276][ T9272] tipc: Resetting bearer <eth:syzkaller0>
[  115.180831][ T9272] tipc: Disabling bearer <eth:syzkaller0>
[  116.601206][   T54] Bluetooth: hci3: command tx timeout
[  117.037450][ T9283] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.118540][ T9293] netlink: 'syz.1.987': attribute type 1 has an invalid length.
[  117.121742][ T9293] __nla_validate_parse: 5 callbacks suppressed
[  117.121751][ T9293] netlink: 224 bytes leftover after parsing attributes in process `syz.1.987'.
[  117.127893][ T9293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.987'.
[  117.133644][ T9293] netlink: 68 bytes leftover after parsing attributes in process `syz.1.987'.
[  117.153944][ T9294] can: request_module (can-proto-5) failed.
[  117.340605][ T9304] Bluetooth: MGMT ver 1.23
[  117.363478][ T9307] netlink: 24 bytes leftover after parsing attributes in process `syz.1.991'.
[  117.400047][ T9311] sctp: [Deprecated]: syz.1.993 (pid 9311) Use of struct sctp_assoc_value in delayed_ack socket option.
[  117.400047][ T9311] Use struct sctp_sack_info instead
[  117.407662][ T9311] netlink: 'syz.1.993': attribute type 21 has an invalid length.
[  117.410318][ T9311] netlink: 132 bytes leftover after parsing attributes in process `syz.1.993'.
[  117.415715][ T9311] netlink: 56 bytes leftover after parsing attributes in process `syz.1.993'.
[  117.422168][ T9311] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  117.445646][ T9313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.994'.
[  117.454805][ T9313] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode
[  117.457513][ T9313] macvtap1: entered promiscuous mode
[  117.460494][ T9317] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  117.466315][ T9317] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  117.488083][ T9317] openvswitch: netlink: Missing key (keys=40, expected=80)
[  117.492033][ T9317] netlink: 16 bytes leftover after parsing attributes in process `syz.1.995'.
[  117.497040][ T9317] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  117.526183][ T9313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.994'.
[  117.538997][ T9320] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  117.626425][ T9324] netlink: 'syz.3.997': attribute type 10 has an invalid length.
[  117.710303][ T9326] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[  117.934614][ T9328] netlink: 24 bytes leftover after parsing attributes in process `syz.2.998'.
[  118.431002][ T9351] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  118.567137][ T9365] netlink: 'syz.1.1006': attribute type 1 has an invalid length.
[  118.591356][ T9365] 8021q: adding VLAN 0 to HW filter on device bond9
[  118.595097][ T9365] bond8: (slave bond9): making interface the new active one
[  118.598444][ T9365] bond8: (slave bond9): Enslaving as an active interface with an up link
[  118.691548][   T54] Bluetooth: hci3: command tx timeout
[  119.150495][ T9377] netlink: 'syz.2.1011': attribute type 11 has an invalid length.
[  119.154083][ T9377] netlink: 'syz.2.1011': attribute type 4 has an invalid length.
[  119.177700][ T9381] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20004
[  119.198856][ T9383] netlink: 'syz.2.1013': attribute type 1 has an invalid length.
[  119.206653][ T9383] 8021q: adding VLAN 0 to HW filter on device bond8
[  119.214844][ T9383] 8021q: adding VLAN 0 to HW filter on device bond8
[  119.217451][ T9383] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address
[  119.221564][ T9383] bond8: (slave vxcan3): Error -95 calling set_mac_address
[  119.267794][ T9383] veth5: entered promiscuous mode
[  119.273309][ T9383] bond8: (slave veth5): Enslaving as an active interface with a down link
[  119.278660][ T9383] erspan0: entered allmulticast mode
[  119.356984][ T9392] !: renamed from dummy0 (while UP)
[  119.414097][ T9395] lo speed is unknown, defaulting to 1000
[  119.416454][ T9395] lo speed is unknown, defaulting to 1000
[  119.794401][ T9413] netlink: 'syz.1.1022': attribute type 1 has an invalid length.
[  119.803551][ T9413] bond10: entered promiscuous mode
[  119.805841][ T9413] 8021q: adding VLAN 0 to HW filter on device bond10
[  119.814386][ T9413] 8021q: adding VLAN 0 to HW filter on device bond10
[  119.816857][ T9413] bond10: (slave wireguard0): The slave device specified does not support setting the MAC address
[  119.820370][ T9413] bond10: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  119.826912][ T9413] bond10: (slave wireguard0): making interface the new active one
[  119.829619][ T9413] wireguard0: entered promiscuous mode
[  119.832276][ T9413] bond10: (slave wireguard0): Enslaving as an active interface with an up link
[  119.837407][ T9413] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  119.840304][ T9413] IPv6: NLM_F_CREATE should be set when creating new route
[  119.843136][ T9413] IPv6: NLM_F_CREATE should be set when creating new route
[  119.845610][ T9413] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  119.850041][ T9413] bond10: (slave wireguard1): The slave device specified does not support setting the MAC address
[  119.855135][ T9413] bond10: (slave wireguard1): Enslaving as a backup interface with an up link
[  119.906468][ T9418] syzkaller1: entered promiscuous mode
[  119.908778][ T9418] syzkaller1: entered allmulticast mode
[  120.212536][ T9456] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  120.220542][ T9460] tipc: New replicast peer: 255.255.255.255
[  120.225469][ T9460] tipc: Enabled bearer <udp:syz2>, priority 10
[  120.326150][ T9470] tipc: Enabled bearer <udp:syz2>, priority 10
[  120.435827][ T9491] bond0: Master is either lo or non-ether device
[  120.447466][ T9495] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  120.761672][   T54] Bluetooth: hci3: command tx timeout
[  120.767254][ T9530] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  120.769731][ T9530] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  120.907038][ T9544] bond0 (unregistering): Released all slaves
[  121.300815][ T9558] netlink: 'syz.2.1065': attribute type 1 has an invalid length.
[  121.321428][ T5911] tipc: Node number set to 3516504673
[  121.375990][ T9560] bond9: (slave gretap1): making interface the new active one
[  121.379174][ T9560] bond9: (slave gretap1): Enslaving as an active interface with an up link
[  121.595645][ T9568] v: renamed from ip6_vti0 (while UP)
[  122.026461][ T9577] tipc: Resetting bearer <eth:syzkaller0>
[  122.046354][ T9332] lo speed is unknown, defaulting to 1000
[  122.048413][ T9332] syz0: Port: 1 Link DOWN
[  122.050079][ T9332] lo speed is unknown, defaulting to 1000
[  122.154680][ T9590] netlink: 'syz.2.1074': attribute type 4 has an invalid length.
[  122.218835][ T9594] __nla_validate_parse: 12 callbacks suppressed
[  122.218845][ T9594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1076'.
[  122.219558][ T9597] netlink: 'syz.2.1077': attribute type 1 has an invalid length.
[  122.237675][ T9597] bond10: entered promiscuous mode
[  122.240895][ T9597] 8021q: adding VLAN 0 to HW filter on device bond10
[  122.248801][ T9597] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1077'.
[  122.259740][ T9597] batadv1: entered promiscuous mode
[  122.261877][ T9597] batadv1: entered allmulticast mode
[  122.264674][ T9597] 8021q: adding VLAN 0 to HW filter on device batadv1
[  122.268031][ T9597] bond10: (slave batadv1): making interface the new active one
[  122.272394][ T9597] bond10: (slave batadv1): Enslaving as an active interface with an up link
[  122.281242][   T54] Bluetooth: hci0: command 0x080f tx timeout
[  122.331806][ T9604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1079'.
[  122.346484][   T55] block nbd1: Receive control failed (result -107)
[  122.365218][ T9597] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1077'.
[  122.381634][ T9604] nbd1: detected capacity change from 0 to 32
[  122.385385][ T9604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1079'.
[  122.387010][ T9613] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1081'.
[  122.399438][ T9604] netlink: 'syz.1.1079': attribute type 2 has an invalid length.
[  122.418675][ T9610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1080'.
[  122.442575][ T9621] vti1: entered promiscuous mode
[  122.486090][ T9632] netlink: 163856 bytes leftover after parsing attributes in process `syz.3.1087'.
[  122.492074][ T9632] netlink: 'syz.3.1087': attribute type 4 has an invalid length.
[  122.500507][ T9621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1083'.
[  122.577363][ T9649] netlink: 'syz.1.1092': attribute type 12 has an invalid length.
[  122.692169][ T9665] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1099'.
[  122.843528][   T54] Bluetooth: hci3: command tx timeout
[  123.615124][ T9729] netlink: 'syz.2.1118': attribute type 1 has an invalid length.
[  123.627010][ T9729] 8021q: adding VLAN 0 to HW filter on device bond11
[  123.648777][ T9729] 8021q: adding VLAN 0 to HW filter on device bond11
[  123.652724][ T9729] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address
[  123.661856][ T9729] bond11: (slave vxcan3): Error -95 calling set_mac_address
[  123.864817][ T9738] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  123.867206][ T9738] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  123.914394][ T9753] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  124.241258][ T9794] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  124.246504][ T9332] lo speed is unknown, defaulting to 1000
[  124.248401][ T9332] syz0: Port: 1 Link ACTIVE
[  124.250002][ T9332] lo speed is unknown, defaulting to 1000
[  124.844193][ T9828] syz.2.1151: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  124.850048][ T9828] CPU: 0 UID: 0 PID: 9828 Comm: syz.2.1151 Not tainted syzkaller #0 PREEMPT(full) 
[  124.850058][ T9828] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  124.850062][ T9828] Call Trace:
[  124.850066][ T9828]  <TASK>
[  124.850069][ T9828]  dump_stack_lvl+0x189/0x250
[  124.850083][ T9828]  ? __pfx_dump_stack_lvl+0x10/0x10
[  124.850091][ T9828]  ? __pfx__printk+0x10/0x10
[  124.850101][ T9828]  ? lock_release+0x4b/0x3e0
[  124.850111][ T9828]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  124.850120][ T9828]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  124.850128][ T9828]  warn_alloc+0x214/0x310
[  124.850139][ T9828]  ? __pfx_warn_alloc+0x10/0x10
[  124.850150][ T9828]  ? __get_vm_area_node+0x28f/0x300
[  124.850159][ T9828]  ? fq_pie_init+0x430/0x840
[  124.850169][ T9828]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  124.850183][ T9828]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  124.850194][ T9828]  ? rcu_is_watching+0x15/0xb0
[  124.850201][ T9828]  ? fq_pie_init+0x430/0x840
[  124.850209][ T9828]  ? fq_pie_init+0x430/0x840
[  124.850217][ T9828]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  124.850226][ T9828]  ? fq_pie_init+0x430/0x840
[  124.850234][ T9828]  ? tcf_block_get+0x67/0xa0
[  124.850243][ T9828]  ? __pfx_tcf_chain_head_change_dflt+0x10/0x10
[  124.850254][ T9828]  fq_pie_init+0x430/0x840
[  124.850263][ T9828]  ? __pfx_fq_pie_init+0x10/0x10
[  124.850271][ T9828]  qdisc_create+0x7ac/0xea0
[  124.850281][ T9828]  tc_modify_qdisc+0x1538/0x20e0
[  124.850291][ T9828]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  124.850303][ T9828]  ? lock_release+0x4b/0x3e0
[  124.850311][ T9828]  ? bpf_lsm_capable+0x9/0x20
[  124.850321][ T9828]  ? security_capable+0x7e/0x2e0
[  124.850332][ T9828]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  124.850339][ T9828]  rtnetlink_rcv_msg+0x77c/0xb70
[  124.850350][ T9828]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  124.850360][ T9828]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  124.850369][ T9828]  ? __netlink_lookup+0xbd/0x810
[  124.850375][ T9828]  ? rcu_is_watching+0x15/0xb0
[  124.850382][ T9828]  ? rcu_is_watching+0x15/0xb0
[  124.850389][ T9828]  netlink_rcv_skb+0x208/0x470
[  124.850399][ T9828]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  124.850409][ T9828]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  124.850422][ T9828]  netlink_unicast+0x82f/0x9e0
[  124.850433][ T9828]  ? __pfx_netlink_unicast+0x10/0x10
[  124.850442][ T9828]  ? netlink_sendmsg+0x642/0xb30
[  124.850447][ T9828]  ? skb_put+0x11b/0x210
[  124.850455][ T9828]  netlink_sendmsg+0x805/0xb30
[  124.850462][ T9828]  ? __pfx_netlink_sendmsg+0x10/0x10
[  124.850468][ T9828]  ? aa_sock_msg_perm+0xf1/0x1d0
[  124.850475][ T9828]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  124.850482][ T9828]  ? __pfx_netlink_sendmsg+0x10/0x10
[  124.850488][ T9828]  __sock_sendmsg+0x21c/0x270
[  124.850497][ T9828]  ____sys_sendmsg+0x505/0x830
[  124.850505][ T9828]  ? __pfx_____sys_sendmsg+0x10/0x10
[  124.850513][ T9828]  ? import_iovec+0x74/0xa0
[  124.850522][ T9828]  ___sys_sendmsg+0x21f/0x2a0
[  124.850529][ T9828]  ? __pfx____sys_sendmsg+0x10/0x10
[  124.850537][ T9828]  ? futex_wake+0x4b2/0x560
[  124.850550][ T9828]  ? __fget_files+0x2a/0x420
[  124.850556][ T9828]  ? __fget_files+0x3a0/0x420
[  124.850563][ T9828]  __x64_sys_sendmsg+0x19b/0x260
[  124.850570][ T9828]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  124.850579][ T9828]  ? rcu_is_watching+0x15/0xb0
[  124.850586][ T9828]  ? rcu_is_watching+0x15/0xb0
[  124.850593][ T9828]  do_syscall_64+0xfa/0x3b0
[  124.850600][ T9828]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.850606][ T9828]  ? exc_page_fault+0x9f/0xf0
[  124.850616][ T9828]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.850622][ T9828] RIP: 0033:0x7fccd938ebe9
[  124.850630][ T9828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  124.850636][ T9828] RSP: 002b:00007fccda283038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  124.850644][ T9828] RAX: ffffffffffffffda RBX: 00007fccd95b6090 RCX: 00007fccd938ebe9
[  124.850649][ T9828] RDX: 000000002000400c RSI: 00002000000000c0 RDI: 0000000000000006
[  124.850654][ T9828] RBP: 00007fccd9411e19 R08: 0000000000000000 R09: 0000000000000000
[  124.850658][ T9828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  124.850662][ T9828] R13: 00007fccd95b6128 R14: 00007fccd95b6090 R15: 00007ffc6a191e48
[  124.850670][ T9828]  </TASK>
[  124.850672][ T9828] Mem-Info:
[  125.008781][ T9828] active_anon:4630 inactive_anon:0 isolated_anon:0
[  125.008781][ T9828]  active_file:1360 inactive_file:38241 isolated_file:0
[  125.008781][ T9828]  unevictable:1768 dirty:74 writeback:0
[  125.008781][ T9828]  slab_reclaimable:10334 slab_unreclaimable:82236
[  125.008781][ T9828]  mapped:23170 shmem:2417 pagetables:931
[  125.008781][ T9828]  sec_pagetables:0 bounce:0
[  125.008781][ T9828]  kernel_misc_reclaimable:0
[  125.008781][ T9828]  free:249347 free_pcp:26533 free_cma:0
[  125.027094][ T9828] Node 0 active_anon:11984kB inactive_anon:0kB active_file:3772kB inactive_file:137452kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:31872kB dirty:96kB writeback:0kB shmem:4868kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5312kB pagetables:2084kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  125.040242][ T9828] Node 1 active_anon:6536kB inactive_anon:0kB active_file:1668kB inactive_file:15512kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:60808kB dirty:200kB writeback:0kB shmem:4800kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7700kB pagetables:1640kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  125.052965][ T9828] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  125.065354][ T9828] lowmem_reserve[]: 0 811 811 811 811
[  125.067666][ T9828] Node 0 DMA32 free:180900kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11984kB inactive_anon:0kB active_file:3772kB inactive_file:137452kB unevictable:3536kB writepending:96kB present:1556484kB managed:830924kB mlocked:0kB bounce:0kB free_pcp:50800kB local_pcp:31680kB free_cma:0kB
[  125.080559][ T9828] lowmem_reserve[]: 0 0 0 0 0
[  125.082740][ T9828] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  125.094996][ T9828] lowmem_reserve[]: 0 0 854 854 854
[  125.097225][ T9828] Node 1 Normal free:342636kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6536kB inactive_anon:0kB active_file:1668kB inactive_file:15512kB unevictable:3536kB writepending:200kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:55192kB local_pcp:22844kB free_cma:0kB
[  125.110376][ T9828] lowmem_reserve[]: 0 0 0 0 0
[  125.112532][ T9828] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  125.117735][ T9828] Node 0 DMA32: 109*4kB (UME) 814*8kB (UME) 637*16kB (UME) 201*32kB (UME) 54*64kB (UME) 24*128kB (UME) 31*256kB (UM) 15*512kB (UME) 10*1024kB (UM) 3*2048kB (UE) 29*4096kB (UM) = 180884kB
[  125.125289][ T9828] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  125.132234][ T9828] Node 1 Normal: 509*4kB (UM) 21*8kB (UME) 13*16kB (UM) 8*32kB (UM) 2*64kB (UM) 5*128kB (UME) 3*256kB (UM) 13*512kB (UME) 6*1024kB (UM) 3*2048kB (ME) 78*4096kB (UM) = 342636kB
[  125.138901][ T9828] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  125.142560][ T9828] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  125.145787][ T9828] 42749 total pagecache pages
[  125.147808][ T9828] 0 pages in swap cache
[  125.149575][ T9828] Free swap  = 124996kB
[  125.151542][ T9828] Total swap = 124996kB
[  125.153460][ T9828] 786301 pages RAM
[  125.155168][ T9828] 0 pages HighMem/MovableOnly
[  125.157286][ T9828] 241338 pages reserved
[  125.159213][ T9828] 0 pages cma reserved
[  125.191606][ T9835] lo speed is unknown, defaulting to 1000
[  125.202723][ T9835] lo speed is unknown, defaulting to 1000
[  125.324577][ T9846] netlink: 'syz.1.1155': attribute type 1 has an invalid length.
[  125.360703][ T9849] netlink: 'syz.1.1157': attribute type 1 has an invalid length.
[  125.373402][ T9849] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.388441][ T9852] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  125.822494][ T9865] netlink: 'syz.3.1160': attribute type 13 has an invalid length.
[  125.825630][ T9865] netlink: 'syz.3.1160': attribute type 17 has an invalid length.
[  125.857706][ T9865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  125.885523][ T9864] lo speed is unknown, defaulting to 1000
[  125.888749][ T9864] lo speed is unknown, defaulting to 1000
[  126.134592][ T9874] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  126.272246][ T9881] tipc: Trying to set illegal importance in message
[  126.737705][ T9907] 8021q: VLANs not supported on bond0
[  126.787449][ T9911] 8021q: adding VLAN 0 to HW filter on device bond13
[  126.923122][ T9929] GUP no longer grows the stack in syz.2.1180 (9929): 200000003000-20000000a000 (200000001000)
[  126.926642][ T9929] CPU: 0 UID: 0 PID: 9929 Comm: syz.2.1180 Not tainted syzkaller #0 PREEMPT(full) 
[  126.926655][ T9929] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  126.926660][ T9929] Call Trace:
[  126.926665][ T9929]  <TASK>
[  126.926668][ T9929]  dump_stack_lvl+0x189/0x250
[  126.926686][ T9929]  ? __pfx_dump_stack_lvl+0x10/0x10
[  126.926695][ T9929]  ? __pfx__printk+0x10/0x10
[  126.926705][ T9929]  ? find_vma+0xe7/0x160
[  126.926717][ T9929]  ? unwind_next_frame+0xa5/0x2390
[  126.926729][ T9929]  __get_user_pages+0x24d0/0x2ce0
[  126.926740][ T9929]  ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190
[  126.926753][ T9929]  ? __gup_longterm_locked+0xc68/0x1660
[  126.926765][ T9929]  ? rcu_is_watching+0x15/0xb0
[  126.926774][ T9929]  __gup_longterm_locked+0xde9/0x1660
[  126.926785][ T9929]  ? sanity_check_pinned_pages+0x123a/0x1300
[  126.926794][ T9929]  gup_fast_fallback+0x1e6a/0x2010
[  126.926808][ T9929]  ? __pfx_gup_fast_fallback+0x10/0x10
[  126.926816][ T9929]  ? stack_trace_save+0x9c/0xe0
[  126.926827][ T9929]  ? pin_user_pages_fast+0x4d/0xb0
[  126.926835][ T9929]  iov_iter_extract_pages+0x35a/0x5e0
[  126.926854][ T9929]  extract_iter_to_sg+0xe46/0x24e0
[  126.926891][ T9929]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  126.926906][ T9929]  ? __asan_memset+0x22/0x50
[  126.926915][ T9929]  af_alg_get_rsgl+0x436/0x810
[  126.926929][ T9929]  aead_recvmsg+0x4cc/0x13f0
[  126.926942][ T9929]  ? rcu_is_watching+0x15/0xb0
[  126.926951][ T9929]  ? __pfx_aead_recvmsg+0x10/0x10
[  126.926961][ T9929]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  126.926971][ T9929]  ? security_socket_recvmsg+0x7e/0x2e0
[  126.926979][ T9929]  ? __pfx_aead_recvmsg+0x10/0x10
[  126.926988][ T9929]  sock_recvmsg_nosec+0x186/0x1c0
[  126.927000][ T9929]  ____sys_recvmsg+0x3aa/0x460
[  126.927009][ T9929]  ? __pfx_____sys_recvmsg+0x10/0x10
[  126.927018][ T9929]  ? import_iovec+0x74/0xa0
[  126.927026][ T9929]  ___sys_recvmsg+0x1b5/0x510
[  126.927034][ T9929]  ? __pfx____sys_recvmsg+0x10/0x10
[  126.927041][ T9929]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  126.927055][ T9929]  ? __fget_files+0x2a/0x420
[  126.927065][ T9929]  ? rcu_is_watching+0x15/0xb0
[  126.927073][ T9929]  ? lock_release+0x4b/0x3e0
[  126.927085][ T9929]  ? __might_fault+0xcc/0x130
[  126.927096][ T9929]  do_recvmmsg+0x307/0x770
[  126.927105][ T9929]  ? __pfx_do_recvmmsg+0x10/0x10
[  126.927112][ T9929]  ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0
[  126.927125][ T9929]  ? __pfx_do_futex+0x10/0x10
[  126.927136][ T9929]  __x64_sys_recvmmsg+0x190/0x240
[  126.927144][ T9929]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  126.927153][ T9929]  ? rcu_is_watching+0x15/0xb0
[  126.927160][ T9929]  do_syscall_64+0xfa/0x3b0
[  126.927167][ T9929]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.927174][ T9929]  ? exc_page_fault+0x9f/0xf0
[  126.927184][ T9929]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.927191][ T9929] RIP: 0033:0x7fccd938ebe9
[  126.927199][ T9929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  126.927205][ T9929] RSP: 002b:00007fccda2a4038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  126.927215][ T9929] RAX: ffffffffffffffda RBX: 00007fccd95b5fa0 RCX: 00007fccd938ebe9
[  126.927221][ T9929] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000008
[  126.927226][ T9929] RBP: 00007fccd9411e19 R08: 0000000000000000 R09: 0000000000000000
[  126.927231][ T9929] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[  126.927237][ T9929] R13: 00007fccd95b6038 R14: 00007fccd95b5fa0 R15: 00007ffc6a191e48
[  126.927246][ T9929]  </TASK>
[  127.206848][ T9950] syzkaller1: entered allmulticast mode
[  127.210699][ T9950] syzkaller1: left allmulticast mode
[  127.227078][ T9952] IPVS: set_ctl: invalid protocol: 22 100.1.1.2:14
[  127.253192][ T9968] __nla_validate_parse: 27 callbacks suppressed
[  127.253202][ T9968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1191'.
[  127.324673][ T9981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1197'.
[  127.501260][ T9981] block nbd2: server does not support multiple connections per device.
[  127.504657][ T9981] block nbd2: shutting down sockets
[  127.538907][ T9994] validate_nla: 3 callbacks suppressed
[  127.538918][ T9994] netlink: 'syz.3.1199': attribute type 1 has an invalid length.
[  127.543931][ T9994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1199'.
[  127.575689][ T9996] netlink: 'syz.3.1200': attribute type 58 has an invalid length.
[  127.579274][ T9996] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1200'.
[  127.618934][T10001] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1202'.
[  127.623690][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1202'.
[  127.656655][T10003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1203'.
[  127.674142][T10005] lo speed is unknown, defaulting to 1000
[  127.676435][T10005] lo speed is unknown, defaulting to 1000
[  127.748620][T10015] IPv6: sit3: Disabled Multicast RS
[  127.750775][T10015] sit3: entered allmulticast mode
[  127.757912][T10016] IPv6: sit3: Disabled Multicast RS
[  127.760107][T10016] sit3: entered allmulticast mode
[  127.927665][T10024] pim6reg1: entered promiscuous mode
[  127.930068][T10024] pim6reg1: entered allmulticast mode
[  128.004368][T10025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1209'.
[  128.050042][T10032] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1212'.
[  128.054986][T10032] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1212'.
[  128.058274][T10032] tipc: Invalid UDP bearer configuration
[  128.058293][T10032] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[  128.257955][T10052] netlink: 'syz.3.1218': attribute type 13 has an invalid length.
[  128.260931][T10052] netlink: 'syz.3.1218': attribute type 17 has an invalid length.
[  128.269779][T10052] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  128.291026][T10052] lo speed is unknown, defaulting to 1000
[  128.295608][T10052] lo speed is unknown, defaulting to 1000
[  128.338762][T10054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  128.851031][ T5875] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  129.569748][T10069] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  129.670803][T10075] xt_time: unknown flags 0xf4
[  129.702792][T10077] vxcan2: entered promiscuous mode
[  129.823338][T10087] bridge5: the hash_elasticity option has been deprecated and is always 16
[  130.797657][T10111] netlink: 'syz.1.1238': attribute type 12 has an invalid length.
[  130.833936][T10105] Bluetooth: MGMT ver 1.23
[  130.853722][T10112] syzkaller0: entered promiscuous mode
[  130.855588][T10112] syzkaller0: entered allmulticast mode
[  130.863333][T10105] veth1: entered promiscuous mode
[  130.866187][T10105] bridge3: entered promiscuous mode
[  130.868959][T10105] debugfs: 'hsr0' already exists in 'hsr'
[  130.871723][T10105] Cannot create hsr debugfs directory
[  130.874109][T10105] hsr0: Slave A (veth1) is not up; please bring it up to get a fully working HSR network
[  130.878279][T10105] hsr0: entered promiscuous mode
[  130.968132][T10120] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.970756][T10120] syzkaller0: entered promiscuous mode
[  130.973088][T10120] syzkaller0: entered allmulticast mode
[  130.997877][T10120] tipc: Resetting bearer <eth:syzkaller0>
[  131.011000][T10118] tipc: Resetting bearer <eth:syzkaller0>
[  131.019277][T10118] tipc: Disabling bearer <eth:syzkaller0>
[  131.098063][T10140] rdma_rxe: rxe_newlink: failed to add vxcan1
[  131.133447][T10140] nbd: socks must be embedded in a SOCK_ITEM attr
[  131.138539][T10141] nbd: device at index 64 is going down
[  131.287876][T10150] netlink: 'syz.2.1248': attribute type 13 has an invalid length.
[  131.290609][T10150] netlink: 'syz.2.1248': attribute type 17 has an invalid length.
[  131.301356][T10150] erspan0: left allmulticast mode
[  131.316457][T10150] 8021q: adding VLAN 0 to HW filter on device bond0
[  131.319867][T10150] 8021q: adding VLAN 0 to HW filter on device team0
[  131.325871][T10150] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  131.342290][T10149] lo speed is unknown, defaulting to 1000
[  131.345127][T10149] lo speed is unknown, defaulting to 1000
[  131.456706][T10148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  131.990709][T10152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  132.124131][T10176] netlink: 'syz.1.1253': attribute type 13 has an invalid length.
[  132.139838][T10176] netlink: 'syz.1.1253': attribute type 17 has an invalid length.
[  132.170709][T10176] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  132.185768][T10186] lo speed is unknown, defaulting to 1000
[  132.187990][T10186] lo speed is unknown, defaulting to 1000
[  132.637486][T10192] lo speed is unknown, defaulting to 1000
[  132.639957][T10192] lo speed is unknown, defaulting to 1000
[  132.734876][T10195] syzkaller0: entered promiscuous mode
[  132.736904][T10195] syzkaller0: entered allmulticast mode
[  132.806388][T10198] openvswitch: netlink: Missing valid actions attribute.
[  132.808842][T10198] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.812674][T10198] netlink: 'syz.3.1260': attribute type 10 has an invalid length.
[  132.820289][T10198] 8021q: adding VLAN 0 to HW filter on device batadv0
[  132.825734][T10198] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  132.829542][T10198] netlink: 'syz.3.1260': attribute type 10 has an invalid length.
[  132.832358][T10198] __nla_validate_parse: 24 callbacks suppressed
[  132.832365][T10198] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1260'.
[  132.837841][T10198] batadv0: entered promiscuous mode
[  132.839673][T10198] batadv0: entered allmulticast mode
[  132.849162][T10198] bond0: (slave batadv0): Releasing backup interface
[  132.856576][T10198] bridge0: port 3(batadv0) entered blocking state
[  132.859323][T10198] bridge0: port 3(batadv0) entered disabled state
[  132.879657][T10200] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1261'.
[  133.045913][T10223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1268'.
[  133.058613][T10223] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  133.070864][T10223] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1268'.
[  133.075481][T10225] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1269'.
[  133.079422][T10223] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1268'.
[  133.149086][T10234] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  133.191033][T10240] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  133.196703][T10240] sctp: [Deprecated]: syz.1.1273 (pid 10240) Use of int in max_burst socket option.
[  133.196703][T10240] Use struct sctp_assoc_value instead
[  133.202435][ T5875] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  133.205743][ T5875] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  133.258796][T10246] netlink: 182 bytes leftover after parsing attributes in process `syz.2.1275'.
[  133.263549][T10248] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1273'.
[  133.324946][T10256] netlink: 'syz.2.1278': attribute type 10 has an invalid length.
[  133.330545][T10256] team0: Port device dummy0 added
[  133.334787][T10256] netlink: 'syz.2.1278': attribute type 10 has an invalid length.
[  133.343307][T10256] team0: Port device dummy0 removed
[  133.500162][T10283] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1285'.
[  133.508927][T10285] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1286'.
[  133.577100][T10293] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  133.814482][T10315] netlink: 'syz.1.1298': attribute type 1 has an invalid length.
[  133.826978][T10315] 8021q: adding VLAN 0 to HW filter on device bond11
[  133.856488][T10315] veth7: entered promiscuous mode
[  133.937170][T10322] Unsupported ieee802154 address type: 0
[  134.925073][T10354] netlink: 'syz.3.1308': attribute type 13 has an invalid length.
[  134.927937][T10354] netlink: 'syz.3.1308': attribute type 17 has an invalid length.
[  134.938608][T10354] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  134.960462][T10354] lo speed is unknown, defaulting to 1000
[  134.964667][T10354] lo speed is unknown, defaulting to 1000
[  135.007091][T10355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  135.013266][T10355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  135.627910][T10362] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  136.010504][T10384] tun0: tun_chr_ioctl cmd 1074025672
[  136.012898][T10384] tun0: ignored: set checksum disabled
[  136.069407][T10386] lo speed is unknown, defaulting to 1000
[  136.072431][T10386] lo speed is unknown, defaulting to 1000
[  136.115165][T10387] netlink: 'syz.2.1317': attribute type 5 has an invalid length.
[  136.237682][T10394] netlink: 'syz.3.1320': attribute type 18 has an invalid length.
[  136.390926][T10405] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.463065][T10405] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.508544][T10405] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.559901][T10405] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.622432][ T5874] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  136.627741][ T5874] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  136.633863][ T5874] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  136.639632][ T5874] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  137.200092][T10422] pim6reg: entered allmulticast mode
[  137.529102][T10436] tun0: tun_chr_ioctl cmd 1074025672
[  137.531531][T10436] tun0: ignored: set checksum disabled
[  137.533915][T10437] tun0: tun_chr_ioctl cmd 1074025672
[  137.535726][T10437] tun0: ignored: set checksum disabled
[  137.690975][T10439] lo speed is unknown, defaulting to 1000
[  137.816887][T10444] lo speed is unknown, defaulting to 1000
[  137.998027][T10455] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  138.006575][T10455] bond8: (slave bond9): Releasing backup interface
[  138.010520][T10455] bond10: (slave wireguard0): Releasing backup interface
[  138.016618][T10455] wireguard0: left promiscuous mode
[  138.018451][T10455] bond10: (slave wireguard1): making interface the new active one
[  138.022237][T10455] wireguard1: entered promiscuous mode
[  138.025476][T10455] bond10: (slave wireguard1): Releasing backup interface
[  138.027824][T10455] wireguard1: left promiscuous mode
[  138.033449][T10455] netlink: 'syz.1.1339': attribute type 1 has an invalid length.
[  138.036440][T10455] netlink: 'syz.1.1339': attribute type 10 has an invalid length.
[  138.039235][T10455] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  138.042782][T10455] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  138.045826][T10455] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  138.175957][T10460] __nla_validate_parse: 16 callbacks suppressed
[  138.175968][T10460] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1341'.
[  138.182743][T10460] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1341'.
[  138.205208][T10462] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  138.208969][T10462] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  138.407733][T10471] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  138.417061][T10470] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  138.545047][T10480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1347'.
[  138.650220][T10489] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1349'.
[  138.841564][T10491] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1350'.
[  138.907724][T10510] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1356'.
[  138.914610][T10509] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.917574][T10509] syzkaller0: entered promiscuous mode
[  138.919622][T10509] syzkaller0: entered allmulticast mode
[  138.930214][T10509] tipc: Resetting bearer <eth:syzkaller0>
[  138.930327][T10512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1357'.
[  138.936229][T10507] tipc: Resetting bearer <eth:syzkaller0>
[  138.940144][T10507] tipc: Disabling bearer <eth:syzkaller0>
[  138.949318][T10512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1357'.
[  139.086617][T10519] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1359'.
[  139.093705][T10519] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1359'.
[  140.293171][T10568] IPVS: set_ctl: invalid protocol: 20 100.1.1.2:20001
[  140.312957][   T10] IPVS: starting estimator thread 0...
[  140.314883][T10570] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  140.396795][T10578] netlink: 'syz.1.1377': attribute type 10 has an invalid length.
[  140.401897][T10571] IPVS: using max 134 ests per chain, 321600 per kthread
[  140.419942][T10578] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  140.425194][T10580] netlink: 'syz.2.1376': attribute type 10 has an invalid length.
[  140.430427][T10580] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  140.434903][T10580] team0: Failed to send options change via netlink (err -105)
[  140.438526][T10580] team0: Port device dummy0 added
[  140.481524][T10589] netlink: 'syz.1.1381': attribute type 10 has an invalid length.
[  140.485110][T10589] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  140.489043][T10589] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  140.492645][T10589] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  141.320557][T10609] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.325951][T10610] syzkaller0: entered promiscuous mode
[  141.328034][T10610] syzkaller0: entered allmulticast mode
[  141.330515][    C0] ==================================================================
[  141.330532][    C0] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  141.330551][    C0] Write of size 8 at addr ffff8881088984b0 by task syz.2.1386/10610
[  141.330562][    C0] 
[  141.330569][    C0] CPU: 0 UID: 0 PID: 10610 Comm: syz.2.1386 Not tainted syzkaller #0 PREEMPT(full) 
[  141.330583][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  141.330591][    C0] Call Trace:
[  141.330596][    C0]  <IRQ>
[  141.330602][    C0]  dump_stack_lvl+0x189/0x250
[  141.330619][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  141.330634][    C0]  ? rcu_is_watching+0x15/0xb0
[  141.330647][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  141.330660][    C0]  ? rcu_is_watching+0x15/0xb0
[  141.330671][    C0]  ? lock_release+0x4b/0x3e0
[  141.330688][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  141.330702][    C0]  ? __virt_addr_valid+0x4a5/0x5c0
[  141.330717][    C0]  print_report+0xca/0x240
[  141.330770][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  141.330779][    C0]  kasan_report+0x118/0x150
[  141.330797][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  141.330810][    C0]  __xfrm_state_delete+0x696/0xca0
[  141.330824][    C0]  xfrm_timer_handler+0x18f/0xa00
[  141.330844][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  141.330861][    C0]  ? rcu_is_watching+0x15/0xb0
[  141.330873][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  141.330890][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  141.330906][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  141.330923][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  141.330939][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  141.330957][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  141.330969][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  141.330984][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  141.330997][    C0]  handle_softirqs+0x286/0x870
[  141.331009][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  141.331022][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  141.331034][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  141.331049][    C0]  __irq_exit_rcu+0xca/0x1f0
[  141.331079][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  141.331094][    C0]  irq_exit_rcu+0x9/0x30
[  141.331104][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  141.331121][    C0]  </IRQ>
[  141.331125][    C0]  <TASK>
[  141.331130][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  141.331143][    C0] RIP: 0010:console_flush_all+0x7f7/0xc40
[  141.331159][    C0] Code: 48 21 c3 0f 85 e9 01 00 00 e8 15 49 1f 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 06 49 1f 00 eb 06 e8 ff 48 1f 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 ba b4 82 00 48 8b 1b 48 8b 44 24
[  141.331169][    C0] RSP: 0018:ffffc90007ee7540 EFLAGS: 00000293
[  141.331182][    C0] RAX: 1ffffffff1d367ef RBX: ffffffff8e9b3f78 RCX: ffff88801f653980
[  141.331190][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  141.331198][    C0] RBP: ffffc90007ee7690 R08: ffffffff8fa38637 R09: 1ffffffff1f470c6
[  141.331207][    C0] R10: dffffc0000000000 R11: fffffbfff1f470c7 R12: dffffc0000000000
[  141.331216][    C0] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e9b3f20
[  141.331231][    C0]  ? console_flush_all+0x13a/0xc40
[  141.331247][    C0]  ? __pfx_console_flush_all+0x10/0x10
[  141.331260][    C0]  ? lock_acquire+0x5f/0x360
[  141.331276][    C0]  ? preempt_schedule+0xae/0xc0
[  141.331293][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  141.331309][    C0]  console_unlock+0xc4/0x270
[  141.331322][    C0]  ? __pfx_console_unlock+0x10/0x10
[  141.331335][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  141.331351][    C0]  vprintk_emit+0x5b7/0x7a0
[  141.331364][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  141.331382][    C0]  _printk+0xcf/0x120
[  141.331399][    C0]  ? __pfx__printk+0x10/0x10
[  141.331413][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  141.331430][    C0]  ? __netdev_printk+0x365/0x4d0
[  141.331446][    C0]  netdev_info+0x10a/0x160
[  141.331465][    C0]  ? __pfx_netdev_info+0x10/0x10
[  141.331483][    C0]  ? rcu_is_watching+0x15/0xb0
[  141.331494][    C0]  ? __dev_change_flags+0x48d/0x6d0
[  141.331507][    C0]  netif_set_allmulti+0x1b8/0x380
[  141.331521][    C0]  __dev_change_flags+0x52e/0x6d0
[  141.331538][    C0]  ? __mutex_lock+0x5bb/0x1350
[  141.331550][    C0]  ? __pfx___dev_change_flags+0x10/0x10
[  141.331562][    C0]  ? full_name_hash+0x92/0xe0
[  141.331576][    C0]  netif_change_flags+0x88/0x1a0
[  141.331589][    C0]  dev_change_flags+0x130/0x260
[  141.331602][    C0]  dev_ioctl+0x7b4/0x1150
[  141.331620][    C0]  sock_do_ioctl+0x22c/0x300
[  141.331636][    C0]  ? __pfx_sock_do_ioctl+0x10/0x10
[  141.331649][    C0]  ? do_futex+0x395/0x420
[  141.331669][    C0]  sock_ioctl+0x576/0x790
[  141.331682][    C0]  ? lock_release+0x4b/0x3e0
[  141.331698][    C0]  ? __pfx_sock_ioctl+0x10/0x10
[  141.331712][    C0]  ? __fget_files+0x2a/0x420
[  141.331747][    C0]  ? __fget_files+0x3a0/0x420
[  141.331758][    C0]  ? __fget_files+0x2a/0x420
[  141.331770][    C0]  ? bpf_lsm_file_ioctl+0x9/0x20
[  141.331784][    C0]  ? __pfx_sock_ioctl+0x10/0x10
[  141.331797][    C0]  __se_sys_ioctl+0xfc/0x170
[  141.331812][    C0]  do_syscall_64+0xfa/0x3b0
[  141.331823][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.331834][    C0]  ? exc_page_fault+0x9f/0xf0
[  141.331850][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.331861][    C0] RIP: 0033:0x7fccd938ebe9
[  141.331872][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  141.331882][    C0] RSP: 002b:00007fccda283038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  141.331895][    C0] RAX: ffffffffffffffda RBX: 00007fccd95b6090 RCX: 00007fccd938ebe9
[  141.331904][    C0] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000004
[  141.331912][    C0] RBP: 00007fccd9411e19 R08: 0000000000000000 R09: 0000000000000000
[  141.331919][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  141.331926][    C0] R13: 00007fccd95b6128 R14: 00007fccd95b6090 R15: 00007ffc6a191e48
[  141.331939][    C0]  </TASK>
[  141.331944][    C0] 
[  141.331948][    C0] Allocated by task 8748:
[  141.331954][    C0]  kasan_save_track+0x3e/0x80
[  141.331968][    C0]  __kasan_slab_alloc+0x6c/0x80
[  141.331981][    C0]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  141.331995][    C0]  xfrm_state_alloc+0x24/0x2f0
[  141.332011][    C0]  __find_acq_core+0x8a7/0x1c00
[  141.332022][    C0]  xfrm_find_acq+0x78/0xa0
[  141.332033][    C0]  xfrm_alloc_userspi+0x6b3/0xc90
[  141.332046][    C0]  xfrm_user_rcv_msg+0x7a3/0xab0
[  141.332058][    C0]  netlink_rcv_skb+0x208/0x470
[  141.332073][    C0]  xfrm_netlink_rcv+0x79/0x90
[  141.332086][    C0]  netlink_unicast+0x82f/0x9e0
[  141.332100][    C0]  netlink_sendmsg+0x805/0xb30
[  141.332109][    C0]  __sock_sendmsg+0x21c/0x270
[  141.332123][    C0]  ____sys_sendmsg+0x505/0x830
[  141.332134][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  141.332144][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  141.332156][    C0]  do_syscall_64+0xfa/0x3b0
[  141.332165][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.332175][    C0] 
[  141.332179][    C0] Freed by task 5845:
[  141.332184][    C0]  kasan_save_track+0x3e/0x80
[  141.332197][    C0]  kasan_save_free_info+0x46/0x50
[  141.332207][    C0]  __kasan_slab_free+0x5b/0x80
[  141.332220][    C0]  kmem_cache_free+0x18f/0x400
[  141.332234][    C0]  xfrm_state_gc_task+0x52d/0x6b0
[  141.332248][    C0]  process_scheduled_works+0xae1/0x17b0
[  141.332266][    C0]  worker_thread+0x8a0/0xda0
[  141.332276][    C0]  kthread+0x711/0x8a0
[  141.332289][    C0]  ret_from_fork+0x3fc/0x770
[  141.332300][    C0]  ret_from_fork_asm+0x1a/0x30
[  141.332313][    C0] 
[  141.332316][    C0] The buggy address belongs to the object at ffff888108898480
[  141.332316][    C0]  which belongs to the cache xfrm_state of size 928
[  141.332326][    C0] The buggy address is located 48 bytes inside of
[  141.332326][    C0]  freed 928-byte region [ffff888108898480, ffff888108898820)
[  141.332339][    C0] 
[  141.332343][    C0] The buggy address belongs to the physical page:
[  141.332350][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888108898480 pfn:0x108898
[  141.332362][    C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  141.332372][    C0] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  141.332384][    C0] page_type: f5(slab)
[  141.332395][    C0] raw: 057ff00000000040 ffff888105542280 dead000000000122 0000000000000000
[  141.332406][    C0] raw: ffff888108898480 00000000800e000a 00000000f5000000 0000000000000000
[  141.332417][    C0] head: 057ff00000000040 ffff888105542280 dead000000000122 0000000000000000
[  141.332427][    C0] head: ffff888108898480 00000000800e000a 00000000f5000000 0000000000000000
[  141.332437][    C0] head: 057ff00000000002 ffffea0004222601 00000000ffffffff 00000000ffffffff
[  141.332448][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  141.332454][    C0] page dumped because: kasan: bad access detected
[  141.332460][    C0] page_owner tracks the page as allocated
[  141.332465][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6345, tgid 6339 (syz.2.129), ts 53124794675, free_ts 46754856367
[  141.332485][    C0]  post_alloc_hook+0x240/0x2a0
[  141.332500][    C0]  get_page_from_freelist+0x21e4/0x22c0
[  141.332512][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[  141.332528][    C0]  alloc_pages_mpol+0x232/0x4a0
[  141.332543][    C0]  allocate_slab+0x8a/0x370
[  141.332553][    C0]  ___slab_alloc+0xbeb/0x1410
[  141.332568][    C0]  kmem_cache_alloc_noprof+0x283/0x3c0
[  141.332582][    C0]  xfrm_state_alloc+0x24/0x2f0
[  141.332596][    C0]  pfkey_add+0x6e4/0x2e00
[  141.332607][    C0]  pfkey_sendmsg+0xbfe/0x1090
[  141.332617][    C0]  __sock_sendmsg+0x21c/0x270
[  141.332630][    C0]  ____sys_sendmsg+0x505/0x830
[  141.332641][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  141.332652][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  141.332663][    C0]  do_syscall_64+0xfa/0x3b0
[  141.332672][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.332683][    C0] page last free pid 5908 tgid 5908 stack trace:
[  141.332691][    C0]  __free_frozen_pages+0xbc4/0xd30
[  141.332706][    C0]  __slab_free+0x303/0x3c0
[  141.332716][    C0]  qlist_free_all+0x97/0x140
[  141.332753][    C0]  kasan_quarantine_reduce+0x148/0x160
[  141.332766][    C0]  __kasan_slab_alloc+0x22/0x80
[  141.332780][    C0]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  141.332793][    C0]  vm_area_alloc+0x24/0x140
[  141.332808][    C0]  mmap_region+0xdc7/0x20c0
[  141.332821][    C0]  do_mmap+0xc45/0x10d0
[  141.332834][    C0]  vm_mmap_pgoff+0x2a6/0x4d0
[  141.332846][    C0]  ksys_mmap_pgoff+0x51f/0x760
[  141.332859][    C0]  do_syscall_64+0xfa/0x3b0
[  141.332868][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.332879][    C0] 
[  141.332882][    C0] Memory state around the buggy address:
[  141.332890][    C0]  ffff888108898380: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  141.332898][    C0]  ffff888108898400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  141.332906][    C0] >ffff888108898480: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  141.332913][    C0]                                      ^
[  141.332919][    C0]  ffff888108898500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  141.332927][    C0]  ffff888108898580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  141.332934][    C0] ==================================================================
[  141.333005][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  141.333016][    C0] CPU: 0 UID: 0 PID: 10610 Comm: syz.2.1386 Not tainted syzkaller #0 PREEMPT(full) 
[  141.333031][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  141.333038][    C0] Call Trace:
[  141.333043][    C0]  <IRQ>
[  141.333048][    C0]  dump_stack_lvl+0x99/0x250
[  141.333062][    C0]  ? __asan_memcpy+0x40/0x70
[  141.333076][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  141.333089][    C0]  ? __pfx__printk+0x10/0x10
[  141.333109][    C0]  vpanic+0x281/0x750
[  141.333123][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  141.333135][    C0]  ? __pfx_vpanic+0x10/0x10
[  141.333150][    C0]  ? rcu_is_watching+0x15/0xb0
[  141.333165][    C0]  panic+0xb9/0xc0
[  141.333177][    C0]  ? __pfx_panic+0x10/0x10
[  141.333191][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  141.333208][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  141.333225][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  141.333236][    C0]  check_panic_on_warn+0x89/0xb0
[  141.333252][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  141.333264][    C0]  end_report+0x78/0x160
[  141.333279][    C0]  kasan_report+0x129/0x150
[  141.333296][    C0]  ? __xfrm_state_delete+0x696/0xca0
[  141.333309][    C0]  __xfrm_state_delete+0x696/0xca0
[  141.333325][    C0]  xfrm_timer_handler+0x18f/0xa00
[  141.333345][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  141.333361][    C0]  ? rcu_is_watching+0x15/0xb0
[  141.333373][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  141.333389][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  141.333406][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  141.333423][    C0]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  141.333440][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  141.333458][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  141.333470][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  141.333485][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  141.333499][    C0]  handle_softirqs+0x286/0x870
[  141.333512][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  141.333531][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  141.333545][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  141.333558][    C0]  __irq_exit_rcu+0xca/0x1f0
[  141.333568][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  141.333581][    C0]  irq_exit_rcu+0x9/0x30
[  141.333591][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  141.333604][    C0]  </IRQ>
[  141.333609][    C0]  <TASK>
[  141.333613][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  141.333624][    C0] RIP: 0010:console_flush_all+0x7f7/0xc40
[  141.333638][    C0] Code: 48 21 c3 0f 85 e9 01 00 00 e8 15 49 1f 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 06 49 1f 00 eb 06 e8 ff 48 1f 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 ba b4 82 00 48 8b 1b 48 8b 44 24
[  141.333647][    C0] RSP: 0018:ffffc90007ee7540 EFLAGS: 00000293
[  141.333656][    C0] RAX: 1ffffffff1d367ef RBX: ffffffff8e9b3f78 RCX: ffff88801f653980
[  141.333665][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  141.333673][    C0] RBP: ffffc90007ee7690 R08: ffffffff8fa38637 R09: 1ffffffff1f470c6
[  141.333681][    C0] R10: dffffc0000000000 R11: fffffbfff1f470c7 R12: dffffc0000000000
[  141.333689][    C0] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e9b3f20
[  141.333704][    C0]  ? console_flush_all+0x13a/0xc40
[  141.333718][    C0]  ? __pfx_console_flush_all+0x10/0x10
[  141.333757][    C0]  ? lock_acquire+0x5f/0x360
[  141.333774][    C0]  ? preempt_schedule+0xae/0xc0
[  141.333790][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  141.333805][    C0]  console_unlock+0xc4/0x270
[  141.333818][    C0]  ? __pfx_console_unlock+0x10/0x10
[  141.333831][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  141.333845][    C0]  vprintk_emit+0x5b7/0x7a0
[  141.333857][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  141.333875][    C0]  _printk+0xcf/0x120
[  141.333891][    C0]  ? __pfx__printk+0x10/0x10
[  141.333907][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  141.333922][    C0]  ? __netdev_printk+0x365/0x4d0
[  141.333938][    C0]  netdev_info+0x10a/0x160
[  141.333956][    C0]  ? __pfx_netdev_info+0x10/0x10
[  141.333971][    C0]  ? rcu_is_watching+0x15/0xb0
[  141.333983][    C0]  ? __dev_change_flags+0x48d/0x6d0
[  141.333997][    C0]  netif_set_allmulti+0x1b8/0x380
[  141.334010][    C0]  __dev_change_flags+0x52e/0x6d0
[  141.334022][    C0]  ? __mutex_lock+0x5bb/0x1350
[  141.334033][    C0]  ? __pfx___dev_change_flags+0x10/0x10
[  141.334044][    C0]  ? full_name_hash+0x92/0xe0
[  141.334057][    C0]  netif_change_flags+0x88/0x1a0
[  141.334071][    C0]  dev_change_flags+0x130/0x260
[  141.334083][    C0]  dev_ioctl+0x7b4/0x1150
[  141.334099][    C0]  sock_do_ioctl+0x22c/0x300
[  141.334114][    C0]  ? __pfx_sock_do_ioctl+0x10/0x10
[  141.334128][    C0]  ? do_futex+0x395/0x420
[  141.334145][    C0]  sock_ioctl+0x576/0x790
[  141.334158][    C0]  ? lock_release+0x4b/0x3e0
[  141.334173][    C0]  ? __pfx_sock_ioctl+0x10/0x10
[  141.334186][    C0]  ? __fget_files+0x2a/0x420
[  141.334196][    C0]  ? __fget_files+0x3a0/0x420
[  141.334206][    C0]  ? __fget_files+0x2a/0x420
[  141.334217][    C0]  ? bpf_lsm_file_ioctl+0x9/0x20
[  141.334231][    C0]  ? __pfx_sock_ioctl+0x10/0x10
[  141.334243][    C0]  __se_sys_ioctl+0xfc/0x170
[  141.334256][    C0]  do_syscall_64+0xfa/0x3b0
[  141.334266][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.334277][    C0]  ? exc_page_fault+0x9f/0xf0
[  141.334292][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.334303][    C0] RIP: 0033:0x7fccd938ebe9
[  141.334314][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  141.334324][    C0] RSP: 002b:00007fccda283038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  141.334337][    C0] RAX: ffffffffffffffda RBX: 00007fccd95b6090 RCX: 00007fccd938ebe9
[  141.334345][    C0] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000004
[  141.334354][    C0] RBP: 00007fccd9411e19 R08: 0000000000000000 R09: 0000000000000000
[  141.334362][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  141.334369][    C0] R13: 00007fccd95b6128 R14: 00007fccd95b6090 R15: 00007ffc6a191e48
[  141.334383][    C0]  </TASK>
[  141.335190][    C0] Kernel Offset: disabled

VM DIAGNOSIS:
16:05:17  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000039 RBX=0000000000000039 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000073f0
R8 =ffff888106798237 R9 =1ffff11020cf3046 R10=dffffc0000000000 R11=ffffffff854f2400
R12=dffffc0000000000 R13=ffffffff99afd8fb R14=ffffffff99df23e0 R15=0000000000000000
RIP=ffffffff854f247c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fccda2836c0 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000002280 CR3=00000000452c4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ffffffff00000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007fccda0ed100 00007fccd9587460 XMM05=00007fccd9587478 00007fccd95874c0
XMM06=00007fccd95874b8 00007fccd95874b0 XMM07=00007fccd95874a8 00007fccd95874a0
XMM08=0000000000000000 00007fccd9412ee7 XMM09=0000000000000000 00007fccd9412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81682516 RBX=0000000000000000 RCX=ffff8880215f5640 RDX=0000000000010000
RSI=0000000000000008 RDI=ffffffff92a5a3c0 RBP=ffffc900001e0fe0 RSP=ffffc900001e0f60
R8 =ffffffff92a5a3c7 R9 =1ffffffff254b478 R10=dffffc0000000000 R11=fffffbfff254b479
R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff81682517 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007faf1b3976c0 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2cea01 CR3=000000011dbb2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007faf1a612e53
XMM06=0000000000000000 00007faf1a612e4d XMM07=0000000000000000 00007faf1a612e61
XMM08=0000000000000000 00007faf1a612ee7 XMM09=0000000000000000 00007faf1a612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
