last executing test programs:

3m52.694304908s ago: executing program 2 (id=3262):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000003640))
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x0, 0xe, 0x0, &(0x7f0000000080)="e02742e86cfba54a3335729a5ce8", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xca)
setsockopt$ax25_int(r4, 0x101, 0x9, &(0x7f0000000100)=0x80000000, 0x4)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r3, 0x0, r6, 0x0, 0xf3a, 0x0)
close(r5)
write(r2, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0xff}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r9 = accept4(r8, 0x0, 0x0, 0x800)
sendmmsg$alg(r9, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000140), &(0x7f00000001c0)=0xc)
r10 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_group_source_req(r10, 0x0, 0x2f, &(0x7f0000000000)={0x8001, {{0x2, 0x4e22, @loopback}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r11, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x98, r12, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000)

3m52.333699002s ago: executing program 2 (id=3264):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="180000003e0007010000000000000002037c0000100045800c00098008002400", @ANYRES32, @ANYBLOB="0000005d7cfb6e001ebda7c6361c1c64d6ef1a6ce1b8776f1aaa046f9226ab1f558cf0d7c7be16253a92f1533f2aa2f6447af08bce1febcbe51042a729addec948b9939e8ecc951440a97f03ae7ca43b57d4d9890365e151692ca0906ba595f5074b94747353bb07b8cf94d332d5d8e0bcaf88b4874dba99e37d0ba8c3dc69d9a82141c0c430408d22f815839cf9f71ecf869c1f11c8c8e74cdb57589ef7d95d6d5f9f25a7a3348e0455af0f812f33338027d99bc0b424c0e7b07d4405a19ff0424d2cd08973ad926893efb7b1f346b2d90f22bd27ce6dcc6eee6447cfe26f8c93b800354f358c5eb48e1528bfaf421bb8d2237ac2bf9b1b"], 0x28}}, 0x4040040)

3m52.33325195s ago: executing program 2 (id=3265):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='mctp_key_release\x00', r1, 0x0, 0x5}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000340)={r2})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r3, 0x0, 0x9}, 0x18)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='mctp_key_release\x00', r3, 0x0, 0x5}, 0x18)
close(r5)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e3, &(0x7f0000000180)={r2, r6})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r7 = socket(0x1, 0x803, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r8], 0x50}}, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x1, 0x803, 0x0)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r12], 0x50}}, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xf, &(0x7f0000000940)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000088500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'})

3m52.19358637s ago: executing program 2 (id=3266):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f00000008c0)=[{0xffffffffffffffff, 0x40}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000002000010000000000000000000a148000000000030900010014000200fc020000000000000000000000000000140001002001"], 0x44}}, 0x40000)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYRESHEX=r2, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200"/68], 0x5c}}, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x4, 0xa7e, 0x1a}, 0x2c)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="d0000000190001000000000000000000e0000002000000000000000000000000fe8000000000000000000000000000164e240000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000070000000000000000000000000000000000000000000000020000000000000004000000000000000000000000000000000000000000000003000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000c0015005d073500f6ffffff0c0008"], 0xd0}}, 0x4004)
socket$alg(0x26, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x6020400)
r5 = socket(0x10, 0x3, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', <r7=>0x0, 0x0, 0xa000, 0x7a, 0x0, {{0xc, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @rand_addr=0x64010100, {[@ssrr={0x89, 0x17, 0x34, [@dev={0xac, 0x14, 0x14, 0x1f}, @multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x2c}, @local]}, @end, @ra={0x94, 0x4}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000440)={'syztnl2\x00', &(0x7f0000000200)={'tunl0\x00', r7, 0x40, 0x1, 0x2, 0x9, {{0x7, 0x4, 0x1, 0x3b, 0x1c, 0x66, 0x0, 0xea, 0x2f, 0x0, @local, @multicast1, {[@cipso={0x86, 0x6, 0xfffffffffffffffd}]}}}}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, r9, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x1ad2}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x20008080)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="0c0000000000000002004e20ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002004e20e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23ffffffff00"/518], 0x210)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x18, 0x0, 0xa}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)

3m51.271149643s ago: executing program 2 (id=3282):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000100001042ad370000000000000000000", @ANYRES32=r0, @ANYBLOB="5d5b0000000000001c001a8018000a8014000700fc0200000000000000000000000000011400350073797a5f74756e000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x58840}, 0x0)

3m51.08160502s ago: executing program 2 (id=3286):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) (async)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1e000000", @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', <r2=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000005c0)=ANY=[@ANYBLOB="05", @ANYRES32=r2, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00'}, 0x10) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000100001000100"/20, @ANYRES32=0x0, @ANYBLOB="20040000000008000000000000000000"], 0x28}}, 0x0) (async)
socket$inet(0x2, 0x3, 0x7)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f900000005000400400000000500", @ANYRES32=r3], 0x6c}}, 0x40)

3m50.938437506s ago: executing program 32 (id=3286):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) (async)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1e000000", @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', <r2=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000005c0)=ANY=[@ANYBLOB="05", @ANYRES32=r2, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00'}, 0x10) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000100001000100"/20, @ANYRES32=0x0, @ANYBLOB="20040000000008000000000000000000"], 0x28}}, 0x0) (async)
socket$inet(0x2, 0x3, 0x7)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f900000005000400400000000500", @ANYRES32=r3], 0x6c}}, 0x40)

28.223448168s ago: executing program 1 (id=6719):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000003000000040000000108000001000000", @ANYRES32=r0, @ANYBLOB="b415000000000000000000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
close(r0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, 0x0}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f00000003c0)={'ip6_vti0\x00', <r3=>0x0, 0x29, 0x4, 0x20, 0x86, 0x23, @private1, @private0, 0x8, 0x700, 0x9, 0x2}})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000340)={@private, @multicast1}, &(0x7f0000000440)=0xc)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', <r4=>r3, 0x700, 0x7800, 0x8, 0xb07d, {{0x24, 0x4, 0x0, 0x4, 0x90, 0x65, 0x0, 0x3, 0x4, 0x0, @private=0xa010100, @private=0xa010100, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0xe4, [@empty]}, @noop, @generic={0x86, 0x10, "207c26681979869748946a23ed13"}, @cipso={0x86, 0x8, 0x3, [{0x1, 0x2}]}, @end, @cipso={0x86, 0x1a, 0x3, [{0x5, 0x9, "c3aaf98355b2a3"}, {0x7, 0x2}, {0x6, 0x9, "00db28835d7509"}]}, @lsrr={0x83, 0x7, 0x12, [@loopback]}, @timestamp_prespec={0x44, 0x34, 0xf9, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x19}, 0x65fd}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x8}, {@loopback, 0xf}, {@rand_addr=0x64010100, 0x3d8}, {@rand_addr=0x64010102, 0x3}, {@local, 0xfffffe2e}]}]}}}}})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r5, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000005c0), 0x8)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)={@ifindex=r4, 0xffffffffffffffff, 0x1a, 0x9, r5, @void, @value=r5}, 0x20)
r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)="88b0bae0e826425499f4d4ddb99bbe211a", 0x11}, 0x1, 0x0, 0x0, 0x8004}, 0x24044044)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000005480)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r7], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r8, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r8, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r8, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="cf9900ffffffff7fff8d0000000000000000005ac1d932df0d3e5d0142fcd74f6d43c8f9d9025512685c5007fd79d19ef09419ef4d3eca4dc2f10c80aef058c515eaa77423ebd991b2f6c90f32fb9868d6b4a69aa92dc4ed944966910a9ffff5d904cf25051c76b4ee6c775566fe207661aeaaf97479ed85decdcd39a807f123041a359c8f4dc6dda15ef0b8789cd920e9d255229b77b4ea22feb573959197038a3e79bb088a02186b4b644f942f14ef09f53da27fcd5434db0400c1d2f5b6cf9367cbdcdfc215bc25298ec69a78e80f0fb30a7ad66acf6e9770405a2636d133bf0bfab5283967bb18d8f08c064b36e4b00d82cba6", 0xf5}], 0x1, 0x0, 0x0, 0x80040000}}], 0x1, 0x20000810)
setsockopt$inet_tcp_TLS_TX(r8, 0x6, 0x1, &(0x7f00000017c0)=@gcm_256={{}, "41107f2d8c227eab", "2aade1aa965e611899c2a40889d4b110389398808b9d31cae1bc954b53e429e5", "33f3df93", "7e68d31c6375e358"}, 0x38)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5400000010000108000000000000000000000000955989ca4454ced9cf832bb6dbe9f3c6fa0f61eb4a92cc3f420c18482d5eeb6aad396402c9c654c2b5a246da3421c489f6e106455d47838ade7d6bf93cb7d335de7137b8e987ed42a9b41377745670e308e66d38d665e389ac44077087ef27f97bf7e4af834208fbf8bcd0c39e6a9ffd5a86956cf7e53a70ddb8278a9bb5310cca5c2f81cf7486dde7e80cc5ade6644faf", @ANYRES32=0x0, @ANYBLOB="11a00000000000002c002b8008000100", @ANYRES32, @ANYBLOB="0800030003000000080003000100000008000100", @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYBLOB="08001b0000000000"], 0x54}, 0x1, 0x0, 0x0, 0x200480d4}, 0x80)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'erspan0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0xfff8}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0)

28.094449304s ago: executing program 1 (id=6721):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x9e00)

28.02419953s ago: executing program 1 (id=6723):
r0 = socket$inet6(0xa, 0x80002, 0x88)
setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f00000000c0)=0x7ffffffc, 0x4)
getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x27dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x23}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x14, 0xa}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084732598c)

27.976937008s ago: executing program 0 (id=6724):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r1 = socket(0x2a, 0x2, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0), r2)
sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf2502000000090001800000f50000080000"], 0x20}, 0x1, 0x0, 0x0, 0x4048081}, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r2)
r4 = accept4$x25(r1, &(0x7f0000000080)={0x9, @remote}, &(0x7f0000000100)=0x12, 0x800)
ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000000140)=0x2)
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x17)

27.803103991s ago: executing program 1 (id=6726):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0xfffffffe, 0x0, 0x100}, 0x1c)
setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000300), 0x4)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xcb7c81791c937a57}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x29}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x80000000}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x8044)

27.800645376s ago: executing program 0 (id=6727):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001400)=@newlink={0x1f8, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f24c, 0x28020}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_virt_wifi\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}}]}]}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_LINK={0x8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_macvtap\x00'}, @IFLA_BROADCAST={0xa}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond_slave_1\x00'}, @IFLA_PHYS_PORT_ID={0xb, 0x22, "b74e147ee83cbd"}, @IFLA_VFINFO_LIST={0x140, 0x16, 0x0, 0x1, [{0xb0, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x1901, @multicast}}, @IFLA_VF_VLAN={0x10, 0x2, {0x4, 0x795, 0x200000c}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x5000, 0x6}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1, 0x6}}, @IFLA_VF_VLAN={0x10, 0x2, {0x4, 0xae5, 0x9ec}}, @IFLA_VF_VLAN={0x10, 0x2, {0x14c, 0x3e5, 0x55}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x9, 0x7}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x5, 0xa}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xffffffff, 0x62560de6}}]}, {0x88, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x3, 0x8000, 0xc}}, @IFLA_VF_MAC={0x28, 0x1, {0x6, @random="96b538428442"}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xffff}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x8, 0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0x2, 0xfffffffc}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xde, 0xa5}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xf, 0x4000000003}}]}, {0x4}]}]}, 0x1f8}, 0x1, 0x200000000000000, 0x0, 0x1}, 0x40840)

27.79656752s ago: executing program 0 (id=6729):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000016c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000001340)={0x40}, 0x10)
sendmsg$tipc(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
shutdown(r1, 0x2)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x4a, 0x0, &(0x7f0000000080)=0xe)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'bridge_slave_1\x00', 0x4}, 0x18)

27.706525365s ago: executing program 1 (id=6730):
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = socket$inet6(0xa, 0x3, 0x1ff)
setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000140)=0x8, 0xfffffffffffffc8c)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES8=r3], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000007060101000000000000000002000002050001008ceb0000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x40015)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r5, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000100)=0x730)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000380)={'ip6tnl0\x00', 0x0})
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r10)
sendmsg$IEEE802154_ADD_IFACE(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
bind$inet(r7, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
socket$inet6(0xa, 0x2, 0x0)

27.61208546s ago: executing program 0 (id=6732):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
sendmmsg$alg(r1, 0x0, 0x0, 0x0)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r2, 0x0, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000200)=0xda, 0x4)
setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000000)=0x48b, 0x4)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', 0x0, 0x0, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x20, r5, 0x1, 0x4, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc011}, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r5, 0x10, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x4)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000500)=""/129, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r6=>0x0})
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7, 0x0, 0x5}, 0x18)
r8 = socket(0x1, 0x2, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r6, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf2"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00'})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
unshare(0x6a040000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'veth1_macvtap\x00'})

27.432320135s ago: executing program 1 (id=6734):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r5)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x20, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x20000804)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r6, 0x204, 0x70bd27, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x88)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="7f3d010661"], 0x5)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newlink={0x74, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x8}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x7}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x1}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}]}}}]}, 0x74}, 0x1, 0xba01, 0x0, 0x4004001}, 0x4000000)

27.20136723s ago: executing program 0 (id=6735):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0xb00, 0x40822}}}}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) (async)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r5) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@cgroup=r4, r6, 0x2f, 0x8, 0x4, @void, @value=r6}, 0x20) (async)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async)
r9 = socket$l2tp6(0xa, 0x2, 0x73)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r9, &(0x7f0000000040)={0x80000000})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r7, 0x110, 0x4, &(0x7f0000000180)=0x1, 0x4)
r10 = socket$nl_route(0x10, 0x3, 0x0) (async)
r11 = socket(0x1, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x4c}}, 0x0) (async)
r13 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'gre0\x00', <r14=>0x0})
bind$packet(r13, &(0x7f0000000180)={0x11, 0x0, r14, 0x1, 0x0, 0x6, @multicast}, 0x14) (async)
r15 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4)
r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0xffffffffffffffff, 0xe, 0x8}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="85000000b000000000000000000085000000ce00000018410000f9ffffff00"/48], &(0x7f0000000440)='GPL\x00', 0x3, 0x1000, &(0x7f0000000b40)=""/4096, 0x40f00, 0x20, '\x00', r14, 0x0, r15, 0x8, &(0x7f0000000540)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0xf, 0x1, 0x7f}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000600)=[0x1, r5, r5, 0x1, r5, r16, r5, r5, r5], &(0x7f0000000640)=[{0x4, 0x4, 0x10, 0x2}, {0x5, 0x1, 0x2, 0x9}, {0x5, 0x2, 0x0, 0x9}, {0x3, 0x5, 0xf, 0x4}, {0xfffffffc, 0x4, 0x3, 0x6}, {0x4, 0x4, 0x4, 0xa}, {0x1, 0x4, 0xb, 0x7}], 0x10, 0xd1d}, 0x94)

27.200509654s ago: executing program 0 (id=6736):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}}, 0x20000050)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r2, 0x40000)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00', r7}, 0x18)
r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0)
write$rfkill(r8, &(0x7f0000000000)={0x5, 0x0, 0x3, 0xfc}, 0x8)
sendmsg$nl_route(r6, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000006800010025bd7000feffffec0a00070000000000180008801400010001000000000000001f00040002080400060007000700000008000500", @ANYRES32=r5], 0x40}}, 0x40040d0)
r9 = socket$pptp(0x18, 0x1, 0x2)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r9, 0x4002f516, &(0x7f00000000c0)={0x8, 0xd})
r10 = socket(0xa, 0x3, 0x1)
setsockopt$MRT_TABLE(r10, 0x0, 0xcf, 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2000})
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000200))
syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00')
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r11)
sendmsg$NL80211_CMD_RADAR_DETECT(r11, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='{\\\x00\x00', @ANYRES16=r12, @ANYBLOB="100024bd7000fedbdf255e0000000800a00003000000"], 0x1c}}, 0x20000800)
ioctl$TUNGETVNETLE(r1, 0x400454de, 0x0)
r13 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000380)=ANY=[@ANYRES8], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
ioctl$sock_inet_SIOCSIFFLAGS(r13, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1})

17.092902854s ago: executing program 3 (id=6780):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) (async, rerun: 64)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (rerun: 64)
sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async, rerun: 32)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 32)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x3f, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)

17.042523167s ago: executing program 3 (id=6781):
socket$packet(0x11, 0x2, 0x300)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="0000020025f3bceede4da588ba6ebab7dabacd9adc9b81cfcb505a78d9048a0ec19ef2650f290da268245d8dd24eab33b770e05c723cab6d9dd994e723fef2b0b4d48116dd9c611104961ac8d0e6afd3491b780942a8746e4f4340755b36473375b630ed140a119a05cf67dac40d342e0380be5271c7fd9e7c1e7540524bb67f9a38cc95cf2809b24f73c78f0ca4909d06d0bfa0bce963b5ebe79fc79c88d8b75a43f19fcdfc31fae654452740f6e4", @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf250100000008000100030000002c000480050003000500000005000300020000000500030001000000050003000100000005000300020000000800020002000000"], 0x50}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, 0x42, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'erspan0\x00', <r6=>0x0})
sendto$packet(r3, 0x0, 0x0, 0x20000080, &(0x7f0000000300)={0x11, 0x9, r6, 0x1, 0x6, 0x6, @broadcast}, 0x14)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f0000000780)=""/138, 0x8a, <r7=>0x0, &(0x7f00000008c0)=""/196, 0xc4}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2f, 0x4, &(0x7f0000000300)=ANY=[@ANYRESDEC=r4], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0}, 0x94)
socketpair(0x6e434db244e21cd1, 0x800, 0x40, &(0x7f0000000040)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r9, &(0x7f0000000080)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14) (async)
bind$802154_dgram(r9, &(0x7f0000000080)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14)
connect$802154_dgram(r9, &(0x7f0000000000)={0x24, @none={0x0, 0x3}}, 0x14) (async)
connect$802154_dgram(r9, &(0x7f0000000000)={0x24, @none={0x0, 0x3}}, 0x14)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SCAN(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES8=r10, @ANYRES16=r11, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7de}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}]}, @CTA_TUPLE_ORIG={0x54, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x800}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x51}, 0x4020884) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7de}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}]}, @CTA_TUPLE_ORIG={0x54, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x800}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x51}, 0x4020884)
r12 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000700)=@base={0x10, 0x4, 0x4, 0x6}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r12, &(0x7f00000005c0)="dc9b709847", &(0x7f00000003c0)=""/79}, 0x20)
sendmsg$NL80211_CMD_SET_MAC_ACL(r8, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r11, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x2c}}}}, [@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async)
sendmsg$NL80211_CMD_SET_MAC_ACL(r8, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r11, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x2c}}}}, [@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r13, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$NFULNL_MSG_CONFIG(r13, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000300)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
sendmsg$NFULNL_MSG_CONFIG(r13, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000300)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

17.040744052s ago: executing program 3 (id=6782):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', 0xffffffffffffffff, 0x0, 0x1000000004}, 0x18)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r5, 0x400448c9, 0x0)
sendmmsg$inet(r4, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2400c042)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES64=r4, @ANYRES32=r7, @ANYRES64=0x0, @ANYRES64, @ANYRES8=r7], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x44000)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0)

16.892587739s ago: executing program 3 (id=6783):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x7fffffffffffffff}, 0x18)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000002000010000000000000000000a148000000000030900010014000200fc020000000000000000000000000000140001002001"], 0x44}}, 0x40000)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x4, 0xa7e, 0x1a}, 0x2c)
socket$alg(0x26, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x6020400)
r6 = socket(0x10, 0x3, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', <r8=>0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000200)={'tunl0\x00', r8, 0x40, 0x1, 0x2, 0x9, {{0x7, 0x4, 0x1, 0x3b, 0x1c, 0x66, 0x0, 0xea, 0x2f, 0x0, @local, @multicast2, {[@cipso={0x86, 0x6, 0xfffffffffffffffd}]}}}}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r9, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, r11, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x1ad2}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x20008080)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000540)={0xc, {{0x2, 0x4e20, @broadcast}}, 0x0, 0x3, [{{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e23, @broadcast}}]}, 0x210)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x18, 0x0, 0xa}, 0x28)
r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r12, <r13=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x44, &(0x7f0000000dc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r13}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_fd={0x18, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r8, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)

16.015714071s ago: executing program 3 (id=6784):
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000480)="c7", 0x1}], 0x1}}], 0x1, 0x20008890)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000900), 0xffffffffffffffff)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10)
setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r6, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c)
sendmmsg(r7, &(0x7f0000001680)=[{{&(0x7f00000002c0)=@caif, 0x80, &(0x7f0000000400)=[{&(0x7f00000000c0)="4af7697383b9df344113a7844d83e6b398", 0x11}, {&(0x7f0000000340)="e5d5d6d8729acbc9f22467d8337bb7f586a3d66ee3761597fdddbe463b0bb1bad6db9d0490388c3dfefbcec400fd31d4f45c45c83bd27313b20ca249a6c3107b6c6997c1f05d70d6f9c2", 0x4a}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f0000000200)="e2731306f8be5acbf36a5693a0cfd967f9415d866e8bdda2ed8f230639b3fbbcad60f89f37421ed17e1149a6c527253123fa6d28e4af", 0x36}, {&(0x7f00000015c0)="31580510ce6e36b161828a32c7d43c574e47e5415daace4af9349b4009d24eac565862000dc51ca11d2afbffb2073baea87c6d34346958851130a48b5d43b10a057ad147a2638b695a5878b41f96779f41ec7e3581ba6c21ebe472fa7564e61dcab5ff65279b3b8389a064eef06c1705b62c4f339457757b3fe1171f0885b4c651423a6e0b3cb7a1c379ab696c8fc58b728549b698b2653ef8a7dcd849a663a4b4d2defe3876c483df46dd2c11449cc3f4cd67c9a29c23af", 0xb8}], 0x5, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], 0x1298}}], 0x1, 0x1100)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b00)=ANY=[@ANYBLOB="98000000", @ANYRES16=r5, @ANYBLOB="010029bd7000ffdbdf25050000000800020002000000080003"], 0x98}, 0x1, 0x0, 0x0, 0x40804}, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x4000010, r4, 0x2d0c5000)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f)
sendmsg$NL80211_CMD_SET_KEY(r3, 0x0, 0x4004)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010067656e65766500000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x11, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x2c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, 0x500}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000)

15.902651072s ago: executing program 3 (id=6785):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x494, 0x30, 0x12f, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0x6, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc74, 0x0, 0xffffffff, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x10, {0x7, 0x0, 0xba6d, 0x0, 0x0, 0x7}}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff9}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x494}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="08ac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84)

12.006238451s ago: executing program 33 (id=6736):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}}, 0x20000050)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r2, 0x40000)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00', r7}, 0x18)
r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0)
write$rfkill(r8, &(0x7f0000000000)={0x5, 0x0, 0x3, 0xfc}, 0x8)
sendmsg$nl_route(r6, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000006800010025bd7000feffffec0a00070000000000180008801400010001000000000000001f00040002080400060007000700000008000500", @ANYRES32=r5], 0x40}}, 0x40040d0)
r9 = socket$pptp(0x18, 0x1, 0x2)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r9, 0x4002f516, &(0x7f00000000c0)={0x8, 0xd})
r10 = socket(0xa, 0x3, 0x1)
setsockopt$MRT_TABLE(r10, 0x0, 0xcf, 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2000})
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000200))
syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00')
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r11)
sendmsg$NL80211_CMD_RADAR_DETECT(r11, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='{\\\x00\x00', @ANYRES16=r12, @ANYBLOB="100024bd7000fedbdf255e0000000800a00003000000"], 0x1c}}, 0x20000800)
ioctl$TUNGETVNETLE(r1, 0x400454de, 0x0)
r13 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000380)=ANY=[@ANYRES8], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
ioctl$sock_inet_SIOCSIFFLAGS(r13, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1})

11.962100821s ago: executing program 34 (id=6734):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r5)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x20, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x20000804)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r6, 0x204, 0x70bd27, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x88)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="7f3d010661"], 0x5)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newlink={0x74, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x8}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x7}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x1}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}]}}}]}, 0x74}, 0x1, 0xba01, 0x0, 0x4004001}, 0x4000000)

0s ago: executing program 35 (id=6785):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x494, 0x30, 0x12f, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0x6, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc74, 0x0, 0xffffffff, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x10, {0x7, 0x0, 0xba6d, 0x0, 0x0, 0x7}}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff9}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x494}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="08ac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84)

kernel console output (not intermixed with test programs):

74] tipc: Resetting bearer <eth:syzkaller0>
[  433.153640][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  433.186595][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  433.206680][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  433.269365][T23184] ip6gre1: entered allmulticast mode
[  433.280874][T23187] netlink: 'syz.0.5236': attribute type 1 has an invalid length.
[  433.283386][T23184] netlink: 'syz.3.5235': attribute type 39 has an invalid length.
[  433.297637][T23187] 8021q: adding VLAN 0 to HW filter on device bond59
[  433.395927][T23191] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  433.538056][T23196] __nla_validate_parse: 14 callbacks suppressed
[  433.538073][T23196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5239'.
[  433.608580][T23200] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5240'.
[  433.664510][T23201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5240'.
[  433.746662][ T5717] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  434.150401][T23219] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5244'.
[  434.187870][T23222] netlink: 'syz.3.5245': attribute type 2 has an invalid length.
[  434.203012][T23222] k*: entered promiscuous mode
[  434.205324][T23223] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  434.206793][T23222] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5245'.
[  434.207944][T23224] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  434.213140][T23224] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  434.462119][T23231] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  434.468721][T23231] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5248'.
[  434.650584][T23238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5250'.
[  434.685837][T23247] 8021q: adding VLAN 0 to HW filter on device bond0
[  434.751699][T23250] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20000
[  434.794561][T23254] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5253'.
[  434.797526][ T5717] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  434.801405][T23254] net_ratelimit: 5 callbacks suppressed
[  434.801414][T23254] openvswitch: netlink: EtherType 3ee is less than min 600
[  435.028714][T23261] lo speed is unknown, defaulting to 1000
[  435.121049][T23268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5256'.
[  435.254286][T23274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5258'.
[  435.291319][T23274] 8021q: adding VLAN 0 to HW filter on device bond22
[  435.318163][T23274] 8021q: adding VLAN 0 to HW filter on device bond22
[  435.320547][T23274] bond22: (slave sit2): The slave device specified does not support setting the MAC address
[  435.324315][T23274] bond22: (slave sit2): Error -95 calling set_mac_address
[  435.345535][T23281] lo speed is unknown, defaulting to 1000
[  435.560216][T23287] vlan0: entered allmulticast mode
[  435.561814][T23287] erspan0: entered allmulticast mode
[  436.050054][T23325] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  436.158682][T23334] netlink: 'syz.0.5274': attribute type 1 has an invalid length.
[  436.188708][T23337] openvswitch: netlink: EtherType 3ee is less than min 600
[  436.577352][T23357] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  436.608567][T23362] openvswitch: netlink: EtherType 3ee is less than min 600
[  436.639853][T23364] netlink: 'syz.1.5283': attribute type 1 has an invalid length.
[  436.663803][T23364] 8021q: adding VLAN 0 to HW filter on device bond42
[  436.673441][T23364] vlan1: entered promiscuous mode
[  436.675116][T23364] bond42: entered promiscuous mode
[  436.676866][T23364] vlan1: entered allmulticast mode
[  436.678546][T23364] bond42: entered allmulticast mode
[  436.689669][T23364] bond42: (slave gretap5): making interface the new active one
[  436.692085][T23364] gretap5: entered promiscuous mode
[  436.693858][T23364] gretap5: entered allmulticast mode
[  436.697021][T23364] bond42: (slave gretap5): Enslaving as an active interface with an up link
[  436.895045][T23379] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  436.925357][T23381] netlink: 'syz.1.5288': attribute type 21 has an invalid length.
[  436.928202][T23381] netlink: 'syz.1.5288': attribute type 4 has an invalid length.
[  436.937572][T23381] netlink: 'syz.1.5288': attribute type 5 has an invalid length.
[  436.970606][T23384] openvswitch: netlink: EtherType 3ee is less than min 600
[  437.195553][T23394] bridge0: port 1(erspan0) entered blocking state
[  437.200024][T23394] bridge0: port 1(erspan0) entered disabled state
[  437.202166][T23394] erspan0: entered allmulticast mode
[  437.226769][T23394] erspan0: left allmulticast mode
[  437.234174][T23396] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  437.291612][T23398] lo speed is unknown, defaulting to 1000
[  437.308041][T23402] netlink: 'syz.0.5297': attribute type 39 has an invalid length.
[  437.410997][T23408] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  437.414159][T23403] lo speed is unknown, defaulting to 1000
[  437.491267][T23413] 8021q: VLANs not supported on syzkaller1
[  438.899632][T23456] __nla_validate_parse: 26 callbacks suppressed
[  438.899643][T23456] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5314'.
[  438.910981][T23456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5314'.
[  438.946568][    C0] ip6_tnl_xmit_ctl: 7 callbacks suppressed
[  438.946582][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  439.014827][T23462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5317'.
[  439.079226][T23468] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5320'.
[  439.095193][T23468] ipvlan1: entered promiscuous mode
[  439.097902][T23468] 8021q: adding VLAN 0 to HW filter on device ipvlan1
[  439.173401][T23477] lo speed is unknown, defaulting to 1000
[  439.192223][T23481] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  439.226719][  T794] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  439.250774][T23484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5325'.
[  439.254298][T23484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5325'.
[  439.338415][T23491] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5328'.
[  439.341298][T23491] openvswitch: netlink: EtherType 3ee is less than min 600
[  439.350321][T23489] netlink: 'syz.3.5327': attribute type 13 has an invalid length.
[  439.352727][T23489] netlink: 'syz.3.5327': attribute type 17 has an invalid length.
[  439.361428][T23489] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  439.382810][T23493] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  439.386893][  T793] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  439.440236][T18925] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  439.494761][T23495] bond56: (slave vti0): Releasing backup interface
[  439.515220][T23497] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5331'.
[  439.535380][T23495] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  439.572329][T23500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5332'.
[  439.592441][T23500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5332'.
[  439.703416][T23505] syzkaller0: entered promiscuous mode
[  439.705301][T23505] syzkaller0: entered allmulticast mode
[  439.895151][T23514] macvtap1: entered allmulticast mode
[  439.897687][T23514] veth0_macvtap: entered allmulticast mode
[  439.916730][  T794] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  440.027871][  T794] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  440.068030][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  440.070309][T23533] net_ratelimit: 2 callbacks suppressed
[  440.070319][T23533] openvswitch: netlink: EtherType 3ee is less than min 600
[  440.071048][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  440.140808][T23535] netlink: 'syz.1.5341': attribute type 10 has an invalid length.
[  440.143240][T23535] !: entered promiscuous mode
[  440.145116][T23535] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  440.162947][T23535] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612)
[  440.166208][T23535] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  440.232838][T23545] netlink: 'syz.3.5344': attribute type 1 has an invalid length.
[  440.321167][T23564] vlan1: entered allmulticast mode
[  440.322971][T23564] bridge_slave_0: entered allmulticast mode
[  440.394006][T23572] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  440.561478][T23594] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  440.587967][T23594] tipc: Resetting bearer <eth:syzkaller0>
[  440.946874][T18925] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  441.018935][T23624] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  441.205917][T23642] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  441.256164][T23644] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  441.369032][T23647] lo speed is unknown, defaulting to 1000
[  441.782184][T23658] 8021q: VLANs not supported on nlmon0
[  441.994958][T23670] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  442.304359][T23676] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  442.308518][T23676] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  442.319703][T23676] syzkaller1: entered promiscuous mode
[  442.321943][T23676] syzkaller1: entered allmulticast mode
[  442.399169][T23680] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  442.463820][T23687] vlan1: entered allmulticast mode
[  442.465878][T23687] bridge0: entered allmulticast mode
[  442.553451][T23693] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  442.608169][T23698] netlink: 'syz.3.5393': attribute type 30 has an invalid length.
[  442.626271][T23698] netlink: 'syz.3.5393': attribute type 30 has an invalid length.
[  442.643081][   T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  442.646230][   T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  442.650584][   T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  442.653157][   T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  442.669685][T23698] netlink: 'syz.3.5393': attribute type 30 has an invalid length.
[  442.728277][T23698] netlink: 'syz.3.5393': attribute type 30 has an invalid length.
[  442.820968][T23712] openvswitch: netlink: EtherType 3ee is less than min 600
[  442.854796][T23715] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  442.988692][T23730] netlink: 'syz.0.5403': attribute type 10 has an invalid length.
[  443.254541][T23760] @0: renamed from bond_slave_1
[  443.286035][T23764] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  443.345716][T23770] netlink: 'syz.0.5415': attribute type 8 has an invalid length.
[  443.349112][T23769] pimreg3: entered allmulticast mode
[  443.357400][T23769] netlink: 'syz.3.5414': attribute type 30 has an invalid length.
[  443.385557][T23772] openvswitch: netlink: EtherType 3ee is less than min 600
[  443.407764][T23769] netlink: 'syz.3.5414': attribute type 30 has an invalid length.
[  443.418956][T23775] netlink: 'syz.0.5417': attribute type 1 has an invalid length.
[  443.448196][T23775] bond60: entered promiscuous mode
[  443.449883][T23775] bond60: entered allmulticast mode
[  443.451897][T23775] 8021q: adding VLAN 0 to HW filter on device bond60
[  443.539419][T23782] netlink: 'syz.0.5419': attribute type 1 has an invalid length.
[  443.565153][T23782] bond61: entered promiscuous mode
[  443.567493][T23782] bond61: entered allmulticast mode
[  443.570299][T23782] 8021q: adding VLAN 0 to HW filter on device bond61
[  443.632793][T23782] lo speed is unknown, defaulting to 1000
[  443.820837][T23806] bond43: entered promiscuous mode
[  443.823630][T23806] 8021q: adding VLAN 0 to HW filter on device bond43
[  443.841906][T23806] 8021q: adding VLAN 0 to HW filter on device bond43
[  443.844524][T23806] bond43: (slave wireguard1): The slave device specified does not support setting the MAC address
[  443.848545][T23806] bond43: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[  443.854289][T23806] bond43: (slave wireguard1): making interface the new active one
[  443.857395][T23806] wireguard1: entered promiscuous mode
[  443.860532][T23806] bond43: (slave wireguard1): Enslaving as an active interface with an up link
[  443.872475][T23806] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  443.875311][T23806] IPv6: NLM_F_CREATE should be set when creating new route
[  443.878140][T23806] IPv6: NLM_F_CREATE should be set when creating new route
[  443.882547][T23806] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  443.900871][T23806] bond43: (slave wireguard2): The slave device specified does not support setting the MAC address
[  443.909045][T23806] bond43: (slave wireguard2): Enslaving as a backup interface with an up link
[  443.925512][T23811] __nla_validate_parse: 31 callbacks suppressed
[  443.925527][T23811] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5427'.
[  443.932366][T23811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5427'.
[  443.986531][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  444.169988][T23823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5431'.
[  444.245215][T23834] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5433'.
[  444.246424][T23833] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5433'.
[  444.323121][T18686] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  444.326249][T18686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  444.334421][T23834] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  444.337786][T23834] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  444.350639][T23842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5435'.
[  444.402292][T23847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5436'.
[  444.405581][T23847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5436'.
[  444.449133][T23855] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5438'.
[  444.501590][T23854] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  444.528285][T23862] Bluetooth: MGMT ver 1.23
[  444.532541][T23862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5441'.
[  444.536184][T23862] team0 (uninitialized): Failed to send options change via netlink (err -105)
[  444.552608][T23862] team0: entered promiscuous mode
[  444.554170][T23862] team0: entered allmulticast mode
[  444.653423][T23877] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  444.791052][T23883] lo speed is unknown, defaulting to 1000
[  445.378187][T23907] 8021q: adding VLAN 0 to HW filter on device bond62
[  445.409666][T23909] 8021q: adding VLAN 0 to HW filter on device bond62
[  445.412801][T23909] bond62: (slave sit6): The slave device specified does not support setting the MAC address
[  445.417663][T23909] bond62: (slave sit6): Error -95 calling set_mac_address
[  445.465921][T23918] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  445.472122][T23920] net_ratelimit: 6 callbacks suppressed
[  445.472133][T23920] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  445.552240][T23922] tipc: Resetting bearer <eth:syzkaller0>
[  445.566618][  T794] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  445.656848][T23930] 8021q: adding VLAN 0 to HW filter on device bond63
[  445.709648][T23934] team0: left allmulticast mode
[  445.711715][T23934] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  445.756920][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  446.052279][T23962] 8021q: adding VLAN 0 to HW filter on device bond64
[  446.175495][T23974] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  446.180016][T23974] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  446.185464][T18685] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  446.188879][T18685] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  446.317234][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  446.433367][T23989] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma?
[  446.977100][T24013] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  447.256487][T24029] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  447.289598][T24031] team0: Refused to change device type
[  447.352139][T24031] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  447.357602][T24039] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  447.360647][T24039] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  447.411467][T24049] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  447.524880][T24056] IPv6: sit2: Disabled Multicast RS
[  447.528356][T24056] sit2: entered allmulticast mode
[  447.551048][T24060] bridge57: entered allmulticast mode
[  447.688389][T24074] bridge58: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  447.714247][T24079] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  447.801578][T24085] validate_nla: 16 callbacks suppressed
[  447.801596][T24085] netlink: 'syz.1.5507': attribute type 6 has an invalid length.
[  447.917033][T24088] netlink: 'syz.3.5510': attribute type 11 has an invalid length.
[  448.290104][T24104] tipc: Resetting bearer <eth:syzkaller0>
[  448.330679][  T793] lo speed is unknown, defaulting to 1000
[  448.336620][  T793] syz0: Port: 1 Link DOWN
[  448.340999][  T793] lo speed is unknown, defaulting to 1000
[  448.371733][T24112] netlink: 'syz.3.5516': attribute type 22 has an invalid length.
[  448.375178][T24112] netlink: 'syz.3.5516': attribute type 22 has an invalid length.
[  448.390285][T24115] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  448.459698][T24120] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  448.464873][  T793] lo speed is unknown, defaulting to 1000
[  448.473599][  T793] syz0: Port: 1 Link ACTIVE
[  448.475246][  T793] lo speed is unknown, defaulting to 1000
[  448.580160][T24137] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  448.649737][T24133] lo speed is unknown, defaulting to 1000
[  448.691000][T24145] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  448.855684][T24154] netlink: 'syz.0.5531': attribute type 30 has an invalid length.
[  448.874520][ T5717] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  448.874631][T24154] netlink: 'syz.0.5531': attribute type 30 has an invalid length.
[  448.878409][ T5717] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  448.900340][ T5717] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  448.903078][ T5717] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  448.943050][T24156] __nla_validate_parse: 107 callbacks suppressed
[  448.943062][T24156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5532'.
[  448.948004][T24156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5532'.
[  449.004619][T24163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5534'.
[  449.101798][T24167] batman_adv: batadv0: Adding interface: macvlan4
[  449.103826][T24167] batman_adv: batadv0: The MTU of interface macvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  449.112621][T24167] batman_adv: batadv0: Not using interface macvlan4 (retrying later): interface not active
[  449.150987][T24171] sctp: [Deprecated]: syz.1.5538 (pid 24171) Use of struct sctp_assoc_value in delayed_ack socket option.
[  449.150987][T24171] Use struct sctp_sack_info instead
[  449.160143][T24171] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  449.288971][T24178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5541'.
[  449.310482][T24179] tipc: Resetting bearer <eth:syzkaller0>
[  449.312801][T24179] tipc: Resetting bearer <eth:syzkaller0>
[  449.347463][  T793] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  449.378915][T24185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5543'.
[  449.385038][T24183] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.437859][  T793] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  449.450519][T24189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5545'.
[  449.456653][T24189] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  449.462425][T24191] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5546'.
[  449.552905][T24198] netlink: 'syz.3.5548': attribute type 11 has an invalid length.
[  449.678073][T24209] vlan0: entered promiscuous mode
[  449.679683][T24209] bond0: entered promiscuous mode
[  449.784088][T24221] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5557'.
[  449.815203][T24222] xfrm0: entered promiscuous mode
[  449.817822][T24222] xfrm0: entered allmulticast mode
[  449.832595][T24221] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5557'.
[  449.839475][T24222] lo speed is unknown, defaulting to 1000
[  449.894833][T24231] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5559'.
[  449.974656][T24237] netlink: 'syz.0.5561': attribute type 13 has an invalid length.
[  449.977511][T24237] netlink: 'syz.0.5561': attribute type 17 has an invalid length.
[  450.055385][T24237] lo speed is unknown, defaulting to 1000
[  450.126808][T24243] netlink: 'syz.3.5562': attribute type 1 has an invalid length.
[  450.857575][T24248] netlink: 'syz.1.5563': attribute type 10 has an invalid length.
[  451.106085][T24265] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  451.166210][T24267] net_ratelimit: 4 callbacks suppressed
[  451.166216][T24267] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  451.283706][T24277] 8021q: adding VLAN 0 to HW filter on device bond65
[  451.502956][T24301] 8021q: adding VLAN 0 to HW filter on device bond66
[  451.534178][T24297] lo speed is unknown, defaulting to 1000
[  451.724213][T24318] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  451.901369][T24332] pim6reg1: entered promiscuous mode
[  451.903482][T24332] pim6reg1: entered allmulticast mode
[  452.146719][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  452.191612][T24360] syz.3.5597: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  452.200979][T24360] CPU: 0 UID: 0 PID: 24360 Comm: syz.3.5597 Not tainted syzkaller #0 PREEMPT(full) 
[  452.201003][T24360] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  452.201012][T24360] Call Trace:
[  452.201019][T24360]  <TASK>
[  452.201027][T24360]  dump_stack_lvl+0x189/0x250
[  452.201055][T24360]  ? __pfx_dump_stack_lvl+0x10/0x10
[  452.201073][T24360]  ? __pfx__printk+0x10/0x10
[  452.201092][T24360]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  452.201110][T24360]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  452.201127][T24360]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  452.201144][T24360]  warn_alloc+0x214/0x310
[  452.201165][T24360]  ? stack_depot_save_flags+0x40/0x860
[  452.201187][T24360]  ? __pfx_warn_alloc+0x10/0x10
[  452.201209][T24360]  ? kasan_save_track+0x4f/0x80
[  452.201226][T24360]  ? xskq_create+0x56/0x170
[  452.201240][T24360]  ? xsk_init_queue+0xb0/0x110
[  452.201251][T24360]  ? xsk_setsockopt+0x4dc/0x8d0
[  452.201267][T24360]  ? do_sock_setsockopt+0x17c/0x1b0
[  452.201281][T24360]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  452.201296][T24360]  ? do_syscall_64+0xfa/0x3b0
[  452.201310][T24360]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.201330][T24360]  __vmalloc_node_range_noprof+0x125/0x12f0
[  452.201373][T24360]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  452.201435][T24360]  ? __kasan_kmalloc+0x93/0xb0
[  452.201459][T24360]  vmalloc_user_noprof+0xad/0xf0
[  452.201482][T24360]  ? xskq_create+0xbf/0x170
[  452.201496][T24360]  xskq_create+0xbf/0x170
[  452.201513][T24360]  xsk_init_queue+0xb0/0x110
[  452.201529][T24360]  xsk_setsockopt+0x4dc/0x8d0
[  452.201552][T24360]  ? __pfx_xsk_setsockopt+0x10/0x10
[  452.201574][T24360]  ? __pfx_aa_sk_perm+0x10/0x10
[  452.201599][T24360]  ? aa_sock_opt_perm+0xff/0x1b0
[  452.201617][T24360]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  452.201633][T24360]  ? __pfx_xsk_setsockopt+0x10/0x10
[  452.201656][T24360]  do_sock_setsockopt+0x17c/0x1b0
[  452.201678][T24360]  __x64_sys_setsockopt+0x13f/0x1b0
[  452.201721][T24360]  do_syscall_64+0xfa/0x3b0
[  452.201737][T24360]  ? lockdep_hardirqs_on+0x9c/0x150
[  452.201751][T24360]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.201765][T24360]  ? exc_page_fault+0x9f/0xf0
[  452.201781][T24360]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.201796][T24360] RIP: 0033:0x7f5248d8ec29
[  452.201811][T24360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  452.201824][T24360] RSP: 002b:00007f5249b63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  452.201841][T24360] RAX: ffffffffffffffda RBX: 00007f5248fd6090 RCX: 00007f5248d8ec29
[  452.201853][T24360] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c
[  452.201862][T24360] RBP: 00007f5248e11e41 R08: 0000000000000004 R09: 0000000000000000
[  452.201872][T24360] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  452.201881][T24360] R13: 00007f5248fd6128 R14: 00007f5248fd6090 R15: 00007ffc78ff2ca8
[  452.201906][T24360]  </TASK>
[  452.202028][T24360] Mem-Info:
[  452.301362][T24360] active_anon:12853 inactive_anon:0 isolated_anon:0
[  452.301362][T24360]  active_file:1727 inactive_file:38393 isolated_file:0
[  452.301362][T24360]  unevictable:1768 dirty:99 writeback:0
[  452.301362][T24360]  slab_reclaimable:12855 slab_unreclaimable:147695
[  452.301362][T24360]  mapped:18380 shmem:2469 pagetables:1200
[  452.301362][T24360]  sec_pagetables:0 bounce:0
[  452.301362][T24360]  kernel_misc_reclaimable:0
[  452.301362][T24360]  free:165249 free_pcp:15562 free_cma:0
[  452.320977][T24360] Node 0 active_anon:12960kB inactive_anon:0kB active_file:4588kB inactive_file:138164kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37768kB dirty:116kB writeback:0kB shmem:5184kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7780kB pagetables:2160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  452.334887][T24360] Node 1 active_anon:38452kB inactive_anon:0kB active_file:2320kB inactive_file:15408kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35752kB dirty:280kB writeback:0kB shmem:4692kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9240kB pagetables:2572kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  452.352275][T24360] Node 0 DMA free:6692kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:380kB local_pcp:36kB free_cma:0kB
[  452.364237][T24360] lowmem_reserve[]: 0 811 811 811 811
[  452.376069][T24360] Node 0 DMA32 free:154184kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13028kB inactive_anon:0kB active_file:4588kB inactive_file:138164kB unevictable:3536kB writepending:116kB present:1556484kB managed:830888kB mlocked:0kB bounce:0kB free_pcp:53168kB local_pcp:17388kB free_cma:0kB
[  452.395604][T24360] lowmem_reserve[]: 0 0 0 0 0
[  452.397783][T24360] Node 1 DMA32 free:264112kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6492kB inactive_anon:0kB active_file:192kB inactive_file:24kB unevictable:0kB writepending:8kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:17624kB local_pcp:8848kB free_cma:0kB
[  452.411655][T24360] lowmem_reserve[]: 0 0 854 854 854
[  452.413729][T24360] Node 1 Normal free:292456kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31960kB inactive_anon:0kB active_file:2128kB inactive_file:15384kB unevictable:3536kB writepending:272kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:27372kB local_pcp:7916kB free_cma:0kB
[  452.425846][T24360] lowmem_reserve[]: 0 0 0 0 0
[  452.429394][T24360] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 3*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6692kB
[  452.434541][T24360] Node 0 DMA32: 4*4kB (UE) 7*8kB (UE) 62*16kB (UE) 4*32kB (E) 54*64kB (UME) 98*128kB (UE) 83*256kB (UM) 68*512kB (UM) 53*1024kB (UME) 9*2048kB (UM) 2*4096kB (M) = 154152kB
[  452.440979][T24360] Node 1 DMA32: 54*4kB (UM) 63*8kB (UME) 48*16kB (UME) 41*32kB (UME) 33*64kB (UM) 29*128kB (UM) 30*256kB (UME) 16*512kB (UE) 20*1024kB (UM) 5*2048kB (UME) 51*4096kB (UM) = 264112kB
[  452.448590][T24360] Node 1 Normal: 0*4kB 897*8kB (UME) 470*16kB (UM) 384*32kB (UME) 191*64kB (UM) 34*128kB (UM) 86*256kB (UME) 123*512kB (UME) 160*1024kB (UM) 0*2048kB 0*4096kB = 292392kB
[  452.455034][T24360] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB
[  452.459116][T24360] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  452.463009][T24360] 42589 total pagecache pages
[  452.464707][T24360] 0 pages in swap cache
[  452.471153][T24360] Free swap  = 124996kB
[  452.473603][T24360] Total swap = 124996kB
[  452.475045][T24360] 786301 pages RAM
[  452.476508][T24360] 0 pages HighMem/MovableOnly
[  452.478353][T24360] 241347 pages reserved
[  452.479984][T24360] 0 pages cma reserved
[  452.683891][T24392] openvswitch: netlink: EtherType 3ee is less than min 600
[  452.710477][T24389] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  452.713620][T24389] IPv6: NLM_F_CREATE should be set when creating new route
[  452.790751][T24399] syzkaller0: left promiscuous mode
[  452.792831][T24399] syzkaller0: left allmulticast mode
[  452.804703][T24399] tipc: Resetting bearer <eth:syzkaller0>
[  453.030721][T24426] validate_nla: 7 callbacks suppressed
[  453.030732][T24426] netlink: 'syz.1.5617': attribute type 30 has an invalid length.
[  453.040498][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  453.043428][T24426] netlink: 'syz.1.5617': attribute type 30 has an invalid length.
[  453.046093][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  453.056611][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  453.065039][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  453.135412][T24433] team0: Refused to change device type
[  453.174611][T24434] syzkaller0: entered promiscuous mode
[  453.177284][T24434] syzkaller0: entered allmulticast mode
[  453.180958][T24434] tipc: Resetting bearer <eth:syzkaller0>
[  453.258353][T24445] macvlan0: entered promiscuous mode
[  453.260964][T24445] batadv0: entered promiscuous mode
[  453.265068][T24445] hsr0: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network
[  453.269634][T24445] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  453.273181][T24445] hsr0: entered allmulticast mode
[  453.275756][T24445] macvlan0: left promiscuous mode
[  453.280447][T24445] batadv0: left promiscuous mode
[  453.295267][T24448] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  453.575777][T24473] openvswitch: netlink: EtherType 3ee is less than min 600
[  453.677113][T24484] batman_adv: batadv0: Adding interface: macvlan6
[  453.679490][T24484] batman_adv: batadv0: The MTU of interface macvlan6 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  453.687651][T24484] batman_adv: batadv0: Not using interface macvlan6 (retrying later): interface not active
[  453.715997][T24488] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  453.882737][T24495] netlink: 'syz.0.5638': attribute type 12 has an invalid length.
[  453.966555][T24494] netlink: 'syz.0.5638': attribute type 12 has an invalid length.
[  453.991528][T24504] __nla_validate_parse: 26 callbacks suppressed
[  453.991546][T24504] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5641'.
[  454.000686][T24506] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  454.008726][T24504] openvswitch: netlink: EtherType 3ee is less than min 600
[  454.143822][T24517] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5643'.
[  454.235566][T24524] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5647'.
[  454.269170][T24526] lo speed is unknown, defaulting to 1000
[  454.396299][T24535] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  455.075057][T24554] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5653'.
[  455.248694][T24566] netlink: 'syz.1.5657': attribute type 29 has an invalid length.
[  455.256524][T24566] netlink: 'syz.1.5657': attribute type 29 has an invalid length.
[  455.259453][T24567] netlink: 'syz.0.5658': attribute type 11 has an invalid length.
[  455.262776][T24566] netlink: 500 bytes leftover after parsing attributes in process `syz.1.5657'.
[  455.329776][T24571] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5660'.
[  455.333333][T24571] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  455.424662][T24577] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5662'.
[  455.432185][T24577] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5662'.
[  455.436170][T24586] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5662'.
[  455.446499][T24586] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5662'.
[  455.742304][T24603] netlink: 'syz.0.5669': attribute type 1 has an invalid length.
[  455.825921][   T10] hid (null): report_id 0 is invalid
[  455.830941][   T10] hid (null): unknown global tag 0xc
[  455.835298][   T10] hid-generic 0005:0007:0008.0003: unknown main item tag 0x2
[  455.840604][   T10] hid-generic 0005:0007:0008.0003: report_id 0 is invalid
[  455.843471][   T10] hid-generic 0005:0007:0008.0003: item 0 0 1 8 parsing failed
[  455.847422][   T10] hid-generic 0005:0007:0008.0003: probe with driver hid-generic failed with error -22
[  455.865059][T24608] gtp0: entered promiscuous mode
[  455.869930][T24608] gtp0: entered allmulticast mode
[  455.910099][T24613] netlink: 'syz.3.5672': attribute type 11 has an invalid length.
[  455.992987][T24615] netlink: 'syz.0.5673': attribute type 10 has an invalid length.
[  456.346860][T24627] veth0: entered promiscuous mode
[  456.365080][T24634] netlink: 'syz.1.5680': attribute type 1 has an invalid length.
[  456.378164][T24627] veth0 (unregistering): left promiscuous mode
[  456.428696][T24634] 8021q: adding VLAN 0 to HW filter on device bond45
[  456.452299][T24638] 8021q: adding VLAN 0 to HW filter on device bond45
[  456.454699][T24638] bond45: (slave vxcan1): The slave device specified does not support setting the MAC address
[  456.461296][T24638] bond45: (slave vxcan1): Error -95 calling set_mac_address
[  456.490853][T24634] veth43: entered promiscuous mode
[  456.497871][T24634] bond45: (slave veth43): Enslaving as an active interface with a down link
[  457.324245][T24693] bridge60: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  457.488260][T24708] lo speed is unknown, defaulting to 1000
[  457.912983][T24741] lo speed is unknown, defaulting to 1000
[  457.974263][T24744] netlink: 'syz.1.5708': attribute type 1 has an invalid length.
[  458.013734][T24744] 8021q: adding VLAN 0 to HW filter on device bond46
[  458.058357][T24743] bond46: entered promiscuous mode
[  458.282876][T24751] pimreg: entered allmulticast mode
[  458.338343][T24766] net_ratelimit: 1 callbacks suppressed
[  458.338360][T24766] openvswitch: netlink: EtherType 3ee is less than min 600
[  458.338731][T24762] netlink: 'syz.0.5714': attribute type 10 has an invalid length.
[  458.395437][T24768] IPv6: sit2: Disabled Multicast RS
[  458.401443][T24768] sit2: entered allmulticast mode
[  458.590077][T24786] 0X: renamed from caif0
[  458.596821][T24786] 0X: entered allmulticast mode
[  458.598870][T24786] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  458.628410][T24787] tipc: Resetting bearer <eth:syzkaller0>
[  458.631500][T24787] bond42: (slave gretap5): Releasing active interface
[  458.633513][T24787] gretap5: left promiscuous mode
[  458.635746][T24787] gretap5: left allmulticast mode
[  458.644053][T24787] bond43: (slave wireguard1): Releasing backup interface
[  458.647375][T24787] wireguard1: left promiscuous mode
[  458.649501][T24787] bond43: (slave wireguard2): making interface the new active one
[  458.652349][T24787] wireguard2: entered promiscuous mode
[  458.680109][T24787] bond43: (slave wireguard2): Releasing backup interface
[  458.684160][T24787] wireguard2: left promiscuous mode
[  458.690836][T24787] batman_adv: batadv0: Removing interface: macvlan4
[  458.693808][T24787] batman_adv: batadv0: Removing interface: macvlan6
[  458.699608][T24787] bond45: (slave veth43): Releasing active interface
[  458.735477][T24787] netlink: 'syz.1.5719': attribute type 10 has an invalid length.
[  458.765479][T24796] openvswitch: netlink: Message has 4 unknown bytes.
[  458.963523][T24808] lo speed is unknown, defaulting to 1000
[  459.519069][T24820] __nla_validate_parse: 18 callbacks suppressed
[  459.519081][T24820] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5728'.
[  459.519542][T24822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5729'.
[  459.529822][T24820] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5728'.
[  459.535163][T24820] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5728'.
[  459.540549][T24820] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5728'.
[  459.543947][T24820] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5728'.
[  459.560909][T24820] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5728'.
[  459.564289][T24820] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5728'.
[  459.581975][T24820] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5728'.
[  459.585290][T24820] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5728'.
[  459.623933][  T794] lo speed is unknown, defaulting to 1000
[  459.625910][  T794] syz0: Port: 1 Link DOWN
[  459.628821][  T794] lo speed is unknown, defaulting to 1000
[  459.659634][T24828] pim6reg1: entered promiscuous mode
[  459.661290][T24828] pim6reg1: entered allmulticast mode
[  459.690279][T24832] netlink: 'syz.0.5733': attribute type 1 has an invalid length.
[  459.720298][T24832] 8021q: adding VLAN 0 to HW filter on device bond68
[  459.982334][T24855] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  459.984498][T24851] netlink: 'syz.3.5739': attribute type 1 has an invalid length.
[  460.003730][T24851] bond14: (slave vcan0): The slave device specified does not support setting the MAC address
[  460.013326][T24851] bond14: (slave vcan0): making interface the new active one
[  460.016142][T24851] bond14: (slave vcan0): Enslaving as an active interface with an up link
[  460.021803][T24852] bond14: (slave vcan3): The slave device specified does not support setting the MAC address
[  460.027183][T24852] bond14: (slave vcan3): Enslaving as a backup interface with an up link
[  460.128833][T24857] netlink: 'syz.0.5742': attribute type 14 has an invalid length.
[  460.131459][T24857] netlink: 'syz.0.5742': attribute type 11 has an invalid length.
[  460.182729][T24851] bond0 (unregistering): Released all slaves
[  460.276099][T24874] lo speed is unknown, defaulting to 1000
[  460.305182][T24879] netlink: 'syz.3.5747': attribute type 6 has an invalid length.
[  460.309434][T24879] netlink: 'syz.3.5747': attribute type 10 has an invalid length.
[  460.348466][T24879] syzkaller0: left promiscuous mode
[  460.350088][T24879] syzkaller0: left allmulticast mode
[  460.352229][T24879] tipc: Resetting bearer <eth:syzkaller0>
[  460.482143][T24889] netlink: 'syz.3.5748': attribute type 1 has an invalid length.
[  460.603585][T24896] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  460.707126][T24898] netlink: 'syz.3.5752': attribute type 1 has an invalid length.
[  460.755057][T24898] 8021q: adding VLAN 0 to HW filter on device bond0
[  460.771646][T24902] bond0: entered promiscuous mode
[  460.842494][T24906] lo speed is unknown, defaulting to 1000
[  461.029611][T24913] syzkaller1: entered promiscuous mode
[  461.034032][T24913] syzkaller1: entered allmulticast mode
[  461.232295][T24928] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  461.398618][T24932] 8021q: adding VLAN 0 to HW filter on device bond69
[  461.810833][T24932] bond69: entered promiscuous mode
[  461.991212][T24948] bridge0: port 1(macvlan7) entered blocking state
[  461.993680][T24948] bridge0: port 1(macvlan7) entered disabled state
[  461.996764][T24948] macvlan7: entered allmulticast mode
[  462.000297][T24948] bridge0: entered allmulticast mode
[  462.135735][T24948] macvlan7: left allmulticast mode
[  462.140268][T24948] bridge0: left allmulticast mode
[  462.329803][T24954] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  462.386692][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  462.395050][T24961] 8021q: adding VLAN 0 to HW filter on device bond70
[  462.419456][T24961] bond70: entered promiscuous mode
[  462.463899][T24967] 8021q: adding VLAN 0 to HW filter on device bond23
[  462.511411][T24967] 8021q: adding VLAN 0 to HW filter on device bond23
[  462.514082][T24967] bond23: (slave vxcan3): The slave device specified does not support setting the MAC address
[  462.519724][T24967] bond23: (slave vxcan3): Error -95 calling set_mac_address
[  462.615594][T24976] 8021q: adding VLAN 0 to HW filter on device bond71
[  462.682451][T24986] pim6reg1: entered promiscuous mode
[  462.684327][T24986] pim6reg1: entered allmulticast mode
[  462.716510][T24988] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  462.750695][T24990] lo speed is unknown, defaulting to 1000
[  462.899488][T24998] veth1: entered promiscuous mode
[  462.909092][T25001] erspan0: entered allmulticast mode
[  463.171555][T25016] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  463.174471][T25016] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  463.290914][T25030] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  463.312832][T25030] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9
[  463.429760][T25041] validate_nla: 6 callbacks suppressed
[  463.429778][T25041] netlink: 'syz.0.5797': attribute type 1 has an invalid length.
[  463.449371][T25041] 8021q: adding VLAN 0 to HW filter on device bond72
[  463.554886][T25049] 0X: left allmulticast mode
[  463.559430][T25049] xfrm0: left promiscuous mode
[  463.561132][T25049] xfrm0: left allmulticast mode
[  463.570180][T25049] tipc: Resetting bearer <eth:syzkaller0>
[  463.579548][T25049] ip6gre1: left allmulticast mode
[  463.581656][T25049] vlan0: left allmulticast mode
[  463.583583][T25049] erspan0: left allmulticast mode
[  463.587879][T25049] veth0_macvtap: left allmulticast mode
[  463.590244][T25049] macvtap1: left allmulticast mode
[  463.618096][T25049] gtp0: left promiscuous mode
[  463.619908][T25049] gtp0: left allmulticast mode
[  463.624209][T25049] sit2: left allmulticast mode
[  463.631850][T25049] bond0: left promiscuous mode
[  463.634764][T25050] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  463.641940][   T13] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  463.646299][   T13] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  463.656474][   T13] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  463.659192][   T13] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  463.704095][T25054] tipc: Resetting bearer <eth:syzkaller0>
[  463.737904][ T9528] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  463.740487][ T9528] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  463.744220][ T9528] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  463.748306][ T9528] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  463.757500][T25052] lo speed is unknown, defaulting to 1000
[  464.103372][T25064] pimreg: entered allmulticast mode
[  464.105824][T25064] pimreg: left allmulticast mode
[  464.179955][T25066] netlink: 'syz.1.5806': attribute type 2 has an invalid length.
[  464.426908][T25078] tipc: Resetting bearer <eth:syzkaller0>
[  464.567605][T25087] __nla_validate_parse: 93 callbacks suppressed
[  464.567616][T25087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5813'.
[  464.644092][T25092] netlink: 'syz.1.5815': attribute type 32 has an invalid length.
[  464.647437][T25092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5815'.
[  464.650438][T25092] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  464.674437][T25096] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5816'.
[  464.677591][T25096] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  464.824166][T25102] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5818'.
[  464.829687][T25102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5818'.
[  465.028740][T25138] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5826'.
[  465.083186][T25142] syzkaller1: entered promiscuous mode
[  465.087768][T25142] syzkaller1: entered allmulticast mode
[  465.102240][T25142] bridge38: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  465.196987][T25149] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5830'.
[  465.305927][  T349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  465.308882][  T349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  465.502918][T25174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5837'.
[  465.509070][T25174] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  465.512693][T25174] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  465.691485][T25179] netlink: 'syz.3.5840': attribute type 10 has an invalid length.
[  465.721171][T25181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5841'.
[  465.884452][T25190] netlink: 'syz.3.5844': attribute type 1 has an invalid length.
[  465.947541][T25196] unknown channel width for channel at 909000KHz?
[  465.958076][T25197] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5846'.
[  465.963117][T25197] netlink: 'syz.3.5846': attribute type 1 has an invalid length.
[  466.009062][T25197] 8021q: adding VLAN 0 to HW filter on device bond24
[  466.203382][T25210] syzkaller0: left promiscuous mode
[  466.205090][T25210] syzkaller0: left allmulticast mode
[  466.260079][T25214] ip6gretap6: entered promiscuous mode
[  466.431454][T25226] siw: device registration error -23
[  466.528504][T25236] bond_slave_0: entered allmulticast mode
[  466.800404][T25262] netlink: 'syz.1.5867': attribute type 1 has an invalid length.
[  466.827715][T25262] 8021q: adding VLAN 0 to HW filter on device bond48
[  466.847908][T25262] bond48: (slave veth45): Enslaving as an active interface with a down link
[  466.910643][T25270] netlink: 'syz.1.5868': attribute type 1 has an invalid length.
[  466.937094][T25270] 8021q: adding VLAN 0 to HW filter on device bond49
[  466.973957][T25275] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  467.846169][T25300] lo speed is unknown, defaulting to 1000
[  470.941575][T25302] tipc: Resetting bearer <eth:syzkaller0>
[  471.034792][T25309] netlink: 'syz.0.5881': attribute type 11 has an invalid length.
[  471.063901][T25311] __nla_validate_parse: 6 callbacks suppressed
[  471.063912][T25311] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5882'.
[  471.073692][T25311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5882'.
[  471.090278][T25313] netlink: 'syz.0.5883': attribute type 11 has an invalid length.
[  471.093094][T25313] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5883'.
[  471.221092][T25320] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5885'.
[  471.233123][T25317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5885'.
[  471.241292][T25317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5885'.
[  471.275044][T25322] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5886'.
[  471.288459][T25322] netlink: 'syz.0.5886': attribute type 1 has an invalid length.
[  471.376137][T25326] syzkaller0: entered promiscuous mode
[  471.380674][T25326] syzkaller0: entered allmulticast mode
[  471.383091][T25326] tipc: Resetting bearer <eth:syzkaller0>
[  471.521227][T25332] netlink: 116 bytes leftover after parsing attributes in process `syz.0.5890'.
[  471.525385][T25332] netlink: 'syz.0.5890': attribute type 1 has an invalid length.
[  471.552077][T25332] 8021q: adding VLAN 0 to HW filter on device bond73
[  471.819244][T25355] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5897'.
[  471.822410][T25355] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  472.065315][T25365] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5902'.
[  472.217558][T25372] IPVS: nq: FWM 3 0x00000003 - no destination available
[  472.219890][T25374] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  472.712148][T25398] netlink: 'syz.0.5913': attribute type 1 has an invalid length.
[  473.063053][T25414] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  473.108905][T25417] 8021q: adding VLAN 0 to HW filter on device bond50
[  473.264491][T25437] tipc: Resetting bearer <eth:syzkaller0>
[  474.044405][T25460] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  474.084388][T25463] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  474.090391][T25463] tipc: Resetting bearer <eth:syzkaller0>
[  474.093842][T25463] syzkaller0: Caught tx_queue_len zero misconfig
[  474.110895][T25463] tipc: Resetting bearer <eth:syzkaller0>
[  474.118965][T25463] tipc: Resetting bearer <eth:syzkaller0>
[  474.376525][T25476] pim6reg1: entered promiscuous mode
[  474.378720][T25476] pim6reg1: entered allmulticast mode
[  474.413559][T25478] lo speed is unknown, defaulting to 1000
[  474.488953][T25482] netlink: 'syz.1.5940': attribute type 10 has an invalid length.
[  474.496953][T25482] netlink: 'syz.1.5940': attribute type 49 has an invalid length.
[  474.500699][T25482] netlink: 'syz.1.5940': attribute type 49 has an invalid length.
[  474.530651][T25477] lo speed is unknown, defaulting to 1000
[  474.875841][T25493] syzkaller0: left promiscuous mode
[  474.879208][T25493] syzkaller0: left allmulticast mode
[  474.881610][T25493] tipc: Resetting bearer <eth:syzkaller0>
[  475.005699][T25499] ipvlan1: left promiscuous mode
[  475.008554][T25499] 8021q: adding VLAN 0 to HW filter on device ipvlan1
[  475.176465][T25507] lo speed is unknown, defaulting to 1000
[  475.252617][T25514] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input10
[  475.500172][T25531] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  475.661560][T25546] wireguard3: entered promiscuous mode
[  475.663590][T25546] wireguard3: entered allmulticast mode
[  475.762983][T25556] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  476.575601][T25588] netlink: 'syz.1.5973': attribute type 9 has an invalid length.
[  476.582127][T25588] __nla_validate_parse: 16 callbacks suppressed
[  476.582137][T25588] netlink: 184 bytes leftover after parsing attributes in process `syz.1.5973'.
[  476.758570][T25595] lo speed is unknown, defaulting to 1000
[  476.830517][T25601] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5976'.
[  476.871586][T25603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5978'.
[  476.900153][T25604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5978'.
[  477.084231][T25613] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  477.212006][T25618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5981'.
[  477.249298][T25620] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  477.253048][T25620] syzkaller0: entered promiscuous mode
[  477.255164][T25620] syzkaller0: entered allmulticast mode
[  477.258976][T25620] tipc: Resetting bearer <eth:syzkaller0>
[  477.316776][T25623] netlink: 'syz.1.5983': attribute type 1 has an invalid length.
[  477.372670][T25623] 8021q: adding VLAN 0 to HW filter on device bond51
[  477.439658][T25618] bridge0: entered promiscuous mode
[  477.441393][T25618] macsec0: entered promiscuous mode
[  477.443169][T25618] macsec0: entered allmulticast mode
[  477.445402][T25618] bridge0: entered allmulticast mode
[  477.448388][T25629] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5984'.
[  477.451205][T25629] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  477.549682][T25635] tipc: Resetting bearer <eth:syzkaller0>
[  477.554210][T25635] bond14: (slave vcan0): Releasing backup interface
[  477.558739][T25635] bond14: (slave vcan3): making interface the new active one
[  477.564997][T25635] bond14: (slave vcan3): Releasing backup interface
[  477.575600][T25633] pim6reg99999999: entered allmulticast mode
[  477.633951][T25637] netlink: 'syz.1.5988': attribute type 1 has an invalid length.
[  477.682556][T25637] 8021q: adding VLAN 0 to HW filter on device bond52
[  477.739476][T25643] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5990'.
[  477.742532][T25643] openvswitch: netlink: EtherType 3ee is less than min 600
[  477.791421][T25645] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  477.831985][T25647] lo speed is unknown, defaulting to 1000
[  478.005982][T25652] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5993'.
[  478.010562][T25652] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  478.105937][  T349] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  478.152773][T25655] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  478.245419][T25660] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5995'.
[  478.306243][T25662] batadv0: entered allmulticast mode
[  478.308720][T25662] 8021q: adding VLAN 0 to HW filter on device batadv0
[  478.364619][T25666] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5998'.
[  478.389195][T25666] erspan0: entered promiscuous mode
[  478.392594][T25666] erspan0: left promiscuous mode
[  478.415992][T25668] netlink: 'syz.0.5999': attribute type 1 has an invalid length.
[  478.812083][T25688] netlink: 'syz.3.6003': attribute type 1 has an invalid length.
[  478.833593][T25688] 8021q: adding VLAN 0 to HW filter on device bond25
[  478.847325][T25688] bond25: entered promiscuous mode
[  478.914104][T25695] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  478.990792][T25699] ip6tnl6: entered promiscuous mode
[  479.085122][T25708] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  479.139049][T25713] netlink: 'syz.3.6011': attribute type 6 has an invalid length.
[  479.160438][T25713] netlink: 'syz.3.6011': attribute type 12 has an invalid length.
[  479.247569][T25719] netlink: 'syz.3.6013': attribute type 1 has an invalid length.
[  479.273622][T25719] 8021q: adding VLAN 0 to HW filter on device bond26
[  479.280275][T25722] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  479.283591][T25722] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  479.358037][T25731] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  479.501618][T25743] netlink: 'syz.0.6022': attribute type 1 has an invalid length.
[  479.523484][T25743] 8021q: adding VLAN 0 to HW filter on device bond75
[  479.555179][T25748] netlink: 'syz.3.6023': attribute type 1 has an invalid length.
[  479.656579][T25758] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  479.812106][T25777] 8021q: adding VLAN 0 to HW filter on device bond76
[  479.914003][T25788] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  480.012359][T25790] tipc: Resetting bearer <eth:syzkaller0>
[  480.054874][T25797] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  480.059248][T25797] CPU: 1 UID: 0 PID: 25797 Comm: syz.0.6037 Not tainted syzkaller #0 PREEMPT(full) 
[  480.059262][T25797] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  480.059268][T25797] Call Trace:
[  480.059273][T25797]  <TASK>
[  480.059278][T25797]  dump_stack_lvl+0x189/0x250
[  480.059295][T25797]  ? __pfx_dump_stack_lvl+0x10/0x10
[  480.059305][T25797]  ? __pfx__printk+0x10/0x10
[  480.059320][T25797]  ? kernfs_path_from_node+0x2f/0x290
[  480.059330][T25797]  ? kernfs_path_from_node+0x250/0x290
[  480.059338][T25797]  ? kernfs_path_from_node+0x2f/0x290
[  480.059349][T25797]  sysfs_warn_dup+0x8e/0xa0
[  480.059358][T25797]  sysfs_do_create_link_sd+0xc0/0x110
[  480.059368][T25797]  device_add_class_symlinks+0x1cf/0x240
[  480.059380][T25797]  device_add+0x475/0xb50
[  480.059412][T25797]  wiphy_register+0x1ba6/0x28d0
[  480.059430][T25797]  ? __pfx_wiphy_register+0x10/0x10
[  480.059438][T25797]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  480.059453][T25797]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  480.059466][T25797]  ieee80211_register_hw+0x3484/0x4100
[  480.059486][T25797]  ? ieee80211_register_hw+0x1431/0x4100
[  480.059501][T25797]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  480.059514][T25797]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  480.059530][T25797]  ? __hrtimer_setup+0x187/0x210
[  480.059538][T25797]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  480.059548][T25797]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  480.059575][T25797]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  480.059586][T25797]  ? trace_kmalloc+0x1f/0xd0
[  480.059596][T25797]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  480.059608][T25797]  ? kstrndup+0xbf/0x160
[  480.059622][T25797]  hwsim_new_radio_nl+0xea4/0x1b10
[  480.059660][T25797]  ? __pfx___nla_validate_parse+0x10/0x10
[  480.059681][T25797]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  480.059700][T25797]  ? __nla_parse+0x40/0x60
[  480.059710][T25797]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  480.059726][T25797]  genl_family_rcv_msg_doit+0x215/0x300
[  480.059741][T25797]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  480.059758][T25797]  ? bpf_lsm_capable+0x9/0x20
[  480.059770][T25797]  ? security_capable+0x7e/0x2e0
[  480.059785][T25797]  genl_rcv_msg+0x60e/0x790
[  480.059799][T25797]  ? __pfx_genl_rcv_msg+0x10/0x10
[  480.059809][T25797]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  480.059827][T25797]  netlink_rcv_skb+0x208/0x470
[  480.059834][T25797]  ? __lock_acquire+0xab9/0xd20
[  480.059846][T25797]  ? __pfx_genl_rcv_msg+0x10/0x10
[  480.059857][T25797]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  480.059875][T25797]  ? down_read+0x1ad/0x2e0
[  480.059886][T25797]  genl_rcv+0x28/0x40
[  480.059896][T25797]  netlink_unicast+0x82f/0x9e0
[  480.059913][T25797]  ? __pfx_netlink_unicast+0x10/0x10
[  480.059926][T25797]  ? netlink_sendmsg+0x642/0xb30
[  480.059934][T25797]  ? skb_put+0x11b/0x210
[  480.059945][T25797]  netlink_sendmsg+0x805/0xb30
[  480.059959][T25797]  ? __pfx_netlink_sendmsg+0x10/0x10
[  480.059969][T25797]  ? aa_sock_msg_perm+0xf1/0x1d0
[  480.059984][T25797]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  480.059994][T25797]  ? __pfx_netlink_sendmsg+0x10/0x10
[  480.060003][T25797]  __sock_sendmsg+0x21c/0x270
[  480.060018][T25797]  ____sys_sendmsg+0x505/0x830
[  480.060032][T25797]  ? __pfx_____sys_sendmsg+0x10/0x10
[  480.060048][T25797]  ? import_iovec+0x74/0xa0
[  480.060060][T25797]  ___sys_sendmsg+0x21f/0x2a0
[  480.060071][T25797]  ? __pfx____sys_sendmsg+0x10/0x10
[  480.060099][T25797]  ? __fget_files+0x2a/0x420
[  480.060107][T25797]  ? __fget_files+0x3a0/0x420
[  480.060119][T25797]  __x64_sys_sendmsg+0x19b/0x260
[  480.060131][T25797]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  480.060146][T25797]  ? rcu_is_watching+0x15/0xb0
[  480.060157][T25797]  ? do_syscall_64+0xbe/0x3b0
[  480.060168][T25797]  do_syscall_64+0xfa/0x3b0
[  480.060178][T25797]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.060185][T25797]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  480.060196][T25797]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.060204][T25797] RIP: 0033:0x7f10fd78ec29
[  480.060213][T25797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  480.060220][T25797] RSP: 002b:00007f10fe5d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  480.060231][T25797] RAX: ffffffffffffffda RBX: 00007f10fd9d5fa0 RCX: 00007f10fd78ec29
[  480.060237][T25797] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a
[  480.060242][T25797] RBP: 00007f10fd811e41 R08: 0000000000000000 R09: 0000000000000000
[  480.060248][T25797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  480.060254][T25797] R13: 00007f10fd9d6038 R14: 00007f10fd9d5fa0 R15: 00007ffc6074a758
[  480.060268][T25797]  </TASK>
[  480.329967][T25808] mac80211_hwsim hwsim53 wlan0 (unregistering): left promiscuous mode
[  480.528387][T25816] lo speed is unknown, defaulting to 1000
[  480.546671][T21323] Bluetooth: hci2: command 0x0405 tx timeout
[  480.625879][T25833] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  480.815076][T25839] tipc: Resetting bearer <eth:syzkaller0>
[  480.911517][T25841] 8021q: adding VLAN 0 to HW filter on device bond27
[  480.944726][T25841] bond27: entered promiscuous mode
[  480.948275][T25845] lo speed is unknown, defaulting to 1000
[  481.302662][T25852] lo speed is unknown, defaulting to 1000
[  481.451990][T25860] 8021q: adding VLAN 0 to HW filter on device bond53
[  481.612994][T25868] __nla_validate_parse: 28 callbacks suppressed
[  481.613010][T25868] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6056'.
[  481.815955][T25883] pimreg: entered allmulticast mode
[  481.818965][T25883] pimreg: left allmulticast mode
[  481.846167][T25882] vlan0: entered promiscuous mode
[  481.848451][T25882] bond0: entered promiscuous mode
[  481.926049][T25887] vxcan0: entered allmulticast mode
[  482.005833][T25889] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6062'.
[  482.053045][T25891] validate_nla: 7 callbacks suppressed
[  482.053061][T25891] netlink: 'syz.0.6063': attribute type 1 has an invalid length.
[  482.091802][T25891] 8021q: adding VLAN 0 to HW filter on device bond77
[  482.112758][T25895] lo speed is unknown, defaulting to 1000
[  482.147533][T25891] veth29: entered promiscuous mode
[  482.151682][T25891] bond77: (slave veth29): Enslaving as a backup interface with a down link
[  482.169070][T25891] bond77: (slave veth29): Releasing backup interface
[  482.523164][T25916] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6069'.
[  482.527457][T25916] net_ratelimit: 1 callbacks suppressed
[  482.527472][T25916] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  482.667612][T25919] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  482.673855][T18925] lo speed is unknown, defaulting to 1000
[  482.676100][T18925] syz0: Port: 1 Link ACTIVE
[  482.685236][T18925] lo speed is unknown, defaulting to 1000
[  482.751519][T25923] netlink: 116 bytes leftover after parsing attributes in process `syz.0.6071'.
[  482.755659][T25923] netlink: 'syz.0.6071': attribute type 1 has an invalid length.
[  482.786309][T25923] 8021q: adding VLAN 0 to HW filter on device bond78
[  482.805666][T25923] bond78: entered promiscuous mode
[  482.862222][T25930] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6073'.
[  482.923605][T25933] netlink: 'syz.3.6075': attribute type 1 has an invalid length.
[  482.941837][T25933] 8021q: adding VLAN 0 to HW filter on device bond28
[  482.962888][T25933] bond28: (slave geneve3): making interface the new active one
[  482.967879][T25933] bond28: (slave geneve3): Enslaving as an active interface with an up link
[  482.972448][   T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  482.975070][   T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  482.979607][   T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  482.984932][   T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  483.039718][T25947] netlink: 248 bytes leftover after parsing attributes in process `syz.3.6077'.
[  483.119722][T25952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6079'.
[  483.124163][T25950] tipc: Failed to remove unknown binding: 66,1,1/2886997007:4035598722/4035598724
[  483.128598][T25950] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  483.162974][T25954] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6080'.
[  483.175263][T25956] 8021q: adding VLAN 0 to HW filter on device bond2
[  483.313881][T25966] netlink: 'syz.1.6084': attribute type 1 has an invalid length.
[  483.324778][T25966] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6084'.
[  483.332875][T25966] netlink: 'syz.1.6084': attribute type 2 has an invalid length.
[  483.335237][T25966] netlink: 'syz.1.6084': attribute type 1 has an invalid length.
[  483.342028][T25966] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6084'.
[  483.365951][T25976] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  483.374814][T25975] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  483.424024][T25981] netlink: 'syz.0.6088': attribute type 12 has an invalid length.
[  483.431143][T25981] netlink: 'syz.0.6088': attribute type 12 has an invalid length.
[  483.433733][T25986] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  483.557069][T26003] netlink: 'syz.1.6094': attribute type 1 has an invalid length.
[  483.578399][T26003] veth47: entered promiscuous mode
[  483.625410][  T793] hid-generic 0005:0007:0008.0004: unknown main item tag 0x0
[  483.630672][  T793] hid-generic 0005:0007:0008.0004: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa
[  483.638657][T26007] gtp3: entered promiscuous mode
[  483.640452][T26007] gtp3: entered allmulticast mode
[  483.711151][T26019] netlink: 'syz.1.6099': attribute type 10 has an invalid length.
[  483.713713][T26019] !: left promiscuous mode
[  483.742604][T26023] vlan1: entered promiscuous mode
[  483.800729][T26025] macvlan7: entered promiscuous mode
[  483.802483][T26025] vlan0: entered promiscuous mode
[  483.804207][T26025] erspan0: entered promiscuous mode
[  484.222181][T26060] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  484.260010][T26058] bridge0: entered allmulticast mode
[  484.668301][T26092] 8021q: adding VLAN 0 to HW filter on device bond29
[  484.690682][T26092] bond29: entered promiscuous mode
[  484.766224][T26102] Bluetooth: hci0: Opcode 0x080f failed: -22
[  484.964820][T26122] lo speed is unknown, defaulting to 1000
[  485.047387][T26134] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  485.144249][T26144] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  485.284399][T18925] IPVS: starting estimator thread 0...
[  485.389680][T26155] IPVS: using max 62 ests per chain, 148800 per kthread
[  486.050088][T26184] 8021q: adding VLAN 0 to HW filter on device bond54
[  486.075901][T26184] bond54: entered promiscuous mode
[  486.221515][T26195] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  486.394390][T26210] 8021q: adding VLAN 0 to HW filter on device bond55
[  486.787262][ T5864] Bluetooth: hci0: command tx timeout
[  486.872112][T26229] vlan0: left promiscuous mode
[  486.875613][T26229] bond0: left promiscuous mode
[  486.879458][T26229] tipc: Resetting bearer <eth:syzkaller0>
[  486.891492][T26236] __nla_validate_parse: 19 callbacks suppressed
[  486.891509][T26236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6165'.
[  486.943416][T26237] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6166'.
[  487.128761][T26229] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  487.145600][T26229] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  487.178107][T26229] bond43: left promiscuous mode
[  487.183032][T26229] bridge57: left allmulticast mode
[  487.193261][T26229] veth43: left promiscuous mode
[  487.197837][T26229] bond46: left promiscuous mode
[  487.215194][T26229] wireguard3: left promiscuous mode
[  487.222385][T26229] wireguard3: left allmulticast mode
[  487.257312][T26229] bond54: left promiscuous mode
[  487.263374][T26233] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  487.270291][T26234] bridge0: entered allmulticast mode
[  487.280398][ T9528] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  487.283501][ T9528] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  487.288419][T26240] pim6reg: left allmulticast mode
[  487.290323][T26240] bridge0: left allmulticast mode
[  487.309607][ T9528] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  487.312278][ T9528] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  487.542162][T26249] tipc: Resetting bearer <eth:syzkaller0>
[  487.545778][T26249] bond28: (slave geneve3): Releasing active interface
[  487.555291][T26262] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6173'.
[  487.564667][   T12] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  487.571937][T26249] validate_nla: 12 callbacks suppressed
[  487.571951][T26249] netlink: 'syz.3.6171': attribute type 10 has an invalid length.
[  487.572165][   T12] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  487.593976][   T12] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  487.599422][T26262] netlink: 'syz.0.6173': attribute type 1 has an invalid length.
[  487.602287][   T12] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  487.776058][T26273] pim6reg: entered allmulticast mode
[  487.778390][T26273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6176'.
[  487.783235][T26273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6176'.
[  487.878118][T26284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6179'.
[  487.885235][T26284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6179'.
[  487.890966][T26284] netlink: 'syz.3.6179': attribute type 1 has an invalid length.
[  488.013915][T26302] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  488.037937][T26304] netlink: 'syz.0.6183': attribute type 19 has an invalid length.
[  488.040398][T26304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6183'.
[  488.043543][T26304] netlink: 'syz.0.6183': attribute type 19 has an invalid length.
[  488.046468][T26304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6183'.
[  488.111991][T26319] netlink: 'syz.0.6186': attribute type 1 has an invalid length.
[  488.144879][T26319] workqueue: Failed to create a rescuer kthread for wq "bond79": -EINTR
[  488.178048][T26313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6185'.
[  488.249418][T26338] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  488.281705][T26338] tipc: Resetting bearer <eth:syzkaller0>
[  488.341562][T26343] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  488.385215][   T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  488.390187][   T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  488.395544][   T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  488.400075][   T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  488.439188][T26353] syzkaller0: left promiscuous mode
[  488.441025][T26353] syzkaller0: left allmulticast mode
[  488.443296][T26353] tipc: Resetting bearer <eth:syzkaller0>
[  488.450800][T26353] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  488.510834][T26359] nbd: must specify an index to disconnect
[  488.527643][T26359] ipvlan2: entered promiscuous mode
[  488.530160][T26359] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  488.536144][T26363] netlink: 'syz.3.6199': attribute type 4 has an invalid length.
[  488.545650][T26359] IPVS: Error connecting to the multicast addr
[  488.661783][T26374] netlink: 'syz.3.6202': attribute type 6 has an invalid length.
[  488.687906][T26374] netlink: 'syz.3.6202': attribute type 12 has an invalid length.
[  488.783363][T26382] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  488.788206][T26382] syzkaller0: entered promiscuous mode
[  488.790019][T26382] syzkaller0: entered allmulticast mode
[  488.792239][T26382] tipc: Resetting bearer <eth:syzkaller0>
[  489.262376][T26411] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  489.329650][T26415] netlink: 'syz.3.6216': attribute type 1 has an invalid length.
[  489.359174][T26415] 8021q: adding VLAN 0 to HW filter on device bond30
[  489.378948][T26419] tipc: New replicast peer: 255.255.255.255
[  489.384171][T26419] tipc: Enabled bearer <udp:syz2>, priority 10
[  489.539008][T26432] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  489.578419][T26431] 8021q: adding VLAN 0 to HW filter on device bond31
[  489.607087][T26431] 8021q: adding VLAN 0 to HW filter on device bond31
[  489.610094][T26431] bond31: (slave vxcan3): The slave device specified does not support setting the MAC address
[  489.629473][T26431] bond31: (slave vxcan3): Error -95 calling set_mac_address
[  489.685016][T26438] veth5: entered promiscuous mode
[  489.692871][T26438] bond31: (slave veth5): Enslaving as an active interface with a down link
[  489.699418][T26437] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  489.730744][T18683] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  489.734094][T18683] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  489.835631][T26445] lo speed is unknown, defaulting to 1000
[  489.838811][T26448] tipc: Resetting bearer <eth:syzkaller0>
[  490.506849][T26489] openvswitch: netlink: Message has 4108 unknown bytes.
[  490.692635][T26496] bridge41: entered allmulticast mode
[  490.785756][T26504] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  490.794958][T26502] lo speed is unknown, defaulting to 1000
[  491.021188][T26519] 8021q: adding VLAN 0 to HW filter on device bond32
[  491.354988][T26543] IPv6: NLM_F_CREATE should be specified when creating new route
[  491.358162][T26543] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  491.360598][T26543] IPv6: NLM_F_CREATE should be set when creating new route
[  491.363055][T26543] IPv6: NLM_F_CREATE should be set when creating new route
[  491.365583][T26543] IPv6: NLM_F_CREATE should be set when creating new route
[  491.473412][T26548] macsec0: entered promiscuous mode
[  491.482783][T26548] veth0_to_hsr: entered promiscuous mode
[  491.485122][T26548] macsec0: entered allmulticast mode
[  491.490634][T26548] veth0_to_hsr: entered allmulticast mode
[  491.919501][T26599] veth0_to_bridge: entered promiscuous mode
[  491.925228][T26599] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check.
[  491.978503][T26603] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  491.985426][T26593] __nla_validate_parse: 28 callbacks suppressed
[  491.985438][T26593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6271'.
[  492.134881][T26617] netlink: 116 bytes leftover after parsing attributes in process `syz.0.6277'.
[  492.181811][T26617] 8021q: adding VLAN 0 to HW filter on device bond82
[  492.220569][T26621] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6279'.
[  492.314840][T26637] !: entered promiscuous mode
[  492.319747][T26637] vlan1: entered promiscuous mode
[  492.594550][T26659] netlink: 116 bytes leftover after parsing attributes in process `syz.3.6288'.
[  492.600849][T26659] validate_nla: 7 callbacks suppressed
[  492.600859][T26659] netlink: 'syz.3.6288': attribute type 1 has an invalid length.
[  492.632367][T26659] 8021q: adding VLAN 0 to HW filter on device bond33
[  492.642174][T26665] vlan1: entered promiscuous mode
[  492.644052][T26665] bond0: entered promiscuous mode
[  492.645818][T26665] vlan1: entered allmulticast mode
[  492.647756][T26665] bond0: entered allmulticast mode
[  492.833466][T26685] netlink: 'syz.3.6297': attribute type 1 has an invalid length.
[  492.855046][T26685] 8021q: adding VLAN 0 to HW filter on device bond34
[  492.892565][T26685] vlan1: entered promiscuous mode
[  492.894646][T26685] bond34: entered promiscuous mode
[  492.896570][T26685] vlan1: entered allmulticast mode
[  492.898708][T26685] bond34: entered allmulticast mode
[  492.942581][T26688] bridge0: the hash_elasticity option has been deprecated and is always 16
[  492.946283][T26688] bridge0: entered allmulticast mode
[  492.956989][T26691] tipc: Enabling of bearer <ib:caif0> rejected, failed to enable media
[  492.964496][T26690] netlink: 116 bytes leftover after parsing attributes in process `syz.0.6300'.
[  492.969021][T26690] netlink: 'syz.0.6300': attribute type 1 has an invalid length.
[  492.995423][T26690] 8021q: adding VLAN 0 to HW filter on device bond83
[  493.035473][T26696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6302'.
[  493.052304][T26698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6303'.
[  493.060749][T26698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6303'.
[  493.270367][T26714] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  493.279302][T26714] syzkaller0: entered promiscuous mode
[  493.281553][T26714] syzkaller0: entered allmulticast mode
[  493.292828][T26714] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6308'.
[  493.348643][T26716] netlink: 116 bytes leftover after parsing attributes in process `syz.0.6309'.
[  493.353688][T26716] netlink: 'syz.0.6309': attribute type 1 has an invalid length.
[  493.358359][T26718] netlink: 'syz.3.6310': attribute type 2 has an invalid length.
[  493.362632][T26718] netlink: 'syz.3.6310': attribute type 1 has an invalid length.
[  493.385948][T26716] 8021q: adding VLAN 0 to HW filter on device bond84
[  493.439224][T26721] lo speed is unknown, defaulting to 1000
[  493.581664][T26722] lo speed is unknown, defaulting to 1000
[  493.665989][T26730] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  493.676103][T26736] tipc: Resetting bearer <eth:syzkaller0>
[  493.935528][T26748] lo speed is unknown, defaulting to 1000
[  494.110910][T26750] netlink: 'syz.1.6320': attribute type 5 has an invalid length.
[  494.359873][T26763] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  494.377962][T26763] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  494.384251][T26763] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  494.398907][T26763] tipc: Resetting bearer <eth:syzkaller0>
[  494.570269][T26769] netlink: 'syz.3.6325': attribute type 1 has an invalid length.
[  494.628763][T26769] 8021q: adding VLAN 0 to HW filter on device bond35
[  494.713629][T26783] netlink: 'syz.0.6329': attribute type 10 has an invalid length.
[  494.734603][T26780] bond56: (slave vxcan1): The slave device specified does not support setting the MAC address
[  494.739754][T26783] netlink: 'syz.0.6329': attribute type 17 has an invalid length.
[  494.743875][T26780] bond56: (slave vxcan1): Error -95 calling set_mac_address
[  494.765992][T26785] lo speed is unknown, defaulting to 1000
[  494.863207][T26791] 8021q: adding VLAN 0 to HW filter on device bond85
[  494.902411][T26791] bond85: entered promiscuous mode
[  495.174630][T26809] 8021q: adding VLAN 0 to HW filter on device bond86
[  495.536853][T26830] bond36: entered promiscuous mode
[  495.539575][T26830] 8021q: adding VLAN 0 to HW filter on device bond36
[  495.562047][T26830] 8021q: adding VLAN 0 to HW filter on device bond36
[  495.565053][T26830] bond36: (slave wireguard7): The slave device specified does not support setting the MAC address
[  495.569201][T26830] bond36: (slave wireguard7): Setting fail_over_mac to active for active-backup mode
[  495.576214][T26830] bond36: (slave wireguard7): making interface the new active one
[  495.579422][T26830] wireguard7: entered promiscuous mode
[  495.582759][T26830] bond36: (slave wireguard7): Enslaving as an active interface with an up link
[  495.590665][T26830] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  495.593600][T26830] IPv6: NLM_F_CREATE should be set when creating new route
[  495.596588][T26830] IPv6: NLM_F_CREATE should be set when creating new route
[  495.601239][T26830] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  495.611031][T26830] bond36: (slave wireguard8): The slave device specified does not support setting the MAC address
[  495.618250][T26830] bond36: (slave wireguard8): Enslaving as a backup interface with an up link
[  495.731147][T26836] lo speed is unknown, defaulting to 1000
[  495.919639][T26846] tipc: Resetting bearer <eth:syzkaller0>
[  495.921659][T26846] tipc: Resetting bearer <eth:syzkaller0>
[  496.037325][T26854] nbd: must specify a device to reconfigure
[  496.546827][T26890] 8021q: adding VLAN 0 to HW filter on device bond57
[  496.783660][T26902] lo speed is unknown, defaulting to 1000
[  496.932788][T26907] netlink: 'syz.1.6366': attribute type 11 has an invalid length.
[  497.152091][T26915] bond59: entered promiscuous mode
[  497.159877][T26915] bond59: entered allmulticast mode
[  497.166943][T26915] 8021q: adding VLAN 0 to HW filter on device bond59
[  497.324052][T26921] __nla_validate_parse: 33 callbacks suppressed
[  497.324069][T26921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6371'.
[  497.390489][T26921] 8021q: adding VLAN 0 to HW filter on device bond61
[  497.395164][T26921] bond60: (slave bond61): Enslaving as an active interface with an up link
[  497.416903][T26921] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6371'.
[  497.423129][T26921] 8021q: adding VLAN 0 to HW filter on device bond60
[  497.464294][T26925] bond37 (unregistering): Released all slaves
[  497.504561][T26930] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6372'.
[  497.522060][T26933] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6375'.
[  497.581286][T26941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6376'.
[  497.584807][T26941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6376'.
[  497.642049][T26946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6378'.
[  497.674865][T26947] bridge0: port 1(macvlan8) entered blocking state
[  497.678592][T26947] bridge0: port 1(macvlan8) entered disabled state
[  497.682380][T26947] macvlan8: entered allmulticast mode
[  497.685443][T26947] macvlan8: left allmulticast mode
[  497.705484][T26949] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  497.763817][T26949] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  497.779131][T26957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6381'.
[  497.782036][T26957] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6381'.
[  497.803374][T26960] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6382'.
[  497.839597][T26949] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  497.873125][T26965] vxcan4: entered promiscuous mode
[  497.885714][T26949] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  497.976718][T26972] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  498.071215][T17164] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  498.091345][   T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  498.136132][   T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  498.139701][   T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  498.527348][T26999] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  498.672009][T27009] bond37 (unregistering): Released all slaves
[  499.030016][T27034] validate_nla: 13 callbacks suppressed
[  499.030031][T27034] netlink: 'syz.3.6403': attribute type 10 has an invalid length.
[  499.038217][T27034] tipc: Resetting bearer <eth:syzkaller0>
[  499.050727][T27034] vlan0: left promiscuous mode
[  499.052688][T27034] erspan0: left promiscuous mode
[  499.085629][ T5717] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  499.090511][ T5717] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  499.093935][ T5717] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  499.097300][ T5717] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  499.241877][T27047] netlink: 'syz.3.6407': attribute type 13 has an invalid length.
[  499.393381][T27058] macvlan8: entered promiscuous mode
[  499.395183][T27058] vlan0: entered promiscuous mode
[  499.498891][T27054] lo speed is unknown, defaulting to 1000
[  499.844489][T27081] netlink: 'syz.0.6416': attribute type 10 has an invalid length.
[  500.025195][T27091] netlink: 'syz.0.6419': attribute type 32 has an invalid length.
[  500.036655][T27091] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  500.084653][T27096] syzkaller0: left promiscuous mode
[  500.087529][T27096] syzkaller0: left allmulticast mode
[  500.115538][T27098] IPVS: set_ctl: invalid protocol: 47 100.1.1.0:20001
[  500.284684][T27115] can: request_module (can-proto-0) failed.
[  500.336007][T27125] mac80211_hwsim hwsim136 wlan1: entered allmulticast mode
[  500.342920][T27125] bond31: (slave veth5): Releasing active interface
[  500.349885][T27125] bond36: (slave wireguard7): Releasing backup interface
[  500.352795][T27125] wireguard7: left promiscuous mode
[  500.356794][T27125] bond36: (slave wireguard8): making interface the new active one
[  500.359382][T27125] wireguard8: entered promiscuous mode
[  500.362973][T27125] bond36: (slave wireguard8): Releasing backup interface
[  500.365116][T27125] wireguard8: left promiscuous mode
[  500.371840][T27122] netlink: 'syz.1.6431': attribute type 1 has an invalid length.
[  500.376714][T27125] lo: Caught tx_queue_len zero misconfig
[  500.401915][T27122] netlink: 'syz.1.6431': attribute type 1 has an invalid length.
[  500.434158][T27122] 8021q: adding VLAN 0 to HW filter on device bond62
[  500.460115][T27125] netlink: 'syz.3.6432': attribute type 10 has an invalid length.
[  500.477827][T27125] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  500.481591][T27125] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  500.498302][T27132] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  500.696278][T27151] netlink: 'syz.1.6440': attribute type 4 has an invalid length.
[  500.780130][T27159] netlink: 'syz.0.6443': attribute type 1 has an invalid length.
[  500.807909][T27159] 8021q: adding VLAN 0 to HW filter on device bond88
[  500.834143][T27159] bond88: (slave veth33): Enslaving as an active interface with a down link
[  500.845559][T27159] macvlan4: entered promiscuous mode
[  500.848416][T27159] macvlan4: entered allmulticast mode
[  500.856809][T27159] bond88: entered promiscuous mode
[  500.858778][T27159] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  500.861313][T27159] bond88: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  500.868013][T27159] bond88: left promiscuous mode
[  500.904410][T27163] veth0_to_hsr: left allmulticast mode
[  500.906941][T27163] veth0_to_hsr: left promiscuous mode
[  501.201437][T27178] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  501.215411][T27180] netlink: 'syz.1.6451': attribute type 1 has an invalid length.
[  501.260051][T27180] 8021q: adding VLAN 0 to HW filter on device bond63
[  501.290678][T27187] dvmrp0: left allmulticast mode
[  501.292448][T27187] dvmrp1: left allmulticast mode
[  501.294115][T27187] pimreg: left allmulticast mode
[  501.295680][T27187] dvmrp11: left allmulticast mode
[  501.368995][T27186] dvmrp1: entered allmulticast mode
[  501.709484][T27228] 8021q: adding VLAN 0 to HW filter on device bond89
[  502.055098][T27252] erspan0: left allmulticast mode
[  502.113881][T27252] tipc: Resetting bearer <eth:syzkaller0>
[  502.121194][T27252] vlan0: left promiscuous mode
[  502.126829][T27252] bond60: left promiscuous mode
[  502.128913][T27252] bond60: left allmulticast mode
[  502.132429][T27252] bond61: left promiscuous mode
[  502.134556][T27252] bond61: left allmulticast mode
[  502.137524][T27252] team0: left promiscuous mode
[  502.143618][T27252] bond69: left promiscuous mode
[  502.145739][T27252] bond70: left promiscuous mode
[  502.148547][T27252] veth1: left promiscuous mode
[  502.152099][T27252] ip6gretap6: left promiscuous mode
[  502.173579][T27252] bridge0: left allmulticast mode
[  502.175934][T27252] macsec0: left promiscuous mode
[  502.181308][T27252] macsec0: left allmulticast mode
[  502.187785][T27252] batadv0: left allmulticast mode
[  502.201989][T27252] veth29: left promiscuous mode
[  502.204216][T27252] bond78: left promiscuous mode
[  502.210213][T27252] gtp3: left promiscuous mode
[  502.212235][T27252] gtp3: left allmulticast mode
[  502.238788][T27252] ipvlan2: left promiscuous mode
[  502.241493][T27252] bridge41: left allmulticast mode
[  502.255715][T27252] bond85: left promiscuous mode
[  502.306959][   T10] lo speed is unknown, defaulting to 1000
[  502.309297][   T10] syz0: Port: 1 Link DOWN
[  502.311080][   T10] lo speed is unknown, defaulting to 1000
[  502.334235][T27257] batadv_slave_0: left promiscuous mode
[  502.385829][T27258] 8021q: adding VLAN 0 to HW filter on device bond37
[  502.546172][T27258] bond37 (unregistering): Released all slaves
[  502.564684][T27271] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  502.569783][T27272] __nla_validate_parse: 38 callbacks suppressed
[  502.569799][T27272] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6472'.
[  502.581667][T27272] veth0_to_bridge: left promiscuous mode
[  502.621310][T27272] tipc: Resetting bearer <eth:syzkaller0>
[  502.623590][T27276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6474'.
[  502.634987][T27272] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  502.640822][T27272] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  502.668131][T27272] vlan1: left promiscuous mode
[  502.670298][T27272] vlan1: left allmulticast mode
[  502.672226][T27272] bond0: left allmulticast mode
[  502.675890][T27278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6474'.
[  502.697509][T27272] bond59: left promiscuous mode
[  502.699591][T27272] bond59: left allmulticast mode
[  502.703601][T27279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6472'.
[  502.725133][T27272] vlan0: left promiscuous mode
[  502.727680][T27272] bond0: left promiscuous mode
[  502.730078][T27272] macvlan8: left promiscuous mode
[  502.870415][T27281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6475'.
[  502.959063][T27285] netlink: 172 bytes leftover after parsing attributes in process `syz.0.6476'.
[  502.962345][T27284] netlink: 172 bytes leftover after parsing attributes in process `syz.0.6476'.
[  503.129986][T27311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6481'.
[  503.204091][T27315] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6485'.
[  503.207689][T27315] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  503.394505][T27327] veth37: entered promiscuous mode
[  503.952901][T27345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6495'.
[  504.052194][T27351] A link change request failed with some changes committed already. Interface pimreg0 may have been left with an inconsistent configuration, please check.
[  504.109290][T27353] pim6reg: entered allmulticast mode
[  504.135665][T27355] batadv2: entered promiscuous mode
[  504.638319][T27394] validate_nla: 9 callbacks suppressed
[  504.638334][T27394] netlink: 'syz.0.6510': attribute type 4 has an invalid length.
[  504.645798][T21741] lo speed is unknown, defaulting to 1000
[  504.649121][T21741] syz0: Port: 1 Link ACTIVE
[  504.651067][T21741] lo speed is unknown, defaulting to 1000
[  504.702642][T27399] Bluetooth: MGMT ver 1.23
[  505.107460][T21323] Bluetooth: hci2: command 0x0405 tx timeout
[  505.837314][T27436] bond88: (slave veth33): Releasing active interface
[  506.156023][T27456] netlink: 'syz.0.6528': attribute type 10 has an invalid length.
[  506.181566][T27456] netlink: 'syz.0.6528': attribute type 17 has an invalid length.
[  506.184258][T27457] netlink: 'syz.0.6528': attribute type 17 has an invalid length.
[  506.195618][T27456] netem: change failed
[  506.392108][T27478] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  506.589688][T27491] vlan2: entered allmulticast mode
[  506.591358][T27491] bridge_slave_0: entered allmulticast mode
[  506.965184][T27510] dvmrp8: entered allmulticast mode
[  506.971129][T27510] dvmrp8: left allmulticast mode
[  507.078905][T27514] 8021q: adding VLAN 0 to HW filter on device bond90
[  507.088133][T27514] macvlan5: entered promiscuous mode
[  507.089875][T27514] macvlan5: entered allmulticast mode
[  507.092497][T27514] bond90: entered promiscuous mode
[  507.095633][T27514] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  507.102993][T27514] bond90: left promiscuous mode
[  507.342260][T27526] vlan4: entered promiscuous mode
[  507.344079][T27526] hsr_slave_1: entered promiscuous mode
[  507.346606][T27526] vlan4: entered allmulticast mode
[  507.348783][T27526] hsr_slave_1: entered allmulticast mode
[  507.354689][T27518] netlink: 'syz.0.6546': attribute type 1 has an invalid length.
[  507.383717][T27518] bond91: entered promiscuous mode
[  507.386146][T27518] 8021q: adding VLAN 0 to HW filter on device bond91
[  507.503324][T27530] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  507.592873][T27539] netlink: 'syz.3.6551': attribute type 1 has an invalid length.
[  507.721268][T27544] lo speed is unknown, defaulting to 1000
[  507.847072][T27550] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  507.910784][T27553] __nla_validate_parse: 15 callbacks suppressed
[  507.910802][T27553] netlink: 830 bytes leftover after parsing attributes in process `syz.3.6556'.
[  507.955179][T27553] netlink: 'syz.3.6556': attribute type 1 has an invalid length.
[  507.979767][T27558] bond48: (slave veth45): Releasing active interface
[  507.983270][T27558] bond60: (slave bond61): Releasing backup interface
[  508.007226][T27558] syz.1.6558: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  508.013346][T27558] CPU: 1 UID: 0 PID: 27558 Comm: syz.1.6558 Not tainted syzkaller #0 PREEMPT(full) 
[  508.013360][T27558] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  508.013366][T27558] Call Trace:
[  508.013370][T27558]  <TASK>
[  508.013374][T27558]  dump_stack_lvl+0x189/0x250
[  508.013392][T27558]  ? __pfx_dump_stack_lvl+0x10/0x10
[  508.013403][T27558]  ? __pfx__printk+0x10/0x10
[  508.013416][T27558]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  508.013428][T27558]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  508.013438][T27558]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  508.013449][T27558]  warn_alloc+0x214/0x310
[  508.013463][T27558]  ? stack_depot_save_flags+0x40/0x860
[  508.013477][T27558]  ? __pfx_warn_alloc+0x10/0x10
[  508.013511][T27558]  ? kasan_save_track+0x4f/0x80
[  508.013522][T27558]  ? xskq_create+0x56/0x170
[  508.013530][T27558]  ? xsk_init_queue+0xb0/0x110
[  508.013537][T27558]  ? xsk_setsockopt+0x4dc/0x8d0
[  508.013549][T27558]  ? do_sock_setsockopt+0x17c/0x1b0
[  508.013558][T27558]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  508.013567][T27558]  ? do_syscall_64+0xfa/0x3b0
[  508.013576][T27558]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.013587][T27558]  __vmalloc_node_range_noprof+0x125/0x12f0
[  508.013613][T27558]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  508.013628][T27558]  ? __kasan_kmalloc+0x93/0xb0
[  508.013640][T27558]  vmalloc_user_noprof+0xad/0xf0
[  508.013651][T27558]  ? xskq_create+0xbf/0x170
[  508.013659][T27558]  xskq_create+0xbf/0x170
[  508.013669][T27558]  xsk_init_queue+0xb0/0x110
[  508.013678][T27558]  xsk_setsockopt+0x4dc/0x8d0
[  508.013691][T27558]  ? __pfx_xsk_setsockopt+0x10/0x10
[  508.013702][T27558]  ? __pfx_aa_sk_perm+0x10/0x10
[  508.013716][T27558]  ? aa_sock_opt_perm+0xff/0x1b0
[  508.013726][T27558]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  508.013734][T27558]  ? __pfx_xsk_setsockopt+0x10/0x10
[  508.013747][T27558]  do_sock_setsockopt+0x17c/0x1b0
[  508.013758][T27558]  __x64_sys_setsockopt+0x13f/0x1b0
[  508.013770][T27558]  do_syscall_64+0xfa/0x3b0
[  508.013778][T27558]  ? lockdep_hardirqs_on+0x9c/0x150
[  508.013786][T27558]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.013794][T27558]  ? exc_page_fault+0x9f/0xf0
[  508.013802][T27558]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.013810][T27558] RIP: 0033:0x7f5aa758ec29
[  508.013819][T27558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  508.013840][T27558] RSP: 002b:00007f5aa84ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  508.013851][T27558] RAX: ffffffffffffffda RBX: 00007f5aa77d5fa0 RCX: 00007f5aa758ec29
[  508.013857][T27558] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  508.013863][T27558] RBP: 00007f5aa7611e41 R08: 0000000000000004 R09: 0000000000000000
[  508.013869][T27558] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  508.013900][T27558] R13: 00007f5aa77d6038 R14: 00007f5aa77d5fa0 R15: 00007ffe13655a08
[  508.013919][T27558]  </TASK>
[  508.015506][T27558] Mem-Info:
[  508.103115][T27564] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  508.116496][T27558] active_anon:12852 inactive_anon:0 isolated_anon:0
[  508.116496][T27558]  active_file:1727 inactive_file:38415 isolated_file:0
[  508.116496][T27558]  unevictable:1768 dirty:212 writeback:0
[  508.116496][T27558]  slab_reclaimable:13568 slab_unreclaimable:146583
[  508.116496][T27558]  mapped:18404 shmem:2469 pagetables:1221
[  508.116496][T27558]  sec_pagetables:0 bounce:0
[  508.116496][T27558]  kernel_misc_reclaimable:0
[  508.116496][T27558]  free:178526 free_pcp:23459 free_cma:0
[  508.121244][T27564] tipc: Resetting bearer <eth:syzkaller0>
[  508.136450][T27558] Node 0 active_anon:13020kB inactive_anon:0kB active_file:4556kB inactive_file:138176kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37848kB dirty:464kB writeback:0kB shmem:5184kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8972kB pagetables:2260kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  508.154905][T27558] Node 1 active_anon:38388kB inactive_anon:0kB active_file:2352kB inactive_file:15484kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35768kB dirty:384kB writeback:0kB shmem:4692kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10580kB pagetables:2488kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  508.164730][T27558] Node 0 DMA free:6692kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:380kB local_pcp:36kB free_cma:0kB
[  508.175433][T27558] lowmem_reserve[]: 0 811 811 811 811
[  508.176607][T27565] netlink: 'syz.1.6558': attribute type 4 has an invalid length.
[  508.177604][T27558] Node 0 DMA32 free:179352kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13020kB inactive_anon:0kB active_file:4556kB inactive_file:138176kB unevictable:3536kB writepending:464kB present:1556484kB managed:830888kB mlocked:0kB bounce:0kB free_pcp:41216kB local_pcp:13696kB free_cma:0kB
[  508.192428][T27558] lowmem_reserve[]: 0 0
[  508.192455][T27565] netlink: 'syz.1.6558': attribute type 4 has an invalid length.
[  508.192461][T27558]  0
[  508.216071][T27558]  0 0
[  508.219181][T27558] Node 1 DMA32 free:259364kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6492kB inactive_anon:0kB active_file:192kB inactive_file:24kB unevictable:0kB writepending:8kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:21844kB local_pcp:9960kB free_cma:0kB
[  508.256547][T27558] lowmem_reserve[]: 0 0 854 854 854
[  508.268439][T27558] Node 1 Normal free:268696kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32032kB inactive_anon:0kB active_file:2160kB inactive_file:15460kB unevictable:3536kB writepending:376kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:30564kB local_pcp:11612kB free_cma:0kB
[  508.282807][T27558] lowmem_reserve[]: 0 0 0 0 0
[  508.284887][T27558] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 3*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6692kB
[  508.291418][T27558] Node 0 DMA32: 640*4kB (UME) 489*8kB (UME) 153*16kB (UME) 43*32kB (UME) 237*64kB (UME) 106*128kB (UME) 81*256kB (UE) 56*512kB (UE) 51*1024kB (UME) 1*2048kB (E) 9*4096kB (UM) = 179576kB
[  508.298604][T27558] Node 1 DMA32: 65*4kB (UM) 92*8kB (UME) 80*16kB (UME) 134*32kB (UM) 108*64kB (UME) 103*128kB (UME) 97*256kB (UME) 70*512kB (UME) 26*1024kB (UM) 7*2048kB (UME) 32*4096kB (UM) = 259364kB
[  508.316621][T27558] Node 1 Normal: 506*4kB (M) 600*8kB (UME) 265*16kB (UME) 318*32kB (UME) 158*64kB (UME) 84*128kB (UM) 77*256kB (U) 160*512kB (U) 122*1024kB (U) 0*2048kB 0*4096kB = 268664kB
[  508.324597][T27558] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  508.329833][T27558] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  508.333374][T27558] 42611 total pagecache pages
[  508.335306][T27558] 0 pages in swap cache
[  508.339603][T27558] Free swap  = 124996kB
[  508.341231][T27558] Total swap = 124996kB
[  508.342904][T27558] 786301 pages RAM
[  508.344455][T27558] 0 pages HighMem/MovableOnly
[  508.352769][T27558] 241347 pages reserved
[  508.356464][T27558] 0 pages cma reserved
[  508.449513][T27581] netlink: 'syz.3.6564': attribute type 1 has an invalid length.
[  508.479328][T27581] 8021q: adding VLAN 0 to HW filter on device bond38
[  508.515245][T27590] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  508.522314][T27591] netlink: 31 bytes leftover after parsing attributes in process `syz.1.6567'.
[  508.571891][T27594] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6569'.
[  508.727134][T27607] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6572'.
[  508.770988][T27614] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6573'.
[  508.945478][T18685] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  508.953197][T18685] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  509.033129][T27629] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6579'.
[  509.076297][T27629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6579'.
[  509.083049][T27629] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6579'.
[  509.087002][T27629] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6579'.
[  509.090858][T27629] netlink: 540 bytes leftover after parsing attributes in process `syz.0.6579'.
[  509.443887][T27648] 8021q: adding VLAN 0 to HW filter on device bond64
[  509.635904][T27664] tc_dump_action: action bad kind
[  509.734604][T27681] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  509.744085][T27681] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  509.746598][T27681] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  509.749574][T27681] tipc: Resetting bearer <eth:syzkaller0>
[  509.815917][T27689] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  509.970793][T27696] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  509.974493][T27696] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  510.009369][T27712] validate_nla: 5 callbacks suppressed
[  510.009386][T27712] netlink: 'syz.1.6600': attribute type 1 has an invalid length.
[  510.029917][T27712] 8021q: adding VLAN 0 to HW filter on device bond65
[  510.051348][T27712] bond65: (slave veth47): Enslaving as an active interface with a down link
[  510.172217][T27715] macsec0: entered promiscuous mode
[  510.174202][T27715] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  510.177169][T27715] macsec0: entered allmulticast mode
[  510.178993][T27715] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  510.211390][T27719] netlink: 'syz.0.6602': attribute type 13 has an invalid length.
[  510.339541][T27723] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  510.381968][T27725] netlink: 'syz.0.6605': attribute type 1 has an invalid length.
[  510.408563][T27725] 8021q: adding VLAN 0 to HW filter on device bond92
[  510.471196][T27733] macvlan0: entered promiscuous mode
[  510.475624][T27733] batadv0: entered promiscuous mode
[  510.479729][T27733] hsr0: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network
[  510.484234][T27733] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  510.489531][T27733] hsr0: entered allmulticast mode
[  510.491106][T27733] macvlan0: entered allmulticast mode
[  510.492691][T27733] batadv0: entered allmulticast mode
[  510.494838][T27733] 8021q: adding VLAN 0 to HW filter on device hsr0
[  510.498758][T27733] macvlan0: left promiscuous mode
[  510.501065][T27733] batadv0: left promiscuous mode
[  510.525396][T27735] pim6reg1: entered promiscuous mode
[  510.527564][T27735] pim6reg1: entered allmulticast mode
[  510.759924][T27742] lo speed is unknown, defaulting to 1000
[  510.941010][T27758] geneve5: entered promiscuous mode
[  510.957371][ T9528] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  510.971642][ T9528] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  510.975102][ T9528] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  510.983336][ T9528] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  511.165704][T27766] lo speed is unknown, defaulting to 1000
[  511.253084][T27774] netlink: 'syz.3.6620': attribute type 13 has an invalid length.
[  511.256652][T27774] netlink: 'syz.3.6620': attribute type 17 has an invalid length.
[  511.325481][T27774] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  511.457746][T27776] lo speed is unknown, defaulting to 1000
[  511.813033][T27809] lo speed is unknown, defaulting to 1000
[  512.642876][T27830] ip6tnl0: Caught tx_queue_len zero misconfig
[  512.802895][T27847] bond0: entered promiscuous mode
[  512.805238][T27847] batadv0: entered promiscuous mode
[  512.818313][T27847] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  512.821484][T27847] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  512.825663][T27847] 8021q: adding VLAN 0 to HW filter on device hsr0
[  512.960438][T27856] __nla_validate_parse: 32 callbacks suppressed
[  512.960452][T27856] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6639'.
[  512.994543][T27857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6641'.
[  513.051510][T27869] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  513.055083][T27869] syzkaller0: entered promiscuous mode
[  513.058640][T27869] syzkaller0: entered allmulticast mode
[  513.093957][T27865] lo speed is unknown, defaulting to 1000
[  513.102857][T27869] syzkaller0: Caught tx_queue_len zero misconfig
[  513.370050][T27882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6647'.
[  513.380708][T27882] tipc: Resetting bearer <eth:syzkaller0>
[  513.499534][T27885] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6648'.
[  513.504549][T27885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6648'.
[  513.567596][T27887] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6649'.
[  513.572402][T27887] netlink: 'syz.0.6649': attribute type 1 has an invalid length.
[  513.604225][T27887] 8021q: adding VLAN 0 to HW filter on device bond93
[  513.619541][T27887] bond93: entered promiscuous mode
[  513.624672][T27887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6649'.
[  513.629182][T27887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6649'.
[  513.659688][T27891] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  513.662413][T27891] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  513.666199][T27890] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  513.714703][T27898] netlink: 'syz.1.6652': attribute type 10 has an invalid length.
[  513.725836][T27898] netlink: 'syz.1.6652': attribute type 17 has an invalid length.
[  513.731188][T27898] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6652'.
[  513.836035][T27906] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6655'.
[  513.986918][T27902] nbd1: detected capacity change from 0 to 63
[  513.989904][T27909] block nbd1: NBD_DISCONNECT
[  513.994090][T27909] block nbd1: Disconnected due to user request.
[  513.996977][T27909] block nbd1: shutting down sockets
[  514.015219][T27919] pim6reg1: entered promiscuous mode
[  514.022456][T27919] pim6reg1: entered allmulticast mode
[  514.233051][T27934] batadv2: entered promiscuous mode
[  514.235144][T27934] batadv2: entered allmulticast mode
[  514.260333][T27942] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  514.475709][T27955] netlink: 'syz.0.6667': attribute type 14 has an invalid length.
[  514.479329][T27955] netlink: 'syz.0.6667': attribute type 13 has an invalid length.
[  514.572940][T27960] vlan1: entered promiscuous mode
[  514.574997][T27960] macvtap0: entered promiscuous mode
[  514.663465][   T10] lo speed is unknown, defaulting to 1000
[  514.665661][   T10] syz0: Port: 1 Link DOWN
[  514.669642][   T10] lo speed is unknown, defaulting to 1000
[  514.671764][  T793] lo speed is unknown, defaulting to 1000
[  514.674319][  T793] syz0: Port: 1 Link ACTIVE
[  514.865424][T27978] 8021q: adding VLAN 0 to HW filter on device bond95
[  515.655805][T28022] validate_nla: 4 callbacks suppressed
[  515.655817][T28022] netlink: 'syz.1.6689': attribute type 1 has an invalid length.
[  515.688496][T28022] 8021q: adding VLAN 0 to HW filter on device bond66
[  515.702814][T28022] vlan6: entered allmulticast mode
[  515.706291][T28022] bond66: (slave vlan6): Opening slave failed
[  515.721033][T28028] netlink: 'syz.3.6691': attribute type 1 has an invalid length.
[  515.754974][T28028] 8021q: adding VLAN 0 to HW filter on device bond39
[  515.784599][T28028] veth9: entered promiscuous mode
[  515.789856][T28028] bond39: (slave veth9): Enslaving as an active interface with an up link
[  515.966210][T28049] netlink: 'syz.3.6695': attribute type 10 has an invalid length.
[  516.025958][T28053] syzkaller0: left promiscuous mode
[  516.031236][T28053] syzkaller0: left allmulticast mode
[  516.033256][T28053] tipc: Resetting bearer <eth:syzkaller0>
[  516.058718][T28053] lo speed is unknown, defaulting to 1000
[  516.666221][T28074] sch_tbf: burst 240 is lower than device lo mtu (11337746) !
[  516.858482][T28084] vlan1: entered promiscuous mode
[  516.873768][T28086] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  517.008582][T28093] bond0: Caught tx_queue_len zero misconfig
[  517.122257][T28102] lo speed is unknown, defaulting to 1000
[  517.142458][T28098] 8021q: adding VLAN 0 to HW filter on device bond41
[  517.146183][T28098] bond40: (slave bond41): Enslaving as an active interface with an up link
[  517.182847][T28105] : renamed from ip6_vti0
[  517.487403][T28124] lo speed is unknown, defaulting to 1000
[  517.720660][T28125] lo speed is unknown, defaulting to 1000
[  517.827230][T28135] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  518.100109][T28136]  (unregistering): Released all slaves
[  518.195775][T28139] __nla_validate_parse: 29 callbacks suppressed
[  518.195786][T28139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6718'.
[  518.233530][T28144] netlink: 'syz.0.6720': attribute type 1 has an invalid length.
[  518.261292][T28144] 8021q: adding VLAN 0 to HW filter on device bond96
[  518.274763][T28144] ipvlan4: entered allmulticast mode
[  518.279754][T28144] bond96: entered allmulticast mode
[  518.290718][T28144] bond96: (slave gretap5): making interface the new active one
[  518.293211][T28144] gretap5: entered allmulticast mode
[  518.295781][T28144] bond96: (slave gretap5): Enslaving as an active interface with an up link
[  518.495127][T28156] netlink: 'syz.3.6725': attribute type 1 has an invalid length.
[  518.567179][T28156] 8021q: adding VLAN 0 to HW filter on device bond42
[  518.631353][T28163] bridge66: the hash_elasticity option has been deprecated and is always 16
[  518.638625][T28163] bridge66: entered allmulticast mode
[  518.642232][T28165] netlink: 'syz.3.6728': attribute type 4 has an invalid length.
[  518.657221][T28165] : entered promiscuous mode
[  518.688119][T28167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6729'.
[  518.691567][T28167] netlink: 'syz.0.6729': attribute type 30 has an invalid length.
[  518.694759][T28167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6729'.
[  518.712979][T28167] netlink: 'syz.0.6729': attribute type 30 has an invalid length.
[  518.741931][T28167] IPVS: Error connecting to the multicast addr
[  518.747371][T28171] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6731'.
[  518.980175][T28175] lo speed is unknown, defaulting to 1000
[  519.029325][T28180] netlink: 'syz.3.6733': attribute type 1 has an invalid length.
[  519.075444][T28180] 8021q: adding VLAN 0 to HW filter on device bond43
[  519.089350][ T9528] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  519.097454][T28177] bond43: (slave veth11): Enslaving as an active interface with a down link
[  519.196627][T28194] netlink: 'syz.0.6735': attribute type 1 has an invalid length.
[  519.227973][T28194] workqueue: Failed to create a rescuer kthread for wq "bond97": -EINTR
[  519.959813][T28205] gretap3: entered allmulticast mode
[  520.094134][T28200] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  520.098207][T28200] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  520.109638][T28200] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  520.112045][T28200] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  521.135840][T28224] tipc: Resetting bearer <eth:syzkaller0>
[  521.141494][T28224] bond39: (slave veth9): Releasing backup interface
[  521.151050][T28224] bond40: (slave bond41): Releasing backup interface
[  521.158236][T28224] bond43: (slave veth11): Releasing active interface
[  521.184957][T28224] validate_nla: 1 callbacks suppressed
[  521.184968][T28224] netlink: 'syz.3.6741': attribute type 10 has an invalid length.
[  521.285764][T28226] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.332964][T28226] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.392871][T28226] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.452330][T28226] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.537110][ T5717] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  521.551276][ T5717] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  521.568971][ T5717] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  521.582040][ T9528] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  521.773703][T28238] 8021q: VLANs not supported on lo
[  521.775951][T28238] 8021q: VLANs not supported on lo
[  521.778494][T28238] 8021q: VLANs not supported on lo
[  521.851754][T28243] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6747'.
[  522.000453][T28255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6749'.
[  522.037967][T28259] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6750'.
[  522.083287][T28259] veth0_to_bridge: entered promiscuous mode
[  522.087071][T28259] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check.
[  522.165691][T28267] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6752'.
[  522.174313][T28267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6752'.
[  522.179588][T28267] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6752'.
[  522.903739][T28289] netlink: 'syz.3.6757': attribute type 2 has an invalid length.
[  522.908947][T28289] netlink: 'syz.3.6757': attribute type 2 has an invalid length.
[  522.913516][T28289] netlink: 'syz.3.6757': attribute type 2 has an invalid length.
[  522.919435][T28289] netlink: 'syz.3.6757': attribute type 2 has an invalid length.
[  522.925583][T28288] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  526.182478][T28305] netlink: 'syz.3.6762': attribute type 1 has an invalid length.
[  526.185255][T28305] __nla_validate_parse: 3 callbacks suppressed
[  526.185265][T28305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6762'.
[  526.193738][T28305] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6762'.
[  526.233866][T28307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6763'.
[  526.238275][T28307] tipc: Enabled bearer <eth:vlan0>, priority 18
[  526.300805][T28309] lo speed is unknown, defaulting to 1000
[  526.340852][T28311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6764'.
[  526.343685][T28311] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  526.548701][T28320] geneve6: entered promiscuous mode
[  526.554668][ T9528] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  526.557978][ T9528] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  526.561011][ T9528] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  526.563787][ T9528] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  527.625791][T28330] netlink: 'syz.3.6769': attribute type 1 has an invalid length.
[  527.628439][T28330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6769'.
[  527.632918][T28330] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6769'.
[  527.937629][T28343] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6773'.
[  528.030029][T28343] netlink: 'syz.3.6773': attribute type 10 has an invalid length.
[  528.032843][T28344] netlink: 'syz.3.6773': attribute type 10 has an invalid length.
[  528.971214][T28355] netlink: 116 bytes leftover after parsing attributes in process `syz.3.6776'.
[  528.979893][T28355] netlink: 'syz.3.6776': attribute type 1 has an invalid length.
[  529.007889][T28355] 8021q: adding VLAN 0 to HW filter on device bond44
[  529.029914][T28355] bond44: entered promiscuous mode
[  529.311662][T28366] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6780'.
[  529.420095][T28375] netlink: 'syz.3.6782': attribute type 4 has an invalid length.
[  529.425679][T28375] tipc: Resetting bearer <eth:vlan0>
[  529.437521][T28375] tipc: Resetting bearer <eth:syzkaller0>
[  529.469025][   T13] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  529.471931][   T13] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  529.474475][   T13] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  529.477191][   T13] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  529.479838][   T13] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  529.482644][   T13] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  529.485529][   T13] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  529.489789][   T13] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  530.415845][T28382] netlink: 116 bytes leftover after parsing attributes in process `syz.3.6784'.
[  530.420484][T28382] netlink: 'syz.3.6784': attribute type 1 has an invalid length.
[  530.445178][T28382] 8021q: adding VLAN 0 to HW filter on device bond45
[  530.460046][T28382] bond45: entered promiscuous mode
[  672.307250][   T34] INFO: task kworker/1:5:18925 blocked for more than 143 seconds.
[  672.310285][   T34]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  672.316145][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  672.320953][   T34] task:kworker/1:5     state:D stack:24168 pid:18925 tgid:18925 ppid:2      task_flags:0x4208060 flags:0x00004000
[  672.325457][   T34] Workqueue: events rfkill_global_led_trigger_worker
[  672.331032][   T34] Call Trace:
[  672.332328][   T34]  <TASK>
[  672.333523][   T34]  __schedule+0x1798/0x4cc0
[  672.335307][   T34]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  672.337512][   T34]  ? __pfx___schedule+0x10/0x10
[  672.339391][   T34]  ? schedule+0x91/0x360
[  672.341043][   T34]  schedule+0x165/0x360
[  672.342691][   T34]  schedule_preempt_disabled+0x13/0x30
[  672.344784][   T34]  __mutex_lock+0x7e6/0x1350
[  672.349573][   T34]  ? __mutex_lock+0x5bb/0x1350
[  672.351439][   T34]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[  672.353941][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  672.355835][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  672.358095][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  672.360134][   T34]  rfkill_global_led_trigger_worker+0x27/0xd0
[  672.362452][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  672.364607][   T34]  process_scheduled_works+0xae1/0x17b0
[  672.369839][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  672.372112][   T34]  worker_thread+0x8a0/0xda0
[  672.373883][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  672.376307][   T34]  ? __kthread_parkme+0x7b/0x200
[  672.378576][   T34]  kthread+0x711/0x8a0
[  672.380179][   T34]  ? __pfx_worker_thread+0x10/0x10
[  672.382140][   T34]  ? __pfx_kthread+0x10/0x10
[  672.383915][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  672.385924][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  672.390965][   T34]  ? __pfx_kthread+0x10/0x10
[  672.392743][   T34]  ret_from_fork+0x439/0x7d0
[  672.394507][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  672.396675][   T34]  ? __switch_to_asm+0x39/0x70
[  672.398520][   T34]  ? __switch_to_asm+0x33/0x70
[  672.400357][   T34]  ? __pfx_kthread+0x10/0x10
[  672.402077][   T34]  ret_from_fork_asm+0x1a/0x30
[  672.403851][   T34]  </TASK>
[  672.405065][   T34] INFO: task syz.1.6734:28183 blocked for more than 143 seconds.
[  672.408215][   T34]       Not tainted syzkaller #0
[  672.410119][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  672.413343][   T34] task:syz.1.6734      state:D stack:25096 pid:28183 tgid:28183 ppid:5863   task_flags:0x400040 flags:0x00004004
[  672.420686][   T34] Call Trace:
[  672.421992][   T34]  <TASK>
[  672.423125][   T34]  __schedule+0x1798/0x4cc0
[  672.424897][   T34]  ? __lock_acquire+0xab9/0xd20
[  672.427112][   T34]  ? __lock_acquire+0xab9/0xd20
[  672.429020][   T34]  ? __pfx___schedule+0x10/0x10
[  672.430929][   T34]  ? schedule+0x91/0x360
[  672.432549][   T34]  schedule+0x165/0x360
[  672.434181][   T34]  schedule_preempt_disabled+0x13/0x30
[  672.436265][   T34]  __mutex_lock+0x7e6/0x1350
[  672.438303][   T34]  ? __mutex_lock+0x5bb/0x1350
[  672.440161][   T34]  ? rfkill_unregister+0xc8/0x220
[  672.442095][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  672.443983][   T34]  ? __pfx_device_del+0x10/0x10
[  672.445840][   T34]  rfkill_unregister+0xc8/0x220
[  672.447845][   T34]  nfc_unregister_device+0x96/0x2a0
[  672.449846][   T34]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  672.452045][   T34]  virtual_ncidev_close+0x56/0x90
[  672.453998][   T34]  __fput+0x44c/0xa70
[  672.455495][   T34]  task_work_run+0x1d4/0x260
[  672.457752][   T34]  ? __pfx_task_work_run+0x10/0x10
[  672.459727][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  672.461822][   T34]  exit_to_user_mode_loop+0xec/0x110
[  672.463991][   T34]  do_syscall_64+0x2bd/0x3b0
[  672.469512][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  672.471905][   T34]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  672.474197][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  672.476721][   T34] RIP: 0033:0x7f5aa758ec29
[  672.486791][   T34] RSP: 002b:00007ffe13655b68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  672.490009][   T34] RAX: 0000000000000000 RBX: 00007f5aa77d7da0 RCX: 00007f5aa758ec29
[  672.493020][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  672.495903][   T34] RBP: 00007f5aa77d7da0 R08: 00000000000000ec R09: 0000000d13655e5f
[  672.509725][   T34] R10: 00007f5aa77d7cb0 R11: 0000000000000246 R12: 000000000007ee21
[  672.512822][   T34] R13: 00007f5aa77d6090 R14: ffffffffffffffff R15: 00007ffe13655c80
[  672.515885][   T34]  </TASK>
[  672.517255][   T34] INFO: task syz.0.6736:28200 blocked for more than 143 seconds.
[  672.520177][   T34]       Not tainted syzkaller #0
[  672.522867][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  672.526264][   T34] task:syz.0.6736      state:D stack:25848 pid:28200 tgid:28199 ppid:5859   task_flags:0x400140 flags:0x00004006
[  672.530623][   T34] Call Trace:
[  672.531671][   T34]  <TASK>
[  672.532595][   T34]  __schedule+0x1798/0x4cc0
[  672.534053][   T34]  ? __lock_acquire+0xab9/0xd20
[  672.535552][   T34]  ? __lock_acquire+0xab9/0xd20
[  672.537442][   T34]  ? __pfx___schedule+0x10/0x10
[  672.538925][   T34]  ? schedule+0x91/0x360
[  672.540227][   T34]  schedule+0x165/0x360
[  672.541674][   T34]  schedule_preempt_disabled+0x13/0x30
[  672.543345][   T34]  __mutex_lock+0x7e6/0x1350
[  672.545174][   T34]  ? __mutex_lock+0x5bb/0x1350
[  672.547490][   T34]  ? nfc_rfkill_set_block+0x50/0x2e0
[  672.549634][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  672.551760][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  672.553787][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  672.556125][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  672.558747][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  672.560910][   T34]  nfc_rfkill_set_block+0x50/0x2e0
[  672.562888][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  672.565107][   T34]  rfkill_set_block+0x1d2/0x440
[  672.567111][   T34]  rfkill_fop_write+0x44b/0x570
[  672.568996][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  672.571019][   T34]  ? __pfx_security_file_permission+0x10/0x10
[  672.573319][   T34]  ? rw_verify_area+0x255/0x4d0
[  672.575171][   T34]  ? __lock_acquire+0xab9/0xd20
[  672.577254][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  672.579319][   T34]  vfs_write+0x27e/0xb30
[  672.580942][   T34]  ? __pfx_vfs_write+0x10/0x10
[  672.582760][   T34]  ? __fget_files+0x2a/0x420
[  672.584512][   T34]  ? __fget_files+0x2a/0x420
[  672.586283][   T34]  ? __fget_files+0x3a0/0x420
[  672.588267][   T34]  ? __fget_files+0x2a/0x420
[  672.590124][   T34]  ksys_write+0x145/0x250
[  672.591768][   T34]  ? __pfx_ksys_write+0x10/0x10
[  672.593599][   T34]  ? rcu_is_watching+0x15/0xb0
[  672.595422][   T34]  ? do_syscall_64+0xbe/0x3b0
[  672.597525][   T34]  do_syscall_64+0xfa/0x3b0
[  672.599251][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  672.600977][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  672.602822][   T34]  ? exc_page_fault+0x9f/0xf0
[  672.604309][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  672.606142][   T34] RIP: 0033:0x7f10fd78ec29
[  672.607692][   T34] RSP: 002b:00007f10fe5d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  672.610728][   T34] RAX: ffffffffffffffda RBX: 00007f10fd9d5fa0 RCX: 00007f10fd78ec29
[  672.613374][   T34] RDX: 0000000000000008 RSI: 0000200000000000 RDI: 000000000000000a
[  672.615918][   T34] RBP: 00007f10fd811e41 R08: 0000000000000000 R09: 0000000000000000
[  672.618699][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  672.621080][   T34] R13: 00007f10fd9d6038 R14: 00007f10fd9d5fa0 R15: 00007ffc6074a758
[  672.623523][   T34]  </TASK>
[  672.624788][   T34] 
[  672.624788][   T34] Showing all locks held in the system:
[  672.632206][   T34] 3 locks held by kworker/u8:0/12:
[  672.634132][   T34]  #0: ffff88804b039f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  672.638084][   T34]  #1: ffffc900000f7bc0 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  672.642961][   T34]  #2: ffff88804b025918 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30
[  672.646305][   T34] 1 lock held by khungtaskd/34:
[  672.650035][   T34]  #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  672.653801][   T34] 2 locks held by getty/5675:
[  672.655669][   T34]  #0: ffff8880203e50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  672.659532][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  672.663393][   T34] 3 locks held by kworker/1:5/18925:
[  672.665382][   T34]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  672.669614][   T34]  #1: ffffc900085d7bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  672.674733][   T34]  #2: ffffffff8f813f48 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0
[  672.679070][   T34] 2 locks held by syz.1.6734/28183:
[  672.681031][   T34]  #0: ffff88812db61100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0
[  672.684697][   T34]  #1: ffffffff8f813f48 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220
[  672.688638][   T34] 2 locks held by syz.0.6736/28200:
[  672.690584][   T34]  #0: ffffffff8f813f48 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570
[  672.694446][   T34]  #1: ffff88812db61100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0
[  672.698276][   T34] 3 locks held by syz.3.6785/28385:
[  672.700302][   T34]  #0: ffffffff8f59f7f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  672.703444][   T34]  #1: ffffffff8f59f608 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  672.707302][   T34]  #2: ffffffff8f813f48 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  672.711122][   T34] 2 locks held by syz-executor/28388:
[  672.713191][   T34]  #0: ffff88810764d918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  672.717064][   T34]  #1: ffffffff8f813f48 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  672.720858][   T34] 2 locks held by syz-executor/28389:
[  672.722953][   T34]  #0: ffff888044e2f118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  672.726981][   T34]  #1: ffffffff8f813f48 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  672.730758][   T34] 2 locks held by syz-executor/28391:
[  672.732814][   T34]  #0: ffff88802adce118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  672.736870][   T34]  #1: ffffffff8f813f48 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  672.740689][   T34] 2 locks held by syz-executor/28394:
[  672.742733][   T34]  #0: ffff88811274a118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  672.746880][   T34]  #1: ffffffff8f813f48 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  672.750948][   T34] 2 locks held by syz-executor/28395:
[  672.752706][   T34]  #0: ffff8880365c2118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  672.756171][   T34]  #1: ffffffff8f813f48 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  672.759583][   T34] 2 locks held by syz-executor/28397:
[  672.761634][   T34]  #0: ffff8881103fb118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  672.765844][   T34]  #1: ffffffff8f813f48 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  672.770267][   T34] 2 locks held by syz-executor/28400:
[  672.772603][   T34]  #0: ffff888109e0a918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  672.776999][   T34]  #1: ffffffff8f813f48 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  672.781196][   T34] 2 locks held by syz-executor/28401:
[  672.783493][   T34]  #0: ffff888109e0c918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  672.788034][   T34]  #1: ffffffff8f813f48 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  672.792201][   T34] 2 locks held by syz-executor/28403:
[  672.794320][   T34]  #0: ffff888121cfd118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x650
[  672.798432][   T34]  #1: ffffffff8f813f48 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  672.802740][   T34] 
[  672.803800][   T34] =============================================
[  672.803800][   T34] 
[  672.807450][   T34] NMI backtrace for cpu 1
[  672.807464][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  672.807479][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  672.807487][   T34] Call Trace:
[  672.807495][   T34]  <TASK>
[  672.807502][   T34]  dump_stack_lvl+0x189/0x250
[  672.807525][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  672.807541][   T34]  ? __pfx__printk+0x10/0x10
[  672.807595][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  672.807617][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  672.807636][   T34]  ? __pfx__printk+0x10/0x10
[  672.807656][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  672.807677][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  672.807697][   T34]  watchdog+0xf93/0xfe0
[  672.807717][   T34]  ? watchdog+0x1de/0xfe0
[  672.807737][   T34]  kthread+0x711/0x8a0
[  672.807756][   T34]  ? __pfx_watchdog+0x10/0x10
[  672.807773][   T34]  ? __pfx_kthread+0x10/0x10
[  672.807790][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  672.807811][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  672.807824][   T34]  ? __pfx_kthread+0x10/0x10
[  672.807840][   T34]  ret_from_fork+0x439/0x7d0
[  672.807856][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  672.807873][   T34]  ? __switch_to_asm+0x39/0x70
[  672.807888][   T34]  ? __switch_to_asm+0x33/0x70
[  672.807903][   T34]  ? __pfx_kthread+0x10/0x10
[  672.807920][   T34]  ret_from_fork_asm+0x1a/0x30
[  672.807947][   T34]  </TASK>
[  672.807953][   T34] Sending NMI from CPU 1 to CPUs 0:
[  672.861595][    C0] NMI backtrace for cpu 0
[  672.861614][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  672.861629][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  672.861638][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  672.861658][    C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d b3 d9 0d 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  672.861670][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  672.861682][    C0] RAX: 8248adb33b8e7900 RBX: ffffffff819683f8 RCX: 8248adb33b8e7900
[  672.861693][    C0] RDX: 0000000000000001 RSI: ffffffff8d9ba307 RDI: ffffffff8be33f80
[  672.861702][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[  672.861712][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa3a730
[  672.861721][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  672.861729][    C0] FS:  0000000000000000(0000) GS:ffff8880b8613000(0000) knlGS:0000000000000000
[  672.861741][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  672.861749][    C0] CR2: 00007f5ed0687e20 CR3: 000000000df36000 CR4: 00000000000006f0
[  672.861782][    C0] Call Trace:
[  672.861789][    C0]  <TASK>
[  672.861795][    C0]  default_idle+0x13/0x20
[  672.861811][    C0]  default_idle_call+0x74/0xb0
[  672.861828][    C0]  do_idle+0x1e8/0x510
[  672.861845][    C0]  ? __pfx_do_idle+0x10/0x10
[  672.861869][    C0]  cpu_startup_entry+0x44/0x60
[  672.861882][    C0]  rest_init+0x2de/0x300
[  672.861899][    C0]  start_kernel+0x3a9/0x410
[  672.861913][    C0]  x86_64_start_reservations+0x24/0x30
[  672.861927][    C0]  x86_64_start_kernel+0x143/0x1c0
[  672.861944][    C0]  common_startup_64+0x13e/0x147
[  672.861968][    C0]  </TASK>
[  672.862646][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  672.926482][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  672.929442][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  672.932844][   T34] Call Trace:
[  672.934145][   T34]  <TASK>
[  672.935173][   T34]  dump_stack_lvl+0x99/0x250
[  672.936807][   T34]  ? __asan_memcpy+0x40/0x70
[  672.938415][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  672.940080][   T34]  ? __pfx__printk+0x10/0x10
[  672.941706][   T34]  vpanic+0x281/0x750
[  672.943112][   T34]  ? __pfx_vpanic+0x10/0x10
[  672.945002][   T34]  ? preempt_schedule+0xae/0xc0
[  672.946983][   T34]  ? preempt_schedule_common+0x83/0xd0
[  672.948895][   T34]  panic+0xb9/0xc0
[  672.950308][   T34]  ? __pfx_panic+0x10/0x10
[  672.951860][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  672.953942][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  672.956120][   T34]  watchdog+0xfd2/0xfe0
[  672.957702][   T34]  ? watchdog+0x1de/0xfe0
[  672.959277][   T34]  kthread+0x711/0x8a0
[  672.960789][   T34]  ? __pfx_watchdog+0x10/0x10
[  672.962484][   T34]  ? __pfx_kthread+0x10/0x10
[  672.964371][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  672.966609][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  672.968339][   T34]  ? __pfx_kthread+0x10/0x10
[  672.970054][   T34]  ret_from_fork+0x439/0x7d0
[  672.971867][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  672.973818][   T34]  ? __switch_to_asm+0x39/0x70
[  672.975518][   T34]  ? __switch_to_asm+0x33/0x70
[  672.977343][   T34]  ? __pfx_kthread+0x10/0x10
[  672.978861][   T34]  ret_from_fork_asm+0x1a/0x30
[  672.980503][   T34]  </TASK>
[  672.982309][   T34] Kernel Offset: disabled
[  672.983935][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:56:11  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff822e55f3 RBX=80000000351cf867 RCX=ffff88801fc13980 RDX=0000000080000001
RSI=80000000351cf867 RDI=ffff88801ee84b40 RBP=ffffc900033bf890 RSP=ffffc900033bf5b8
R8 =ffffea0000d473c7 R9 =1ffffd40001a8e78 R10=dffffc0000000000 R11=fffff940001a8e79
R12=0000000000000000 R13=0000555583dd3000 R14=ffff88801ee84b40 R15=1ffff110211c21d3
RIP=ffffffff81bfada8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa695f07d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007fa6953a76c3 00007fa6953a76c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000000000000000 000000000003bf12
XMM06=8080808410000004 0100000000000007 XMM07=68e0020800000000 100050030000001f
XMM08=0302100000000000 1000069000000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff11004580095 RBX=0000000000000001 RCX=ffff88801c2f5640 RDX=0000000000000000
RSI=ffffffff8be33f60 RDI=ffffffff8be33f20 RBP=ffff888022c004a8 RSP=ffffc900000f7a20
R8 =0000000000000000 R9 =ffffffff8b47d982 R10=dffffc0000000000 R11=ffffffff8b47d8b0
R12=dffffc0000000000 R13=ffffffff8b47d982 R14=ffff888107240d80 R15=0000000000000095
RIP=ffffffff8b47da33 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe04b02efdc CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007fa6953a7d20
XMM02=0000000500000007 ffffffff00000001 XMM03=0004ac030000001e a80302d400000000
XMM04=0000000000000000 0000000000000016 XMM05=0000000000000000 000000000003bf12
XMM06=8080808410000004 0100000000000007 XMM07=68e0020800000000 100050030000001f
XMM08=0302100000000000 1000069000000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
