last executing test programs:

1.468399404s ago: executing program 0 (id=18992):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x40, 0x107, 0xfffffffa, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0xc, 0x1c, 0x0, 0x0, @u64=0x5}]}, @nested={0x4, 0x2}]}, 0x34}}, 0xc000)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200"], 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r1, 0x58}, 0x55)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0xfffffffe, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f40000200000000000008000000000000000001"], 0xfc}}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r4 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0xa, 0x2f, 0x4, @mcast2}, 0x1c, 0x0}, 0x922bac8556bdad8e)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
recvmsg(r5, &(0x7f0000000440)={&(0x7f0000000280)=@phonet, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000300)}, {&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f00000003c0)=""/121, 0x79}, {&(0x7f00000005c0)=""/75, 0x4b}, {&(0x7f0000000640)=""/75, 0x4b}, {&(0x7f00000006c0)=""/248, 0xf8}, {&(0x7f00000007c0)=""/209, 0xd1}], 0x7, &(0x7f0000000940)=""/158, 0x9e}, 0x2000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002d80), r7)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000002dc0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_DEL_TX_TS(r6, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x30, r8, 0x5d60a04533645053, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r7)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000ac0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r10, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r11=>0x0})
connect$inet6(r4, &(0x7f0000000b00)={0xa, 0x4e23, 0x10, @remote}, 0x1c)
sendmsg$NL80211_CMD_LEAVE_IBSS(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80040}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r8, 0x220, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x404c810)

1.40096575s ago: executing program 2 (id=18993):
r0 = socket$pppoe(0x18, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bind(0xffffffffffffffff, &(0x7f0000000400)=@phonet={0x23, 0x0, 0x1, 0x1}, 0x80)
writev(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x2, 0x6)
readv(r3, &(0x7f0000000680)=[{&(0x7f0000000780)=""/23, 0x17}], 0x1)
write(r1, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl2\x00', <r5=>0x0, 0x29, 0x1, 0xcc, 0x8, 0x6d, @mcast2, @mcast1, 0x8, 0x40, 0xfffff1e5, 0x231b}})
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYRES64, @ANYRES64=r5, @ANYRES32=0x0, @ANYBLOB="0001030000000000000000000000000000a000000000000000800000"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c047c1ea0003000000000085100000fcffffff25000600ffeaffff7a0a18081000080018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20008090)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4004084}, 0x24000004)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r7, @ANYRES32=r8, @ANYRES8=r1], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x10}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000840)={r9, 0xffffffffffffffff, 0x8, 0x0, @void}, 0x10)
r10 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="680000001200050928bd7000ffdbdf2521090b004e224e26fcffffff23090000010000800600000001040000060000000300000002000000", @ANYRES32=0x0, @ANYBLOB="0000010005200000060000000400000019000100071514000a"], 0x68}, 0x1, 0x0, 0x0, 0x2000010}, 0x20000000)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r6, 0x8040942d, &(0x7f0000000800))
r11 = socket$igmp(0x2, 0x3, 0x2)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000500)=0x1000000)
sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="740000000206030000000000000000000700000624000780050007003d0000001800028014000240fe8800000000000000000000000003010900020073797a3100000000050001000700000011000300686173683a69702c6d75a36b00354faba3bf11f2b373417600000005000400010000000c000300686173683a697000"], 0x74}}, 0x20004000)
ioctl$sock_inet_SIOCSARP(r11, 0x8955, &(0x7f0000000480)={{0x2, 0x4e24, @empty}, {0x0, @broadcast}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}, 'wg1\x00'})
ioctl$sock_inet_SIOCSARP(r11, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'})
socket$netlink(0x10, 0x3, 0x4)

940.272852ms ago: executing program 1 (id=18999):
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
bind$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast]}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000005000000000000000c000000919171008000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f00000001c0)=0x20, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000500000000000000f1090000000000000020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fcffffff85000000730000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0), 0x4)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2a, 0x4, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x6, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x44080)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000500)={<r7=>0x0, 0x6a, "b1d8e4f133a6c9c1841e26d18edeacf7e0fc132e14e1311b27db4c27ae0066f9b3833dfded039f8c5c8f0b9c1a8b7a55448b8ed2cc145b623259e9a6d6697acca0a23346c89fc8bb40fdb6fda20a8a350ff3e9fc19613c9f0b74c8a5199d5414098158e85e88ca2d5c7c"}, &(0x7f0000000580)=0x72)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000005c0)={0x9, 0x4, 0x800a, 0xc, 0x10001, 0x8, 0x5, 0x82, r7}, 0x20)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000cb4730547000fbdbdf250000439a", @ANYRES32=0x0, @ANYBLOB="100a0500231a0500340012800e00010069703665727370616e000000200002800400120005001600010000000800050000000000080015000e090000"], 0x54}}, 0x20040040)
syz_init_net_socket$ax25(0x3, 0x5, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000005c40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x10000000, 0x0, 0x8}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x4c8d0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000100)=@security={'security\x00', 0xe, 0x4, 0x338, 0xffffffff, 0xd0, 0x0, 0x1a0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xffffffff, 'bond_slave_0\x00', 'pimreg\x00', {0xff}, {}, 0x6c, 0x3, 0x8}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x0, 0x1, 0x1, 0x4, 0x3, 0x1], 0x0, 0x1}, {0x1, [0x7, 0x0, 0x3, 0x2, 0x6, 0x8], 0x3, 0x1}}}}, {{@ip={@multicast1, @empty, 0xffffffff, 0xffffff00, 'lo\x00', 'pimreg\x00', {0xff}, {0xff}, 0x0, 0x3, 0x26}, 0x0, 0x90, 0xd0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x6, 0x7, 0xa, 0x401, 0x81, 0x5, 0x5, 0x3]}}}, {{@ip={@multicast1, @multicast1, 0xffffff, 0xff, 'veth1_to_bond\x00', 'wg0\x00', {0xff}, {}, 0x73, 0x2, 0x50}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x4, 0x28c, 0x0, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x1, 0x6, 0x7, 0x4, 0x4], 0x1, 0x6}, {0x0, [0x4, 0x0, 0x4, 0x6, 0x0, 0xc909c59ac2d9dd57], 0x3, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398)

939.699319ms ago: executing program 1 (id=19000):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000002145ca7a87462553b4b07e6800"], 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xb6fb585}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

891.901689ms ago: executing program 1 (id=19001):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000a5f5fde31abc816a3c47e25a6d0cbe49ba8f9f869f35d1f710db6bfcbc49ec9533ac8127d4fda8164789e9e388271e9c36391f21fff45c1d1f7f6ce7ee817fc1c55153f68f7fc70c5f8a08ec61fefba9683096e59c0d4d7ccc0db823b9dc38069c2336e1630f16e835b390646094d13a13b8257228c34b6c665ca1b31f383239f4b6fe1ab766ca4c337128614dd8f3b5e70283111c2f17fa6a8e67b6453b8fc7f84f3ce1e943219521e80cf60612b3431725290910629c1614aa6e13b92374763bb2d2318166f12e1b0340defc05"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2, <r3=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000200)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3, r2}, &(0x7f0000000600), &(0x7f0000000640)=r1}, 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000080000000003500000018120000", @ANYRES64=0x0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000940000000c62cdcd440000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)

891.380215ms ago: executing program 1 (id=19002):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x6, 0x8, 0x8}, 0x50)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async)
listen(r1, 0x8) (async)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) (async)
sendto$inet(r2, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) (async, rerun: 64)
close(r2) (rerun: 64)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000fc0)={'geneve1\x00', &(0x7f0000000f40)=@ethtool_dump={0x40, 0x4, 0x2}}) (async)
r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r3}, 0x8) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@jmp={0x5, 0x0, 0x0, 0xa, 0x3, 0xffffffffffffffe0}], {{}, {}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x19}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe8, 0xe8, 0xc, [@decl_tag={0xd, 0x0, 0x0, 0x11, 0x5, 0x7}, @enum={0xd, 0x6, 0x0, 0x6, 0x4, [{0x10, 0x9}, {0x6, 0xdc}, {0x0, 0x80}, {0x8, 0x8}, {0x8, 0x1}, {0xe, 0x10}]}, @func={0x9, 0x0, 0x0, 0xc, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x2}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x8}}, @struct={0x1, 0x6, 0x0, 0x4, 0x1, 0x7ff, [{0x0, 0x2, 0x1}, {0x0, 0x4, 0x3}, {0x7, 0x5, 0xfffffbff}, {0x3, 0x2, 0x100}, {0xa, 0x2, 0xb8ad}, {0x8, 0x1, 0x1}]}, @fwd={0xd}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x5f, 0x2e, 0x0, 0x61, 0x30, 0xb5d84ca1bab378e8]}}, &(0x7f00000000c0)=""/36, 0x10c, 0x24, 0x1, 0x200, 0x10000, @value=r3}, 0x28)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0a000000010000003f0000000900000042000000", @ANYBLOB="00000000000000000000e2ff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x1003, r5}, 0x38) (async)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r5, &(0x7f0000000180)="7685", 0x0}, 0x20) (async)
pipe(&(0x7f0000000480)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async)
bind$inet6(r6, &(0x7f0000000740)={0xa, 0x4e21, 0x4, @private1, 0xe}, 0x1c)
r7 = socket(0x10, 0x3, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, 0x25, 0x101, 0x70bd22, 0x25dfdbfc, {0xa}, [@typed={0x1d, 0x10d, 0x0, 0x0, @binary="0569303297d38e0b019f45719e4c0d95830000000000000000"}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048957}, 0x0) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r4, &(0x7f00000005c0)="58966a16847042c3d043f04f21599eb70fec75438d2e83d4bef79a36dea385b8ab95a51e37634678a5393d9e6ec955b97f582e86b97d65817541eba1aab4b11951e6384d480e723d86afd122f2a23b190ce58afd7e807e6ecdbd4c62c254409ad4bf1b45130361c73c71ee480251a726a3e41b3e67b57ba5589b565f6506ec48b9e10987b1e3d88b66a5874a0e576e3210354f753e71734b95490b80d7bd5e8d51a274cccb02e5205d518ba12d", &(0x7f0000000500)=""/98, 0x4}, 0x20) (async, rerun: 64)
write(r7, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) (async, rerun: 64)
recvmmsg(r7, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9, 0xffffffffffffffff, 0x2000000}, 0xc)

842.16261ms ago: executing program 1 (id=19003):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r4, @ANYBLOB="40002f800c00020000000000000000000800010000000000280003801c000380060001000000000008000200020000a5df148d5a0f4db500080001"], 0x5c}, 0x1, 0x0, 0x0, 0x4815}, 0x0)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f00000007c0)={0x144, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0xfc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2f}, @NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_ID={0x90, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x100}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x100}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x144}, 0x1, 0x0, 0x0, 0x4040010}, 0x2000)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, r1, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f00000000c0), 0x4)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000200)={0x1, [<r6=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f00000003c0)={r6, 0x10, "16ab81eccfb744d6196b6b366cf6f68b"}, &(0x7f0000000000)=0x18)
r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0)
sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c011}, 0x480c)
r8 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000380)={0x80000020, 0x2}, 0x10)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@ipv6_getrule={0x1c, 0x22, 0x800, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0x80, 0xf7, 0x9, 0x0, 0x0, 0x4, 0x9}, ["", "", "", ""]}, 0x1c}}, 0x20040000)
socket$can_bcm(0x1d, 0x2, 0x2)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmmsg$unix(r10, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r10, @ANYRES32=r9, @ANYRES32=r9, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00'], 0x38}}], 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000071123500000000009500"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94)

581.953608ms ago: executing program 0 (id=19004):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
socket$inet_udplite(0x2, 0x2, 0x88)
syz_emit_ethernet(0x3e, &(0x7f0000000100)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x100, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x5, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x9, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x67, 0x0, @loopback, @loopback}}}}}}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000003000000850000004100000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f805ffffb702000008000006b703000003000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000200)="9a78a2c545e004da799ee8f8dd9f", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r9=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r9, @ANYBLOB="40002f800c00020000000000000000000800010000000000280003"], 0x5c}, 0x1, 0x0, 0x0, 0x4815}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xb}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x3, 0xb, 0x9}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4)
syz_emit_ethernet(0x97, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6151be0000612f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be00060001bf3f030b7d27010088a80090000b003e000086dd000986dd", @ANYBLOB="36ed", @ANYRES32=r5], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0xf, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0xd}, 0x94)

505.10197ms ago: executing program 0 (id=19005):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000380)={'vlan0\x00', {0x2, 0x0, @remote}})
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40050)
sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x17, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}}, 0x4004000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x6, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b6090100c3ffffff660000000000000218010000646c6c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000f33e93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000003c0))
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x3, 0x80}, {0x94, 0x0, 0x0, 0xffffff81}, {0x6}]}, 0x10)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r2, 0xffffffffffffffff, 0x1, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x8}}, 0x30)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0xf8, 0x3, 0x8, 0x101, 0x0, 0x0, {0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9000}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8f1e}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfffffe00}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff9b0}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xd}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xec5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x913}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xc02c}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x80000000}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8050}, 0x4008080)
socket(0x1e, 0x6, 0x7fff)

489.540239ms ago: executing program 2 (id=19006):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff85000000ae000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x6}, @mss={0x2, 0x1}, @mss={0x2, 0x81}, @timestamp], 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)

479.321283ms ago: executing program 2 (id=19007):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa15}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20008800)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x2000c094)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x7a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

402.241341ms ago: executing program 0 (id=19008):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWRULE={0x210, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1e4, 0x4, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x4c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x15, 0x1, "8d979d52c8fb89c42ddadf1806f6395ca4"}]}]}}}, {0x108, 0x1, 0x0, 0x1, @target={{0xb}, @val={0xf8, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_INFO={0x6a, 0x3, "dac49d295c19eabcd166164b373a8d861de3ce2726879a404db6d81b7477dbdee0ac3cc030258ef80f8ccd5e2e89b8473db57f0a583c81f708b4b06ed6b6c9cb5f3f8ba151877398fb0bfb4de31e6c318b172a8e9e763f03da208cd39b823af4ddfdbd297ce2"}, @NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TARGET_INFO={0x65, 0x3, "a71b00785c6725815699ff87eff1f2bafaa63cd7286b8e49bdb5d4fd12f0525361022ec604b4d8a4a34f039d0525adf3f16ae4c23944af5ddf5a5bc58c6c99ef62c57ef1336ab7babc2781289d604b8e8a848248dd8f5a3aee07ba9e68fd659559"}]}}}, {0x58, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x6}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x9}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DYNSET_EXPR={0x14, 0x7, 0x0, 0x1, {{0xb}, @val={0x4}}}]}}}, {0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x8001}]}}}]}]}], {0x14}}, 0x238}, 0x1, 0x0, 0x0, 0x8080}, 0xc0) (async)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x80000a, 0x11, r0, 0x0) (async)
ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000680)={<r2=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000004800000048000000070000000f0000000000000a010000000d0000000000000100000000600049000e0000000000000901000000000000000100000d0000000005000000020000000c000000000000080000000000302e61005f00ee249929b149000f7209a6e6767625352f77d83e2fd1693a46b16826f7c914cd5bf5fcfdd2edb0cca97aeeced365ae8ebfbe3a7b59dcc7b469bea46103bfd2f117cb14ad18f3762a6d54d653172fa5b0631a5113969d9142b3ef45282a65c3c5e5eb484e1d4f084dc8"], &(0x7f0000000600)=""/50, 0x67, 0x32, 0x1, 0x400, 0x10000, @value=r2}, 0x28)
ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000000)) (async)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000500)={<r3=>r0, &(0x7f0000000580)='A\x00}\ap^\x8d\a\xaf\x06.:\xeb\xc5\xf5\xcf\xed\xd0\x80\"[(', 0x42a080, &(0x7f0000000440)={@_ha_fsid={[0x0, 0x7]}, {0x0, 0x2b, 0x80, 0x7}}, 0x8, &(0x7f0000000480), &(0x7f00000004c0)=0xdd7e})
ioctl$VHOST_VDPA_GET_GROUP_NUM(r3, 0x8004af81, &(0x7f0000000540))

395.617323ms ago: executing program 0 (id=19009):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
listen(r0, 0x2)
listen(r0, 0x5)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="810700000000000063119a000000000007000000000000009500000000000000f5c2e20d9f299114c2bd8edd26f601b2f3abe5e0df10392114105b013351ba39492c85906b4e94356deaca7ef49fe4a1f6f4d5277f4fdf9cd5d4f3401879863b752b8c2421e944ea3242430d56cb8b1505de0af0861c1d9ac06353ddce65bb9678865211f364f76fd73958a9b398f8597832d58769488be7d4c39a44f7"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@cgroup, r1, 0x23, 0x10, 0x0, @void, @value=r1}, 0x20)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x14}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
bind$alg(r3, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(generic-gcm-aesni)\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x80800)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000400)={0x0, <r5=>0x0}}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={r5, 0x6, 0x8}, 0xc)
syz_genetlink_get_family_id$batadv(0x0, r4)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r7, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0)
r8 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r8, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0)
sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)
sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000120005010400"], 0x38}, 0x13, 0x0, 0x0, 0x880}, 0x20040840)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, 0x0, 0x4000)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x58, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_LINENO={0xfffffff7, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x25, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x0, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4)

394.630274ms ago: executing program 2 (id=19010):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x0, 0x92}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

332.095785ms ago: executing program 2 (id=19011):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000062000020000000000000800711073000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00'})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x40, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40040}, 0x4000051)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'vlan1\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_PORT_SELF={0x4}, @IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_MTU={0x8, 0x4, 0xff2}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0)
r7 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r7, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001640)="5346f7f875528ef24043c68e04", 0xd}], 0x1}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r10=>0x0})
setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f00000002c0)={r10, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg1\x00'})
r11 = socket(0x400000000010, 0x3, 0x0)
r12 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0x1, 0xfff1}, {0x7, 0xffff}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfb, 0x3, 0x2, 0x9}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xaee}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x84}, 0x8000)
r14 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', <r15=>0x0})
setsockopt$packet_add_memb(r14, 0x107, 0x1, &(0x7f0000000100)={r15, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10)
setsockopt$packet_drop_memb(r14, 0x107, 0x2, &(0x7f0000000080)={r15, 0x1, 0x6, @remote}, 0x10)

241.647043ms ago: executing program 2 (id=19012):
syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000a000200000000000000000008000900020035"], 0x30}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000a000200000000000000000008000900020035"], 0x30}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@getchain={0x3c, 0x66, 0x100, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd, 0x3}, {0xfff3, 0xffff}, {0x3, 0x8}}, [{0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0x400}, {0x8, 0xb, 0x5}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x13}, 0x20000040)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f6", @ANYRES32=r7, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r4, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r4, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x10)
r10 = socket$netlink(0x10, 0x3, 0x10)
socket$key(0xf, 0x3, 0x2)
bind$netlink(r8, &(0x7f00000004c0)={0x10, 0x0, 0x1, 0x14000018}, 0xc)
writev(r9, &(0x7f0000000600)=[{&(0x7f0000000280)="4a27435076ba76ccb664f45a3ae393c4d13ea84316321add697e9e2e0c8331cd8163ae7417b7513c3d55ba3096da621155e9b698b9dff286e3280b9d3a44ec776bf55d2c090607997f48cdbf1abf268b2c3516426926c7a7105b", 0x5a}, {&(0x7f00000001c0)="3c438ef70138b04daafa92c88c7802e46d365c52a085b613f7774585a2c2937fc4b6ac1fc51f2bea692303d2463e95b35862476d79636527df39", 0x3a}, {&(0x7f0000000340)="41a303ee", 0x4}, {&(0x7f0000000380)="ff4471eab0acfd894f976099e9b5ecb67d0ced9b24d0d313765556404aac98d81c70f7c2dc1a50c76b2568549e3ddfc022223f9701cde046e6fbc870b755f378bb", 0x41}, {&(0x7f0000000400)="5e4f34b3045fceb3462b5b20123ca646523928944daac737d1f9cdd0d340c5e063f8c0d31b73363be495bd1161634f84763243ede860e136ca0b8cb1d5ec73e8990f02b3611eaaa826bad4afcb16ee60baf805eae28374ba8b98f0a640bbc3645acf1dda9760eaf164f9923265bc2628f9432ccbd7d87025117edf10e22e1d9194ad5d6a847d9be4e2fb7eb3a5d1590f946609fa9b15ecb8ab", 0x99}, {&(0x7f0000000540)="d976683d656ffe059bf8", 0xa}, {&(0x7f0000000580)="50d6def6ad5cdc13c09899250c351170b8af9a4251c7cb4f89d15600aa48974e2bd54d483ec0f773720a2f178ebaf136d6cb9d2dd8286e2f8e0d0a59869c9f1817dcaf64ddcaf0e557aa12a094bcd485c36e06c59207aa53a69fe9b2373c37", 0x5f}], 0x7)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, 0x0, 0x4804) (async)
sendmsg$nl_route(r11, 0x0, 0x4804)
setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async)
setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r10, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000140)={0x14, 0x0, 0x4f79951a91b7de8f, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x42000}, 0x40000c4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r12, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r12, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

2.107233ms ago: executing program 1 (id=19013):
r0 = socket$pppoe(0x18, 0x1, 0x0)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
bind(r2, &(0x7f0000000400)=@phonet={0x23, 0x0, 0x1, 0x1}, 0x80)
writev(r2, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1)
pipe(&(0x7f0000000200)) (async)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0)
splice(r1, 0x0, r5, 0x0, 0x80, 0x8)
readv(r1, &(0x7f0000000680)=[{&(0x7f0000000040)=""/32, 0x20}], 0x1)
write(r3, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x1, 0xcc, 0x8, 0x2d, @local, @mcast1, 0x8, 0x40, 0xfffff1e5, 0x231b}}) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x1, 0xcc, 0x8, 0x2d, @local, @mcast1, 0x8, 0x40, 0xfffff1e5, 0x231b}})
ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000000500)={0x5, 0x2, 0x7f, 0x8, 0x7})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000e5c4383ba900000085100000fcffffff25000600ffffffff7a0a08001000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r7, &(0x7f0000000200)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10)
close(r7) (async)
close(r7)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000040000000d7d682599b4fb3228b138c82bfd64a08ae1f910fccb08507c504d306a9ab74b00488107204010138a484c1150e6352a3db05703648e664ebae971aedf585a77ee06db5634d935e8c323cb1ec60d5a31ae7af67c9e0632cf645de5e668c5609319ab19cf2f99425193c1e8a06292cb757829932633ee9def9a94df152cd8dae2a98f258460e2d357250d690ca5a00"/164], 0x1c}, 0x1, 0x0, 0x0, 0x4c090}, 0x24000004) (async)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000040000000d7d682599b4fb3228b138c82bfd64a08ae1f910fccb08507c504d306a9ab74b00488107204010138a484c1150e6352a3db05703648e664ebae971aedf585a77ee06db5634d935e8c323cb1ec60d5a31ae7af67c9e0632cf645de5e668c5609319ab19cf2f99425193c1e8a06292cb757829932633ee9def9a94df152cd8dae2a98f258460e2d357250d690ca5a00"/164], 0x1c}, 0x1, 0x0, 0x0, 0x4c090}, 0x24000004)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c309000001000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000840)={r9, 0xffffffffffffffff, 0x8, 0x0, @void}, 0x10) (async)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000840)={r9, 0xffffffffffffffff, 0x8, 0x0, @void}, 0x10)
socket$igmp(0x2, 0x3, 0x2) (async)
r10 = socket$igmp(0x2, 0x3, 0x2)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x6b}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4854}, 0x20004000)
ioctl$sock_inet_SIOCSARP(r10, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}, 'lo\x00'}) (async)
ioctl$sock_inet_SIOCSARP(r10, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}, 'lo\x00'})
ioctl$sock_inet_SIOCSARP(r10, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x8, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'lo\x00'})
r12 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000580), &(0x7f00000004c0)=0xfffffe98)
writev(r12, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

0s ago: executing program 0 (id=19014):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x28, 0x26, 0xa01, 0xfffffffc, 0x25dfdbfc, {0xd}, [@typed={0x11, 0x5e, 0x0, 0x0, @binary="5a907b02448c79c7572371ae9b"}]}, 0x28}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), 0xffffffffffffffff)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
sendto(r3, &(0x7f0000000180)="373c405d80515dc95e3fd1915d63e3e857925f73882aeb8cd2fb3485b5c6962e647084", 0x23, 0x0, 0x0, 0x0)
shutdown(r3, 0x1)
sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x44840)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001e00)={'wpan4\x00', <r5=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000001e40)={0x40, r4, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x51}, 0xc004)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0x5, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x6d}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb}, 0x50)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r7)
sendmsg$NFC_CMD_SE_IO(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={0x1c, r8, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000b40)=<r9=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000b80))
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000bc0)=<r10=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000c00))
sendmsg$NFC_CMD_SE_IO(r7, &(0x7f0000001dc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001c80)={0xec, r8, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_SE_APDU={0x98, 0x19, "d203318cac24289cff242767dfe5e345f85e774004375bbdfa43b2d875fa26bf30477e877958d1c93b0ffd97b5f2c7ec930ff29ecb80387dd18511627f96f1faf69e1049c171747dbff7458443cd49be02838e0732d20be2e779fa4049eb070cbd70cc0b2efde2d93721ffc88d3c3aafcd7c6d9a64e012a1e8de95dc89bd5a98b597830d8ea8608011b6b3193c2b5de72b3dd59f"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0xec}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NLBL_CALIPSO_C_REMOVE(r7, &(0x7f0000001f00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x1c, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c805}, 0x8001)
sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001d0001002bbd7012da67ad60e4f11800", @ANYRES32=0x0, @ANYBLOB="2000080b0a0001"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000)
r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0)
sendmsg$sock(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000002c0)="2d26e7cc9d808d1faa2a6eee752f12b530ba0958e5b2b50de1d16abc7aa65caeae32117f7effd83e77c126bebbc7056080b34e3b7ea0305580815755b97fe22e78d3cc56c9a1e047c83e0333427243b83e44925066e0f51916ef6662297ba0c8b88f6532bd44d77520e5c30b134fa1231de644fde11df94b60271f556707e3e301242aa26e46c5b2442f560954843ec266f02315af03eab6196e8effd1cd0bbd6a99807dc31c7773d2c60e3adfe0a58d21335766bb1498f3a28226", 0xbb}, {&(0x7f0000000380)="1bb081d16093c59486cc2f945e4cebe8969a051983b7a9fa991d57a0a3271f775a04b1d9c3aa243907eb59e94e7790c21c24d2cc0f8eacfdc6f26c", 0xfffffffffffffe68}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f00000003c0)="7ddb3ab98354dadea348cf0bfd0c0f138942d1a1597f18813083ccd51a5913be9feebda7ce2cae5f4f586547e7ec9884f1aef2fcdcdec9123137ef75807fabae339d63b488dc1bed351df51d23504840551f1e062310d7698895b5b28eebd41e43ef169147ec29fc34ffe8a307a330ca90278490f0d161ca99f0", 0x7a}, {&(0x7f0000001f40)="98c24d5ab593d7bca419c2a608b74016514bcd6d7e781e0dbd26739a03a06a57f876a3b4952ef7a79c5318a7cd62bf7748c0f082b5dffada91294e313f51dbc7828ffe37e2bba03eb9204a5aa070f6a3f01409a16cb7c842a9d3bcd28653e0b5a562f31fac122474e9efdc1df54e62519cbd928e89bd452a6dd2613ff006323c75e9e8c4376a078469e7dbf4e3de25a0459553d5252656b97528f5f30c0aa41b651e030bda1feeac128fa62d5de237bf00981a98b02dbde117ac", 0xba}, {&(0x7f0000000540)="6d9d356cac4ca2559490ef452a1765b3b3239967494702407a7e834752feb0cf00d99507241099f2e1890b93b8b64123503d8e47d274a8d558836ade578dc36349a26ac2c25366d32fec3043bc6cabb2fbf4b2e08c2b266880da87a3ebaf7a2cbf3ef6cc35070c622f84ed600c3b122d629af00a7c09ee9b430cfd11525a780c02017d179efa9568c28d52f79c720842293471b5064aa2a2bd67aedaa8b16d48ec30b85ef2cf998c7063cba5c41e88f7a97e55af9592930c82025c5f8ebc25feca150c6f39e4eb3dc671b771acb51547d2309b9c2427ed44bb", 0xd9}, {&(0x7f0000000640)="1d23de28f7b390a9f43f9475fb2672899ed389d7555052146a87e9af2cf1834c0c46f19f2f87c62f7f04f4048fe9867472841f0dc0b4fa883b3f9b1e5e1944b759131df6fd3a7b3ae1c7233cf9fed35d26f5477fdbfde6a51bad526b933b092314e9390df86b96a1057163657d27b0183ea7e528ab308e0347b30259cf0bcbfa56eea49b287b735d8fc0c9891c09b6a39021cd7049e38e3f0d8b272b685294c4c994d1c7e0f185c428bff9052d8af9260d875a61b00aa4aee22e2119f8b35fb4c136626b48e4cd330261003679790cc79c4eba25880282032b5f4e11ab7e21f2195e2128620176cc534928c104299f", 0xef}, {&(0x7f0000000480)="8a88be41e213cf598ed4dce494d111d25ecc60bb99cb37a002e0bfddf566239ab22b9b5b0aa8e4fab0443978c44e1f9aa4a5b395ab4958a1f61a44a3b55c2d4aaa7dcdf174baad6d081093bf4c9bdca58a108410f224244b8e61f96676fd85f84ab99416450bdfc0e9e14c", 0x36}], 0x8, &(0x7f00000008c0)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x10000}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x76f9}}, @txtime={{0x18, 0x1, 0x3d, 0x20000000000004}}], 0x90}, 0x4004841)
sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r12, 0x100, 0x70bd2c, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x11)

kernel console output (not intermixed with test programs):

 878.383052][T24524] __nla_validate_parse: 80 callbacks suppressed
[  878.383062][T24524] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15568'.
[  878.384948][T24523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15568'.
[  878.467184][T24528] netlink: 36 bytes leftover after parsing attributes in process `syz.2.15569'.
[  878.628204][T24540] validate_nla: 65 callbacks suppressed
[  878.628213][T24540] netlink: 'syz.1.15572': attribute type 1 has an invalid length.
[  878.634125][T24540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15572'.
[  878.740790][T24546] xt_cluster: you have exceeded the maximum number of cluster nodes (2359328 > 32)
[  878.902606][T24556] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15579'.
[  879.308647][T24588] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15587'.
[  879.320130][T24588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15587'.
[  879.449223][T24593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15589'.
[  879.455617][T24593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15589'.
[  879.459639][T24593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15589'.
[  879.525480][T24597] netlink: 'syz.1.15590': attribute type 20 has an invalid length.
[  879.532933][T24597] netlink: 'syz.1.15590': attribute type 20 has an invalid length.
[  879.532990][ T1391] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  879.538289][ T1391] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  879.545833][ T1391] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  879.561587][ T1391] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  879.581534][T24595]  speed is unknown, defaulting to 1000
[  879.707069][T24595] lo speed is unknown, defaulting to 1000
[  879.707430][T24600]  speed is unknown, defaulting to 1000
[  879.878526][T24600] lo speed is unknown, defaulting to 1000
[  880.186310][T24622] netlink: 'syz.2.15599': attribute type 6 has an invalid length.
[  880.198948][T24622] netlink: 'syz.2.15599': attribute type 6 has an invalid length.
[  880.242688][T24626] netlink: 'syz.0.15601': attribute type 27 has an invalid length.
[  880.578469][T24630] 8021q: VLANs not supported on syzkaller1
[  881.019822][T24673] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20001
[  881.436997][T24712] netlink: 'syz.1.15622': attribute type 1 has an invalid length.
[  881.450759][T24712] bond24: entered promiscuous mode
[  881.455873][T24712] 8021q: adding VLAN 0 to HW filter on device bond24
[  881.597787][T24732] batadv_slave_0: Caught tx_queue_len zero misconfig
[  881.739041][T24743] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[  882.349552][T24782] x_tables: ip_tables: icmp match: only valid for protocol 1
[  882.858452][T24793] netlink: 'syz.2.15650': attribute type 21 has an invalid length.
[  882.863985][T24793] netlink: 'syz.2.15650': attribute type 4 has an invalid length.
[  882.867509][T24793] netlink: 'syz.2.15650': attribute type 5 has an invalid length.
[  883.496127][T24817] sch_tbf: burst 240 is lower than device lo mtu (1550) !
[  883.688720][T24847] __nla_validate_parse: 19 callbacks suppressed
[  883.688731][T24847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15668'.
[  883.730430][T24847] netlink: 64 bytes leftover after parsing attributes in process `syz.2.15668'.
[  883.784965][T24856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15672'.
[  883.788480][T24856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15672'.
[  883.957638][T24877] netlink: 'syz.1.15679': attribute type 1 has an invalid length.
[  883.960273][T24877] netlink: 228 bytes leftover after parsing attributes in process `syz.1.15679'.
[  884.137425][T24896]  speed is unknown, defaulting to 1000
[  884.193827][T24911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15692'.
[  884.197163][T24911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15692'.
[  884.200793][T24909] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15691'.
[  884.207827][T24909] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15691'.
[  884.213854][T24911] netlink: 'syz.1.15692': attribute type 15 has an invalid length.
[  884.217004][T24909] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15691'.
[  884.296037][T24896] lo speed is unknown, defaulting to 1000
[  885.042776][T24939] nbd: socks must be embedded in a SOCK_ITEM attr
[  885.046222][T24939] block nbd13: shutting down sockets
[  885.367832][T24972] sctp: [Deprecated]: syz.0.15709 (pid 24972) Use of int in max_burst socket option deprecated.
[  885.367832][T24972] Use struct sctp_assoc_value instead
[  885.519281][T24990] syzkaller1: entered promiscuous mode
[  885.521277][T24990] syzkaller1: entered allmulticast mode
[  885.556918][T24992] netlink: 'syz.0.15716': attribute type 5 has an invalid length.
[  885.698778][T25001]  speed is unknown, defaulting to 1000
[  885.947135][T25001] lo speed is unknown, defaulting to 1000
[  886.296568][T25039] syzkaller1: entered promiscuous mode
[  886.298325][T25039] syzkaller1: entered allmulticast mode
[  886.324122][T25034] delete_channel: no stack
[  886.460982][T25063] veth0_to_bridge: Caught tx_queue_len zero misconfig
[  886.593256][T25080] xt_TCPMSS: Only works on TCP SYN packets
[  886.781585][T25099] netlink: 'syz.0.15748': attribute type 5 has an invalid length.
[  886.789645][T25099] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  887.067977][T25114] delete_channel: no stack
[  887.228876][T25120] openvswitch: netlink: Flow actions attr not present in new flow.
[  887.325215][T25130] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  887.394483][T25132] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  887.717342][T25157] netlink: 'syz.2.15771': attribute type 5 has an invalid length.
[  887.724548][T25163]  speed is unknown, defaulting to 1000
[  887.725369][T25157] smc: net device wlan0 erased user defined pnetid SYZ0
[  887.735206][T25157] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0
[  887.760766][T25164] syzkaller1: left promiscuous mode
[  887.769689][T25164] syzkaller1: left allmulticast mode
[  887.953767][T25180]  speed is unknown, defaulting to 1000
[  887.953829][T25163] lo speed is unknown, defaulting to 1000
[  888.094200][T25180] lo speed is unknown, defaulting to 1000
[  888.309134][T25204] xfrm1: entered allmulticast mode
[  888.459830][T25218] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[  888.720162][T25235] x_tables: duplicate underflow at hook 2
[  888.925537][T25247] ip6t_srh: unknown srh invflags 4000
[  889.015619][T25250] __nla_validate_parse: 101 callbacks suppressed
[  889.015637][T25250] netlink: 44 bytes leftover after parsing attributes in process `syz.0.15799'.
[  889.197147][T25263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15802'.
[  889.279146][T25272] netlink: 60 bytes leftover after parsing attributes in process `syz.0.15805'.
[  889.287021][T25272] netlink: 35 bytes leftover after parsing attributes in process `syz.0.15805'.
[  889.571187][T25289] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15811'.
[  889.879331][T25329] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15823'.
[  889.988030][T25339] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.15825'.
[  890.113681][T25357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15827'.
[  890.120707][T25355] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  890.132735][   T10]  speed is unknown, defaulting to 1000
[  890.134553][   T10] syz0: Port: 1 Link ACTIVE
[  890.136047][   T10]  speed is unknown, defaulting to 1000
[  890.140627][T25354] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  890.194461][T25362] netlink: 'syz.0.15832': attribute type 4 has an invalid length.
[  890.198198][T25364] openvswitch: netlink: IP tunnel dst address not specified
[  890.438642][T25400] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  890.465220][T25398] netlink: 'syz.1.15841': attribute type 16 has an invalid length.
[  890.468619][T25398] netlink: 'syz.1.15841': attribute type 17 has an invalid length.
[  890.655113][T25424] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15848'.
[  890.746577][T25435]  speed is unknown, defaulting to 1000
[  890.876912][T25435] lo speed is unknown, defaulting to 1000
[  891.089467][T25467] netlink: 27 bytes leftover after parsing attributes in process `syz.0.15860'.
[  891.519875][T25501] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  891.554881][T25504] netlink: 'syz.2.15871': attribute type 10 has an invalid length.
[  891.865533][T25524] bond24: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  891.870495][T25524] bond24: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  892.155057][T25543] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  892.159807][T25543] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  892.413185][T25573] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  892.417609][T25573] netlink: ct family unspecified
[  892.442621][T25573] sit5: entered promiscuous mode
[  892.561771][T25595] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  892.647620][T25606] netlink: 'syz.0.15906': attribute type 9 has an invalid length.
[  892.684169][T25607] netlink: 'syz.0.15906': attribute type 21 has an invalid length.
[  892.762365][T25624] netlink: 'syz.1.15911': attribute type 29 has an invalid length.
[  892.766232][T25624] netlink: 'syz.1.15911': attribute type 29 has an invalid length.
[  892.768100][T25626] openvswitch: netlink: Multiple metadata blocks provided
[  892.858333][T25643] bridge28: entered allmulticast mode
[  893.183575][T25678] geneve7: entered promiscuous mode
[  893.187576][ T1391] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  893.192991][ T1391] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  893.203186][ T1391] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  893.621866][T25738] netlink: 'syz.2.15940': attribute type 2 has an invalid length.
[  893.624563][T25738] netlink: 'syz.2.15940': attribute type 1 has an invalid length.
[  894.826003][T25677] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  894.875164][T25677] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  894.928121][T25677] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  895.046970][ T5699] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  895.050332][ T5699] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  895.083141][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  895.097317][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  895.104757][T25789] __nla_validate_parse: 12 callbacks suppressed
[  895.104769][T25789] netlink: 91 bytes leftover after parsing attributes in process `syz.1.15959'.
[  895.212439][T25803] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  895.215798][T25803] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  895.685160][T25832] netlink: 41 bytes leftover after parsing attributes in process `syz.1.15968'.
[  895.689135][T25832] netlink: 140 bytes leftover after parsing attributes in process `syz.1.15968'.
[  895.966332][T25851] syzkaller1: left promiscuous mode
[  895.968223][T25851] syzkaller1: left allmulticast mode
[  896.028133][T25861] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  896.049105][T25860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15981'.
[  896.344687][T25895] netlink: 'syz.1.15993': attribute type 1 has an invalid length.
[  896.347391][T25895] netlink: 224 bytes leftover after parsing attributes in process `syz.1.15993'.
[  896.387358][T25892] netlink: 312 bytes leftover after parsing attributes in process `syz.0.15991'.
[  896.574065][T25908] netlink: 248 bytes leftover after parsing attributes in process `syz.0.15997'.
[  896.848914][T25932] netlink: 14 bytes leftover after parsing attributes in process `syz.2.16006'.
[  897.071832][T25940] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  897.075278][T25940] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  897.579279][T25950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16011'.
[  897.875829][T25969] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16015'.
[  898.096002][T25983] netlink: 'syz.0.16021': attribute type 21 has an invalid length.
[  898.098668][T25983] netlink: 'syz.0.16021': attribute type 6 has an invalid length.
[  898.653523][T26002] sctp: [Deprecated]: syz.1.16028 (pid 26002) Use of int in max_burst socket option.
[  898.653523][T26002] Use struct sctp_assoc_value instead
[  898.966887][T26016] syzkaller1: entered promiscuous mode
[  898.968818][T26016] syzkaller1: entered allmulticast mode
[  899.397353][T26042] netlink: 'syz.0.16043': attribute type 1 has an invalid length.
[  899.544681][T26066] netlink: 'syz.1.16047': attribute type 13 has an invalid length.
[  899.607790][T26070] can: request_module (can-proto-0) failed.
[  899.767885][T26094] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  899.872470][T26103] netlink: 'syz.0.16056': attribute type 8 has an invalid length.
[  899.879929][T26103] bond0: entered promiscuous mode
[  899.884557][T26103] bond0: left promiscuous mode
[  900.204671][T26150] __nla_validate_parse: 13 callbacks suppressed
[  900.204684][T26150] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16067'.
[  900.352878][T26166] nbd: illegal input index 16777216
[  900.356031][T26166] nbd: couldn't find device at index 0
[  900.438072][T26171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16075'.
[  900.464882][T26176] netlink: 136 bytes leftover after parsing attributes in process `syz.2.16076'.
[  900.503940][T26182] pim6reg: entered allmulticast mode
[  900.507054][T26182] pim6reg: left allmulticast mode
[  900.567495][T26189] netlink: 'syz.2.16080': attribute type 1 has an invalid length.
[  900.570139][T26189] netlink: 'syz.2.16080': attribute type 4 has an invalid length.
[  900.572836][T26189] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.16080'.
[  900.576832][T26189] netlink: 'syz.2.16080': attribute type 1 has an invalid length.
[  900.579184][T26189] netlink: 'syz.2.16080': attribute type 4 has an invalid length.
[  900.581769][T26189] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.16080'.
[  900.648562][T26194]  speed is unknown, defaulting to 1000
[  900.849929][T26194] lo speed is unknown, defaulting to 1000
[  901.155680][T26232] netlink: 36 bytes leftover after parsing attributes in process `syz.2.16092'.
[  901.215383][T26235] netlink: 512 bytes leftover after parsing attributes in process `syz.2.16093'.
[  901.256890][T26240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16094'.
[  901.525162][T26257] 8021q: VLANs not supported on ip6_vti0
[  901.547520][T26257] bridge0: entered allmulticast mode
[  901.592497][T26261] netlink: 48 bytes leftover after parsing attributes in process `syz.2.16098'.
[  901.693119][T26269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16102'.
[  901.855936][T26286] vlan4: entered promiscuous mode
[  901.860660][T26286] vlan4: entered allmulticast mode
[  901.871215][T26286] hsr_slave_1: entered allmulticast mode
[  902.279731][T26317] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  902.295684][T26317] netlink: 'syz.0.16114': attribute type 4 has an invalid length.
[  902.300727][   T10]  speed is unknown, defaulting to 1000
[  902.303198][   T10] syz0: Port: 1 Link DOWN
[  902.306257][   T10]  speed is unknown, defaulting to 1000
[  902.918229][T26378] veth33: entered promiscuous mode
[  903.232280][T26392] netlink: 'syz.0.16136': attribute type 2 has an invalid length.
[  903.287525][T26392]  speed is unknown, defaulting to 1000
[  903.378303][T26392] lo speed is unknown, defaulting to 1000
[  903.821775][T26405] netlink: 'syz.2.16139': attribute type 1 has an invalid length.
[  903.931691][T26420] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig
[  904.019048][T26428] netlink: 'syz.2.16147': attribute type 83 has an invalid length.
[  904.267588][T26457] sch_tbf: burst 88 is lower than device veth35 mtu (1514) !
[  904.366430][T26463]  speed is unknown, defaulting to 1000
[  904.505196][T26463] lo speed is unknown, defaulting to 1000
[  904.732196][T26490] xt_l2tp: missing protocol rule (udp|l2tpip)
[  904.774713][T26497] syzkaller1: left promiscuous mode
[  904.776473][T26497] syzkaller1: left allmulticast mode
[  905.642732][T26557] netlink: 'syz.1.16187': attribute type 1 has an invalid length.
[  905.707994][T26557] 8021q: adding VLAN 0 to HW filter on device bond25
[  905.720526][T26561] __nla_validate_parse: 21 callbacks suppressed
[  905.720548][T26561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16186'.
[  905.948645][T26569] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16191'.
[  906.068525][T26586] openvswitch: netlink: Message has 4 unknown bytes.
[  906.071631][T26586] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  906.183289][T26607] netlink: 36 bytes leftover after parsing attributes in process `syz.2.16198'.
[  906.502122][T26643] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16208'.
[  906.620748][T26650] sch_tbf: burst 0 is lower than device syzkaller0 mtu (313) !
[  906.961523][T26659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16213'.
[  907.329648][T26657] team_slave_1: Caught tx_queue_len zero misconfig
[  907.405365][T26668] netlink: 'syz.2.16215': attribute type 1 has an invalid length.
[  907.523497][T26676] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  907.572089][T26686] x_tables: duplicate underflow at hook 3
[  907.588015][T26690] xt_l2tp: v2 sid > 0xffff: 4294967294
[  907.642165][T26694] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16223'.
[  907.678169][T26696] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16225'.
[  907.704332][T26697] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16223'.
[  907.880110][T26709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16230'.
[  907.883568][T26709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16230'.
[  908.292768][T26740] delete_channel: no stack
[  908.295589][T26740] netlink: 'syz.1.16238': attribute type 9 has an invalid length.
[  908.554718][T26759] netlink: 'syz.0.16246': attribute type 3 has an invalid length.
[  908.559879][T26759] netlink: 'syz.0.16246': attribute type 1 has an invalid length.
[  908.569019][T26751] netlink: 'syz.1.16243': attribute type 29 has an invalid length.
[  908.574830][T26751] netlink: 'syz.1.16243': attribute type 29 has an invalid length.
[  908.816117][T26778] netlink: 'syz.1.16252': attribute type 11 has an invalid length.
[  908.819020][T26779] netlink: 'syz.1.16252': attribute type 11 has an invalid length.
[  909.023606][T26790] netlink: 'syz.1.16255': attribute type 11 has an invalid length.
[  909.059936][T26793] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  909.191369][   T33] audit: type=1800 audit(1772938020.062:83): pid=26804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.16260" name="blkio.bfq.time_recursive" dev="tmpfs" ino=28536 res=0 errno=0
[  909.311994][T26820] 8021q: VLANs not supported on wg2
[  909.758459][T26874] IPVS: set_ctl: invalid protocol: 125 255.255.255.255:4
[  909.933674][T26894] x_tables: duplicate underflow at hook 1
[  909.992386][T26898] netlink: 'syz.2.16288': attribute type 29 has an invalid length.
[  909.996605][T26898] netlink: 'syz.2.16288': attribute type 29 has an invalid length.
[  910.047121][T26902] netlink: 'syz.1.16290': attribute type 11 has an invalid length.
[  910.139971][T26910] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  910.281494][T26923] nbd: illegal input index 16777216
[  910.287170][T26923] nbd: couldn't find device at index 0
[  910.352111][T26932] netlink: 'syz.1.16299': attribute type 83 has an invalid length.
[  910.848802][T26966] __nla_validate_parse: 15 callbacks suppressed
[  910.848814][T26966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16308'.
[  911.167192][T26978] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  911.585696][T27007] netlink: 64 bytes leftover after parsing attributes in process `syz.1.16324'.
[  911.628301][T27005]  speed is unknown, defaulting to 1000
[  911.630780][T27010] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16325'.
[  911.738155][T27005] lo speed is unknown, defaulting to 1000
[  911.776844][T27015] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16327'.
[  912.253051][T27038] netlink: 168 bytes leftover after parsing attributes in process `syz.1.16334'.
[  912.720428][T27077] openvswitch: netlink: Multiple metadata blocks provided
[  913.362705][T27105] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  913.411582][T27110] validate_nla: 1 callbacks suppressed
[  913.411611][T27110] netlink: 'syz.0.16352': attribute type 10 has an invalid length.
[  913.540663][T27111] pim6reg1: entered allmulticast mode
[  913.930723][T27137] x_tables: duplicate underflow at hook 1
[  914.048463][T27128] 8021q: VLANs not supported on syzkaller1
[  914.180773][T27148] netlink: 'syz.2.16366': attribute type 4 has an invalid length.
[  914.186819][T27148] netlink: 17 bytes leftover after parsing attributes in process `syz.2.16366'.
[  914.339711][T27146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16365'.
[  914.364272][T27146] 8021q: VLANs not supported on syzkaller1
[  914.685931][T27193]  speed is unknown, defaulting to 1000
[  914.793492][T27193] lo speed is unknown, defaulting to 1000
[  914.798720][T27201] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:20000
[  914.880403][T27202] netlink: 32 bytes leftover after parsing attributes in process `syz.1.16381'.
[  914.915802][T27206] xt_CT: You must specify a L4 protocol and not use inversions on it
[  914.987931][T27206] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  915.015293][T27211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16385'.
[  915.143957][T27221] netlink: 236 bytes leftover after parsing attributes in process `syz.1.16388'.
[  915.151544][T27221] bond0: Caught tx_queue_len zero misconfig
[  915.292639][T27230] x_tables: duplicate underflow at hook 2
[  915.702677][T27270] netlink: 'syz.0.16405': attribute type 7 has an invalid length.
[  915.967581][T27292] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  916.148647][T27306] netlink: 'syz.0.16414': attribute type 4 has an invalid length.
[  916.230672][T27311] x_tables: duplicate underflow at hook 3
[  916.412292][T27323]  speed is unknown, defaulting to 1000
[  916.540039][T27336] bridge0: left allmulticast mode
[  916.547216][T27323] lo speed is unknown, defaulting to 1000
[  916.547238][T27332]  speed is unknown, defaulting to 1000
[  916.725923][T27333]  speed is unknown, defaulting to 1000
[  916.729674][T27332] lo speed is unknown, defaulting to 1000
[  916.892293][T27333] lo speed is unknown, defaulting to 1000
[  918.132682][T27374] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  918.137016][T27375] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  918.179385][T27374] __nla_validate_parse: 5 callbacks suppressed
[  918.179398][T27374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16434'.
[  918.261987][T27378] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  918.265899][T27378] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  918.269171][T27375] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  918.272080][T27375] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  918.446278][T27387] netlink: 'syz.2.16438': attribute type 1 has an invalid length.
[  918.462113][T27387] netlink: 16174 bytes leftover after parsing attributes in process `syz.2.16438'.
[  918.463774][T27389] netlink: 'syz.1.16439': attribute type 1 has an invalid length.
[  918.469948][T27389] IPVS: set_ctl: invalid protocol: 16247 172.20.20.187:20001
[  918.494874][T27387] netlink: 'syz.2.16438': attribute type 1 has an invalid length.
[  918.497429][T27387] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16438'.
[  918.873199][T27421] netlink: 44 bytes leftover after parsing attributes in process `syz.1.16453'.
[  919.013397][T27433] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16456'.
[  919.092826][T27437] ipt_rpfilter: unknown options
[  919.114274][T27438] netlink: 'syz.1.16457': attribute type 11 has an invalid length.
[  919.354824][T27466] tun1: tun_chr_ioctl cmd 1074025672
[  919.357139][T27466] tun1: ignored: set checksum disabled
[  919.436263][T27470] can: request_module (can-proto-4) failed.
[  919.723992][T22539] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  919.729801][T22539] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  919.734218][T22539] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  919.738299][T22539] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  919.901280][T27500] netlink: 108 bytes leftover after parsing attributes in process `syz.0.16477'.
[  920.353635][T27557]  speed is unknown, defaulting to 1000
[  920.487819][T27567] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.16492'.
[  920.509369][T27557] lo speed is unknown, defaulting to 1000
[  921.062437][T27600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16502'.
[  921.062435][T27601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16502'.
[  921.335782][T27620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16509'.
[  921.519940][T27645] netlink: 'syz.1.16517': attribute type 1 has an invalid length.
[  921.520119][T27643] netlink: 'syz.2.16515': attribute type 3 has an invalid length.
[  921.526325][T27643] netlink: 'syz.2.16515': attribute type 3 has an invalid length.
[  921.529581][T27643] netlink: 'syz.2.16515': attribute type 3 has an invalid length.
[  921.533310][T27643] netlink: 'syz.2.16515': attribute type 3 has an invalid length.
[  921.539766][T27643] netlink: 'syz.2.16515': attribute type 3 has an invalid length.
[  921.653112][T27651]  speed is unknown, defaulting to 1000
[  921.794305][T27651] lo speed is unknown, defaulting to 1000
[  922.102984][   T33] audit: type=1800 audit(1772938032.972:84): pid=27669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.16523" name="cgroup.controllers" dev="tmpfs" ino=27503 res=0 errno=0
[  922.413130][T27691]  speed is unknown, defaulting to 1000
[  922.507648][T27691] lo speed is unknown, defaulting to 1000
[  923.566354][T27727] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  923.568723][T27727] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  923.868273][T27764] Unsupported ieee802154 address type: 0
[  924.001948][T27775] __nla_validate_parse: 10 callbacks suppressed
[  924.001963][T27775] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.16555'.
[  924.019648][T27775] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16555'.
[  924.363666][T27806] validate_nla: 34 callbacks suppressed
[  924.363687][T27806] netlink: 'syz.0.16566': attribute type 8 has an invalid length.
[  924.425726][T27808] netlink: 'syz.2.16567': attribute type 3 has an invalid length.
[  924.434290][T27808] A link change request failed with some changes committed already. Interface 5gQ[ may have been left with an inconsistent configuration, please check.
[  924.473339][T27810] delete_channel: no stack
[  924.485943][T27812] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16569'.
[  924.605761][T27821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16571'.
[  924.677860][T27830] syzkaller1: entered promiscuous mode
[  924.683916][T27830] syzkaller1: entered allmulticast mode
[  924.686528][T27828] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) !
[  924.729408][T27836] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16577'.
[  924.929670][T27858] netlink: 36 bytes leftover after parsing attributes in process `syz.1.16584'.
[  925.510593][T27873] netlink: 'syz.2.16588': attribute type 7 has an invalid length.
[  925.514423][T27873] netlink: 148 bytes leftover after parsing attributes in process `syz.2.16588'.
[  925.519885][T27873] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16588'.
[  925.696243][T27884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16592'.
[  925.772638][T27893] netlink: 36 bytes leftover after parsing attributes in process `syz.2.16595'.
[  925.776856][T27893] xt_l2tp: v2 doesn't support IP mode
[  926.062465][T27917] syzkaller1: entered promiscuous mode
[  926.066774][T27917] syzkaller1: entered allmulticast mode
[  926.100358][T27923] syzkaller1: left promiscuous mode
[  926.102610][T27923] syzkaller1: left allmulticast mode
[  926.855313][T28001] xt_policy: output policy not valid in PREROUTING and INPUT
[  926.992456][T28019] netlink: 'syz.1.16641': attribute type 32 has an invalid length.
[  927.013303][T28019] bond26: Setting coupled_control to off (0)
[  927.569230][T28078] bond16: entered allmulticast mode
[  927.576873][T28078] netlink: 'syz.0.16655': attribute type 1 has an invalid length.
[  927.815954][T28092] netlink: 'syz.0.16659': attribute type 1 has an invalid length.
[  927.822011][T28092] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  928.605041][T28138] 8021q: adding VLAN 0 to HW filter on device team0
[  928.620038][T28138] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  928.694396][T28139]  speed is unknown, defaulting to 1000
[  928.872375][T28139] lo speed is unknown, defaulting to 1000
[  929.053069][T28159] __nla_validate_parse: 17 callbacks suppressed
[  929.053090][T28159] netlink: 36 bytes leftover after parsing attributes in process `syz.2.16681'.
[  929.062466][T28159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16681'.
[  929.160293][T28163] netlink: 'syz.2.16683': attribute type 1 has an invalid length.
[  929.192101][T28163] bond27: (slave vxcan3): The slave device specified does not support setting the MAC address
[  929.196245][T28163] bond27: (slave vxcan3): Error -95 calling set_mac_address
[  929.253475][T28165] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16683'.
[  929.290378][T28165] bond27: (slave bridge0): Enslaving as an active interface with a down link
[  929.363125][T28163] bond27: (slave bridge29): Enslaving as an active interface with a down link
[  929.377680][T28165] macvlan0: entered promiscuous mode
[  929.383007][T28165] macvlan0: entered allmulticast mode
[  929.396233][T28165] bond27: entered promiscuous mode
[  929.398257][T28165] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  929.420648][T28165] bond27: left promiscuous mode
[  929.454254][T28181] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.16685'.
[  929.473895][T28183] netlink: 536 bytes leftover after parsing attributes in process `syz.0.16686'.
[  929.534718][T28187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16687'.
[  929.578921][T28192] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0
[  929.585433][T28192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16689'.
[  929.589055][T28192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16689'.
[  929.621787][T28183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16686'.
[  929.675057][T28204] netlink: 260 bytes leftover after parsing attributes in process `syz.1.16692'.
[  930.425179][T28269] netlink: 'syz.2.16715': attribute type 64 has an invalid length.
[  930.465979][T28272] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  930.546703][T28284] netlink: 'syz.2.16719': attribute type 1 has an invalid length.
[  930.549621][T28284] netlink: 'syz.2.16719': attribute type 1 has an invalid length.
[  930.570676][T28285] bond28: (slave bond_slave_1): Device is not bonding slave
[  930.574508][T28285] bond28: option active_slave: invalid value (bond_slave_1)
[  930.578968][T28285] bond28 (unregistering): Released all slaves
[  930.602189][T28284] bond28: (slave bond_slave_1): Device is not bonding slave
[  930.605164][T28284] bond28: option active_slave: invalid value (bond_slave_1)
[  930.609215][T28284] bond28 (unregistering): Released all slaves
[  930.643676][T28285] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  930.646629][T28286] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  930.874117][T28301] 8021q: VLANs not supported on syzkaller1
[  931.535164][T28358] IPVS: length: 46 != 8
[  931.841472][T28383] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  931.846991][  T631]  speed is unknown, defaulting to 1000
[  931.849037][  T631] syz0: Port: 1 Link ACTIVE
[  931.859926][  T631]  speed is unknown, defaulting to 1000
[  932.276029][ T9414] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  932.279043][ T9414] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  932.286666][ T9414] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  932.289907][ T9414] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  933.479612][T28483] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  933.504933][T28482] netlink: 'syz.0.16778': attribute type 1 has an invalid length.
[  933.545123][T28492] dvmrp1: entered allmulticast mode
[  933.554013][T28492] dvmrp1: left allmulticast mode
[  933.603530][T28492] x_tables: duplicate underflow at hook 2
[  934.594587][T28542] __nla_validate_parse: 17 callbacks suppressed
[  934.594599][T28542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16799'.
[  934.640622][T28547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16801'.
[  934.646431][T28550] IPVS: set_ctl: invalid protocol: 47 172.30.1.2:20001
[  934.649038][T28550] x_tables: duplicate underflow at hook 1
[  934.714039][T28555] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16803'.
[  934.872795][T28585] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16811'.
[  934.925693][T28589] netlink: 92 bytes leftover after parsing attributes in process `syz.2.16813'.
[  935.029246][T28605] netlink: 'syz.2.16818': attribute type 2 has an invalid length.
[  935.035027][T28605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16818'.
[  935.128543][T28618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16822'.
[  935.131518][T28618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16822'.
[  935.163001][T28622] netlink: 'syz.2.16823': attribute type 13 has an invalid length.
[  935.194748][T28623] bond27: option arp_interval: invalid value (18446744073709551615)
[  935.197616][T28623] bond27: option arp_interval: allowed values 0 - 2147483647
[  935.215843][T28623] bond27 (unregistering): Released all slaves
[  935.673465][T28665] netlink: 'syz.0.16836': attribute type 1 has an invalid length.
[  935.676807][T28665] netlink: 'syz.0.16836': attribute type 2 has an invalid length.
[  935.679896][T28665] netlink: 'syz.0.16836': attribute type 1 has an invalid length.
[  935.683293][T28665] netlink: 'syz.0.16836': attribute type 1 has an invalid length.
[  935.958506][T28690] syzkaller1: left promiscuous mode
[  935.960873][T28690] syzkaller1: left allmulticast mode
[  935.965500][T28690] delete_channel: no stack
[  936.120218][T28703] x_tables: unsorted entry at hook 3
[  936.363671][T28732] netlink: 44 bytes leftover after parsing attributes in process `syz.2.16855'.
[  936.431333][T28743] IPv6: NLM_F_REPLACE set, but no existing node found!
[  936.676393][T28763] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  937.027041][T28790] pim6reg1: tun_chr_ioctl cmd 1074025677
[  937.029683][T28790] pim6reg1: linktype set to 805
[  937.164859][T28794] netlink: 'syz.1.16872': attribute type 1 has an invalid length.
[  937.171740][T28794] netlink: 224 bytes leftover after parsing attributes in process `syz.1.16872'.
[  937.256929][T28792] tipc: Resetting bearer <eth:syzkaller0>
[  937.378926][T28803] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  937.393628][T28803] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  937.506324][T28813] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  937.510038][T28813] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  937.513876][T28813] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  937.517220][T28813] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  937.520436][T28813] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  937.524213][T28813] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  937.526913][T28813] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  937.529615][T28813] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  937.532603][T28813] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  937.535340][T28813] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3
[  937.931495][T28854] ipvlan0: entered allmulticast mode
[  937.933507][T28854] bond0: entered allmulticast mode
[  938.144546][T28871] netlink: 'syz.2.16898': attribute type 1 has an invalid length.
[  938.385871][T28887] openvswitch: netlink: nsh attr 12336 is out of range max 3
[  938.407227][T28887] openvswitch: netlink: nsh attr 12336 is out of range max 3
[  938.407245][T28888] openvswitch: netlink: nsh attr 12336 is out of range max 3
[  938.484041][T28892] xt_hashlimit: size too large, truncated to 1048576
[  938.616570][T28896] nbd: illegal input index 16777216
[  938.619146][T28896] nbd: couldn't find device at index 0
[  938.959869][T28916] netlink: 'syz.1.16911': attribute type 19 has an invalid length.
[  938.964023][T28916] netlink: 'syz.1.16911': attribute type 19 has an invalid length.
[  939.100574][T28934] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  939.289131][T28957] bond27: entered promiscuous mode
[  939.291329][T28957] 8021q: adding VLAN 0 to HW filter on device bond27
[  939.304068][T28960] vxcan2: entered allmulticast mode
[  939.402540][T28968] netlink: 'syz.2.16929': attribute type 15 has an invalid length.
[  939.405215][T28968] netlink: 'syz.2.16929': attribute type 18 has an invalid length.
[  939.443992][T28970] bond28: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  939.448489][T28970] bond28 (unregistering): Released all slaves
[  940.138911][T28995] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  940.141733][T28995] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  940.144767][T28995] tipc: Resetting bearer <eth:syzkaller0>
[  940.321156][T29020] __nla_validate_parse: 23 callbacks suppressed
[  940.321173][T29020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16944'.
[  940.327771][T29018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16944'.
[  940.587528][T29034] bond9: option mode: unable to set because the bond device is up
[  940.716535][T29043] nbd: illegal input index 16777216
[  940.719165][T29043] nbd: couldn't find device at index 0
[  940.914202][T29059] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  941.920137][T29136] IPv6: NLM_F_REPLACE set, but no existing node found!
[  941.963277][T29140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16983'.
[  941.977023][T29143] netlink: 32 bytes leftover after parsing attributes in process `syz.0.16985'.
[  941.980033][T29143] netlink: 32 bytes leftover after parsing attributes in process `syz.0.16985'.
[  941.984748][T29143] netlink: 32 bytes leftover after parsing attributes in process `syz.0.16985'.
[  941.989518][T29143] netlink: 32 bytes leftover after parsing attributes in process `syz.0.16985'.
[  941.994890][T29143] netlink: 32 bytes leftover after parsing attributes in process `syz.0.16985'.
[  942.001593][T29143] netlink: 32 bytes leftover after parsing attributes in process `syz.0.16985'.
[  942.004662][T29143] netlink: 32 bytes leftover after parsing attributes in process `syz.0.16985'.
[  942.317946][T29186] validate_nla: 1 callbacks suppressed
[  942.317956][T29186] netlink: 'syz.0.16999': attribute type 21 has an invalid length.
[  942.457168][T29190] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  942.546215][T29196] nbd: couldn't find device at index 0
[  942.549615][T29190] netlink: 'syz.1.17000': attribute type 4 has an invalid length.
[  942.576353][  T631] lo speed is unknown, defaulting to 1000
[  942.578195][  T631] syz2: Port: 1 Link DOWN
[  942.988849][T29264] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  943.254034][T29313] x_tables: duplicate underflow at hook 3
[  943.322800][T29322] IPVS: set_ctl: invalid protocol: 47 172.30.1.1:20003
[  943.325984][T29320] netlink: 'syz.2.17038': attribute type 1 has an invalid length.
[  943.329442][T29320] netlink: 'syz.2.17038': attribute type 6 has an invalid length.
[  943.436770][T29334] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  943.577260][T29360] Bluetooth: MGMT ver 1.23
[  943.579022][   T33] audit: type=1800 audit(1772938054.452:85): pid=29360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.17047" name="blkio.bfq.time_recursive" dev="tmpfs" ino=28845 res=0 errno=0
[  943.581493][T29360] Bluetooth: hci1: too big key_count value 29096
[  943.608404][T29360] netlink: 'syz.1.17047': attribute type 1 has an invalid length.
[  943.622223][T29360] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  943.717556][T29374] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  943.871479][T29388] bond28: invalid ARP target 0.0.0.0 specified for addition
[  943.873984][T29388] bond28: option arp_ip_target: invalid value (0)
[  943.877513][T29388] bond28 (unregistering): Released all slaves
[  944.412194][T29429] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  945.166607][T29451] netlink: 'syz.0.17067': attribute type 1 has an invalid length.
[  945.338046][T29466] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  945.341345][T29467] __nla_validate_parse: 76 callbacks suppressed
[  945.341357][T29467] netlink: 36 bytes leftover after parsing attributes in process `syz.2.17078'.
[  945.400784][T29473] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17081'.
[  945.410801][T29476] netlink: 'syz.2.17078': attribute type 1 has an invalid length.
[  945.414639][T29476] netlink: 'syz.2.17078': attribute type 1 has an invalid length.
[  945.424074][T29467] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17078'.
[  945.427001][T29467] netlink: 36 bytes leftover after parsing attributes in process `syz.2.17078'.
[  945.430288][T29467] tipc: Invalid UDP bearer configuration
[  945.430347][T29467] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[  945.492599][T29487] veth1_macvtap: entered promiscuous mode
[  945.505646][T29487] macsec0: left promiscuous mode
[  945.507332][T29487] veth1_macvtap: left promiscuous mode
[  945.550121][T29497] netlink: zone id is out of range
[  945.552461][T29497] netlink: zone id is out of range
[  945.554100][T29497] netlink: zone id is out of range
[  945.555896][T29497] netlink: zone id is out of range
[  945.557941][T29497] netlink: zone id is out of range
[  945.560060][T29497] netlink: zone id is out of range
[  945.583175][T29495] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17089'.
[  945.587867][T29495] netlink: 11 bytes leftover after parsing attributes in process `syz.0.17089'.
[  945.645973][T29505] netlink: 536 bytes leftover after parsing attributes in process `syz.1.17093'.
[  945.740267][T29516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17092'.
[  945.840652][T29526] netlink: 'syz.2.17098': attribute type 21 has an invalid length.
[  945.861153][T29526] 5gQ[: entered allmulticast mode
[  945.863262][T29526] 5gQ[: left allmulticast mode
[  945.946183][T29539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17100'.
[  946.020516][T29546] netlink: 36 bytes leftover after parsing attributes in process `syz.2.17103'.
[  946.507873][T29551] netlink: 'syz.0.17104': attribute type 1 has an invalid length.
[  946.954217][T29576]  speed is unknown, defaulting to 1000
[  947.073853][T29576] lo speed is unknown, defaulting to 1000
[  947.572843][T29626] netlink: 'syz.1.17127': attribute type 2 has an invalid length.
[  947.575925][T29626] netlink: 'syz.1.17127': attribute type 1 has an invalid length.
[  947.669860][T29639] netlink: 'syz.0.17131': attribute type 1 has an invalid length.
[  947.674067][T29639] netlink: 'syz.0.17131': attribute type 1 has an invalid length.
[  947.677829][T29640] netlink: 'syz.0.17131': attribute type 1 has an invalid length.
[  947.680665][T29640] netlink: 'syz.0.17131': attribute type 1 has an invalid length.
[  947.694804][T29644] netlink: 'syz.1.17134': attribute type 21 has an invalid length.
[  947.697467][T29644] netlink: 'syz.1.17134': attribute type 22 has an invalid length.
[  947.700106][T29644] netlink: 'syz.1.17134': attribute type 23 has an invalid length.
[  947.711416][T29643] xt_CT: No such helper "snmp_trap"
[  947.998498][T29677] netlink: 'syz.0.17144': attribute type 1 has an invalid length.
[  948.124858][T29692] tipc: Resetting bearer <eth:syzkaller0>
[  948.149264][T29692] tipc: Resetting bearer <eth:syzkaller0>
[  948.383262][T29702] veth0_to_bridge: entered promiscuous mode
[  948.387125][T29701] veth0_to_bridge: left promiscuous mode
[  948.430741][T29717] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  948.473956][T29721] xt_hashlimit: Unknown mode mask C4, kernel too old?
[  948.652795][T29729]  speed is unknown, defaulting to 1000
[  948.777827][T29729] lo speed is unknown, defaulting to 1000
[  949.386588][T29796] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  949.773274][T29839] xt_HMARK: proto mask must be zero with L3 mode
[  949.846783][T29847] sctp: [Deprecated]: syz.2.17189 (pid 29847) Use of struct sctp_assoc_value in delayed_ack socket option.
[  949.846783][T29847] Use struct sctp_sack_info instead
[  950.019766][T29870] sit0: entered promiscuous mode
[  950.062052][T29870] net_ratelimit: 355 callbacks suppressed
[  950.062062][T29870] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  950.072715][T29870] : renamed from bond_slave_0
[  950.293508][T29896]  speed is unknown, defaulting to 1000
[  950.297452][T29902] batadv_slave_0: entered promiscuous mode
[  950.312845][T29899] batadv_slave_0: left promiscuous mode
[  950.402209][T29896] lo speed is unknown, defaulting to 1000
[  950.431686][T29906] nbd: must specify at least one socket
[  950.635459][T29914]  speed is unknown, defaulting to 1000
[  950.882430][T29929] ipt_ECN: cannot use operation on non-tcp rule
[  950.911650][T29914] lo speed is unknown, defaulting to 1000
[  950.979050][T29937] can: request_module (can-proto-0) failed.
[  951.990287][T29982] __nla_validate_parse: 39 callbacks suppressed
[  951.990298][T29982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17235'.
[  952.139929][T30001] nbd: must specify a size in bytes for the device
[  952.147888][T30001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17239'.
[  952.237397][T30007] netlink: 44 bytes leftover after parsing attributes in process `syz.0.17241'.
[  952.265353][T30011] netlink: 132 bytes leftover after parsing attributes in process `syz.1.17242'.
[  952.272872][T30011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17242'.
[  952.283173][T30011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17242'.
[  952.363352][T30021] netlink: 100 bytes leftover after parsing attributes in process `syz.1.17246'.
[  952.367920][T30021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17246'.
[  952.948524][T30063] xt_TCPMSS: Only works on TCP SYN packets
[  953.017997][T30071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17262'.
[  953.022534][T30071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17262'.
[  953.325028][T30097] bond1: option mode: unable to set because the bond device has slaves
[  953.328154][T30097] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  953.333440][T30097] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  953.712207][T30087] syz.2.17269 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  953.727406][T30087] CPU: 1 UID: 0 PID: 30087 Comm: syz.2.17269 Not tainted syzkaller #0 PREEMPT(full) 
[  953.727419][T30087] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  953.727424][T30087] Call Trace:
[  953.727428][T30087]  <TASK>
[  953.727431][T30087]  dump_stack_lvl+0xe8/0x150
[  953.727446][T30087]  dump_header+0xd3/0x4c0
[  953.727456][T30087]  oom_kill_process+0x3ab/0x970
[  953.727467][T30087]  out_of_memory+0x106c/0x1410
[  953.727473][T30087]  ? percpu_ref_put+0x19/0x180
[  953.727483][T30087]  ? __pfx___mutex_lock+0x10/0x10
[  953.727494][T30087]  ? __pfx_out_of_memory+0x10/0x10
[  953.727500][T30087]  ? do_raw_spin_unlock+0x4d/0x210
[  953.727512][T30087]  try_charge_memcg+0xc53/0x1560
[  953.727521][T30087]  ? __lock_acquire+0x6b5/0x2cf0
[  953.727534][T30087]  ? __pfx_try_charge_memcg+0x10/0x10
[  953.727541][T30087]  ? xa_load+0x60/0x210
[  953.727551][T30087]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  953.727561][T30087]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  953.727570][T30087]  mem_cgroup_swapin_charge_folio+0x2e3/0x4d0
[  953.727579][T30087]  __swap_cache_prepare_and_add+0x52a/0x700
[  953.727596][T30087]  swap_cache_alloc_folio+0xf1/0x240
[  953.727607][T30087]  swap_cluster_readahead+0x369/0x690
[  953.727619][T30087]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  953.727634][T30087]  ? get_vma_policy+0x27b/0x3c0
[  953.727644][T30087]  swapin_readahead+0x196/0xc50
[  953.727658][T30087]  ? __pfx_swapin_readahead+0x10/0x10
[  953.727668][T30087]  ? swap_table_get+0x1e/0x260
[  953.727677][T30087]  ? swap_table_get+0x1e/0x260
[  953.727685][T30087]  ? swap_table_get+0x1e/0x260
[  953.727694][T30087]  ? swap_table_get+0x216/0x260
[  953.727704][T30087]  ? swap_cache_get_folio+0x513/0x520
[  953.727715][T30087]  do_swap_page+0x54f/0x58d0
[  953.727725][T30087]  ? __lock_acquire+0x6b5/0x2cf0
[  953.727740][T30087]  ? do_swap_page+0x12c/0x58d0
[  953.727749][T30087]  ? __pfx_do_swap_page+0x10/0x10
[  953.727757][T30087]  ? __pte_offset_map+0x1ae/0x240
[  953.727768][T30087]  ? pte_offset_map_rw_nolock+0xea/0x160
[  953.727779][T30087]  handle_mm_fault+0x12d2/0x3310
[  953.727795][T30087]  ? handle_mm_fault+0xee/0x3310
[  953.727807][T30087]  ? __pfx_handle_mm_fault+0x10/0x10
[  953.727816][T30087]  ? lock_vma_under_rcu+0x45a/0x500
[  953.727833][T30087]  do_user_addr_fault+0xa73/0x1340
[  953.727845][T30087]  ? rcu_is_watching+0x15/0xb0
[  953.727857][T30087]  ? trace_page_fault_user+0x84/0x210
[  953.727867][T30087]  exc_page_fault+0x6a/0xc0
[  953.727877][T30087]  asm_exc_page_fault+0x26/0x30
[  953.727884][T30087] RIP: 0033:0x7fd9d8c6a110
[  953.727893][T30087] Code: c4 4c 0f 42 e0 83 3d ba dc 3a 00 00 0f 8e d9 fd ff ff e8 33 83 fe ff 49 39 c4 0f 82 82 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 <69> 3d 7e b5 ed 00 e8 03 00 00 48 8d 1d 7f be 3a 00 e8 8a 31 13 00
[  953.727899][T30087] RSP: 002b:00007ffc79841570 EFLAGS: 00010202
[  953.727906][T30087] RAX: 00000000000e8ce1 RBX: 00007fd9d9017da0 RCX: 00000000000e8aa8
[  953.727911][T30087] RDX: 0000000000000239 RSI: 00007ffc79841550 RDI: 0000000021f6d23b
[  953.727916][T30087] RBP: 00007fd9d9017da0 R08: 7fffffffffffffff R09: 3fffffffffffffff
[  953.727921][T30087] R10: 4000000000000000 R11: 0000000000000246 R12: 00000000000e8e2b
[  953.727925][T30087] R13: 00007fd9d901609c R14: 00000000000e8d48 R15: 00007fd9d9016090
[  953.727946][T30087]  </TASK>
[  953.727951][T30087] memory: usage 307200kB, limit 307200kB, failcnt 2131
[  953.841118][T30087] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0
[  953.844363][T30087] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0
[  953.863345][T30087] Memory cgroup stats for /syz2:
[  953.863405][T30087] cache 0
[  953.868053][T30087] rss 0
[  953.871221][T30087] rss_huge 0
[  953.872301][T30087] shmem 0
[  953.873241][T30087] mapped_file 0
[  953.874364][T30087] dirty 0
[  953.875313][T30087] writeback 0
[  953.876404][T30087] workingset_refault_anon 2
[  953.877866][T30087] workingset_refault_file 1
[  953.891972][T30087] swap 204800
[  953.893371][T30087] swapcached 208896
[  953.894866][T30087] pgpgin 721943
[  953.901623][T30087] pgpgout 721942
[  953.904069][T30087] pgfault 1244251
[  953.906523][T30087] pgmajfault 11
[  953.909096][T30087] inactive_anon 0
[  953.910401][T30087] active_anon 4096
[  953.913038][T30087] inactive_file 0
[  953.914427][T30087] active_file 0
[  953.915809][T30087] unevictable 0
[  953.917126][T30087] hierarchical_memory_limit 314572800
[  953.920056][T30087] hierarchical_memsw_limit 9223372036854771712
[  953.923803][T30087] total_cache 0
[  953.926131][T30087] total_rss 0
[  953.927339][T30087] total_rss_huge 0
[  953.929746][T30087] total_shmem 0
[  953.931169][T30087] total_mapped_file 0
[  953.932868][T30087] total_dirty 0
[  953.935176][T30087] total_writeback 0
[  953.936734][T30087] total_workingset_refault_anon 2
[  953.939656][T30087] total_workingset_refault_file 1
[  953.943055][T30087] total_swap 204800
[  953.947181][T30087] total_swapcached 208896
[  953.949743][T30087] total_pgpgin 721943
[  953.952369][T30087] total_pgpgout 721942
[  953.954935][T30087] total_pgfault 1244252
[  953.956975][T30087] total_pgmajfault 11
[  953.958357][T30087] total_inactive_anon 0
[  953.959969][T30087] total_active_anon 4096
[  953.961604][T30087] total_inactive_file 0
[  953.963329][T30087] total_active_file 0
[  953.964699][T30087] total_unevictable 0
[  953.966204][T30087] anon_cost 0
[  953.967866][T30087] file_cost 0
[  953.969122][T30087] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.17269,pid=30087,uid=0
[  953.975603][T30087] Memory cgroup out of memory: Killed process 30087 (syz.2.17269) total-vm:102356kB, anon-rss:1228kB, file-rss:22920kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[  954.408647][T30152] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  954.415707][T30152] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  954.458383][T30156] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  954.997711][T30190] bond28: option primary_reselect: invalid value (4)
[  955.003849][T30190] bond28 (unregistering): Released all slaves
[  955.407384][T30213] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  955.446115][T30213] validate_nla: 7 callbacks suppressed
[  955.446131][T30213] netlink: 'syz.2.17311': attribute type 4 has an invalid length.
[  955.724322][T30256] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  955.891879][T30277] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  956.282674][T30302] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  956.287087][T30302] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  956.307662][T30302] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  956.313078][T30302] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  956.642987][T30325] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  956.648874][ T9301] lo speed is unknown, defaulting to 1000
[  956.653359][ T9301] syz2: Port: 1 Link ACTIVE
[  956.706721][T30340] netlink: 'syz.0.17350': attribute type 1 has an invalid length.
[  956.731147][T30340] bond24: entered allmulticast mode
[  956.752089][T30340] bond24: (slave geneve8): making interface the new active one
[  956.755121][T30340] geneve8: entered allmulticast mode
[  956.757884][T30340] bond24: (slave geneve8): Enslaving as an active interface with an up link
[  956.773873][ T9414] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  956.777654][ T9414] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  956.792722][ T9414] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  956.795530][ T9414] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  956.850698][T30366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  956.910413][T30357] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20003
[  956.965754][T30379] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  956.969591][T30379] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  957.054361][T30386] netlink: 'syz.0.17364': attribute type 8 has an invalid length.
[  957.064268][T30388] IPVS: set_ctl: invalid protocol: 44 172.30.1.1:20003
[  957.077929][T30390]  speed is unknown, defaulting to 1000
[  957.176565][T30397] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  957.180051][T30397] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  957.297752][T30390] lo speed is unknown, defaulting to 1000
[  957.308336][T30411] __nla_validate_parse: 12 callbacks suppressed
[  957.308350][T30411] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.17370'.
[  957.367697][T30413] netlink: 'syz.0.17371': attribute type 5 has an invalid length.
[  958.170753][T30475] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17385'.
[  958.363863][T30489] netlink: 164 bytes leftover after parsing attributes in process `syz.0.17391'.
[  958.549899][T30496] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17393'.
[  958.977819][T30523] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17400'.
[  959.015878][T30525] xt_time: invalid argument - start or stop time greater than 23:59:59
[  959.106151][T30534] netlink: 'syz.1.17404': attribute type 11 has an invalid length.
[  959.379328][T30552] netlink: 5 bytes leftover after parsing attributes in process `syz.1.17409'.
[  959.428430][T30557]  speed is unknown, defaulting to 1000
[  959.599767][T30557] lo speed is unknown, defaulting to 1000
[  959.856128][T30592] Cannot find add_set index 2 as target
[  959.858721][T30594] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17421'.
[  959.873485][T30592] 8021q: VLANs not supported on ip_vti0
[  960.234645][T30614] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17428'.
[  960.517017][T30629] netlink: 'syz.0.17433': attribute type 1 has an invalid length.
[  960.553643][T30629] bond25: (slave ip6gretap7): Enslaving as a backup interface with an up link
[  960.573709][T30629] veth61: entered promiscuous mode
[  960.578438][T30629] bond25: (slave veth61): Enslaving as a backup interface with a down link
[  960.584041][T30629] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17433'.
[  960.588016][T30629] 8021q: adding VLAN 0 to HW filter on device bond25
[  960.588528][ T9414] bond25: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  960.711095][T22539] bond25: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  960.769743][T30648] nbd: couldn't find device at index 0
[  960.880058][T30666] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17442'.
[  961.814542][T30696] sctp: [Deprecated]: syz.2.17451 (pid 30696) Use of int in max_burst socket option.
[  961.814542][T30696] Use struct sctp_assoc_value instead
[  961.876443][T30703] bridge0: port 1(1x9) entered blocking state
[  961.878678][T30703] bridge0: port 1(1x9) entered disabled state
[  961.880779][T30703] x9: entered allmulticast mode
[  961.883290][T30703] x9: entered promiscuous mode
[  962.157747][T30728] macsec5: entered allmulticast mode
[  962.160045][T30728] macsec0: entered allmulticast mode
[  962.163374][T30728] veth1_macvtap: entered allmulticast mode
[  962.477376][T30750] __nla_validate_parse: 6 callbacks suppressed
[  962.477386][T30750] netlink: 68 bytes leftover after parsing attributes in process `syz.1.17472'.
[  962.556969][T30757]  speed is unknown, defaulting to 1000
[  962.599141][T30759] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  962.641498][T30757] lo speed is unknown, defaulting to 1000
[  962.704332][T30763] netlink: 'syz.2.17475': attribute type 1 has an invalid length.
[  962.711418][T30763] netlink: 'syz.2.17475': attribute type 1 has an invalid length.
[  963.118621][T30809] 8021q: VLANs not supported on syzkaller1
[  963.123154][T30809] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  963.135078][T30809] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17488'.
[  963.341831][T30832] IPVS: set_ctl: invalid protocol: 47 10.1.1.1:20001
[  963.546485][T30853] netlink: 'syz.2.17503': attribute type 89 has an invalid length.
[  963.550534][T30853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17503'.
[  963.814634][T30863] netlink: 59 bytes leftover after parsing attributes in process `syz.1.17506'.
[  963.905045][T30872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17509'.
[  963.908398][T30872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17509'.
[  964.070369][T30888] netlink: 'syz.2.17514': attribute type 1 has an invalid length.
[  964.174121][T30893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17516'.
[  964.177356][T30893] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17516'.
[  964.180487][T30893] netlink: 'syz.1.17516': attribute type 1 has an invalid length.
[  964.208228][T30897] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  964.211927][T30897] IPVS: Unknown mcast interface: hsr0
[  964.389674][T30913] netlink: 'syz.1.17521': attribute type 5 has an invalid length.
[  964.393957][T30913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17521'.
[  964.397721][T30913] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17521'.
[  964.457606][T30922] netlink: 'syz.1.17524': attribute type 13 has an invalid length.
[  964.460153][T30922] netlink: 'syz.1.17524': attribute type 17 has an invalid length.
[  964.465242][T30922] netlink: 'syz.1.17524': attribute type 27 has an invalid length.
[  965.467837][   T10] lo speed is unknown, defaulting to 1000
[  965.470251][   T10] syz2: Port: 1 Link DOWN
[  965.701356][T30973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  965.704220][T30973] IPv6: NLM_F_CREATE should be set when creating new route
[  965.974724][T30983] validate_nla: 1 callbacks suppressed
[  965.974739][T30983] netlink: 'syz.1.17543': attribute type 5 has an invalid length.
[  966.020541][T31004] : entered allmulticast mode
[  966.023991][T31003] : left allmulticast mode
[  966.443346][T31050]  speed is unknown, defaulting to 1000
[  966.503003][T31051] sysfs: cannot create duplicate filename '/class/ieee80211/π,xb)%	]3DL̥!'
[  966.506420][T31051] CPU: 1 UID: 0 PID: 31051 Comm: syz.1.17562 Not tainted syzkaller #0 PREEMPT(full) 
[  966.506432][T31051] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  966.506437][T31051] Call Trace:
[  966.506447][T31051]  <TASK>
[  966.506452][T31051]  dump_stack_lvl+0xe8/0x150
[  966.506467][T31051]  sysfs_warn_dup+0x8e/0xa0
[  966.506481][T31051]  sysfs_do_create_link_sd+0xc0/0x110
[  966.506493][T31051]  device_add_class_symlinks+0x1cf/0x240
[  966.506509][T31051]  device_add+0x475/0xb70
[  966.506523][T31051]  wiphy_register+0x1d73/0x2d50
[  966.506539][T31051]  ? __pfx_wiphy_register+0x10/0x10
[  966.506548][T31051]  ? __pfx_netdev_run_todo+0x10/0x10
[  966.506557][T31051]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  966.506569][T31051]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  966.506582][T31051]  ieee80211_register_hw+0x3562/0x4200
[  966.506598][T31051]  ? ieee80211_register_hw+0x1501/0x4200
[  966.506616][T31051]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  966.506635][T31051]  ? __hrtimer_setup+0x181/0x200
[  966.506648][T31051]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  966.506662][T31051]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  966.506697][T31051]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  966.506712][T31051]  ? kstrndup+0xbf/0x160
[  966.506725][T31051]  hwsim_new_radio_nl+0xf35/0x1bd0
[  966.506740][T31051]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  966.506752][T31051]  ? rcu_is_watching+0x15/0xb0
[  966.506761][T31051]  ? trace_kmalloc+0x2a/0x110
[  966.506773][T31051]  ? __nla_parse+0x40/0x60
[  966.506790][T31051]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  966.506812][T31051]  genl_family_rcv_msg_doit+0x22a/0x330
[  966.506833][T31051]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  966.506850][T31051]  ? bpf_lsm_capable+0x9/0x20
[  966.506862][T31051]  ? security_capable+0x7e/0x2c0
[  966.506876][T31051]  genl_rcv_msg+0x61c/0x7a0
[  966.506899][T31051]  ? __pfx_genl_rcv_msg+0x10/0x10
[  966.506916][T31051]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  966.506926][T31051]  ? __lock_acquire+0x6b5/0x2cf0
[  966.506941][T31051]  netlink_rcv_skb+0x232/0x4b0
[  966.506951][T31051]  ? __pfx_genl_rcv_msg+0x10/0x10
[  966.506963][T31051]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  966.506989][T31051]  ? down_read+0x272/0x2e0
[  966.507002][T31051]  ? genl_rcv+0xd/0x40
[  966.507020][T31051]  genl_rcv+0x28/0x40
[  966.507032][T31051]  netlink_unicast+0x80f/0x9b0
[  966.507044][T31051]  ? __pfx_netlink_unicast+0x10/0x10
[  966.507055][T31051]  ? netlink_sendmsg+0x650/0xb40
[  966.507068][T31051]  ? skb_put+0x11b/0x210
[  966.507088][T31051]  netlink_sendmsg+0x813/0xb40
[  966.507109][T31051]  ? __pfx_netlink_sendmsg+0x10/0x10
[  966.507127][T31051]  ? aa_sock_msg_perm+0xf1/0x1b0
[  966.507137][T31051]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  966.507151][T31051]  ? __pfx_netlink_sendmsg+0x10/0x10
[  966.507164][T31051]  ____sys_sendmsg+0xa68/0xad0
[  966.507216][T31051]  ? futex_unqueue+0x211/0x240
[  966.507230][T31051]  ? __pfx_____sys_sendmsg+0x10/0x10
[  966.507248][T31051]  ? import_iovec+0x73/0xa0
[  966.507262][T31051]  ___sys_sendmsg+0x2a5/0x360
[  966.507277][T31051]  ? __pfx____sys_sendmsg+0x10/0x10
[  966.507291][T31051]  ? futex_wait+0x29a/0x380
[  966.507314][T31051]  ? __fget_files+0x2a/0x420
[  966.507324][T31051]  ? __fget_files+0x3a0/0x420
[  966.507337][T31051]  __x64_sys_sendmsg+0x1bd/0x2a0
[  966.507348][T31051]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  966.507367][T31051]  do_syscall_64+0x14d/0xf80
[  966.507374][T31051]  ? trace_irq_disable+0x3b/0x150
[  966.507384][T31051]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  966.507393][T31051]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  966.507401][T31051] RIP: 0033:0x7f9c4199c799
[  966.507409][T31051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  966.507416][T31051] RSP: 002b:00007f9c427b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  966.507426][T31051] RAX: ffffffffffffffda RBX: 00007f9c41c16090 RCX: 00007f9c4199c799
[  966.507431][T31051] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000d
[  966.507435][T31051] RBP: 00007f9c41a32bd9 R08: 0000000000000000 R09: 0000000000000000
[  966.507446][T31051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  966.507451][T31051] R13: 00007f9c41c16128 R14: 00007f9c41c16090 R15: 00007fff9537aa38
[  966.507484][T31051]  </TASK>
[  966.603548][T31050] lo speed is unknown, defaulting to 1000
[  967.202620][T31075] x_tables: duplicate underflow at hook 1
[  967.586223][T31124] 8021q: VLANs not supported on syzkaller1
[  967.675878][T31126] __nla_validate_parse: 10 callbacks suppressed
[  967.675890][T31126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17588'.
[  967.714053][T31142] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17590'.
[  967.717400][T31142] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17590'.
[  967.799308][T31142] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  967.806667][T31142] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 56525 - 0
[  967.810324][T31142] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  967.844336][T31158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17593'.
[  967.873222][T31142] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  967.878128][T31142] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 56525 - 0
[  967.886838][T31142] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  967.924645][T31164] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  967.927110][T31164] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  967.947795][T31142] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  967.951994][T31142] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 56525 - 0
[  967.955086][T31142] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  967.985415][T31168] netlink: 104 bytes leftover after parsing attributes in process `syz.0.17596'.
[  967.995734][T31142] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  967.998893][T31142] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 56525 - 0
[  968.002433][T31142] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  968.087593][T29962] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  968.091680][T29962] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  968.095419][T29962] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 56525 - 0
[  968.112753][T29962] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  968.116499][T29962] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  968.120091][T29962] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 56525 - 0
[  968.136108][T29962] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  968.139603][T29962] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  968.143411][T29962] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 56525 - 0
[  968.147687][T29962] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  968.155789][T29962] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  968.160791][T29962] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 56525 - 0
[  968.259881][T31185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17603'.
[  968.515271][T31212] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17611'.
[  968.521067][T31212] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17611'.
[  968.611988][T31210] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  968.614980][T31210] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  968.707678][T31230] netlink: 'syz.0.17616': attribute type 1 has an invalid length.
[  968.710528][T31230] netlink: 88 bytes leftover after parsing attributes in process `syz.0.17616'.
[  968.714154][T31230] netlink: 1 bytes leftover after parsing attributes in process `syz.0.17616'.
[  968.717046][T31230] netlink: 'syz.0.17616': attribute type 1 has an invalid length.
[  968.872071][T31249] bond28: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  968.889677][T31249] bond28 (unregistering): Released all slaves
[  968.936286][T31262] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  968.938846][T31262] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  969.104641][T31284] netlink: 'syz.0.17633': attribute type 27 has an invalid length.
[  969.181748][T31288] netlink: 'syz.2.17632': attribute type 11 has an invalid length.
[  969.219802][T31284] : left allmulticast mode
[  969.240332][T31284] macsec0: left allmulticast mode
[  969.243726][T31284] vlan4: left promiscuous mode
[  969.246085][T31284] bridge22: left promiscuous mode
[  969.248144][T31284] bridge22: left allmulticast mode
[  969.250654][T31284] geneve5: left promiscuous mode
[  969.253246][T31284] veth55: left promiscuous mode
[  969.255598][T31284] ip6gre4: left promiscuous mode
[  969.257688][T31284] ip6gre4: left allmulticast mode
[  969.259642][T31284] geneve6: left promiscuous mode
[  969.261778][T31284] geneve6: left allmulticast mode
[  969.264024][T31284] vlan0: left promiscuous mode
[  969.266022][T31284] hsr_slave_1: left promiscuous mode
[  969.268259][T31284] vlan0: left allmulticast mode
[  969.270056][T31284] hsr_slave_1: left allmulticast mode
[  969.272576][T31284] xfrm1: left allmulticast mode
[  969.274605][T31284] sit5: left promiscuous mode
[  969.276912][T31284] geneve7: left promiscuous mode
[  969.291708][T31284] bond24: left allmulticast mode
[  969.293634][T31284] geneve8: left allmulticast mode
[  969.319704][T31284] veth61: left promiscuous mode
[  969.333977][   T10]  speed is unknown, defaulting to 1000
[  969.336509][   T10] syz0: Port: 1 Link DOWN
[  969.338016][   T10]  speed is unknown, defaulting to 1000
[  969.352765][T31284] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  969.372003][T31287] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  969.377583][T22539] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  969.381132][T22539] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  969.387435][ T9304]  speed is unknown, defaulting to 1000
[  969.389869][ T9304] syz0: Port: 1 Link ACTIVE
[  969.396332][T22539] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  969.399795][T22539] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  969.403686][T22539] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  969.407302][T22539] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  969.423401][T22539] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  969.431055][T22539] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  969.959356][T31326] netlink: 'syz.0.17643': attribute type 21 has an invalid length.
[  969.962407][T31326] netlink: 'syz.0.17643': attribute type 5 has an invalid length.
[  970.439495][T31365] netlink: 'syz.2.17655': attribute type 1 has an invalid length.
[  970.468641][T31365] 8021q: adding VLAN 0 to HW filter on device bond29
[  970.473186][T31365] bond28: (slave bond29): making interface the new active one
[  970.476091][T31365] bond28: (slave bond29): Enslaving as an active interface with an up link
[  970.485334][T31365] bond28: (slave gretap6): Enslaving as a backup interface with an up link
[  970.489683][T31365] 8021q: adding VLAN 0 to HW filter on device bond28
[  971.377994][T31424] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  971.693252][T31462] sctp: [Deprecated]: syz.0.17686 (pid 31462) Use of int in max_burst socket option.
[  971.693252][T31462] Use struct sctp_assoc_value instead
[  972.029513][T31479] nbd: couldn't find a device at index 0
[  972.171890][T31489] netlink: 'syz.0.17694': attribute type 2 has an invalid length.
[  972.174572][T31489] netlink: 'syz.0.17694': attribute type 1 has an invalid length.
[  972.273044][T31495] IPVS: set_ctl: invalid protocol: 46 172.30.1.1:20003
[  972.489315][T31510] netlink: 'syz.2.17701': attribute type 1 has an invalid length.
[  972.808002][T31532] __nla_validate_parse: 24 callbacks suppressed
[  972.808017][T31532] netlink: 388 bytes leftover after parsing attributes in process `syz.1.17707'.
[  972.909295][T31543] netlink: 'syz.2.17709': attribute type 1 has an invalid length.
[  972.912643][T31543] netlink: 96 bytes leftover after parsing attributes in process `syz.2.17709'.
[  972.916187][T31543] netlink: 'syz.2.17709': attribute type 1 has an invalid length.
[  972.919486][T31543] netlink: 'syz.2.17709': attribute type 8 has an invalid length.
[  972.923382][T31543] netlink: 606 bytes leftover after parsing attributes in process `syz.2.17709'.
[  973.151449][   T33] audit: type=1107 audit(1772938084.032:86): pid=31564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  973.533423][T31599] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.17731'.
[  973.773334][T31605] bond30 (unregistering): Released all slaves
[  974.513731][T31624] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17739'.
[  974.517752][T31624] netlink: 44 bytes leftover after parsing attributes in process `syz.2.17739'.
[  974.523073][T31624] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17739'.
[  974.526502][T31623] delete_channel: no stack
[  974.734472][T31635] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17743'.
[  974.737541][T31635] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17743'.
[  974.740670][T31635] tipc: Invalid UDP bearer configuration
[  974.740701][T31635] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[  974.844504][T31639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17744'.
[  975.236313][T31663] x_tables: duplicate underflow at hook 1
[  975.755008][T31720] gretap5: entered promiscuous mode
[  976.253488][T31750] netlink: 'syz.1.17777': attribute type 10 has an invalid length.
[  976.286964][T31754] 8021q: VLANs not supported on syzkaller1
[  978.137658][T31913] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  978.141399][T31913] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  978.277444][T31935] __nla_validate_parse: 12 callbacks suppressed
[  978.277456][T31935] netlink: 48 bytes leftover after parsing attributes in process `syz.0.17825'.
[  978.288092][T31939] netlink: 60 bytes leftover after parsing attributes in process `syz.2.17832'.
[  978.435720][T31958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17836'.
[  978.464093][T31953] gretap8: entered promiscuous mode
[  978.967012][T31971] netlink: 32 bytes leftover after parsing attributes in process `syz.0.17839'.
[  979.027427][T31972] netlink: 'syz.0.17839': attribute type 2 has an invalid length.
[  979.030541][T31972] netlink: 'syz.0.17839': attribute type 2 has an invalid length.
[  979.030613][T31973] netlink: 'syz.0.17839': attribute type 2 has an invalid length.
[  979.625056][T31982] xt_hashlimit: invalid rate
[  979.634765][T31982] xt_hashlimit: invalid rate
[  979.716478][T31989] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:20004
[  979.733085][T31989] IPVS: set_ctl: invalid protocol: 47 10.1.1.1:20001
[  980.031072][T32008] netlink: 'syz.0.17853': attribute type 9 has an invalid length.
[  980.347052][T32023] netlink: 'syz.0.17858': attribute type 4 has an invalid length.
[  980.349608][T32023] netlink: 17 bytes leftover after parsing attributes in process `syz.0.17858'.
[  980.500281][T29962] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  980.504878][T29962] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  980.508605][T29962] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  980.512646][T29962] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  980.551775][T32042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17865'.
[  980.575434][T32045] netlink: 104 bytes leftover after parsing attributes in process `syz.0.17866'.
[  980.647078][T32048] IPVS: Unknown mcast interface: netdevsim0
[  980.658514][T32047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17867'.
[  980.664061][T32047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17867'.
[  980.713778][T32051] openvswitch: netlink: Actions may not be safe on all matching packets
[  980.786453][T32056] can: request_module (can-proto-0) failed.
[  980.848049][T32061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17856'.
[  980.897909][T32064] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  980.907183][T32064] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  980.910448][T32064] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 56525 - 0
[  980.944884][T32064] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  980.948465][T32064] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  980.952147][T32064] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 56525 - 0
[  980.996112][T32064] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  980.999430][T32064] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  981.003274][T32064] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 56525 - 0
[  981.077132][T32064] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  981.085166][T32064] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  981.090521][T32064] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 56525 - 0
[  981.172737][ T1391] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  981.177244][ T1391] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  981.179971][ T1391] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 56525 - 0
[  981.204431][ T1391] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  981.208209][ T1391] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  981.211505][ T1391] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 56525 - 0
[  981.229459][T32069]  speed is unknown, defaulting to 1000
[  981.230122][ T1391] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  981.237300][ T1391] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  981.240833][ T1391] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 56525 - 0
[  981.251334][ T1391] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  981.255195][ T1391] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  981.258847][ T1391] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 56525 - 0
[  981.316000][T32069] lo speed is unknown, defaulting to 1000
[  981.424338][T32075] netlink: 'syz.2.17876': attribute type 13 has an invalid length.
[  981.443639][T32075] netlink: 'syz.2.17876': attribute type 17 has an invalid length.
[  981.468411][T32075] erspan0: refused to change device tx_queue_len
[  981.470716][T32075] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  981.747697][T32103] tap0: tun_chr_ioctl cmd 2147767521
[  981.920568][T32122] vlan3: entered promiscuous mode
[  981.933992][T32122] bridge0: entered promiscuous mode
[  982.107804][T32127] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  982.110841][T32127] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  982.119933][T32127] bond23: left promiscuous mode
[  982.138433][T32127] macsec3: left promiscuous mode
[  982.167605][T32127] bond24: left promiscuous mode
[  982.197292][T32127] bond27: left promiscuous mode
[  982.242015][T32127] gretap8: left promiscuous mode
[  982.249003][ T1391] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  982.252155][ T1391] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  982.261465][T32146] 8021q: VLANs not supported on syzkaller1
[  982.263370][ T1391] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  982.265941][ T1391] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  982.684146][T32199] netlink: 'syz.0.17913': attribute type 83 has an invalid length.
[  982.781279][T32205] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  982.791253][T32205] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  983.324642][T32238] dvmrp0: entered allmulticast mode
[  983.592745][T32250] __nla_validate_parse: 6 callbacks suppressed
[  983.592756][T32250] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.17929'.
[  983.600174][T32250] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17929'.
[  983.979693][T32283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17941'.
[  983.984824][T32285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17941'.
[  983.997882][T32282] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17941'.
[  984.041828][T32291] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20002
[  984.137134][T32301] Cannot find del_set index 4 as target
[  984.189696][T32309] IPv6: sit9: Disabled Multicast RS
[  984.395405][T32322] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  984.399767][T32322] syzkaller1: entered promiscuous mode
[  984.404659][T32322] syzkaller1: entered allmulticast mode
[  984.520102][T32328] x_tables: duplicate underflow at hook 3
[  984.522795][T32328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17958'.
[  984.526727][T32328] openvswitch: netlink: Flow actions attr not present in new flow.
[  984.635109][T32339] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.17961'.
[  984.745940][T32342] syzkaller1: left promiscuous mode
[  984.748278][T32342] syzkaller1: left allmulticast mode
[  985.008456][T32344] netlink: 256 bytes leftover after parsing attributes in process `syz.0.17963'.
[  985.013178][T32344] netlink: 108 bytes leftover after parsing attributes in process `syz.0.17963'.
[  985.017520][T32344] netlink: 56 bytes leftover after parsing attributes in process `syz.0.17963'.
[  985.024680][T32344] netlink: 'syz.0.17963': attribute type 1 has an invalid length.
[  986.180132][T32405] gretap7: entered promiscuous mode
[  987.054435][T32432] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  987.056847][T32432] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  987.284856][T32455] netlink: 'syz.1.17998': attribute type 10 has an invalid length.
[  987.492166][T32472] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  987.576364][T32482] netlink: 'syz.2.18008': attribute type 1 has an invalid length.
[  987.636350][T32489] netlink: 'syz.1.18010': attribute type 11 has an invalid length.
[  987.815488][T32500] IPVS: set_ctl: invalid protocol: 47 100.1.1.1:20001
[  988.588024][T32506] syz.2.18017 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  988.592092][T32506] CPU: 1 UID: 0 PID: 32506 Comm: syz.2.18017 Not tainted syzkaller #0 PREEMPT(full) 
[  988.592104][T32506] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  988.592108][T32506] Call Trace:
[  988.592112][T32506]  <TASK>
[  988.592116][T32506]  dump_stack_lvl+0xe8/0x150
[  988.592130][T32506]  dump_header+0xd3/0x4c0
[  988.592140][T32506]  oom_kill_process+0x3ab/0x970
[  988.592150][T32506]  out_of_memory+0x106c/0x1410
[  988.592157][T32506]  ? percpu_ref_put+0x19/0x180
[  988.592167][T32506]  ? __pfx___mutex_lock+0x10/0x10
[  988.592178][T32506]  ? __pfx_out_of_memory+0x10/0x10
[  988.592184][T32506]  ? do_raw_spin_unlock+0x4d/0x210
[  988.592196][T32506]  try_charge_memcg+0xc53/0x1560
[  988.592205][T32506]  ? __lock_acquire+0x6b5/0x2cf0
[  988.592218][T32506]  ? __pfx_try_charge_memcg+0x10/0x10
[  988.592225][T32506]  ? xa_load+0x60/0x210
[  988.592236][T32506]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  988.592246][T32506]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  988.592255][T32506]  mem_cgroup_swapin_charge_folio+0x2e3/0x4d0
[  988.592264][T32506]  __swap_cache_prepare_and_add+0x52a/0x700
[  988.592287][T32506]  swap_cache_alloc_folio+0xf1/0x240
[  988.592298][T32506]  swap_cluster_readahead+0x53a/0x690
[  988.592310][T32506]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  988.592325][T32506]  ? get_vma_policy+0x27b/0x3c0
[  988.592335][T32506]  swapin_readahead+0x196/0xc50
[  988.592349][T32506]  ? __pfx_swapin_readahead+0x10/0x10
[  988.592359][T32506]  ? swap_table_get+0x1e/0x260
[  988.592368][T32506]  ? swap_table_get+0x1e/0x260
[  988.592376][T32506]  ? swap_table_get+0x1e/0x260
[  988.592385][T32506]  ? swap_table_get+0x216/0x260
[  988.592395][T32506]  ? swap_cache_get_folio+0x513/0x520
[  988.592407][T32506]  do_swap_page+0x54f/0x58d0
[  988.592416][T32506]  ? __lock_acquire+0x6b5/0x2cf0
[  988.592431][T32506]  ? do_swap_page+0x12c/0x58d0
[  988.592440][T32506]  ? __pfx_do_swap_page+0x10/0x10
[  988.592448][T32506]  ? __pte_offset_map+0x1ae/0x240
[  988.592459][T32506]  ? pte_offset_map_rw_nolock+0xea/0x160
[  988.592470][T32506]  handle_mm_fault+0x12d2/0x3310
[  988.592485][T32506]  ? handle_mm_fault+0xee/0x3310
[  988.592497][T32506]  ? __pfx_handle_mm_fault+0x10/0x10
[  988.592506][T32506]  ? lock_vma_under_rcu+0x45a/0x500
[  988.592523][T32506]  do_user_addr_fault+0xa73/0x1340
[  988.592535][T32506]  ? rcu_is_watching+0x15/0xb0
[  988.592546][T32506]  ? trace_page_fault_user+0x84/0x210
[  988.592555][T32506]  exc_page_fault+0x6a/0xc0
[  988.592566][T32506]  asm_exc_page_fault+0x26/0x30
[  988.592574][T32506] RIP: 0033:0x7fd9d8d578f8
[  988.592582][T32506] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00
[  988.592588][T32506] RSP: 002b:00007ffc798414f0 EFLAGS: 00010246
[  988.592596][T32506] RAX: 0000000000000000 RBX: 000055557dfe1500 RCX: 00007fd9d8d5cfce
[  988.592602][T32506] RDX: 00007ffc79841540 RSI: 0000000000000000 RDI: 0000000000000000
[  988.592606][T32506] RBP: 00007fd9d9017da0 R08: 0000000000000000 R09: 0000000000000000
[  988.592610][T32506] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000f1591
[  988.592614][T32506] R13: 00007fd9d901609c R14: 00000000000f160a R15: 00007fd9d9016090
[  988.592627][T32506]  </TASK>
[  988.592630][T32506] memory: usage 307200kB, limit 307200kB, failcnt 3171
[  988.695988][T32506] memory+swap: usage 310464kB, limit 9007199254740988kB, failcnt 0
[  988.707358][T32506] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0
[  988.709673][T32506] Memory cgroup stats for /syz2:
[  988.709727][T32506] cache 0
[  988.712901][T32506] rss 0
[  988.713821][T32506] rss_huge 0
[  988.714878][T32506] shmem 0
[  988.715860][T32506] mapped_file 0
[  988.717001][T32506] dirty 0
[  988.717967][T32506] writeback 0
[  988.719056][T32506] workingset_refault_anon 21
[  988.720551][T32506] workingset_refault_file 38
[  988.724379][T32506] swap 3342336
[  988.726485][T32506] swapcached 3477504
[  988.727936][T32506] pgpgin 760295
[  988.729261][T32506] pgpgout 760294
[  988.730464][T32506] pgfault 1311594
[  988.732151][T32506] pgmajfault 42
[  988.733407][T32506] inactive_anon 4096
[  988.734777][T32506] active_anon 0
[  988.735987][T32506] inactive_file 0
[  988.737297][T32506] active_file 0
[  988.738485][T32506] unevictable 0
[  988.739679][T32506] hierarchical_memory_limit 314572800
[  988.741889][T32506] hierarchical_memsw_limit 9223372036854771712
[  988.742083][T32555] netlink: 'syz.0.18029': attribute type 19 has an invalid length.
[  988.743831][T32506] total_cache 0
[  988.743839][T32506] total_rss 0
[  988.743842][T32506] total_rss_huge 0
[  988.743845][T32506] total_shmem 0
[  988.743848][T32506] total_mapped_file 0
[  988.743852][T32506] total_dirty 0
[  988.743855][T32506] total_writeback 0
[  988.743858][T32506] total_workingset_refault_anon 21
[  988.743861][T32506] total_workingset_refault_file 38
[  988.743865][T32506] total_swap 3342336
[  988.743868][T32506] total_swapcached 3477504
[  988.743871][T32506] total_pgpgin 760295
[  988.743874][T32506] total_pgpgout 760294
[  988.743878][T32506] total_pgfault 1311595
[  988.743881][T32506] total_pgmajfault 42
[  988.743884][T32506] total_inactive_anon 4096
[  988.743887][T32506] total_active_anon 0
[  988.743890][T32506] total_inactive_file 0
[  988.746403][T32555] __nla_validate_parse: 18 callbacks suppressed
[  988.746410][T32555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18029'.
[  988.747490][T32506] total_active_file 0
[  988.747496][T32506] total_unevictable 0
[  988.747500][T32506] anon_cost 0
[  988.747503][T32506] file_cost 0
[  988.747507][T32506] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=
[  988.748837][T32555] netlink: 'syz.0.18029': attribute type 19 has an invalid length.
[  988.750120][T32506] /
[  988.751930][T32555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18029'.
[  988.758864][T32506] ,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.18017,pid=32506,uid=0
[  988.808215][T32506] Memory cgroup out of memory: Killed process 32506 (syz.2.18017) total-vm:115196kB, anon-rss:1228kB, file-rss:35488kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:1000
[  988.892943][T32562] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  988.952630][T32566] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  988.959386][T32565] tap0: tun_chr_ioctl cmd 1074025692
[  988.971658][T32565] "syz.1.18033" (32565) uses obsolete ecb(arc4) skcipher
[  989.108250][T32582] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18039'.
[  989.553523][T32649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18057'.
[  989.838520][T32674] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  989.982878][T32688] syzkaller1: entered promiscuous mode
[  989.984703][T32688] syzkaller1: entered allmulticast mode
[  990.009177][T32688] bond26: Removing last ns target with arp_interval on
[  990.081694][T32699] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  990.188523][T32709]  speed is unknown, defaulting to 1000
[  990.222770][T32712] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  990.226457][T32712] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  990.369234][T32709] lo speed is unknown, defaulting to 1000
[  990.584785][T32747] netlink: 'syz.0.18083': attribute type 30 has an invalid length.
[  990.588437][T32747] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18083'.
[  990.602540][   T33] audit: type=1800 audit(1772938101.482:87): pid=32744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.18080" name="blkio.bfq.time_recursive" dev="tmpfs" ino=30140 res=0 errno=0
[  990.705549][T32747] workqueue: Failed to create a rescuer kthread for wq "bond27": -EINTR
[  990.856460][T32767] netlink: 536 bytes leftover after parsing attributes in process `syz.1.18088'.
[  990.871825][  T301] delete_channel: no stack
[  990.929183][  T307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18090'.
[  990.957738][  T307] bond27: option broadcast_neighbor: invalid value (30)
[  990.964297][  T307] bond27 (unregistering): Released all slaves
[  990.991944][  T310] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18090'.
[  991.813865][  T330] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18096'.
[  991.902583][  T336] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  991.907505][  T337] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  992.088747][  T358] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18102'.
[  992.200525][  T363] veth1_virt_wifi: Caught tx_queue_len zero misconfig
[  992.203608][  T363] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  993.008207][  T399] netlink: 'syz.2.18117': attribute type 1 has an invalid length.
[  993.011920][  T399] netlink: 'syz.2.18117': attribute type 3 has an invalid length.
[  993.163095][  T414] netlink: 'syz.1.18123': attribute type 3 has an invalid length.
[  993.305468][  T435] netlink: 'syz.2.18129': attribute type 1 has an invalid length.
[  993.308430][  T435] netlink: 'syz.2.18129': attribute type 1 has an invalid length.
[  993.311129][  T435] netlink: 'syz.2.18129': attribute type 8 has an invalid length.
[  993.415895][  T450] netlink: 'syz.2.18132': attribute type 9 has an invalid length.
[  993.420885][  T447] netlink: 'syz.2.18132': attribute type 9 has an invalid length.
[  993.449979][  T448] netlink: 'syz.0.18133': attribute type 1 has an invalid length.
[  993.467245][  T448] 8021q: adding VLAN 0 to HW filter on device bond27
[  993.759368][  T486] ip6t_srh: unknown srh invflags BA61
[  994.786900][  T509] __nla_validate_parse: 20 callbacks suppressed
[  994.786910][  T509] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.18153'.
[  994.855191][  T522] sit0: left promiscuous mode
[  994.858674][  T522] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  994.889941][  T522] geneve2: left promiscuous mode
[  994.899818][  T522] geneve3: left promiscuous mode
[  994.905560][  T522] vlan2: left promiscuous mode
[  994.907531][  T522] geneve1: left promiscuous mode
[  994.910545][  T522] vlan4: left promiscuous mode
[  994.913444][  T522] veth33: left promiscuous mode
[  994.916892][  T522] vlan3: left promiscuous mode
[  994.918584][  T522] bridge0: left promiscuous mode
[  994.920821][  T522] gretap7: left promiscuous mode
[  994.953767][  T522] M: entered promiscuous mode
[  995.113260][  T548] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18163'.
[  995.156624][  T556] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18166'.
[  995.172676][  T548] 5gQ[: entered allmulticast mode
[  995.176290][  T548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18163'.
[  995.180480][  T548] 5gQ[: left allmulticast mode
[  995.238120][  T564] delete_channel: no stack
[  995.270851][  T561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  995.326798][  T572] netlink: 136 bytes leftover after parsing attributes in process `syz.0.18171'.
[  995.363989][  T583] syzkaller1: left promiscuous mode
[  995.365865][  T583] syzkaller1: left allmulticast mode
[  995.406527][  T587] openvswitch: netlink: IP tunnel dst address not specified
[  995.625819][  T609] openvswitch: netlink: Actions may not be safe on all matching packets
[  995.757674][  T619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18186'.
[  995.806303][  T628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18189'.
[  995.809825][  T628] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  996.000687][  T641] validate_nla: 2 callbacks suppressed
[  996.000699][  T641] netlink: 'syz.0.18193': attribute type 1 has an invalid length.
[  996.020493][  T641] netlink: 216 bytes leftover after parsing attributes in process `syz.0.18193'.
[  996.036949][  T641] netlink: 'syz.0.18193': attribute type 1 has an invalid length.
[  996.045780][  T641] netlink: 216 bytes leftover after parsing attributes in process `syz.0.18193'.
[  996.148549][  T653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18197'.
[  996.479166][  T666] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig
[  996.574721][  T670] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  996.639427][  T676] 8021q: adding VLAN 0 to HW filter on device bond28
[  996.947147][  T712] sit0: entered promiscuous mode
[  996.966534][  T712] netlink: 'syz.0.18215': attribute type 1 has an invalid length.
[  997.045815][  T722]  speed is unknown, defaulting to 1000
[  997.085818][  T734] netlink: 'syz.2.18221': attribute type 1 has an invalid length.
[  997.165320][  T722] lo speed is unknown, defaulting to 1000
[  997.216526][  T749] 8021q: VLANs not supported on syzkaller1
[  997.249407][  T751]  speed is unknown, defaulting to 1000
[  997.370463][  T751] lo speed is unknown, defaulting to 1000
[  997.782916][  T794] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  997.932550][  T815] x_tables: ip6_tables: udplite match: only valid for protocol 136
[  998.036786][  T823] xt_CT: You must specify a L4 protocol and not use inversions on it
[  998.081349][  T835] Cannot find del_set index 4 as target
[  998.089174][  T837] syzkaller1: entered promiscuous mode
[  998.270408][  T856] netlink: 'syz.2.18254': attribute type 13 has an invalid length.
[  998.482103][  T870] netlink: 'syz.2.18256': attribute type 4 has an invalid length.
[  998.496524][  T862] netlink: 'syz.2.18256': attribute type 4 has an invalid length.
[  998.510663][  T862] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  999.070267][  T914]  speed is unknown, defaulting to 1000
[  999.207038][  T914] lo speed is unknown, defaulting to 1000
[  999.808700][  T957] netlink: 'syz.2.18282': attribute type 1 has an invalid length.
[  999.838843][  T957] gretap8: entered allmulticast mode
[  999.844344][  T957] bond30: (slave gretap8): making interface the new active one
[  999.847913][  T957] bond30: (slave gretap8): Enslaving as an active interface with an up link
[  999.923483][  T963] __nla_validate_parse: 21 callbacks suppressed
[  999.923504][  T963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18283'.
[ 1000.227802][  T989] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1000.255550][  T985] netlink: 44 bytes leftover after parsing attributes in process `syz.1.18291'.
[ 1000.333484][ T1003] bpf: Bad value for 'gid'
[ 1000.352070][ T1006] netlink: 14 bytes leftover after parsing attributes in process `syz.2.18297'.
[ 1000.374576][ T1011] netlink: 'syz.1.18299': attribute type 29 has an invalid length.
[ 1000.377545][ T1013] netlink: 596 bytes leftover after parsing attributes in process `syz.1.18299'.
[ 1000.380827][ T1012] netlink: 'syz.1.18299': attribute type 29 has an invalid length.
[ 1000.388099][ T1011] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18299'.
[ 1000.392539][ T1011] netlink: 36 bytes leftover after parsing attributes in process `syz.1.18299'.
[ 1000.806792][ T1051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18308'.
[ 1000.818278][ T1051] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[ 1001.365878][ T1075] validate_nla: 1 callbacks suppressed
[ 1001.365895][ T1075] netlink: 'syz.0.18314': attribute type 10 has an invalid length.
[ 1001.375915][ T1075] netlink: 228 bytes leftover after parsing attributes in process `syz.0.18314'.
[ 1001.465312][ T1079] IPVS: set_ctl: invalid protocol: 47 10.1.1.1:20001
[ 1001.584229][ T1036] syz.1.18304 (1036) used greatest stack depth: 18776 bytes left
[ 1001.719494][ T1115] 8021q: VLANs not supported on wg1
[ 1002.026288][ T1159] netlink: 'syz.0.18336': attribute type 4 has an invalid length.
[ 1002.141284][ T1176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18336'.
[ 1002.866752][ T1178] nbd: must specify at least one socket
[ 1003.022919][ T1192] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18346'.
[ 1003.064154][ T1194] 8021q: VLANs not supported on syzkaller1
[ 1003.151332][ T1197] netlink: 'syz.2.18346': attribute type 2 has an invalid length.
[ 1003.918414][ T1237]  speed is unknown, defaulting to 1000
[ 1003.962694][ T1240] IPVS: sed: FWM 3 0x00000003 - no destination available
[ 1004.003734][ T1237] lo speed is unknown, defaulting to 1000
[ 1004.502117][ T1257] netlink: 'syz.1.18365': attribute type 1 has an invalid length.
[ 1004.602467][ T1268] netlink: 'syz.1.18369': attribute type 4 has an invalid length.
[ 1004.756289][ T1279]  speed is unknown, defaulting to 1000
[ 1004.989017][ T1279] lo speed is unknown, defaulting to 1000
[ 1005.067562][ T1299] netlink: 'syz.1.18374': attribute type 1 has an invalid length.
[ 1005.070051][ T1299] __nla_validate_parse: 5 callbacks suppressed
[ 1005.070060][ T1299] netlink: 52 bytes leftover after parsing attributes in process `syz.1.18374'.
[ 1005.387656][ T1326] netlink: 'syz.2.18380': attribute type 4 has an invalid length.
[ 1005.390343][ T1326] netlink: 17 bytes leftover after parsing attributes in process `syz.2.18380'.
[ 1005.582004][ T1336] netlink: 32 bytes leftover after parsing attributes in process `syz.2.18384'.
[ 1005.685436][ T1342] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18386'.
[ 1005.746859][ T1336] syzkaller1: left promiscuous mode
[ 1005.803833][ T1353] 8021q: adding VLAN 0 to HW filter on device .`
[ 1005.808273][ T1353] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1005.821903][T32143] lo speed is unknown, defaulting to 1000
[ 1005.823751][T32143] syz2: Port: 1 Link ACTIVE
[ 1005.951901][ T1372] wg1: entered promiscuous mode
[ 1005.955288][ T1372] wg1: entered allmulticast mode
[ 1005.963572][ T1375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18396'.
[ 1005.967257][ T1375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18396'.
[ 1006.044103][ T1384] netlink: 'syz.1.18399': attribute type 21 has an invalid length.
[ 1006.158174][ T1402] netlink: 92 bytes leftover after parsing attributes in process `syz.0.18401'.
[ 1006.266088][ T1407] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18403'.
[ 1006.937094][ T1453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18418'.
[ 1007.022979][ T1456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18419'.
[ 1007.390025][ T1469] netlink: 'syz.1.18423': attribute type 1 has an invalid length.
[ 1008.297440][   T33] audit: type=1800 audit(1772938119.172:88): pid=1560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.18450" name=CB dev="tmpfs" ino=30747 res=0 errno=0
[ 1009.235374][ T1628] openvswitch: netlink: IP tunnel dst address not specified
[ 1009.520012][ T1654]  speed is unknown, defaulting to 1000
[ 1009.688738][ T1654] lo speed is unknown, defaulting to 1000
[ 1009.834527][ T1675] openvswitch: netlink: Unknown nsh attribute 0
[ 1010.099092][ T1710] netlink: 'syz.2.18492': attribute type 1 has an invalid length.
[ 1010.115847][ T1710] bond31: entered promiscuous mode
[ 1010.117855][ T1710] 8021q: adding VLAN 0 to HW filter on device bond31
[ 1010.717866][ T1779] __nla_validate_parse: 18 callbacks suppressed
[ 1010.717876][ T1779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18513'.
[ 1010.742819][ T1784] netlink: 176 bytes leftover after parsing attributes in process `syz.0.18512'.
[ 1010.799358][ T1797] netlink: 100 bytes leftover after parsing attributes in process `syz.2.18517'.
[ 1010.937925][ T1811] 5gQ[: Caught tx_queue_len zero misconfig
[ 1010.940744][ T1811] netlink: 'syz.2.18524': attribute type 2 has an invalid length.
[ 1011.324117][ T1854] netlink: 'syz.2.18535': attribute type 83 has an invalid length.
[ 1011.328283][ T1854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18535'.
[ 1011.335130][ T1854] netlink: 36 bytes leftover after parsing attributes in process `syz.2.18535'.
[ 1011.335131][ T1855] netlink: 36 bytes leftover after parsing attributes in process `syz.2.18535'.
[ 1011.415144][ T1860] netlink: 'syz.2.18537': attribute type 6 has an invalid length.
[ 1011.418285][ T1860] netlink: 232 bytes leftover after parsing attributes in process `syz.2.18537'.
[ 1011.541285][ T1867] netlink: 'syz.2.18539': attribute type 2 has an invalid length.
[ 1011.546028][ T1867] netlink: 36 bytes leftover after parsing attributes in process `syz.2.18539'.
[ 1011.554452][ T1869] netlink: 'syz.0.18540': attribute type 1 has an invalid length.
[ 1011.557118][ T1869] netlink: 'syz.0.18540': attribute type 1 has an invalid length.
[ 1011.577688][ T1869]  speed is unknown, defaulting to 1000
[ 1011.824657][ T1869] lo speed is unknown, defaulting to 1000
[ 1012.142181][ T1883] IPVS: length: 15 != 8
[ 1012.445446][ T1901] tipc: Can't add remote ip to TIPC UDP multicast bearer
[ 1012.463665][ T1903]  speed is unknown, defaulting to 1000
[ 1012.558418][ T1903] lo speed is unknown, defaulting to 1000
[ 1012.674097][ T1918] dvmrp0: entered allmulticast mode
[ 1012.705330][ T1920] netlink: 44 bytes leftover after parsing attributes in process `syz.1.18553'.
[ 1012.723756][ T1920] tap0: tun_chr_ioctl cmd 1074025676
[ 1012.728361][ T1920] tap0: owner set to 0
[ 1012.919263][ T1927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18555'.
[ 1013.630632][ T1937] netlink: 'syz.0.18558': attribute type 2 has an invalid length.
[ 1013.636564][ T1936] netlink: 'syz.0.18558': attribute type 2 has an invalid length.
[ 1013.639316][ T1937] netlink: 'syz.0.18558': attribute type 2 has an invalid length.
[ 1013.728084][ T1940] tipc: Resetting bearer <eth:syzkaller0>
[ 1013.775605][ T1947] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1013.783156][  T631] lo speed is unknown, defaulting to 1000
[ 1013.920098][ T1964] bpf: Bad value for 'gid'
[ 1013.962490][ T1965] netlink: 'syz.2.18568': attribute type 2 has an invalid length.
[ 1013.970241][ T1965] !9: entered promiscuous mode
[ 1014.020834][ T1974] netlink: 'syz.0.18572': attribute type 8 has an invalid length.
[ 1014.329914][ T2016] syzkaller1: entered promiscuous mode
[ 1014.331944][ T2016] syzkaller1: entered allmulticast mode
[ 1014.562220][ T2050] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[ 1014.564787][ T2050] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[ 1014.728206][ T2060]  speed is unknown, defaulting to 1000
[ 1014.808432][ T2060] lo speed is unknown, defaulting to 1000
[ 1014.808464][ T2061]  speed is unknown, defaulting to 1000
[ 1014.953427][ T2061] lo speed is unknown, defaulting to 1000
[ 1015.128667][ T2079] netlink: 'syz.1.18604': attribute type 1 has an invalid length.
[ 1015.732295][ T2129] netlink: 'syz.0.18620': attribute type 21 has an invalid length.
[ 1015.735156][ T2128] netlink: 'syz.0.18620': attribute type 21 has an invalid length.
[ 1015.737780][ T2128] __nla_validate_parse: 11 callbacks suppressed
[ 1015.737787][ T2128] netlink: 168 bytes leftover after parsing attributes in process `syz.0.18620'.
[ 1015.741293][ T2129] netlink: 168 bytes leftover after parsing attributes in process `syz.0.18620'.
[ 1015.882595][ T2148] netlink: 104 bytes leftover after parsing attributes in process `syz.2.18626'.
[ 1015.914365][ T2152] netlink: 'syz.0.18627': attribute type 1 has an invalid length.
[ 1016.185152][ T2179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18637'.
[ 1016.188720][ T2179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18637'.
[ 1016.258483][ T2189] netlink: 7060 bytes leftover after parsing attributes in process `syz.1.18640'.
[ 1016.344995][ T2198] netlink: 'syz.1.18641': attribute type 3 has an invalid length.
[ 1016.350179][ T2198] delete_channel: no stack
[ 1016.488606][ T2204] dvmrp1: entered allmulticast mode
[ 1016.491229][ T2204] dvmrp0: left allmulticast mode
[ 1016.492923][ T2204] dvmrp1: left allmulticast mode
[ 1016.523207][ T2204] x_tables: duplicate underflow at hook 2
[ 1016.576360][ T2214] 8021q: adding VLAN 0 to HW filter on device bond28
[ 1016.591089][ T2213] bond28: (slave veth59): Enslaving as an active interface with a down link
[ 1016.632063][ T2220] openvswitch: netlink: Key type 30 is not supported
[ 1016.727185][ T2226] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[ 1016.913723][ T2241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18655'.
[ 1016.916604][ T2241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18655'.
[ 1016.962730][ T2241]  speed is unknown, defaulting to 1000
[ 1017.064032][ T2259] netlink: 76 bytes leftover after parsing attributes in process `syz.0.18660'.
[ 1017.069104][ T2259] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.18660'.
[ 1017.198468][ T2241] lo speed is unknown, defaulting to 1000
[ 1017.828133][ T2329] batman_adv: batadv0: Adding interface: wlan1
[ 1017.830213][ T2329] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1568.
[ 1017.858781][ T2329] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active
[ 1017.977126][ T2340] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[ 1018.222320][ T2371] ip6erspan2: entered allmulticast mode
[ 1018.569162][ T2413] vlan5: entered allmulticast mode
[ 1018.576036][ T2413] veth0_to_bond: entered allmulticast mode
[ 1018.619533][ T2421] nbd: must specify a size in bytes for the device
[ 1018.619800][ T2424] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1019.081114][ T2478] bond0: option miimon: invalid value (18446744073709551615)
[ 1019.083953][ T2478] bond0: option miimon: allowed values 0 - 2147483647
[ 1019.290565][ T2500]  speed is unknown, defaulting to 1000
[ 1019.401484][ T2500] lo speed is unknown, defaulting to 1000
[ 1019.614209][ T2526] netlink: zone id is out of range
[ 1019.737820][ T2534] vlan1: entered promiscuous mode
[ 1019.752921][ T2534] mac80211_hwsim hwsim61 wlan0: entered promiscuous mode
[ 1019.846598][ T2538]  speed is unknown, defaulting to 1000
[ 1019.868673][ T2547] 8021q: VLANs not supported on syzkaller1
[ 1020.055760][ T2538] lo speed is unknown, defaulting to 1000
[ 1020.438650][ T2603] bond0: Caught tx_queue_len zero misconfig
[ 1020.589766][ T2621] validate_nla: 10 callbacks suppressed
[ 1020.589778][ T2621] netlink: 'syz.2.18765': attribute type 21 has an invalid length.
[ 1020.772210][ T2637] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[ 1020.829618][ T2644] __nla_validate_parse: 41 callbacks suppressed
[ 1020.829635][ T2644] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.18770'.
[ 1020.838446][ T2634] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1020.839153][ T2644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18770'.
[ 1020.853222][ T2634] netlink: 'syz.1.18768': attribute type 4 has an invalid length.
[ 1020.858277][T10881] lo speed is unknown, defaulting to 1000
[ 1020.860053][T10881] syz2: Port: 1 Link DOWN
[ 1020.955638][ T2646] netlink: 'syz.2.18771': attribute type 4 has an invalid length.
[ 1020.968342][ T2659] netlink: 100 bytes leftover after parsing attributes in process `syz.0.18772'.
[ 1021.067135][ T2664] netlink: 72 bytes leftover after parsing attributes in process `syz.0.18773'.
[ 1021.194890][ T2668] netlink: 'syz.0.18775': attribute type 178 has an invalid length.
[ 1021.343163][ T2691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18779'.
[ 1021.458533][ T2700] vlan1: entered allmulticast mode
[ 1021.611644][ T2719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18787'.
[ 1021.810247][ T2742] netlink: 'syz.2.18791': attribute type 2 has an invalid length.
[ 1021.873892][ T2742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18791'.
[ 1021.880601][ T2742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18791'.
[ 1021.916314][ T2742]  speed is unknown, defaulting to 1000
[ 1021.934759][ T2755] netlink: 36 bytes leftover after parsing attributes in process `syz.0.18793'.
[ 1022.039020][ T2759] netlink: 'syz.0.18794': attribute type 7 has an invalid length.
[ 1022.051079][ T2759] netlink: 'syz.0.18794': attribute type 8 has an invalid length.
[ 1022.107288][ T2742] lo speed is unknown, defaulting to 1000
[ 1022.369872][ T2767] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[ 1022.374880][ T2767] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1022.694569][ T2798] netlink: 36 bytes leftover after parsing attributes in process `syz.2.18804'.
[ 1022.840435][ T2820]  speed is unknown, defaulting to 1000
[ 1022.975195][ T2820] lo speed is unknown, defaulting to 1000
[ 1023.292339][ T2860] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[ 1023.347006][ T2874] tunl0: Caught tx_queue_len zero misconfig
[ 1023.470488][ T2882] netlink: 'syz.0.18821': attribute type 1 has an invalid length.
[ 1025.018587][ T2926] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1025.028654][  T631] lo speed is unknown, defaulting to 1000
[ 1025.030848][  T631] syz2: Port: 1 Link ACTIVE
[ 1025.101478][ T2940] vlan1: entered promiscuous mode
[ 1025.105189][ T2940] geneve1: entered promiscuous mode
[ 1025.110143][ T2940] vlan1: entered allmulticast mode
[ 1025.112507][ T2940] geneve1: entered allmulticast mode
[ 1025.202358][ T2956] team_slave_1: Caught tx_queue_len zero misconfig
[ 1025.207467][ T2955] delete_channel: no stack
[ 1025.296321][ T2962] SET target dimension over the limit!
[ 1025.349441][ T2976] atomic_op ffff88803f160998 conn xmit_atomic 0000000000000000
[ 1025.440399][ T2980] netlink: 'syz.1.18845': attribute type 1 has an invalid length.
[ 1025.443125][ T2980] netlink: 'syz.1.18845': attribute type 2 has an invalid length.
[ 1025.646014][ T2998] netlink: 'syz.1.18849': attribute type 1 has an invalid length.
[ 1025.669392][ T2998] 8021q: adding VLAN 0 to HW filter on device bond29
[ 1025.934939][ T3014] __nla_validate_parse: 70 callbacks suppressed
[ 1025.934949][ T3014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18854'.
[ 1026.065773][ T3021] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18857'.
[ 1026.070010][ T3021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18857'.
[ 1026.073969][ T3021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18857'.
[ 1026.317265][ T3031] netlink: 712 bytes leftover after parsing attributes in process `syz.0.18862'.
[ 1026.321495][ T3031] netlink: 5504 bytes leftover after parsing attributes in process `syz.0.18862'.
[ 1026.321762][ T3032] netlink: 68 bytes leftover after parsing attributes in process `syz.0.18862'.
[ 1026.325104][ T3031] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18862'.
[ 1026.917146][ T3097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18884'.
[ 1026.920842][ T3097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18884'.
[ 1026.952959][ T3103] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[ 1026.964590][ T3103] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1027.197862][ T3132] sit0: left promiscuous mode
[ 1027.209051][ T3132] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1027.298778][ T3144] netlink: 'syz.0.18902': attribute type 5 has an invalid length.
[ 1027.445513][ T3155] nbd: illegal input index 16777216
[ 1027.447477][ T3155] nbd: couldn't find device at index 0
[ 1027.513084][ T3159] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1027.520711][ T3057] block nbd64: NBD_DISCONNECT
[ 1027.598622][ T3165] netlink: 'syz.1.18909': attribute type 7 has an invalid length.
[ 1027.605973][ T3165] netlink: 'syz.1.18909': attribute type 1 has an invalid length.
[ 1027.627535][ T3165] 8021q: adding VLAN 0 to HW filter on device bond30
[ 1028.133400][ T3222] 8021q: VLANs not supported on syzkaller1
[ 1028.135674][ T3222] syzkaller1: left promiscuous mode
[ 1028.137580][ T3222] syzkaller1: left allmulticast mode
[ 1028.181091][ T3239] netlink: 'syz.1.18933': attribute type 39 has an invalid length.
[ 1028.426071][ T3264] syzkaller1: entered promiscuous mode
[ 1028.427821][ T3264] syzkaller1: entered allmulticast mode
[ 1028.695292][   T33] audit: type=1107 audit(1772938139.572:89): pid=3291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ߞS>^x!];/]bT(7~ή김0'
[ 1028.831273][ T3321] syzkaller1: entered promiscuous mode
[ 1028.833088][ T3321] syzkaller1: entered allmulticast mode
[ 1028.958569][ T3338] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 1029.380393][ T3369] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1029.745397][ T3396] m1Ie5: entered promiscuous mode
[ 1029.849689][ T3391] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1029.858705][ T3410] openvswitch: netlink: Message has 4 unknown bytes.
[ 1029.864021][ T3391] netlink: 'syz.1.18978': attribute type 4 has an invalid length.
[ 1029.870024][ T5870] lo speed is unknown, defaulting to 1000
[ 1029.872715][ T5870] syz2: Port: 1 Link DOWN
[ 1029.874524][ T3410] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1029.925374][ T3416] netlink: 'syz.0.18984': attribute type 12 has an invalid length.
[ 1029.928409][ T3416] netlink: 'syz.0.18984': attribute type 12 has an invalid length.
[ 1030.161124][ T3435] can: request_module (can-proto-4) failed.
[ 1030.207921][ T3444] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0
[ 1030.713309][ T3500] x_tables: duplicate underflow at hook 2
[ 1031.328937][ T3533]  speed is unknown, defaulting to 1000
[ 1031.346270][ T3536] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[ 1031.363566][ T3536] veth1_to_bond: entered allmulticast mode
[ 1031.366900][ T3535] veth1_to_bond: left allmulticast mode
[ 1031.397439][ T3543] __nla_validate_parse: 21 callbacks suppressed
[ 1031.397448][ T3543] netlink: 52 bytes leftover after parsing attributes in process `syz.2.19012'.
[ 1031.403098][ T3544] netlink: 52 bytes leftover after parsing attributes in process `syz.2.19012'.
[ 1031.418381][ T3545] netlink: 76 bytes leftover after parsing attributes in process `syz.2.19012'.
[ 1031.422986][ T3544] netlink: 76 bytes leftover after parsing attributes in process `syz.2.19012'.
[ 1031.425916][ T3544] netlink: 52 bytes leftover after parsing attributes in process `syz.2.19012'.
[ 1031.428916][ T3545] netlink: 52 bytes leftover after parsing attributes in process `syz.2.19012'.
[ 1031.435750][ T3543] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1031.438998][ T3543] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1031.444427][ T3543] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 56525 - 0
[ 1031.473328][ T3533] lo speed is unknown, defaulting to 1000
[ 1031.479520][ T3550] netlink: 40 bytes leftover after parsing attributes in process `syz.0.19009'.
[ 1031.486277][ T3543] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1031.493389][ T3550] netlink: 68 bytes leftover after parsing attributes in process `syz.0.19009'.
[ 1031.495569][ T3543] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1031.501915][ T3543] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 56525 - 0
[ 1031.558220][ T3543] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1031.563580][ T3543] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1031.567816][ T3543] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 56525 - 0
[ 1031.617674][ T3543] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1031.621704][ T3543] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1031.624975][ T3543] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 56525 - 0
[ 1031.709969][ T3557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19014'.
[ 1031.738132][ T9414] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1031.744503][ T9414] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1031.750176][ T9414] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 56525 - 0
[ 1031.762462][ T9414] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1031.765356][ T9414] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1031.767928][ T9414] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 56525 - 0
[ 1031.782076][ T9414] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1031.784687][ T9414] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1031.787281][ T9414] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 56525 - 0
[ 1031.805942][ T1391] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1031.808722][ T1391] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1031.811625][ T1391] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 56525 - 0
[ 1031.820691][ T3544] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1031.836884][ T3544] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1031.839958][ T3544] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 56525 - 0
[ 1031.860206][ T1391] ==================================================================
[ 1031.863381][ T1391] BUG: KASAN: slab-use-after-free in __mutex_lock+0x157/0x1300
[ 1031.866458][ T1391] Read of size 8 at addr ffff888170e486b0 by task kworker/u8:6/1391
[ 1031.870628][ T1391] 
[ 1031.871639][ T1391] CPU: 1 UID: 0 PID: 1391 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) 
[ 1031.871655][ T1391] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1031.871663][ T1391] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[ 1031.871683][ T1391] Call Trace:
[ 1031.871689][ T1391]  <TASK>
[ 1031.871696][ T1391]  dump_stack_lvl+0xe8/0x150
[ 1031.871714][ T1391]  print_report+0xba/0x230
[ 1031.871728][ T1391]  ? __mutex_lock+0x157/0x1300
[ 1031.871740][ T1391]  kasan_report+0x117/0x150
[ 1031.871755][ T1391]  ? __mutex_lock+0x157/0x1300
[ 1031.871795][ T1391]  __mutex_lock+0x157/0x1300
[ 1031.871810][ T1391]  ? __mutex_lock+0x5ac/0x1300
[ 1031.871822][ T1391]  ? udp_tunnel_nic_device_sync_work+0x39/0xa10
[ 1031.871837][ T1391]  ? __pfx___mutex_lock+0x10/0x10
[ 1031.871851][ T1391]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1031.871867][ T1391]  udp_tunnel_nic_device_sync_work+0x39/0xa10
[ 1031.871881][ T1391]  ? process_scheduled_works+0xa25/0x1830
[ 1031.871896][ T1391]  ? process_scheduled_works+0xa25/0x1830
[ 1031.871911][ T1391]  process_scheduled_works+0xb02/0x1830
[ 1031.871934][ T1391]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1031.871950][ T1391]  ? assign_work+0x3d5/0x5e0
[ 1031.871966][ T1391]  worker_thread+0xa50/0xfc0
[ 1031.871995][ T1391]  kthread+0x388/0x470
[ 1031.872006][ T1391]  ? __pfx_worker_thread+0x10/0x10
[ 1031.872020][ T1391]  ? __pfx_kthread+0x10/0x10
[ 1031.872032][ T1391]  ret_from_fork+0x51e/0xb90
[ 1031.872047][ T1391]  ? __pfx_ret_from_fork+0x10/0x10
[ 1031.872061][ T1391]  ? __switch_to+0xc7d/0x1450
[ 1031.872075][ T1391]  ? __pfx_kthread+0x10/0x10
[ 1031.872086][ T1391]  ret_from_fork_asm+0x1a/0x30
[ 1031.872106][ T1391]  </TASK>
[ 1031.872110][ T1391] 
[ 1031.939393][ T1391] Allocated by task 3543:
[ 1031.941210][ T1391]  kasan_save_track+0x3e/0x80
[ 1031.943197][ T1391]  __kasan_kmalloc+0x93/0xb0
[ 1031.945098][ T1391]  __kmalloc_noprof+0x35c/0x760
[ 1031.947104][ T1391]  udp_tunnel_nic_netdevice_event+0x4c3/0x17d0
[ 1031.949387][ T1391]  notifier_call_chain+0x1be/0x400
[ 1031.951053][ T1391]  register_netdevice+0x173a/0x1cf0
[ 1031.952866][ T1391]  nsim_create+0xb92/0x1100
[ 1031.954700][ T1391]  __nsim_dev_port_add+0x72a/0xb50
[ 1031.956460][ T1391]  nsim_dev_port_add_all+0x37/0xf0
[ 1031.958095][ T1391]  nsim_dev_reload_up+0x45f/0x7c0
[ 1031.959683][ T1391]  devlink_reload+0x505/0x8d0
[ 1031.961195][ T1391]  devlink_nl_reload_doit+0xaaa/0xc80
[ 1031.962930][ T1391]  genl_family_rcv_msg_doit+0x22a/0x330
[ 1031.964756][ T1391]  genl_rcv_msg+0x61c/0x7a0
[ 1031.966355][ T1391]  netlink_rcv_skb+0x232/0x4b0
[ 1031.967919][ T1391]  genl_rcv+0x28/0x40
[ 1031.969212][ T1391]  netlink_unicast+0x80f/0x9b0
[ 1031.970749][ T1391]  netlink_sendmsg+0x813/0xb40
[ 1031.972297][ T1391]  ____sys_sendmsg+0xa68/0xad0
[ 1031.973833][ T1391]  ___sys_sendmsg+0x2a5/0x360
[ 1031.975276][ T1391]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1031.976847][ T1391]  do_syscall_64+0x14d/0xf80
[ 1031.978323][ T1391]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1031.980185][ T1391] 
[ 1031.980986][ T1391] Freed by task 3544:
[ 1031.982265][ T1391]  kasan_save_track+0x3e/0x80
[ 1031.983758][ T1391]  kasan_save_free_info+0x46/0x50
[ 1031.985393][ T1391]  __kasan_slab_free+0x5c/0x80
[ 1031.986964][ T1391]  kfree+0x1c1/0x630
[ 1031.988228][ T1391]  udp_tunnel_nic_netdevice_event+0x11ed/0x17d0
[ 1031.990219][ T1391]  notifier_call_chain+0x1be/0x400
[ 1031.991849][ T1391]  unregister_netdevice_many_notify+0x186a/0x2370
[ 1031.993884][ T1391]  unregister_netdevice_queue+0x31f/0x360
[ 1031.995695][ T1391]  nsim_destroy+0x1e5/0x680
[ 1031.997182][ T1391]  __nsim_dev_port_del+0x14d/0x1b0
[ 1031.998843][ T1391]  nsim_dev_reload_destroy+0x288/0x490
[ 1032.000687][ T1391]  nsim_dev_reload_down+0x8a/0xc0
[ 1032.002326][ T1391]  devlink_reload+0x1d1/0x8d0
[ 1032.003826][ T1391]  devlink_nl_reload_doit+0xaaa/0xc80
[ 1032.005519][ T1391]  genl_family_rcv_msg_doit+0x22a/0x330
[ 1032.007299][ T1391]  genl_rcv_msg+0x61c/0x7a0
[ 1032.008958][ T1391]  netlink_rcv_skb+0x232/0x4b0
[ 1032.010746][ T1391]  genl_rcv+0x28/0x40
[ 1032.012238][ T1391]  netlink_unicast+0x80f/0x9b0
[ 1032.014023][ T1391]  netlink_sendmsg+0x813/0xb40
[ 1032.015936][ T1391]  ____sys_sendmsg+0xa68/0xad0
[ 1032.017804][ T1391]  ___sys_sendmsg+0x2a5/0x360
[ 1032.019660][ T1391]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1032.021480][ T1391]  do_syscall_64+0x14d/0xf80
[ 1032.022983][ T1391]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1032.024837][ T1391] 
[ 1032.025604][ T1391] Last potentially related work creation:
[ 1032.027408][ T1391]  kasan_save_stack+0x3e/0x60
[ 1032.028925][ T1391]  kasan_record_aux_stack+0xbd/0xd0
[ 1032.030555][ T1391]  insert_work+0x3d/0x330
[ 1032.031863][ T1391]  __queue_work+0xbe1/0x1020
[ 1032.033630][ T1391]  queue_work_on+0x106/0x1d0
[ 1032.035399][ T1391]  __udp_tunnel_nic_add_port+0xb71/0xd60
[ 1032.037190][ T1391]  udp_tunnel_push_rx_port+0x186/0x210
[ 1032.038891][ T1391]  geneve_offload_rx_ports+0xc7/0x150
[ 1032.040533][ T1391]  geneve_netdevice_event+0x6a/0x80
[ 1032.042156][ T1391]  notifier_call_chain+0x1be/0x400
[ 1032.043759][ T1391]  call_netdevice_notifiers+0x90/0xd0
[ 1032.045486][ T1391]  udp_tunnel_nic_netdevice_event+0xdef/0x17d0
[ 1032.047821][ T1391]  notifier_call_chain+0x1be/0x400
[ 1032.049485][ T1391]  register_netdevice+0x173a/0x1cf0
[ 1032.051120][ T1391]  nsim_create+0xb92/0x1100
[ 1032.052528][ T1391]  __nsim_dev_port_add+0x72a/0xb50
[ 1032.054194][ T1391]  nsim_dev_port_add_all+0x37/0xf0
[ 1032.055854][ T1391]  nsim_dev_reload_up+0x45f/0x7c0
[ 1032.057434][ T1391]  devlink_reload+0x505/0x8d0
[ 1032.058962][ T1391]  devlink_nl_reload_doit+0xaaa/0xc80
[ 1032.060987][ T1391]  genl_family_rcv_msg_doit+0x22a/0x330
[ 1032.062702][ T1391]  genl_rcv_msg+0x61c/0x7a0
[ 1032.064128][ T1391]  netlink_rcv_skb+0x232/0x4b0
[ 1032.065626][ T1391]  genl_rcv+0x28/0x40
[ 1032.066902][ T1391]  netlink_unicast+0x80f/0x9b0
[ 1032.068368][ T1391]  netlink_sendmsg+0x813/0xb40
[ 1032.069868][ T1391]  ____sys_sendmsg+0xa68/0xad0
[ 1032.071352][ T1391]  ___sys_sendmsg+0x2a5/0x360
[ 1032.072928][ T1391]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1032.074468][ T1391]  do_syscall_64+0x14d/0xf80
[ 1032.075928][ T1391]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1032.077791][ T1391] 
[ 1032.078601][ T1391] Second to last potentially related work creation:
[ 1032.080748][ T1391]  kasan_save_stack+0x3e/0x60
[ 1032.082239][ T1391]  kasan_record_aux_stack+0xbd/0xd0
[ 1032.084075][ T1391]  insert_work+0x3d/0x330
[ 1032.085803][ T1391]  __queue_work+0xd03/0x1020
[ 1032.087638][ T1391]  queue_work_on+0x106/0x1d0
[ 1032.089473][ T1391]  __udp_tunnel_nic_add_port+0xb71/0xd60
[ 1032.091796][ T1391]  udp_tunnel_push_rx_port+0x186/0x210
[ 1032.094011][ T1391]  vxlan_offload_rx_ports+0x129/0x1f0
[ 1032.096068][ T1391]  vxlan_netdevice_event+0x111/0x480
[ 1032.097944][ T1391]  notifier_call_chain+0x1be/0x400
[ 1032.099539][ T1391]  call_netdevice_notifiers+0x90/0xd0
[ 1032.101200][ T1391]  udp_tunnel_nic_netdevice_event+0xdef/0x17d0
[ 1032.103180][ T1391]  notifier_call_chain+0x1be/0x400
[ 1032.105061][ T1391]  register_netdevice+0x173a/0x1cf0
[ 1032.107139][ T1391]  nsim_create+0xb92/0x1100
[ 1032.108936][ T1391]  __nsim_dev_port_add+0x72a/0xb50
[ 1032.111037][ T1391]  nsim_dev_port_add_all+0x37/0xf0
[ 1032.113151][ T1391]  nsim_dev_reload_up+0x45f/0x7c0
[ 1032.115176][ T1391]  devlink_reload+0x505/0x8d0
[ 1032.117073][ T1391]  devlink_nl_reload_doit+0xaaa/0xc80
[ 1032.119275][ T1391]  genl_family_rcv_msg_doit+0x22a/0x330
[ 1032.121534][ T1391]  genl_rcv_msg+0x61c/0x7a0
[ 1032.123375][ T1391]  netlink_rcv_skb+0x232/0x4b0
[ 1032.125302][ T1391]  genl_rcv+0x28/0x40
[ 1032.126913][ T1391]  netlink_unicast+0x80f/0x9b0
[ 1032.128702][ T1391]  netlink_sendmsg+0x813/0xb40
[ 1032.130473][ T1391]  ____sys_sendmsg+0xa68/0xad0
[ 1032.132130][ T1391]  ___sys_sendmsg+0x2a5/0x360
[ 1032.133665][ T1391]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1032.135247][ T1391]  do_syscall_64+0x14d/0xf80
[ 1032.136747][ T1391]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1032.138577][ T1391] 
[ 1032.139322][ T1391] The buggy address belongs to the object at ffff888170e48600
[ 1032.139322][ T1391]  which belongs to the cache kmalloc-256 of size 256
[ 1032.143472][ T1391] The buggy address is located 176 bytes inside of
[ 1032.143472][ T1391]  freed 256-byte region [ffff888170e48600, ffff888170e48700)
[ 1032.148353][ T1391] 
[ 1032.149348][ T1391] The buggy address belongs to the physical page:
[ 1032.151912][ T1391] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x170e48
[ 1032.155403][ T1391] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1032.158697][ T1391] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[ 1032.161700][ T1391] page_type: f5(slab)
[ 1032.163428][ T1391] raw: 057ff00000000040 ffff888100041b40 dead000000000100 dead000000000122
[ 1032.166871][ T1391] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 1032.170311][ T1391] head: 057ff00000000040 ffff888100041b40 dead000000000100 dead000000000122
[ 1032.173853][ T1391] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 1032.177240][ T1391] head: 057ff00000000001 ffffea0005c39201 00000000ffffffff 00000000ffffffff
[ 1032.180737][ T1391] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[ 1032.183991][ T1391] page dumped because: kasan: bad access detected
[ 1032.186483][ T1391] page_owner tracks the page as allocated
[ 1032.188690][ T1391] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5806, tgid 5806 (syz-executor), ts 62275882612, free_ts 62274883564
[ 1032.197136][ T1391]  post_alloc_hook+0x231/0x280
[ 1032.199133][ T1391]  get_page_from_freelist+0x24dc/0x2580
[ 1032.201430][ T1391]  __alloc_frozen_pages_noprof+0x18d/0x380
[ 1032.203939][ T1391]  allocate_slab+0x77/0x660
[ 1032.205848][ T1391]  refill_objects+0x331/0x3c0
[ 1032.207833][ T1391]  __pcs_replace_empty_main+0x2b9/0x620
[ 1032.210048][ T1391]  __kmalloc_noprof+0x474/0x760
[ 1032.212066][ T1391]  fib_create_info+0x1723/0x31f0
[ 1032.214039][ T1391]  fib_table_insert+0xc8/0x1b50
[ 1032.216000][ T1391]  fib_magic+0x434/0x510
[ 1032.217692][ T1391]  fib_add_ifaddr+0x144/0x5f0
[ 1032.219602][ T1391]  fib_inetaddr_event+0x12e/0x190
[ 1032.221669][ T1391]  notifier_call_chain+0x1be/0x400
[ 1032.223748][ T1391]  blocking_notifier_call_chain+0x6a/0x90
[ 1032.226040][ T1391]  __inet_insert_ifa+0x9e9/0xbc0
[ 1032.228116][ T1391]  inet_rtm_newaddr+0x10d8/0x1ad0
[ 1032.230231][ T1391] page last free pid 5866 tgid 5866 stack trace:
[ 1032.232847][ T1391]  __free_frozen_pages+0xc2b/0xdb0
[ 1032.234937][ T1391]  __mmdrop+0xb5/0x750
[ 1032.236633][ T1391]  exit_mm+0x168/0x220
[ 1032.238360][ T1391]  do_exit+0x62e/0x2320
[ 1032.240116][ T1391]  do_group_exit+0x21b/0x2d0
[ 1032.242076][ T1391]  __x64_sys_exit_group+0x3f/0x40
[ 1032.244186][ T1391]  x64_sys_call+0x221a/0x2240
[ 1032.246134][ T1391]  do_syscall_64+0x14d/0xf80
[ 1032.248075][ T1391]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1032.250513][ T1391] 
[ 1032.251596][ T1391] Memory state around the buggy address:
[ 1032.253958][ T1391]  ffff888170e48580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1032.257278][ T1391]  ffff888170e48600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1032.260558][ T1391] >ffff888170e48680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1032.263859][ T1391]                                      ^
[ 1032.266129][ T1391]  ffff888170e48700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1032.268722][ T1391]  ffff888170e48780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1032.271382][ T1391] ==================================================================
[ 1032.324061][ T1391] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1032.326976][ T1391] CPU: 1 UID: 0 PID: 1391 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) 
[ 1032.330248][ T1391] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1032.333478][ T1391] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[ 1032.336007][ T1391] Call Trace:
[ 1032.337329][ T1391]  <TASK>
[ 1032.338513][ T1391]  vpanic+0x56c/0xa60
[ 1032.340122][ T1391]  ? __pfx_vpanic+0x10/0x10
[ 1032.342009][ T1391]  panic+0xc5/0xd0
[ 1032.343520][ T1391]  ? __pfx_panic+0x10/0x10
[ 1032.345250][ T1391]  ? preempt_schedule_thunk+0x16/0x30
[ 1032.347401][ T1391]  ? __mutex_lock+0x157/0x1300
[ 1032.349428][ T1391]  ? preempt_schedule_thunk+0x16/0x30
[ 1032.351582][ T1391]  ? __mutex_lock+0x157/0x1300
[ 1032.353502][ T1391]  check_panic_on_warn+0x89/0xb0
[ 1032.355454][ T1391]  ? __mutex_lock+0x157/0x1300
[ 1032.357326][ T1391]  end_report+0x73/0x180
[ 1032.359072][ T1391]  ? __mutex_lock+0x157/0x1300
[ 1032.360992][ T1391]  kasan_report+0x128/0x150
[ 1032.362810][ T1391]  ? __mutex_lock+0x157/0x1300
[ 1032.364703][ T1391]  __mutex_lock+0x157/0x1300
[ 1032.366561][ T1391]  ? __mutex_lock+0x5ac/0x1300
[ 1032.368484][ T1391]  ? udp_tunnel_nic_device_sync_work+0x39/0xa10
[ 1032.371023][ T1391]  ? __pfx___mutex_lock+0x10/0x10
[ 1032.373087][ T1391]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1032.375325][ T1391]  udp_tunnel_nic_device_sync_work+0x39/0xa10
[ 1032.377858][ T1391]  ? process_scheduled_works+0xa25/0x1830
[ 1032.380198][ T1391]  ? process_scheduled_works+0xa25/0x1830
[ 1032.382205][ T1391]  process_scheduled_works+0xb02/0x1830
[ 1032.384055][ T1391]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1032.385998][ T1391]  ? assign_work+0x3d5/0x5e0
[ 1032.387518][ T1391]  worker_thread+0xa50/0xfc0
[ 1032.389095][ T1391]  kthread+0x388/0x470
[ 1032.390442][ T1391]  ? __pfx_worker_thread+0x10/0x10
[ 1032.392127][ T1391]  ? __pfx_kthread+0x10/0x10
[ 1032.393667][ T1391]  ret_from_fork+0x51e/0xb90
[ 1032.395170][ T1391]  ? __pfx_ret_from_fork+0x10/0x10
[ 1032.396847][ T1391]  ? __switch_to+0xc7d/0x1450
[ 1032.398304][ T1391]  ? __pfx_kthread+0x10/0x10
[ 1032.399832][ T1391]  ret_from_fork_asm+0x1a/0x30
[ 1032.401499][ T1391]  </TASK>
[ 1032.403449][ T1391] Kernel Offset: disabled
[ 1032.404939][ T1391] Rebooting in 86400 seconds..

VM DIAGNOSIS:
02:49:02  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffff88811e8fa184 RCX=0000000000000046 RDX=0000000000000004
RSI=ffffffff8e1631b0 RDI=ffff88811e8f9d00 RBP=dffffc0000000000 RSP=ffffc900071671b8
R8 =ffffc90007167648 R9 =0000000000000000 R10=ffffc90007167338 R11=fffff52000e2ce69
R12=1ffff11023d1f430 R13=ffffc90007160000 R14=ffff88811e8fa188 R15=dffffc0000000000
RIP=ffffffff810014b0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818de63000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000564c7de62000 CR3=0000000114b10000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=01d80300080001d0 030fffffffffffff
XMM02=0001e80300080001 e003000000040806 XMM03=0280030fffffffff ffff0401f0030008
XMM04=9803000800029003 0fffffffffffff04 XMM05=0102a8100000040a 1000060102e00008
XMM06=0002a00300080002 9803000800029003 XMM07=0fffffffffffff04 0280030fffffffff
XMM08=ffff0401f0030008 0001e80300080001 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000006b RBX=000000000000006b RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000780f290
R8 =ffff888168130237 R9 =1ffff1102d026046 R10=dffffc0000000000 R11=ffffffff85402af0
R12=dffffc0000000000 R13=ffffffff9a2b3a8c R14=ffffffff9a5cb8a0 R15=0000000000000000
RIP=ffffffff85402b6c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a9463000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9c42771ff8 CR3=0000000182e76000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=4e9748aa0056d189 4fcbc751429aafb8
XMM02=36f1ba8e172f0a72 73f7c03e484dd52b XMM03=189f9c86590a0d8e 2f6e28d82d9dcbd6
XMM04=373c37b2e99fa653 aa0792c5066ec385 XMM05=d4bc94a012aa57e5 f0cadd64afdc1718
XMM06=9f9c86590a0d8e2f 6e28d82d9dcbd636 XMM07=f1ba8e172f0a7273 f7c03e484dd52b4e
XMM08=64f1ea6097da1dcf 5a64c3bb40a6f098 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
