last executing test programs:

41.631265461s ago: executing program 0 (id=3348):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x4, 0x4, 0x4, 0x40007, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50)
r2 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x7, @local, 0x8000}, 0x1c)
sendto$inet6(r2, &(0x7f00000000c0)="800034ca269bb73c", 0x8, 0x20040080, &(0x7f0000000040)={0xa, 0x4e20, 0x40cd, @mcast2, 0x8000006}, 0x1c)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'sit0\x00', &(0x7f00000003c0)={'erspan0\x00', 0x0, 0x80, 0x1, 0x10, 0x1, {{0x6, 0x4, 0x2, 0x6, 0x18, 0x64, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @multicast2, {[@ra={0x94, 0x4, 0x1}]}}}}})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000030400000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="00080000075005002c0012800b00010062726964676500001c00028006000900090000000600270001"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x44040)

41.58972064s ago: executing program 0 (id=3349):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x20000805}, 0x40000)

41.534357745s ago: executing program 0 (id=3350):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c064001000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000001c0), 0x4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={<r3=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000a80)={r3, 0x0, "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"}, &(0x7f0000000180)=0xfebd)
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', <r5=>0x0})
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x19}, @empty, 0x2, "4f6fb4d1af0f724e6118ecfbac0200843af29708e2355d0e7ea0c543011a00", 0xfffffffc, 0x4, 0x81, 0x2}, 0x3c)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x80, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x21, @empty}, {0x2, 0x0, @local}, {0x2, 0x4e20, @broadcast}, 0x19b, 0x0, 0x0, 0x0, 0xfffd})
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1ff, {0x0, 0x0, 0x0, r5, {0xfff2}, {}, {0x8, 0x10}}}, 0x24}}, 0x0)
r9 = socket$igmp6(0xa, 0x3, 0x2)
recvfrom$inet6(r9, 0x0, 0x0, 0x1, 0x0, 0x0)
r10 = accept$netrom(0xffffffffffffffff, &(0x7f0000000340)={{}, [@default, @remote, @null, @remote, @bcast, @remote, @netrom, @default]}, &(0x7f0000000540)=0x48)
accept4$netrom(r10, &(0x7f0000000580)={{0x3, @bcast}, [@null, @rose, @bcast, @netrom, @bcast, @bcast, @netrom, @netrom]}, &(0x7f0000000600)=0x48, 0x80000)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="26970000231a0500340012800e00010069703665727370616e00000020000280040012000500160001000000080005000000000008001500f5280e00"], 0x54}}, 0x48800)

40.664671554s ago: executing program 0 (id=3357):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000004c0)="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")
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "000000000000000000000000000010dc"}}}, @TCA_INGRESS_BLOCK={0x8}]}, 0x50}}, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x2c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x464, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x438, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_RTAB={0x404, 0x2, [0x4, 0x0, 0x6, 0x401, 0x42be, 0xff, 0x1, 0x0, 0xffffff69, 0x6, 0xba, 0x2, 0xa86, 0xd64, 0x7, 0x81, 0x1, 0x3, 0x400, 0x89, 0x3, 0x8, 0x2, 0x9c73d11d, 0x6, 0x8001, 0x8, 0xfffffffe, 0x1, 0xfd73, 0x9, 0x4, 0xe2a5058, 0x7, 0x8001, 0xffff, 0x8000, 0x4, 0xfffffffc, 0x6, 0x81, 0xc, 0xfffffff9, 0x9, 0x8, 0x40, 0x1ff, 0x400, 0x9, 0x3ff, 0x1b, 0x8, 0xfffffffc, 0x3, 0x8, 0xd34, 0x50ff19aa, 0x9, 0x1, 0x4, 0x6, 0x0, 0x86a, 0xbacd, 0x81, 0x0, 0x1, 0x0, 0x80000001, 0x1, 0x0, 0xe, 0x6, 0x8c, 0x80000000, 0x9937, 0xa, 0x0, 0xb711, 0x0, 0x8, 0x6, 0x8, 0x1, 0x0, 0x9fac5a9a, 0x7, 0x800, 0x6, 0xf9b, 0x8, 0x6, 0xffff, 0x2, 0x36, 0x2, 0xc, 0x16, 0x2, 0xccc, 0x3d8, 0x6, 0x8, 0x1, 0x0, 0x900, 0xfffffff9, 0xffffff01, 0xfffff05f, 0x0, 0x4a8, 0x8, 0x4, 0x8001, 0x5, 0x6, 0x30b6, 0x5, 0xc0000000, 0x7d8, 0x8, 0x3, 0xe, 0xcbf, 0xcc, 0x1, 0x4, 0x7bf, 0x9, 0x200, 0x2, 0x92, 0x1, 0xc4, 0x5, 0x6, 0x2, 0x692c, 0x949, 0xd1, 0x5, 0x100, 0x0, 0xfa6c, 0x3fc0, 0x5, 0x7, 0x100000, 0x9, 0x8001, 0x200, 0x6, 0x9, 0x3, 0x0, 0x1, 0x1, 0x3ff, 0xfffffff7, 0x800, 0x4, 0x2, 0x6, 0x10001, 0x2, 0x91, 0x4, 0x5, 0x1, 0x7, 0x2, 0x2, 0xfffffe00, 0x3, 0xa9, 0x40, 0x1, 0x7, 0x6ffc, 0xe60, 0x6, 0xa0c4, 0x5, 0x496, 0x2, 0x4, 0x7, 0x155a, 0x7, 0x9, 0x5, 0x401, 0x7ff, 0xffff, 0xcd5, 0x1, 0x1, 0x1, 0x2, 0x2, 0x7, 0x2, 0x3, 0x0, 0x8, 0x0, 0x1, 0x7, 0x0, 0x81, 0x1, 0xf14c, 0x2, 0x0, 0x3, 0x1ff, 0xa, 0x3ff, 0x0, 0x2, 0x4, 0x4, 0x9, 0x2, 0x3, 0x6, 0x0, 0x3, 0x20ca, 0xfff, 0xb, 0x9, 0x7bd, 0x7, 0xfffffff3, 0xfffff801, 0x6, 0x9, 0x100, 0xfffff67f, 0x8000, 0x5, 0x3, 0x9, 0x5, 0x5, 0xe, 0x1a, 0x7, 0x3, 0xbc, 0x2c58, 0x2, 0x5, 0xcb7, 0xfff]}]}}]}, 0x464}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2)
r13 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$MRT(r13, 0x0, 0xce, 0x0, 0x0)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x8c, r12, 0x420, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x33}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x71}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x40)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

40.523429742s ago: executing program 0 (id=3361):
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xffffffcb}], 0x1}, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
connect$l2tp6(r1, &(0x7f0000000140)={0xa, 0x0, 0xc52, @empty, 0x0, 0x2000000}, 0x20)
sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x5, 0x4, 0x1, 0x0, r4}, 0x48)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x38)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xceb}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x40000c4)
shutdown(r2, 0x1)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
setsockopt$sock_timeval(r9, 0x1, 0x43, &(0x7f00000001c0)={0x0, 0xea60}, 0x10)
sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0)
connect$unix(r8, &(0x7f0000000800)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
recvmmsg(r7, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}, 0x24c9ddb}, {{0x0, 0x0, 0x0}, 0xf04}, {{0x0, 0x0, 0x0}, 0x5}], 0x3, 0x40000000, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

40.445085453s ago: executing program 0 (id=3362):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0xd, 0x1}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r2=>0x0]}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={r2, 0x2000}, &(0x7f0000000140)=0x8)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', <r7=>0x0})
setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @local}, 0x10)
setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000000)={r7, 0x11, 0x6, @broadcast}, 0x10)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001b00)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0xf, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008050)
r8 = socket$inet6(0xa, 0x800, 0x1)
bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r9 = socket(0x2, 0x80805, 0x0)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r10, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r11, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)={0x14, r12, 0x301, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={<r13=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x7a, &(0x7f0000000340)={r13, @in6={{0xa, 0x4e24, 0x2004, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)

25.266618992s ago: executing program 32 (id=3362):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0xd, 0x1}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r2=>0x0]}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={r2, 0x2000}, &(0x7f0000000140)=0x8)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', <r7=>0x0})
setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @local}, 0x10)
setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000000)={r7, 0x11, 0x6, @broadcast}, 0x10)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001b00)=@getchain={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0xf, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008050)
r8 = socket$inet6(0xa, 0x800, 0x1)
bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r9 = socket(0x2, 0x80805, 0x0)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r10, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(r11, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)={0x14, r12, 0x301, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={<r13=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x7a, &(0x7f0000000340)={r13, @in6={{0xa, 0x4e24, 0x2004, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)

1.033183814s ago: executing program 1 (id=3869):
r0 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@isdn, &(0x7f0000000040)=0x80)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x20, 0x70bd25, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 32)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SCUDMATCHLEN(r3, 0x89e7, &(0x7f0000005940)={0x21})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc250}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0)

1.032743599s ago: executing program 1 (id=3870):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}]}, 0x68}, 0x1, 0xba01}, 0x810)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000580)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x18, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x0, 0xe4ffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x70}}, 0x0)
syz_genetlink_get_family_id$team(&(0x7f00000000c0), r3)

973.630149ms ago: executing program 1 (id=3871):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="001c0000000000feb702000014000000b7030000000000088500000083000000bf09000000000000550901000000000085000000000000009f91001f5bbd6fae09c1a4ea7da4710000800000b702a40000850021814602e80000b7000000050000005602e11b287bb00fe1cf6196ee50395885df7b158420f3c8c7bf40dde3b1904c645e31fab4ac000000000000000000"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x7fffef64)

743.93861ms ago: executing program 3 (id=3874):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000a00)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x6b3}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffff9, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x1, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2f, 0xe, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0xfffffffe, 0x8fc, 0x84, 0x9, 0x3, 0x9, 0x80000001, 0x6, 0x0, 0x8, 0x820, 0x9, 0x1, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10004, 0x4, 0x1, 0x7f, 0xfffffffc, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x4, 0x8000, 0x0, 0x9, 0xffffffff, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0xa7, 0x5, 0x3, 0x10004, 0x5, 0x1, 0x0, 0x2, 0x7, 0x5, 0x6, 0x5, 0x4, 0x2, 0x81, 0x0, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x4, 0x89, 0x2, 0x6, 0x100, 0x9, 0xffffa3e0, 0x86b9, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x2, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xb, 0x8, 0x101, 0x7, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0x1, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x2, 0x65, 0x4, 0xfffffa0c, 0x3, 0x0, 0x4, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0x0, 0x800, 0x723, 0x0, 0xe, 0x9, 0x4, 0x6, 0x7, 0x1, 0xfffffbff, 0x7, 0x3, 0x8, 0x57, 0xfffffffb, 0x2, 0x7f, 0x2, 0x81000001, 0x0, 0x9, 0xf, 0xfffffffe, 0x928, 0x4, 0xfffffffd, 0x5, 0x6042, 0xb87, 0x6, 0x8d8d, 0x55, 0x101, 0x2, 0x64e8, 0xc, 0x82f, 0x2, 0x80a, 0xfff, 0x6, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x3, 0x1000000, 0x3, 0x1, {0xe, 0x2, 0x1, 0x2, 0xbbbc, 0x6}, {0x6, 0x1, 0x2, 0xdc2f, 0xfff9, 0xf}, 0x8, 0x0, 0x7}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0xffff, 0x6c57, 0x0, 0x2, 0x4, 0x7fff, 0x400, 0x1ff, 0x5518, 0x9, 0x200, 0x80010000, 0x1, 0x437, 0xdb0, 0x7a2357cd, 0xb05b, 0x2, 0x0, 0xffff, 0x1, 0x4, 0x3ff, 0x7f, 0x5, 0xfffff800, 0x0, 0x9, 0xffffff82, 0x4, 0x401, 0x5eb, 0xa, 0x1ff, 0x9fa, 0x5, 0x8e5, 0x5, 0x5, 0x0, 0x10, 0x80, 0x8001, 0xab, 0xffff1efb, 0x4, 0xfff, 0x2, 0x3, 0xc, 0x4, 0x1, 0x51, 0x3, 0x101, 0x2, 0x5, 0x3, 0x1, 0x2, 0xf6a6, 0x5, 0x5, 0xaf1c, 0xc8, 0x6, 0x40, 0x9, 0x986, 0x10000, 0xe, 0x6, 0x80, 0x245, 0x38b, 0x5, 0xffffff13, 0xc00000, 0x8, 0xd0bd, 0xfffffff8, 0x0, 0x9, 0xc3a, 0x7, 0x3, 0x80000000, 0x0, 0x8, 0x8, 0x7, 0x0, 0x861a, 0x9, 0x5, 0xc605, 0x8eb6, 0x401, 0x0, 0x0, 0x6, 0x1, 0x8, 0x1, 0x1ff, 0xb2d, 0x5, 0xb, 0x0, 0x0, 0xfffffeff, 0x5, 0x9, 0x8, 0xffff, 0x2dd9c5a4, 0x0, 0x9, 0x81, 0xffff, 0x8, 0x2, 0x7, 0x7, 0x5, 0x2, 0x4, 0x57, 0x6, 0x8, 0x5, 0x25, 0x3, 0xe8, 0x1000, 0x0, 0xfe6, 0x50, 0xd3, 0x12cd2b8b, 0x1, 0x9, 0x7f, 0x7, 0x2, 0xb72c, 0x0, 0x80, 0x93, 0x30, 0x7, 0x5, 0x6000000, 0x8, 0xfffffffa, 0x0, 0x5, 0x2, 0x8001, 0xffffffff, 0x6, 0x2, 0x4, 0x80000000, 0x3ff, 0xbd49, 0x8, 0x8, 0x3, 0x9, 0x7, 0x5, 0x2, 0xfffffff8, 0xa2db, 0x400, 0x4, 0x5, 0x0, 0x4, 0xf45, 0x9, 0xc, 0x7fff, 0x3, 0x2, 0x400, 0x501, 0xd, 0xbb, 0x2, 0x402, 0x3, 0x10, 0x10, 0x10, 0xfff, 0x0, 0x5, 0x6, 0x6a, 0x10, 0x8, 0xfffffff7, 0x4, 0x3, 0xff, 0xfffffff8, 0x6, 0xff, 0x79, 0x10000, 0x8, 0x8000000, 0x0, 0x1ff, 0xd5a9, 0xb, 0x6, 0x1, 0x6, 0x8, 0xffffffb0, 0x5, 0x4447, 0x1, 0x4, 0x7, 0x2, 0x6, 0x3, 0x8000, 0xffffff3e, 0x5, 0x3, 0x4, 0x4, 0xfd95, 0x6, 0x4, 0xb, 0xea, 0x385a9732, 0x81, 0xfd9, 0xffffffff, 0x97, 0x0, 0x2bb7, 0x2, 0x9c7, 0x7f, 0x78a6, 0x40004, 0x7]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3}}}}]}]}, 0x894}}, 0x0)

743.560799ms ago: executing program 3 (id=3875):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7}, {0x7, 0xffffffffffffff5c}}}]}]}]}}]}, 0x54}}, 0x0)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10)
accept$packet(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001940)={'veth1_to_batadv\x00', 0xd201})
r7 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r6, &(0x7f0000001980)=ANY=[@ANYBLOB="0800088ee98a8b348e86c0e34e67659091bd48000700020000001400000046200fc000680000030690780a010100ac1414bb000000004e204e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0xfce)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
r8 = socket(0x1000000000000010, 0x80802, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x29}, 0x48)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000000)=r9, 0x4)
sendmsg(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001500)={0x0, @in6={{0xa, 0x4e24, 0x3, @mcast2, 0x8}}, 0x8, 0xfffc}, &(0x7f00000015c0)=0x90)
r10 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r10, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
shutdown(r10, 0x1)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r12=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r10, 0x84, 0x1, &(0x7f00000005c0)={r12, 0x0, 0x0, 0xfffffffe}, 0x14)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00'], 0x50)

622.603808ms ago: executing program 3 (id=3876):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) (async)
close(0x3) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) (async)
r3 = socket$netlink(0x10, 0x3, 0x0) (async)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000001ac0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x74, 0x2, 0x7, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x7}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xe5}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x400}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x54}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004090}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000080)=""/13, 0x2}, 0x20) (async)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8)
sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0xf4, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6c94}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nicvf0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x48004}, 0x800)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r8, &(0x7f0000000040), 0x10)
sendmsg$netlink(r8, &(0x7f0000005d80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001380)=ANY=[], 0x38}, {&(0x7f00000002c0)={0x1c, 0x1e, 0x800, 0x70bd29, 0x25dfdbff, "", [@typed={0x9, 0x1a, 0x0, 0x0, @str='syz0\x00'}]}, 0x1c}], 0x2, 0x0, 0x0, 0x44011}, 0x0) (async)
r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r7)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="410000000000000001000603000013000300060a0004090300f006e8ffff00000000080007003a3a09f8130002"], 0x44}, 0x1, 0x1000000}, 0x4000044) (async)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000580)={<r10=>0x0, 0x3ff, 0x1, [0x2, 0xbeff, 0x3, 0xbc, 0xf], [0x10, 0x4, 0x2, 0xc, 0x3, 0x6, 0x2, 0x3, 0x8, 0x5, 0x0, 0x2, 0x0, 0xd, 0xff, 0x9, 0xff, 0x7, 0x2, 0x3, 0x4, 0xd9, 0x7, 0x3ff, 0x3, 0x3, 0x7, 0x400, 0x4, 0xffffffffffffff6d, 0x10000, 0x9c, 0x800, 0x9, 0x0, 0xd, 0x7, 0x4, 0x1, 0xffff, 0x6, 0x2, 0xd, 0xe, 0x6, 0x0, 0x3, 0x0, 0x3, 0x8, 0x7, 0x401, 0x7, 0x5e8c, 0x7fffffffffffffff, 0xffff, 0x4, 0x6, 0x100000000, 0x2, 0x1, 0x6, 0xffffffffffffff80, 0xaf23, 0x2829, 0x2, 0x81, 0x5, 0x7, 0x0, 0x7, 0x7, 0x3, 0x6, 0x8, 0x7, 0xffffffff, 0x0, 0xea9, 0x0, 0xffffffffffff9e5f, 0x1ff, 0x9, 0xfd6, 0x8, 0x8, 0x5, 0x0, 0x6a0, 0x4, 0x4, 0x8000000000000001, 0xffffffffffffffff, 0x7, 0xff, 0x5, 0x100, 0x726, 0x1, 0x100, 0x9, 0xa27, 0x9, 0x4, 0x8, 0x10000, 0x1, 0x3, 0x1, 0x80000000, 0x3, 0x6, 0x9, 0x5, 0x35, 0x2, 0x4, 0xa91, 0x1, 0x7, 0x4]})
ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f00000009c0)={r10, "89416633dd6e492e860f1e315c3f30e1"})
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f00000128c0)=@newtaction={0x18, 0x58, 0x284f, 0x0, 0x25dfdc00, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000019c0)=ANY=[@ANYBLOB="1b00000000000000000000000002000000000000", @ANYRES32=r6, @ANYBLOB="0100000000000000000000000000000000000000015fd154b52018b5f46ba0b6b1ef6ff1c95f9c7016801b723db95fc86ac55d23411906f753cc1a0b9714fe81ebdaa0a935a909d3c3d71ad4c81a708a25737597b47bdfa5f25a79037740863b35a94a410ab87848c3b50634d0628d4f594c54e52c89dee77a1358e2f0b00fec68a0ddd7883bf1245be7a8ec2f658ed7997a9a7d58cb", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="030000000200"/28], 0x50)

541.62261ms ago: executing program 3 (id=3877):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004aba003c00650000020690780a010102ac1414bb445b4291ac1e00010000089894040100440491114e244e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="d289fffd90780057cf26205a6d5e495eb1b47eb922b2c17de4d90e654da262af4b327f951de365042019dc87e13e65ec8f310d9df45b2e308fe512862a6c949309a625b0f8e3991eea6aec3cff5ebb4fa096b47764de70bc73bb0488dc6e7ed9bcc803cc505a6ad456f5c03be9cb3d2a4f018542decc95fa84f10be4f79b6f5971880b17b543b1beba816e0d2f78220d"], 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001056cf49143de3d02fdf21674c870003040010b0000000000000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c000280050015000100000005001b005400000008000f000300000008000500050000000500110007000000"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044)

541.01142ms ago: executing program 3 (id=3878):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xe8, 0xa, 0xa, 0x201, 0x20000000, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xb}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x80000001}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DESC={0xa8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x9c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa43}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x75}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1800000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x39}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd2c}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8c9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x823}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x430}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x21d3d88d}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x40040)

464.601987ms ago: executing program 3 (id=3879):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000480)='bic\x00', 0x4)
sendto$inet(r0, &(0x7f0000000240)='%', 0x1, 0x1, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @broadcast, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e)
nanosleep(&(0x7f0000000340), &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b002110000010802110000000802110000001000000002000000"], 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000540)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, [{0xdd, 0x1e, "760b3423aa44906e2389e610e37c104d0981fc45bf2dd2b5216239fc6386"}, {0xdd, 0x38, "2b3b6522de88d20092410def0d88015639a8431d0929025f331bcb89b8c28ca8fb681ab998f6e7a6bd27ba7e7cbd64d5f3344e42ad8de6fc"}, {0xdd, 0xe3, "c721a45b79dbafd4cef6bccc1aaf82d5e2d31694366a2da925b585a124b469fba80def4f03761a6da54cbfa3a17c98cf8e21d273d27a5cec6b14aa16a109bba650532fe1360dda9cf7199bb61fa1e90cc25c181861e89e276e490fc30805053ee75715ecadab2a7f1715c0caf91b0579245c4a4edecc5cd9e9eeccd6414382f91041d6701e111ffa71729d01f48a3e870e52eb53e5e1e546c0b307884ed3ebc7705f5f4b5628c596283ce23d1b3133e7002be6223737ba1716b6b5826b0aae8472bbd42d1dca6711ac621a4583969cb665c8559b8a9c5548099ad3a2478bb3c9497091"}]}, 0x167)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'macvlan0\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', <r8=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000130001002dbd7000fddbdf2500000000", @ANYRES32=r6, @ANYBLOB="ecff0041096e000008000a00", @ANYRES32=r8], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
r10 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
getsockopt$ax25_int(r10, 0x101, 0x9, &(0x7f0000000440), &(0x7f0000000480)=0x4)
setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000140)={0x3, 0x6}, 0x4)

304.605414ms ago: executing program 2 (id=3880):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 64)
ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000004c0)={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0x40000, 0x40, 0xcc84, 0x100, 0x1}) (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x16c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @tfcpad={0x8, 0x16, 0x4}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async, rerun: 32)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e64000000080002400000000058000000200a0101000b000000000000010000000900020073797a30000000000900010073797a30"], 0xf8}}, 0x0) (rerun: 32)

214.694325ms ago: executing program 2 (id=3881):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000a00)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x6b3}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffff9, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x1, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2f, 0xe, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0xfffffffe, 0x8fc, 0x84, 0x9, 0x3, 0x9, 0x80000001, 0x6, 0x0, 0x8, 0x820, 0x9, 0x1, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10004, 0x4, 0x1, 0x7f, 0xfffffffc, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x4, 0x8000, 0x0, 0x9, 0xffffffff, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0xa7, 0x5, 0x3, 0x10004, 0x5, 0x1, 0x0, 0x2, 0x7, 0x5, 0x6, 0x5, 0x4, 0x2, 0x81, 0x0, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x4, 0x89, 0x2, 0x6, 0x100, 0x9, 0xffffa3e0, 0x86b9, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x2, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xb, 0x8, 0x101, 0x7, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0x1, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x2, 0x65, 0x4, 0xfffffa0c, 0x3, 0x0, 0x4, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0x0, 0x800, 0x723, 0x0, 0xe, 0x9, 0x4, 0x6, 0x7, 0x1, 0xfffffbff, 0x7, 0x3, 0x8, 0x57, 0xfffffffb, 0x2, 0x7f, 0x2, 0x81000001, 0x0, 0x9, 0xf, 0xfffffffe, 0x928, 0x4, 0xfffffffd, 0x5, 0x6042, 0xb87, 0x6, 0x8d8d, 0x55, 0x101, 0x2, 0x64e8, 0xc, 0x82f, 0x2, 0x80a, 0xfff, 0x6, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x3, 0x2000000, 0x3, 0x1, {0xe, 0x2, 0x1, 0x2, 0xbbbc, 0x6}, {0x6, 0x1, 0x2, 0xdc2f, 0xfff9, 0xf}, 0x8, 0x0, 0x7}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0xffff, 0x6c57, 0x0, 0x2, 0x4, 0x7fff, 0x400, 0x1ff, 0x5518, 0x9, 0x200, 0x80010000, 0x1, 0x437, 0xdb0, 0x7a2357cd, 0xb05b, 0x2, 0x0, 0xffff, 0x1, 0x4, 0x3ff, 0x7f, 0x5, 0xfffff800, 0x0, 0x9, 0xffffff82, 0x4, 0x401, 0x5eb, 0xa, 0x1ff, 0x9fa, 0x5, 0x8e5, 0x5, 0x5, 0x0, 0x10, 0x80, 0x8001, 0xab, 0xffff1efb, 0x4, 0xfff, 0x2, 0x3, 0xc, 0x4, 0x1, 0x51, 0x3, 0x101, 0x2, 0x5, 0x3, 0x1, 0x2, 0xf6a6, 0x5, 0x5, 0xaf1c, 0xc8, 0x6, 0x40, 0x9, 0x986, 0x10000, 0xe, 0x6, 0x80, 0x245, 0x38b, 0x5, 0xffffff13, 0xc00000, 0x8, 0xd0bd, 0xfffffff8, 0x0, 0x9, 0xc3a, 0x7, 0x3, 0x80000000, 0x0, 0x8, 0x8, 0x7, 0x0, 0x861a, 0x9, 0x5, 0xc605, 0x8eb6, 0x401, 0x0, 0x0, 0x6, 0x1, 0x8, 0x1, 0x1ff, 0xb2d, 0x5, 0xb, 0x0, 0x0, 0xfffffeff, 0x5, 0x9, 0x8, 0xffff, 0x2dd9c5a4, 0x0, 0x9, 0x81, 0xffff, 0x8, 0x2, 0x7, 0x7, 0x5, 0x2, 0x4, 0x57, 0x6, 0x8, 0x5, 0x25, 0x3, 0xe8, 0x1000, 0x0, 0xfe6, 0x50, 0xd3, 0x12cd2b8b, 0x1, 0x9, 0x7f, 0x7, 0x2, 0xb72c, 0x0, 0x80, 0x93, 0x30, 0x7, 0x5, 0x6000000, 0x8, 0xfffffffa, 0x0, 0x5, 0x2, 0x8001, 0xffffffff, 0x6, 0x2, 0x4, 0x80000000, 0x3ff, 0xbd49, 0x8, 0x8, 0x3, 0x9, 0x7, 0x5, 0x2, 0xfffffff8, 0xa2db, 0x400, 0x4, 0x5, 0x0, 0x4, 0xf45, 0x9, 0xc, 0x7fff, 0x3, 0x2, 0x400, 0x501, 0xd, 0xbb, 0x2, 0x402, 0x3, 0x10, 0x10, 0x10, 0xfff, 0x0, 0x5, 0x6, 0x6a, 0x10, 0x8, 0xfffffff7, 0x4, 0x3, 0xff, 0xfffffff8, 0x6, 0xff, 0x79, 0x10000, 0x8, 0x8000000, 0x0, 0x1ff, 0xd5a9, 0xb, 0x6, 0x1, 0x6, 0x8, 0xffffffb0, 0x5, 0x4447, 0x1, 0x4, 0x7, 0x2, 0x6, 0x3, 0x8000, 0xffffff3e, 0x5, 0x3, 0x4, 0x4, 0xfd95, 0x6, 0x4, 0xb, 0xea, 0x385a9732, 0x81, 0xfd9, 0xffffffff, 0x97, 0x0, 0x2bb7, 0x2, 0x9c7, 0x7f, 0x78a6, 0x40004, 0x7]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3}}}}]}]}, 0x894}}, 0x0)

213.39057ms ago: executing program 2 (id=3882):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000010701020000000000000000070000031400078008000240d2000002060001"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x48080)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1)
sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, r3, 0x201, 0x70bd26, 0xfffffffe, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x28}, 0x8, 0x3000000000002}, 0x844)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)=0x2)
ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000140)={0x2, &(0x7f00000000c0)=[{0x48, 0x7, 0x29, 0xeffffff2}, {0x6, 0xf8}]})
write(r4, &(0x7f0000000280)="4591", 0x2)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r5, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x101}]}, 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x10)
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fe88"], 0x48}}, 0x0)
sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x40)
shutdown(r0, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000002404000000ffffffd404000020000000b7040000100000207207f0ff00000000850000002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113943219aab9d607000000cb3924b611f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14bfbe96dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551557f05dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000fe4c16737d50d2a4bfc463450d524eacf2b734b0289c7a3a16eeca71296746681d61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333c460e34caf0806a7e2575a56fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d12b4c56ca3b03dc121086061d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b3cc034c19cef0d773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea40429b2d49177824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224090000000000000096e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27020198770ff8ebef9df1b750d56d4d195ad7a267c46b3348b0e03ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1a0235c290346a21ca5de55c49c78e411c791617000ef8df75411a5d300000000000000e0ffffff004deb8d49806823655735bd6deb49edb2e42f4ed9e6e9080366660b847bf03c144f6796920726dcf29e9a6c808459e82cbb0000000000000000000000000000000000006b5530865aaa7aa6171f66f2bca881a4201588427bb65ed3d5e7a74e9b5ece44067d4a9875a310bc7ec42b844b9eb3c9083560ef5c92b8a01188d615efbf70893d2eaf76517e990021fa5020a71023bca1194ad87cade480ba3dce8f57294e31ca24a8d181210bb6d18ff2c58293c2e314a7447ed3a1c870908aa8e3b33e6a94c7381bce9fa71dcbb758451f247e38d80d66e03d7564a5cddfaf06574b05cefb2670f30c2d501ee625ce3ffc08f15b53d28ce552c1807bc6866f06098a0e5517068aa48f2a82496fe83ee85218fe7f52b48742c7055f2a144c13e9c54be60b0a4f979ef7eb216897875946dc6ca1571930b1cf7c93de103f5289f782ae538e02612c717a76c787a873936eb8dcf1bfe581cc8ef965a0424bc140939e3274e251e519d188f6af680402c49458065dccfcb4f0d4f2ec9cf6fb3cf0a1807e34fb8d0108007734c1d2bc6a9d32d2560a88bad976b6000100002b712e632eeca810fb73fc8aaef94acf8bde18b9149cadc688254eabbe91f943592ccf68e717bcc6852828bd621e3a9dcb1cc6f1a6d1915200d95087838c2dc0a002c3aa554f725b965714144652cdc14761b0236f1a05b7f50f4149057e63d713103b5a6c2919161efc165a2e6981d76d29c95ad9f180135fb8962f59495fd33be3a6d35274941790bc1bd9da5e9c67c39de2c9f6fe35b8f528edbd8ea2a77dccdc3fe247feb121d9440a3ea9012a9d23a7e3110b0f25c5f8bf803d688de4d92b5dfdbd69fb8b426b55c10ba01b5f18b10cce8de3369300000000"], &(0x7f0000000280)='GPL\x00'}, 0x48)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400))
sendto$inet6(r0, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c)

113.288265ms ago: executing program 1 (id=3883):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, 0x0)
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
unshare(0x24020400)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000580)}], 0x1}, 0x40000)
unshare(0x26020480) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) (async)
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='mm_page_alloc\x00', r5}, 0x10)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x9, 0xa, 0x0, 0xffffffff, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd2c, 0x3501}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) (async)
sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000300)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0xb8000000, 0x71, 0x10, 0xb7}}, &(0x7f0000000100)='GPL\x00'}, 0x90) (async, rerun: 32)
sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) (async, rerun: 32)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=0x1, @ANYRES32=r2, @ANYBLOB="05ff01000000000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) (async)
r7 = socket$netlink(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', <r8=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r8, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}}, 0x0) (async)
splice(r0, 0x0, r7, 0x0, 0x10d00, 0xf)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r9)
sendmsg$NLBL_MGMT_C_LISTDEF(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYRES8=r10], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4180)

111.057519ms ago: executing program 1 (id=3884):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
accept4(r0, 0x0, 0x0, 0x80000)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5b, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000ffea0010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001000000000000000000000000000000003200000000000000e00000010000000000000000000000000000800003030000000000000000000000000000ff0100000000000000000000000000010000000033"], 0x23c}}, 0x0)
bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
socketpair(0x22, 0x1, 0x8, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14)
connect$802154_dgram(r1, &(0x7f0000000240), 0x14)
sendmmsg(r1, &(0x7f0000002200)=[{{&(0x7f0000000440)=@xdp={0x2c, 0x2, 0x0, 0x5}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x410}}], 0x1, 0x800)

54.770796ms ago: executing program 2 (id=3885):
r0 = socket$tipc(0x1e, 0x5, 0x0)
listen(r0, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000180)=0x7)
accept4(r0, 0x0, 0x0, 0x800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x7, 0x0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x89}}}, &(0x7f0000000480)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x48}, 0x94)

51.271837ms ago: executing program 1 (id=3886):
pipe(&(0x7f0000000480))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x44, 0x0, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xfffffff8, 0xfffffff5}}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x6bc}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x44}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000"], 0x48)
shutdown(0xffffffffffffffff, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd030000003b003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef)

409.933µs ago: executing program 2 (id=3887):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x20)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r1)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
bind$nfc_llcp(r3, &(0x7f00000001c0)={0x27, 0x0, 0x1, 0x2, 0x0, 0x4d, "c4669fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7800001022f987617c31851f00", 0x32}, 0x60)
getsockopt$inet_buf(r3, 0x118, 0x26, 0x0, &(0x7f0000000040))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x18, 0x40, 0x107, 0x0, 0x25dfdbfd, {0x4, 0x7c}, [@typed={0x4}]}, 0x18}}, 0x8004)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_DEACTIVATE_TARGET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=<r6=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=<r7=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=<r8=>0x0)
sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x2c, r2, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x80)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000004c0)=0x14)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r12, 0x401c5820, &(0x7f0000000080)={0xfffffffe, 0x1, 0x10000, 0x1, 0xfffffff5})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r11}, 0x10)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000004840)={0x6, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x86, &(0x7f0000002600)}, 0x10)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003"], 0x528}}, 0xc000)
r15 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580)=0x10)
accept4$phonet_pipe(r15, &(0x7f00000005c0), &(0x7f0000000680)=0x10, 0x80000)

0s ago: executing program 2 (id=3888):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa0fffff000000007010000f8ffffffb702000008000000b7030000000000008500fdffc900000095"], &(0x7f0000000000)='GPL\x00', 0xf}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

kernel console output (not intermixed with test programs):

080
[  144.929351][T11594]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  144.929362][T11594]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  144.929372][T11594]  ? __hrtimer_setup+0x187/0x210
[  144.929381][T11594]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  144.929390][T11594]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  144.929410][T11594]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  144.929441][T11594]  ? trace_kmalloc+0x1f/0xd0
[  144.929451][T11594]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  144.929460][T11594]  ? kstrndup+0xbf/0x160
[  144.929472][T11594]  hwsim_new_radio_nl+0xea4/0x1b10
[  144.929482][T11594]  ? __pfx___nla_validate_parse+0x10/0x10
[  144.929501][T11594]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  144.929520][T11594]  ? __nla_parse+0x40/0x60
[  144.929536][T11594]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  144.929557][T11594]  genl_family_rcv_msg_doit+0x215/0x300
[  144.929570][T11594]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  144.929585][T11594]  ? bpf_lsm_capable+0x9/0x20
[  144.929593][T11594]  ? security_capable+0x7e/0x2e0
[  144.929608][T11594]  genl_rcv_msg+0x60e/0x790
[  144.929627][T11594]  ? __pfx_genl_rcv_msg+0x10/0x10
[  144.929642][T11594]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  144.929659][T11594]  netlink_rcv_skb+0x208/0x470
[  144.929670][T11594]  ? __lock_acquire+0xab9/0xd20
[  144.929685][T11594]  ? __pfx_genl_rcv_msg+0x10/0x10
[  144.929701][T11594]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  144.929729][T11594]  ? down_read+0x1ad/0x2e0
[  144.929745][T11594]  genl_rcv+0x28/0x40
[  144.929758][T11594]  netlink_unicast+0x82f/0x9e0
[  144.929776][T11594]  ? __pfx_netlink_unicast+0x10/0x10
[  144.929790][T11594]  ? netlink_sendmsg+0x642/0xb30
[  144.929801][T11594]  ? skb_put+0x11b/0x210
[  144.929818][T11594]  netlink_sendmsg+0x805/0xb30
[  144.929838][T11594]  ? __pfx_netlink_sendmsg+0x10/0x10
[  144.929854][T11594]  ? aa_sock_msg_perm+0x94/0x160
[  144.929867][T11594]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  144.929877][T11594]  ? __pfx_netlink_sendmsg+0x10/0x10
[  144.929891][T11594]  __sock_sendmsg+0x21c/0x270
[  144.929906][T11594]  ____sys_sendmsg+0x505/0x830
[  144.929919][T11594]  ? __pfx_____sys_sendmsg+0x10/0x10
[  144.929937][T11594]  ? import_iovec+0x74/0xa0
[  144.929953][T11594]  ___sys_sendmsg+0x21f/0x2a0
[  144.929969][T11594]  ? __pfx____sys_sendmsg+0x10/0x10
[  144.930011][T11594]  ? __fget_files+0x2a/0x420
[  144.930025][T11594]  ? __fget_files+0x3a0/0x420
[  144.930046][T11594]  __x64_sys_sendmsg+0x19b/0x260
[  144.930063][T11594]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  144.930085][T11594]  ? rcu_is_watching+0x15/0xb0
[  144.930105][T11594]  ? do_syscall_64+0xbe/0x3b0
[  144.930122][T11594]  do_syscall_64+0xfa/0x3b0
[  144.930133][T11594]  ? lockdep_hardirqs_on+0x9c/0x150
[  144.930145][T11594]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.930156][T11594]  ? exc_page_fault+0x9f/0xf0
[  144.930168][T11594]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.930178][T11594] RIP: 0033:0x7f6ceeb8ebe9
[  144.930198][T11594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  144.930208][T11594] RSP: 002b:00007f6cecdee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  144.930221][T11594] RAX: ffffffffffffffda RBX: 00007f6ceedb5fa0 RCX: 00007f6ceeb8ebe9
[  144.930230][T11594] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000b
[  144.930236][T11594] RBP: 00007f6ceec11e19 R08: 0000000000000000 R09: 0000000000000000
[  144.930243][T11594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  144.930250][T11594] R13: 00007f6ceedb6038 R14: 00007f6ceedb5fa0 R15: 00007ffcc301f8c8
[  144.930272][T11594]  </TASK>
[  145.577218][T11619] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  145.654923][T11627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1720'.
[  145.661826][T11627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1720'.
[  146.016333][T11637] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1723'.
[  146.024076][T11636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1723'.
[  146.171522][T11651] syzkaller1: entered promiscuous mode
[  146.173961][T11651] syzkaller1: entered allmulticast mode
[  146.854617][T11666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1730'.
[  146.911778][T11668] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1731'.
[  147.095214][T11682] syzkaller1: entered promiscuous mode
[  147.097655][T11682] syzkaller1: entered allmulticast mode
[  147.452662][T11696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1739'.
[  147.463739][T11696] macvtap1: entered allmulticast mode
[  147.466145][T11696] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  147.892918][T11707] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1743'.
[  147.896703][T11707] netlink: 560 bytes leftover after parsing attributes in process `syz.2.1743'.
[  148.293275][T11726] lo speed is unknown, defaulting to 1000
[  148.297111][T11726] lo speed is unknown, defaulting to 1000
[  148.968657][T11742] tun0: tun_chr_ioctl cmd 1074025675
[  148.971872][T11742] tun0: persist enabled
[  148.974583][T11742] tun0: tun_chr_ioctl cmd 1074025675
[  148.976773][T11742] tun0: persist enabled
[  148.978493][T11743] tun0: tun_chr_ioctl cmd 1074025675
[  148.980360][T11743] tun0: persist enabled
[  149.204013][T11767] syzkaller1: entered promiscuous mode
[  149.206270][T11767] syzkaller1: entered allmulticast mode
[  149.529172][T11783] netlink: 'syz.1.1769': attribute type 21 has an invalid length.
[  149.531984][T11783] netlink: 'syz.1.1769': attribute type 22 has an invalid length.
[  149.534679][T11783] netlink: 'syz.1.1769': attribute type 23 has an invalid length.
[  149.612553][T11785] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.765138][T11789] pim6reg: entered allmulticast mode
[  149.909834][T11792] __nla_validate_parse: 37 callbacks suppressed
[  149.909848][T11792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1772'.
[  150.109546][T11823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1779'.
[  150.127047][T11823] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.172897][T11823] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.213877][T11823] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.216522][T11829] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1782'.
[  150.225517][T11829] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.1782'.
[  150.230939][T11829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1782'.
[  150.253086][T11823] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.268653][T11829] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1782'.
[  150.335122][ T5852] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.347078][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.364328][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.381301][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.473630][T11837] Bluetooth: MGMT ver 1.23
[  150.641246][T11847] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1788'.
[  150.746959][T11860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1791'.
[  150.807326][T11866] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1794'.
[  150.835440][T11870] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1796'.
[  150.852612][T11870] lo speed is unknown, defaulting to 1000
[  150.855223][T11870] lo speed is unknown, defaulting to 1000
[  151.122507][T11884] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.204867][T11910] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.212173][T11910] syzkaller0: entered promiscuous mode
[  152.214716][T11910] syzkaller0: entered allmulticast mode
[  152.230683][T11910] sch_fq: defrate 257 ignored.
[  152.234357][T11910] tipc: Resetting bearer <eth:syzkaller0>
[  152.239109][T11909] tipc: Resetting bearer <eth:syzkaller0>
[  152.251541][T11909] tipc: Disabling bearer <eth:syzkaller0>
[  152.350278][T11920] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  152.472406][T11939] batadv0: left promiscuous mode
[  152.481234][T11939] team0: left allmulticast mode
[  152.483400][T11939] team0: left promiscuous mode
[  152.485663][T11939] macsec2: left promiscuous mode
[  152.490101][T11939] macsec2: left allmulticast mode
[  152.718519][T11954] nbd1: detected capacity change from 0 to 63
[  152.726692][T11954] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  152.737911][   T55] block nbd1: Receive control failed (result -104)
[  153.912689][T11985] IPVS: set_ctl: invalid protocol: 108 100.1.1.1:20000
[  154.974640][T12037] __nla_validate_parse: 10 callbacks suppressed
[  154.974649][T12037] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1843'.
[  154.997289][T12039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1844'.
[  155.274628][T12061] netlink: 'syz.2.1851': attribute type 1 has an invalid length.
[  155.296952][T12062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1850'.
[  155.300370][T12062] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1850'.
[  155.304036][T12061] bond0: (slave geneve3): Opening slave failed
[  155.348753][T12064] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1851'.
[  155.354927][T12064] 8021q: adding VLAN 0 to HW filter on device bond0
[  155.360037][T12064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1851'.
[  155.424909][T12066] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1852'.
[  155.530092][T12082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1858'.
[  155.541432][T12082] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.566877][T12087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1860'.
[  155.590117][T12082] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.633703][T12082] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.686171][T12082] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.720547][T12095] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1863'.
[  155.742318][ T5852] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.751603][T11890] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.762032][T11890] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.772155][T11890] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.927700][T12114] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[  155.933309][T12114] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[  155.955834][T12114] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  156.305559][T12140] netlink: 'syz.1.1881': attribute type 1 has an invalid length.
[  156.536184][T12156] tap0: tun_chr_ioctl cmd 1074025677
[  156.539671][T12156] tap0: linktype set to 776
[  156.592766][T12160] : renamed from lo (while UP)
[  156.651860][T12167] xfrm1: entered allmulticast mode
[  156.723260][T12172] syzkaller1: entered promiscuous mode
[  156.725517][T12172] syzkaller1: entered allmulticast mode
[  157.747155][T12189] netlink: 'syz.2.1900': attribute type 1 has an invalid length.
[  157.763677][T12189] 8021q: adding VLAN 0 to HW filter on device bond5
[  157.766105][T12189] netlink: 'syz.2.1900': attribute type 1 has an invalid length.
[  157.770183][T12189] netlink: 'syz.2.1900': attribute type 1 has an invalid length.
[  157.773269][T12189] netlink: 'syz.2.1900': attribute type 1 has an invalid length.
[  157.778220][T12189] netlink: 'syz.2.1900': attribute type 1 has an invalid length.
[  157.785210][T12189] netlink: 'syz.2.1900': attribute type 1 has an invalid length.
[  157.793119][T12189] netlink: 'syz.2.1900': attribute type 1 has an invalid length.
[  157.796408][T12189] netlink: 'syz.2.1900': attribute type 1 has an invalid length.
[  157.968911][T12228] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  157.971361][T12228] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.086238][T12238] syzkaller1: entered promiscuous mode
[  158.088485][T12238] syzkaller1: entered allmulticast mode
[  158.762355][T12268] macvlan1: entered promiscuous mode
[  158.764682][T12268] hsr0: entered promiscuous mode
[  158.767135][T12268] macvlan1: entered allmulticast mode
[  158.770126][T12268] hsr0: entered allmulticast mode
[  158.772026][T12268] hsr_slave_0: entered allmulticast mode
[  158.774105][T12268] hsr_slave_1: entered allmulticast mode
[  158.946212][T12277] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.001012][T12277] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.075688][T12277] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.117752][T12277] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.136027][ T5830]  speed is unknown, defaulting to 1000
[  159.149607][ T5830] syz0: Port: 1 Link DOWN
[  159.151580][ T5830]  speed is unknown, defaulting to 1000
[  159.196496][ T5852] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  159.225607][T11890] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  159.245789][T11890] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  159.272089][T11890] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  159.520302][T12311]  speed is unknown, defaulting to 1000
[  159.524477][T12311]  speed is unknown, defaulting to 1000
[  159.528874][T12313] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.562026][T12313] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.630638][T12313] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.686665][T12313] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.955479][T12342] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.984985][T12342] __nla_validate_parse: 32 callbacks suppressed
[  159.984999][T12342] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1949'.
[  159.996948][T12344] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  160.004470][T12344] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1950'.
[  160.015014][T12344] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  160.017745][T12344] syzkaller0: entered promiscuous mode
[  160.019972][T12344] syzkaller0: entered allmulticast mode
[  160.039700][T12344] tipc: Resetting bearer <eth:syzkaller0>
[  160.043487][T12343] tipc: Resetting bearer <eth:syzkaller0>
[  160.053419][T12343] tipc: Disabling bearer <eth:syzkaller0>
[  160.341141][T12363] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1954'.
[  160.506874][T12376] validate_nla: 7 callbacks suppressed
[  160.506892][T12376] netlink: 'syz.2.1958': attribute type 1 has an invalid length.
[  160.532279][T12376] bond6: entered promiscuous mode
[  160.535840][T12376] bond6: entered allmulticast mode
[  160.538963][T12376] 8021q: adding VLAN 0 to HW filter on device bond6
[  160.551760][T12376] bridge8: entered promiscuous mode
[  160.554048][T12376] bridge8: entered allmulticast mode
[  160.556957][T12376] bond6: (slave bridge8): Enslaving as a backup interface with an up link
[  160.778161][T11890] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  160.785243][T11890] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  160.796565][T11890] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  160.804082][T11890] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  160.826481][T12395] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1966'.
[  160.832760][T12398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1967'.
[  160.965399][T12408] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1969'.
[  160.996146][T12411] netlink: 'syz.2.1970': attribute type 1 has an invalid length.
[  161.000747][T12411] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1970'.
[  161.004392][T12411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1970'.
[  161.102699][T12415] netlink: 'syz.2.1972': attribute type 1 has an invalid length.
[  161.453222][T12453] netlink: 'syz.1.1981': attribute type 1 has an invalid length.
[  161.456607][T12453] netlink: 'syz.1.1981': attribute type 4 has an invalid length.
[  161.460454][T12453] netlink: 15538 bytes leftover after parsing attributes in process `syz.1.1981'.
[  161.473230][T12453] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  161.476856][T12453] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  161.543336][T12459] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  161.546867][T12459] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  161.552678][T12459] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  161.571797][T12461] syzkaller0: tun_chr_ioctl cmd 1074025677
[  161.573936][T12461] syzkaller0: linktype set to 1
[  161.596642][T12465] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1984'.
[  161.623510][T12459] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  161.627677][T12459] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  161.633021][T12459] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  161.705837][T12459] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  161.710249][T12459] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  161.714247][T12459] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  161.763390][T12459] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  161.767280][T12459] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  161.772392][T12459] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  161.847269][ T9488] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  161.851973][ T9488] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  161.856190][ T9488] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  161.865221][ T9488] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  161.872921][ T9488] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  161.876189][ T9488] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  161.889644][ T5852] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  161.893050][ T5852] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  161.896580][ T5852] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  161.914744][ T5852] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  161.918920][ T5852] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  161.922446][ T5852] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  162.230256][T12494] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  162.682812][T12521] netlink: 'syz.0.2001': attribute type 10 has an invalid length.
[  162.782731][T12528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  163.103005][T12549] netlink: 'syz.2.2008': attribute type 13 has an invalid length.
[  163.106425][T12549] netlink: 'syz.2.2008': attribute type 17 has an invalid length.
[  163.141721][T12549] ip6gretap0: left promiscuous mode
[  163.154198][T12549] 8021q: adding VLAN 0 to HW filter on device team0
[  163.163359][T12549] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  163.584978][T12549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  163.820821][T12575] netlink: 'syz.1.2012': attribute type 41 has an invalid length.
[  164.000803][T12587] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.003421][T12587] syzkaller0: entered promiscuous mode
[  164.005350][T12587] syzkaller0: entered allmulticast mode
[  164.016774][T12587] tipc: Resetting bearer <eth:syzkaller0>
[  164.021917][T12586] tipc: Resetting bearer <eth:syzkaller0>
[  164.031674][T12586] tipc: Disabling bearer <eth:syzkaller0>
[  164.418454][T12595] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  164.462790][T12602] netlink: 'syz.2.2019': attribute type 1 has an invalid length.
[  164.543400][T12614] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.543449][T12612] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.703996][T12624] bond0 (unregistering): Released all slaves
[  164.749917][T12633] netlink: ct family unspecified
[  164.751840][T12633] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.832770][T12637] nbd: illegal input index -1
[  165.001440][T12652] __nla_validate_parse: 9 callbacks suppressed
[  165.001455][T12652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2034'.
[  165.008440][T12652] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  165.353203][T12659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2035'.
[  165.647741][T12673] RDS: rds_bind could not find a transport for fe80::2e, load rds_tcp or rds_rdma?
[  165.662632][T12673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2042'.
[  166.427741][T12706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2052'.
[  166.432616][T12706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2052'.
[  166.502598][T12710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2054'.
[  166.524845][T12710] bridge9: port 1(veth13) entered blocking state
[  166.527592][T12710] bridge9: port 1(veth13) entered disabled state
[  166.530560][T12710] veth13: entered allmulticast mode
[  166.538760][T12710] veth13: entered promiscuous mode
[  166.550652][T12710] bridge9: port 2(veth0_to_bond) entered blocking state
[  166.553122][T12710] bridge9: port 2(veth0_to_bond) entered disabled state
[  166.555671][T12710] veth0_to_bond: entered allmulticast mode
[  166.568096][T12715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2056'.
[  166.568731][T12710] veth0_to_bond: entered promiscuous mode
[  166.571448][T12715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2056'.
[  166.577362][T12715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2056'.
[  166.583289][T12715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2056'.
[  166.584161][T12710] vlan3: entered allmulticast mode
[  166.588440][T12710] veth1: entered allmulticast mode
[  166.590299][T12710] bridge9: port 3(vlan3) entered blocking state
[  166.593104][T12710] bridge9: port 3(vlan3) entered disabled state
[  166.596187][T12710] vlan3: entered promiscuous mode
[  166.609371][T12710] veth1: entered promiscuous mode
[  166.752985][T12736] team0: Mode "loadbAlance" not found
[  166.772875][T12736] smc: net device bond0 applied user defined pnetid SYZ2
[  167.372253][T12818] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  167.376856][T12818] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  167.413447][T12821] IPv6: sit5: Disabled Multicast RS
[  167.517286][T12823]  speed is unknown, defaulting to 1000
[  167.520232][T12823]  speed is unknown, defaulting to 1000
[  168.015428][T12853] syzkaller1: entered promiscuous mode
[  168.029286][T12853] syzkaller1: entered allmulticast mode
[  180.430487][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  182.829146][ T1118] block nbd1: Possible stuck request ffff888036f98000: control (read@0,1024B). Runtime 30 seconds
[  182.833481][ T1118] block nbd1: Possible stuck request ffff888036f98200: control (read@1024,1024B). Runtime 30 seconds
[  182.837682][ T1118] block nbd1: Possible stuck request ffff888036f98400: control (read@2048,1024B). Runtime 30 seconds
[  182.845235][ T1118] block nbd1: Possible stuck request ffff888036f98600: control (read@3072,1024B). Runtime 30 seconds
[  189.826770][T12879] __nla_validate_parse: 13 callbacks suppressed
[  189.826781][T12879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2109'.
[  189.941999][T12894] validate_nla: 3 callbacks suppressed
[  189.942012][T12894] netlink: 'syz.1.2118': attribute type 9 has an invalid length.
[  190.030985][T12899] netlink: 'syz.0.2120': attribute type 1 has an invalid length.
[  190.208495][T12920] netlink: 'syz.1.2127': attribute type 1 has an invalid length.
[  190.232193][T12920] 8021q: adding VLAN 0 to HW filter on device bond13
[  190.252259][T12920] bond13: (slave ip6erspan0): making interface the new active one
[  190.255903][T12920] bond13: (slave ip6erspan0): Enslaving as an active interface with an up link
[  190.292986][T12925] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  190.300725][ T5853]  speed is unknown, defaulting to 1000
[  190.320540][ T5853] syz0: Port: 1 Link ACTIVE
[  190.322307][T12925] veth0_to_team: entered promiscuous mode
[  190.324255][T12925] veth0_to_team: entered allmulticast mode
[  190.329001][ T5853]  speed is unknown, defaulting to 1000
[  190.472272][T12937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2134'.
[  190.567677][T12947] tipc: Cannot configure node identity twice
[  190.572352][T12946] tipc: Cannot configure node identity twice
[  190.658433][T12957] bpq0: entered promiscuous mode
[  190.731598][T12969] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2143'.
[  190.876435][T12990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2145'.
[  190.931706][T12994] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  190.936024][T12994] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  191.036385][T12996] netpci0: tun_chr_ioctl cmd 1074025681
[  191.358708][T13000] netlink: 'syz.0.2150': attribute type 14 has an invalid length.
[  191.361621][T13000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2150'.
[  191.361782][T13001] netlink: 'syz.0.2150': attribute type 16 has an invalid length.
[  191.365072][T13000] netlink: 'syz.0.2150': attribute type 14 has an invalid length.
[  191.367179][T13001] netlink: 'syz.0.2150': attribute type 3 has an invalid length.
[  191.367187][T13001] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.2150'.
[  191.375628][T13000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2150'.
[  191.380118][T13000] netlink: 'syz.0.2150': attribute type 14 has an invalid length.
[  191.382745][T13000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2150'.
[  191.386132][T13000] netlink: 'syz.0.2150': attribute type 14 has an invalid length.
[  191.388752][T13000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2150'.
[  191.391950][T13000] netlink: 'syz.0.2150': attribute type 14 has an invalid length.
[  191.394897][T13000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2150'.
[  191.744833][T13019]  speed is unknown, defaulting to 1000
[  191.747702][T13019]  speed is unknown, defaulting to 1000
[  191.795713][T13028] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  192.197172][T13058] syzkaller1: entered promiscuous mode
[  192.200169][T13058] syzkaller1: entered allmulticast mode
[  192.266897][T13069] sctp: [Deprecated]: syz.0.2172 (pid 13069) Use of struct sctp_assoc_value in delayed_ack socket option.
[  192.266897][T13069] Use struct sctp_sack_info instead
[  192.360124][T13078] erspan0: left allmulticast mode
[  192.371528][T13078] bond1: left promiscuous mode
[  192.376492][T13078] batadv1: left promiscuous mode
[  192.379567][T13078] batadv1: left allmulticast mode
[  192.382903][T13078] batadv2: left promiscuous mode
[  192.384669][T13078] batadv2: left allmulticast mode
[  192.390232][T13078] geneve3: left promiscuous mode
[  192.392144][T13078] geneve3: left allmulticast mode
[  192.399524][T13078] geneve4: left promiscuous mode
[  192.403705][T13078] sit3: left promiscuous mode
[  192.410455][T13078] veth9: left promiscuous mode
[  192.423673][T13078] ipvlan2: left allmulticast mode
[  192.425708][T13078] bond0: left allmulticast mode
[  192.432924][T13078] bond4: left promiscuous mode
[  192.434616][T13078] wireguard0: left promiscuous mode
[  192.442545][T13078] veth11: left promiscuous mode
[  192.445818][T13078] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  192.449485][T13078] macvtap1: left allmulticast mode
[  192.452637][T13078] hsr0: left allmulticast mode
[  192.454457][T13078] hsr_slave_0: left allmulticast mode
[  192.456254][T13078] hsr_slave_1: left allmulticast mode
[  192.458673][T13078] hsr0: left promiscuous mode
[  192.460505][T13078] macvlan1: left promiscuous mode
[  192.462350][T13078] macvlan1: left allmulticast mode
[  192.475114][T11890] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.478915][T11890] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.488000][T11890] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.491282][T11890] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.671310][T13114] batadv1: entered promiscuous mode
[  192.673188][T13114] batadv1: entered allmulticast mode
[  192.846996][T13138] gre0: entered allmulticast mode
[  193.097636][T13164] netlink: zone id is out of range
[  193.099821][T13164] netlink: zone id is out of range
[  193.111792][T13164] netlink: zone id is out of range
[  193.113526][T13164] netlink: zone id is out of range
[  193.115230][T13164] netlink: zone id is out of range
[  193.117031][T13164] netlink: zone id is out of range
[  193.122509][T13164] netlink: zone id is out of range
[  193.124253][T13164] netlink: zone id is out of range
[  193.125906][T13164] netlink: zone id is out of range
[  193.214848][T13183] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  193.225846][T13183] syzkaller0: entered promiscuous mode
[  193.227666][T13183] syzkaller0: entered allmulticast mode
[  193.236195][T13187] !: renamed from dummy0 (while UP)
[  193.268642][T13193] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  193.296895][T13185] tipc: Resetting bearer <eth:syzkaller0>
[  193.305660][T13181] tipc: Resetting bearer <eth:syzkaller0>
[  193.318287][T13181] tipc: Disabling bearer <eth:syzkaller0>
[  193.437409][T13205]  speed is unknown, defaulting to 1000
[  193.463982][T13209]  speed is unknown, defaulting to 1000
[  193.466548][T13205]  speed is unknown, defaulting to 1000
[  193.814664][T13209]  speed is unknown, defaulting to 1000
[  194.676970][T13316] veth0: entered promiscuous mode
[  194.684057][T13315] veth0: left promiscuous mode
[  194.854118][T13329] syzkaller1: entered promiscuous mode
[  194.856387][T13329] syzkaller1: entered allmulticast mode
[  195.114819][T13347] __nla_validate_parse: 179 callbacks suppressed
[  195.114829][T13347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2240'.
[  195.120621][T13347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2240'.
[  195.151405][T13354] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2242'.
[  195.176927][T13356] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2243'.
[  195.375352][T13415] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  195.378237][T13415] syzkaller0: entered promiscuous mode
[  195.380936][T13415] syzkaller0: entered allmulticast mode
[  195.394411][T13416] tipc: Resetting bearer <eth:syzkaller0>
[  195.404567][T13416] tipc: Disabling bearer <eth:syzkaller0>
[  195.591517][T13436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2255'.
[  195.612265][T13436] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.746235][T13452] validate_nla: 128 callbacks suppressed
[  195.746244][T13452] netlink: 'syz.0.2260': attribute type 6 has an invalid length.
[  195.765935][T13452] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2260'.
[  195.814219][T13458] netlink: 'syz.0.2263': attribute type 4 has an invalid length.
[  195.932598][T13471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2268'.
[  195.971299][T13476] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2270'.
[  195.980616][T13476] net_ratelimit: 95 callbacks suppressed
[  195.980625][T13476] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  196.101273][T13486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2274'.
[  196.285211][T13498] netlink: 15998 bytes leftover after parsing attributes in process `syz.2.2278'.
[  196.331273][T13507] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  196.334303][T13507] syzkaller0: entered promiscuous mode
[  196.336667][T13507] syzkaller0: entered allmulticast mode
[  196.346698][T13507] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  196.362646][T13505] tipc: Resetting bearer <eth:syzkaller0>
[  196.376118][T13505] tipc: Disabling bearer <eth:syzkaller0>
[  196.492706][T13522] x9: renamed from bridge_slave_0
[  196.554503][T13526] netlink: 'syz.1.2286': attribute type 5 has an invalid length.
[  197.610623][T13579] netlink: 'syz.0.2297': attribute type 1 has an invalid length.
[  197.626350][T13579] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  197.712717][T13588] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  197.714366][T13584] _Z`Ԁ@: entered promiscuous mode
[  197.743768][T13594] netlink: 'syz.1.2302': attribute type 10 has an invalid length.
[  197.755136][T13594] 8021q: adding VLAN 0 to HW filter on device team0
[  197.758375][T13594] team0: entered allmulticast mode
[  197.760426][T13594] bond0: (slave team0): Enslaving as an active interface with an up link
[  198.094984][T13647] veth12: entered allmulticast mode
[  198.151463][ T5860] IPVS: starting estimator thread 0...
[  198.259097][T13655] IPVS: using max 79 ests per chain, 189600 per kthread
[  198.304234][T13681] can: request_module (can-proto-0) failed.
[  199.252510][T13722] netlink: 'syz.1.2345': attribute type 1 has an invalid length.
[  199.739361][T13768] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  199.753653][T13770] netlink: 'syz.0.2362': attribute type 1 has an invalid length.
[  200.027023][T13808] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  200.195488][T13831] __nla_validate_parse: 24 callbacks suppressed
[  200.195497][T13831] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2383'.
[  200.222839][T13835] syzkaller1: entered promiscuous mode
[  200.227344][T13835] syzkaller1: entered allmulticast mode
[  200.275535][T13844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2388'.
[  200.338848][T13856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2393'.
[  200.407452][T13865] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2395'.
[  200.411768][T13865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2395'.
[  200.450257][T13870] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2394'.
[  200.452407][T13864] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2395'.
[  200.457738][T13870] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2394'.
[  200.534132][T13874] 8021q: adding VLAN 0 to HW filter on device bond14
[  200.586608][T13879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2398'.
[  200.654203][T13889] veth0: entered promiscuous mode
[  200.688332][T13889] syzkaller1: entered promiscuous mode
[  200.690308][T13889] syzkaller1: entered allmulticast mode
[  200.700816][T13891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2400'.
[  200.701480][T13894] netlink: 'syz.0.2402': attribute type 2 has an invalid length.
[  200.733170][T13889] vlan3 (unregistering): left promiscuous mode
[  200.735298][T13889] bridge9: port 3(vlan3) entered disabled state
[  200.951190][T13919] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  200.986335][T13920] bridge0: Device is already in use.
[  200.994386][T13922] IPVS: set_ctl: invalid protocol: 133 0.0.0.0:20000
[  201.092143][T13928] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  201.106797][T13931] syzkaller1: entered promiscuous mode
[  201.115699][T13931] syzkaller1: entered allmulticast mode
[  201.489297][T13993] sctp: [Deprecated]: syz.1.2434 (pid 13993) Use of struct sctp_assoc_value in delayed_ack socket option.
[  201.489297][T13993] Use struct sctp_sack_info instead
[  201.495344][T13993] netlink: 'syz.1.2434': attribute type 29 has an invalid length.
[  201.501711][T13993] netlink: 'syz.1.2434': attribute type 29 has an invalid length.
[  202.072069][T14052] netlink: 'syz.0.2452': attribute type 2 has an invalid length.
[  202.074739][T14052] netlink: 'syz.0.2452': attribute type 8 has an invalid length.
[  202.104829][T14054] netlink: 'syz.0.2453': attribute type 1 has an invalid length.
[  202.274505][T14071] netlink: 'syz.0.2457': attribute type 10 has an invalid length.
[  202.277242][T14071] dummy0: entered allmulticast mode
[  202.282575][T14071] bridge0: port 3(dummy0) entered blocking state
[  202.284859][T14071] bridge0: port 3(dummy0) entered disabled state
[  202.288349][T14071] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  202.495405][T14086] netlink: 'syz.0.2461': attribute type 29 has an invalid length.
[  202.499841][T14086] netlink: 'syz.0.2461': attribute type 29 has an invalid length.
[  202.511212][T14086] syzkaller1: entered promiscuous mode
[  202.513523][T14086] syzkaller1: entered allmulticast mode
[  202.603368][T14090] netlink: 'syz.0.2463': attribute type 1 has an invalid length.
[  202.606423][T14090] netlink: 'syz.0.2463': attribute type 1 has an invalid length.
[  203.691666][T14144] ip6tnl4: entered promiscuous mode
[  203.693947][T14144] ip6tnl4: entered allmulticast mode
[  203.904933][T14156] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  204.467738][ T8168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.470748][ T8168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.477034][T14174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  204.829679][T14190] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  204.848329][ T5887] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  205.224532][T14247] __nla_validate_parse: 31 callbacks suppressed
[  205.224542][T14247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2511'.
[  205.420649][T14256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2514'.
[  205.559501][ T5887] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  205.717512][T14279] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2520'.
[  205.721537][T14279] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2520'.
[  206.809529][T14296] netlink: 304 bytes leftover after parsing attributes in process `syz.2.2527'.
[  206.924691][T14309] validate_nla: 1 callbacks suppressed
[  206.924701][T14309] netlink: 'syz.0.2532': attribute type 12 has an invalid length.
[  206.930127][T14309] netlink: 'syz.0.2532': attribute type 29 has an invalid length.
[  206.934196][T14309] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2532'.
[  206.937529][T14309] netlink: 59 bytes leftover after parsing attributes in process `syz.0.2532'.
[  206.963711][T14306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2531'.
[  206.982008][T14316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2534'.
[  207.113262][T14331] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2539'.
[  207.132608][T14331] xt_socket: unknown flags 0xd0
[  207.253415][T14350] only policy match revision 0 supported
[  207.253427][T14350] unable to load match
[  207.257068][T14350] ip6_vti0: Master is either lo or non-ether device
[  207.331791][T14360] netlink: 'syz.0.2548': attribute type 4 has an invalid length.
[  208.662719][T14445] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  208.733843][T14443] "syz.0.2577" (14443) uses obsolete ecb(arc4) skcipher
[  208.740104][ T5852] nci: nci_rsp_packet: unknown rsp opcode 0x204
[  208.774306][T14452] vlan0: entered promiscuous mode
[  209.539156][T14476] tap0: tun_chr_ioctl cmd 1074025677
[  209.541061][T14476] tap0: linktype set to 776
[  209.554712][T14476] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  209.557582][T14476] ip6tnl0: entered allmulticast mode
[  209.566734][T14476] ip6tnl0: left allmulticast mode
[  210.067324][T14531] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  210.455992][T14568] __nla_validate_parse: 18 callbacks suppressed
[  210.456002][T14568] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2614'.
[  210.475780][T14562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2609'.
[  210.624304][T14585] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  210.627530][T14573] syzkaller0: entered promiscuous mode
[  210.630739][T14573] syzkaller0: entered allmulticast mode
[  210.643889][T14573] tipc: Resetting bearer <eth:syzkaller0>
[  210.712744][T14572] tipc: Resetting bearer <eth:syzkaller0>
[  210.725463][T14572] tipc: Disabling bearer <eth:syzkaller0>
[  210.841185][T14598] netlink: zone id is out of range
[  210.843848][T14604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2625'.
[  210.852079][T14598] netlink: zone id is out of range
[  210.854643][T14598] netlink: zone id is out of range
[  210.857053][T14598] netlink: zone id is out of range
[  210.872339][T14598] netlink: zone id is out of range
[  210.874702][T14598] netlink: zone id is out of range
[  210.877144][T14598] netlink: zone id is out of range
[  210.881666][T14598] netlink: zone id is out of range
[  210.919463][T14608]  speed is unknown, defaulting to 1000
[  210.923535][T14608]  speed is unknown, defaulting to 1000
[  210.941667][T14614] netlink: 'syz.0.2627': attribute type 21 has an invalid length.
[  210.944684][T14614] netlink: 'syz.0.2627': attribute type 22 has an invalid length.
[  210.947369][T14614] netlink: 'syz.0.2627': attribute type 23 has an invalid length.
[  210.951143][T14614] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2627'.
[  210.954933][T14614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2627'.
[  210.983163][T14614] netlink: 'syz.0.2627': attribute type 18 has an invalid length.
[  210.986142][T14614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2627'.
[  210.991501][T14614] netlink: 'syz.0.2627': attribute type 18 has an invalid length.
[  211.229818][   T54] Bluetooth: hci2: link tx timeout
[  211.231982][   T54] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  211.251923][T14629] bond0: up delay (65536) is not a multiple of miimon (100), value rounded to 65500 ms
[  211.480444][T14652] netlink: 'syz.0.2640': attribute type 10 has an invalid length.
[  211.513234][T14654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2641'.
[  212.283940][T14692] netlink: 566 bytes leftover after parsing attributes in process `syz.1.2649'.
[  212.324011][T14697] syzkaller1: entered promiscuous mode
[  212.325915][T14697] syzkaller1: entered allmulticast mode
[  212.333043][T14697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2650'.
[  212.336290][T14698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2650'.
[  212.644043][T14733] GUP no longer grows the stack in syz.1.2654 (14733): 200000006000-20000000a000 (200000005000)
[  212.649291][T14733] CPU: 0 UID: 0 PID: 14733 Comm: syz.1.2654 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93-dirty #0 PREEMPT(full) 
[  212.649310][T14733] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  212.649318][T14733] Call Trace:
[  212.649324][T14733]  <TASK>
[  212.649329][T14733]  dump_stack_lvl+0x189/0x250
[  212.649349][T14733]  ? __pfx_dump_stack_lvl+0x10/0x10
[  212.649363][T14733]  ? __pfx__printk+0x10/0x10
[  212.649377][T14733]  ? find_vma+0xe7/0x160
[  212.649401][T14733]  __get_user_pages+0x2a60/0x30b0
[  212.649439][T14733]  ? __pfx___get_user_pages+0x10/0x10
[  212.649452][T14733]  ? __gup_longterm_locked+0xbf7/0x15b0
[  212.649464][T14733]  ? down_read_killable+0x1d1/0x350
[  212.649476][T14733]  ? try_get_folio+0x633/0x660
[  212.649493][T14733]  __gup_longterm_locked+0xd66/0x15b0
[  212.649511][T14733]  ? try_grab_folio_fast+0x1be/0x4f0
[  212.649534][T14733]  ? gup_fast_fallback+0x1afc/0x2260
[  212.649549][T14733]  gup_fast_fallback+0x1cd4/0x2260
[  212.649589][T14733]  ? __pfx_gup_fast_fallback+0x10/0x10
[  212.649601][T14733]  ? __mutex_lock+0x335/0x1340
[  212.649619][T14733]  ? is_valid_gup_args+0x11f/0x200
[  212.649633][T14733]  ? get_user_pages_fast+0x4d/0xb0
[  212.649649][T14733]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  212.649666][T14733]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  212.649682][T14733]  ? wait_for_space+0x24d/0x2d0
[  212.649699][T14733]  iov_iter_get_pages2+0x5e/0xa0
[  212.649716][T14733]  __se_sys_vmsplice+0x548/0x10d0
[  212.649745][T14733]  ? futex_private_hash_put+0x4b/0x280
[  212.649768][T14733]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  212.649785][T14733]  ? __pfx_futex_wake+0x10/0x10
[  212.649806][T14733]  ? __lock_acquire+0xab9/0xd20
[  212.649843][T14733]  ? do_pipe2+0xf7/0x170
[  212.649861][T14733]  ? rcu_is_watching+0x15/0xb0
[  212.649881][T14733]  ? do_syscall_64+0xbe/0x3b0
[  212.649898][T14733]  do_syscall_64+0xfa/0x3b0
[  212.649911][T14733]  ? lockdep_hardirqs_on+0x9c/0x150
[  212.649924][T14733]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.649936][T14733]  ? exc_page_fault+0x9f/0xf0
[  212.649980][T14733]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.649990][T14733] RIP: 0033:0x7f75a8d8ebe9
[  212.650002][T14733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  212.650014][T14733] RSP: 002b:00007f75a9ccb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  212.650029][T14733] RAX: ffffffffffffffda RBX: 00007f75a8fb5fa0 RCX: 00007f75a8d8ebe9
[  212.650038][T14733] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000d
[  212.650047][T14733] RBP: 00007f75a8e11e19 R08: 0000000000000000 R09: 0000000000000000
[  212.650054][T14733] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  212.650061][T14733] R13: 00007f75a8fb6038 R14: 00007f75a8fb5fa0 R15: 00007ffec6743478
[  212.650083][T14733]  </TASK>
[  212.794771][T14738] pim6reg: entered allmulticast mode
[  212.797117][T14739] pim6reg: left allmulticast mode
[  212.927336][ T1118] block nbd1: Possible stuck request ffff888036f98000: control (read@0,1024B). Runtime 60 seconds
[  212.932854][ T1118] block nbd1: Possible stuck request ffff888036f98200: control (read@1024,1024B). Runtime 60 seconds
[  212.936907][ T1118] block nbd1: Possible stuck request ffff888036f98400: control (read@2048,1024B). Runtime 60 seconds
[  212.941249][ T1118] block nbd1: Possible stuck request ffff888036f98600: control (read@3072,1024B). Runtime 60 seconds
[  212.955568][T14758] netlink: 'syz.0.2657': attribute type 9 has an invalid length.
[  212.967365][T14759] netlink: 'syz.0.2657': attribute type 9 has an invalid length.
[  213.317997][ T5823] Bluetooth: hci2: command 0x0419 tx timeout
[  213.529476][T14796] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  214.851247][T14817] syzkaller0: entered promiscuous mode
[  214.853753][T14817] syzkaller0: entered allmulticast mode
[  215.343033][T14846] net_ratelimit: 21 callbacks suppressed
[  215.343044][T14846] openvswitch: netlink: VXLAN extension 234 out of range max 1
[  215.445658][T14853]  speed is unknown, defaulting to 1000
[  215.453016][T14853]  speed is unknown, defaulting to 1000
[  215.557593][T14858] __nla_validate_parse: 9 callbacks suppressed
[  215.557602][T14858] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2691'.
[  215.566689][T14858] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2691'.
[  215.634541][T14862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2692'.
[  215.645195][T14862] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  215.649780][T14862] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  215.654302][T14862] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  216.597447][T14862] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  216.601707][T14862] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  216.605881][T14862] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  216.685345][T14862] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  216.705803][T14862] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  216.711084][T14862] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  216.757173][T14862] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  216.766373][T14862] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  216.771225][T14862] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  216.861737][ T9488] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  216.864889][ T9488] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  216.868191][ T9488] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  216.880140][ T9488] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  216.883014][ T9488] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  216.885760][ T9488] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  216.893616][ T5852] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  216.897081][ T5852] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  216.902686][ T5852] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  216.910987][ T5852] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  216.914470][ T5852] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  216.917770][ T5852] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  216.944171][T14881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2699'.
[  216.994589][T14881]  speed is unknown, defaulting to 1000
[  216.997562][T14881]  speed is unknown, defaulting to 1000
[  217.214558][T14891] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2700'.
[  217.283477][T14897] netlink: 'syz.1.2701': attribute type 10 has an invalid length.
[  217.287011][T14897] batadv0: left promiscuous mode
[  217.291369][T14897] 8021q: adding VLAN 0 to HW filter on device batadv0
[  217.302500][T14897] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  217.312276][T14897] syz.1.2701 (14897) used greatest stack depth: 18424 bytes left
[  217.591777][T14906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2705'.
[  217.739278][T14911]  speed is unknown, defaulting to 1000
[  217.742330][T14911]  speed is unknown, defaulting to 1000
[  217.804449][T14916] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  217.813021][T14916] syzkaller0: entered promiscuous mode
[  217.815015][T14916] syzkaller0: entered allmulticast mode
[  217.920782][T14911] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2707'.
[  217.924333][T14911] netlink: 'syz.2.2707': attribute type 13 has an invalid length.
[  217.926996][T14911] netlink: 'syz.2.2707': attribute type 17 has an invalid length.
[  218.026054][T14910] tipc: Resetting bearer <eth:syzkaller0>
[  218.045354][T14910] tipc: Disabling bearer <eth:syzkaller0>
[  218.189162][T14931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2712'.
[  218.283788][T14937] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  218.326804][T14938] syzkaller0: entered promiscuous mode
[  218.330835][T14938] syzkaller0: entered allmulticast mode
[  218.373943][T14945] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2716'.
[  218.422079][T14952] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2718'.
[  218.514636][   T56] block nbd2: Receive control failed (result -32)
[  218.841819][T14988] syzkaller0: entered promiscuous mode
[  218.843723][T14988] syzkaller0: entered allmulticast mode
[  219.472687][T14999] netlink: 'syz.1.2730': attribute type 1 has an invalid length.
[  219.507137][T15004] pim6reg1: entered promiscuous mode
[  219.510516][T15004] pim6reg1: entered allmulticast mode
[  220.650509][T15021] __nla_validate_parse: 1 callbacks suppressed
[  220.650524][T15021] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2736'.
[  220.658829][T15021] netlink: 'syz.0.2736': attribute type 1 has an invalid length.
[  220.795822][T15029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2739'.
[  220.838210][T15031] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  220.902062][T15037] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2742'.
[  221.022064][T15052] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  221.071200][T15057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2747'.
[  221.154342][T15066] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  221.203366][T15070] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2749'.
[  221.299036][T15079] netlink: 'syz.0.2753': attribute type 64 has an invalid length.
[  221.345032][T15079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2753'.
[  221.401229][T15083] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2754'.
[  221.441813][T15087] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2755'.
[  221.500904][T15094] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2758'.
[  221.825278][T15129] netlink: 'syz.0.2769': attribute type 1 has an invalid length.
[  221.832737][T15129] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2769'.
[  222.372348][T15184] netlink: 'syz.1.2787': attribute type 30 has an invalid length.
[  222.398014][ T5273] udevd[5273]: worker [8747] /devices/virtual/block/nbd1 is taking a long time
[  222.720179][T15215] netlink: 'syz.1.2796': attribute type 22 has an invalid length.
[  222.723958][T15215] netlink: 'syz.1.2796': attribute type 22 has an invalid length.
[  222.783104][T15221] Unsupported ieee802154 address type: 0
[  222.977117][T15233] gretap2: entered promiscuous mode
[  222.979848][T15233] gretap2: entered allmulticast mode
[  223.211083][T15255]  speed is unknown, defaulting to 1000
[  223.217590][T15255]  speed is unknown, defaulting to 1000
[  223.421824][T15276] syzkaller0: entered promiscuous mode
[  223.428466][T15276] syzkaller0: entered allmulticast mode
[  223.606043][T15283] bpq0: left promiscuous mode
[  223.713955][T15294] veth1_vlan: left allmulticast mode
[  223.722845][T15294] macvlan0: left allmulticast mode
[  223.740621][T15294] netlink: 'syz.1.2823': attribute type 1 has an invalid length.
[  224.549971][T15361] 8021q: adding VLAN 0 to HW filter on device bond18
[  224.644042][T15366] veth0_to_bond: left allmulticast mode
[  224.645899][T15366] veth0_to_bond: left promiscuous mode
[  224.647884][T15366] bridge9: port 2(veth0_to_bond) entered disabled state
[  224.843201][T15387]  speed is unknown, defaulting to 1000
[  224.846016][T15387]  speed is unknown, defaulting to 1000
[  225.975508][T15398] __nla_validate_parse: 30 callbacks suppressed
[  225.975518][T15398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2855'.
[  225.978079][T15399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2855'.
[  226.306636][T15426] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  226.422020][T15446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2869'.
[  226.569984][T15457] syzkaller1: entered promiscuous mode
[  226.571764][T15457] syzkaller1: entered allmulticast mode
[  227.203388][T15473] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2878'.
[  227.206472][T15473] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2878'.
[  227.212107][T15474] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2878'.
[  227.215214][T15474] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2878'.
[  227.218899][T15473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2878'.
[  227.218903][T15474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2878'.
[  227.314982][T15477] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  227.317762][T15477] syzkaller0: entered promiscuous mode
[  227.320157][T15477] syzkaller0: entered allmulticast mode
[  227.330112][T15477] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2879'.
[  227.343277][T15476] tipc: Resetting bearer <eth:syzkaller0>
[  227.356102][T15476] tipc: Disabling bearer <eth:syzkaller0>
[  227.718768][T15499] netlink: 'syz.1.2883': attribute type 16 has an invalid length.
[  227.722012][T15499] netlink: 'syz.1.2883': attribute type 17 has an invalid length.
[  227.725215][T15499] netlink: 'syz.1.2883': attribute type 27 has an invalid length.
[  228.201658][T15520] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  228.293379][T15524] sctp: [Deprecated]: syz.0.2891 (pid 15524) Use of int in maxseg socket option.
[  228.293379][T15524] Use struct sctp_assoc_value instead
[  228.440016][T15532] netlink: 'syz.0.2896': attribute type 3 has an invalid length.
[  228.755937][T15555] batadv_slave_0: entered promiscuous mode
[  228.764755][T15558] netlink: 'syz.1.2904': attribute type 1 has an invalid length.
[  228.787687][T15558] bond19: (slave bridge11): making interface the new active one
[  228.791239][T15558] bond19: (slave bridge11): Enslaving as an active interface with an up link
[  228.876996][T15561] vxcan1: entered allmulticast mode
[  229.005222][T15590]  speed is unknown, defaulting to 1000
[  229.008413][T15590]  speed is unknown, defaulting to 1000
[  229.558969][T15644] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  230.367995][T15708] netlink: 'syz.1.2944': attribute type 2 has an invalid length.
[  230.410575][T15716] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612)
[  230.415020][T15716] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  230.424703][T15715] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  230.431115][T15715] syzkaller0: entered promiscuous mode
[  230.433346][T15715] syzkaller0: entered allmulticast mode
[  230.452186][T15713] tipc: Resetting bearer <eth:syzkaller0>
[  230.457624][T15716] netlink: zone id is out of range
[  230.463964][T15716] netlink: zone id is out of range
[  230.465844][T15716] netlink: zone id is out of range
[  230.466968][T15713] tipc: Disabling bearer <eth:syzkaller0>
[  230.472124][T15716] netlink: zone id is out of range
[  230.473957][T15716] netlink: zone id is out of range
[  230.477605][T15716] netlink: zone id is out of range
[  230.480667][T15716] netlink: zone id is out of range
[  230.486029][T15716] netlink: zone id is out of range
[  230.496523][T15716] bridge0: entered allmulticast mode
[  230.583744][T15736] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  230.586683][T15735] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  230.599556][T15736] syzkaller0: entered promiscuous mode
[  230.601460][T15736] syzkaller0: entered allmulticast mode
[  230.614848][T15736] tipc: Resetting bearer <eth:syzkaller0>
[  230.623073][T15732] tipc: Resetting bearer <eth:syzkaller0>
[  230.632617][T15732] tipc: Disabling bearer <eth:syzkaller0>
[  231.104394][T15778] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  231.291984][T15790] __nla_validate_parse: 28 callbacks suppressed
[  231.291998][T15790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2969'.
[  231.312570][T15790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2969'.
[  231.392924][T15792] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2970'.
[  231.520013][T15805] netlink: 'syz.1.2975': attribute type 1 has an invalid length.
[  231.522699][T15805] netlink: 'syz.1.2975': attribute type 2 has an invalid length.
[  231.526207][T15808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2976'.
[  231.529465][T15808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2976'.
[  231.725326][T15827] netlink: 'syz.0.2982': attribute type 13 has an invalid length.
[  231.732662][T15827] netlink: 'syz.0.2982': attribute type 17 has an invalid length.
[  231.771617][T15827] 8021q: adding VLAN 0 to HW filter on device 
[  231.775219][T15827] 8021q: adding VLAN 0 to HW filter on device team0
[  231.778864][T15827] dummy0: left allmulticast mode
[  231.783160][T15827] net_ratelimit: 4 callbacks suppressed
[  231.783164][T15827] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  231.795273][T15837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2983'.
[  231.809256][T11890] : (slave bond_slave_0): link status definitely down, disabling slave
[  231.814134][T11890] : (slave bond_slave_1): link status definitely down, disabling slave
[  231.819295][T11890] : now running without any active interface!
[  231.822022][ T9488] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  231.912082][T15846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2986'.
[  231.915498][T15847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2986'.
[  231.921036][T15846] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2986'.
[  231.953464][T15849] syzkaller1: entered promiscuous mode
[  231.955541][T15849] syzkaller1: entered allmulticast mode
[  232.122574][T15856] bond6: (slave bridge8): Releasing backup interface
[  232.125798][T15856] bridge8: left promiscuous mode
[  232.127641][T15856] bridge8: left allmulticast mode
[  232.193883][T15860] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2991'.
[  232.577010][T15899] smc: net device bond0 applied user defined pnetid SYZ
[  232.734985][T15905] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:0
[  232.804169][T15911] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003
[  232.824398][T15913] validate_nla: 3 callbacks suppressed
[  232.824406][T15913] netlink: 'syz.2.3010': attribute type 5 has an invalid length.
[  232.832246][T15913] atomic_op ffff88810972a998 conn xmit_atomic 0000000000000000
[  233.047201][T15938] netlink: 'syz.2.3017': attribute type 13 has an invalid length.
[  233.791251][T15979]  speed is unknown, defaulting to 1000
[  233.795052][T15979]  speed is unknown, defaulting to 1000
[  234.551919][T16007] netlink: 'syz.2.3032': attribute type 3 has an invalid length.
[  235.012357][T16024] netlink: 'syz.0.3042': attribute type 10 has an invalid length.
[  235.015852][T16024] wlan1: mtu less than device minimum
[  235.020955][T16024] : (slave wlan1): Error -22 calling dev_set_mtu
[  235.023856][T16024] netlink: 'syz.0.3042': attribute type 10 has an invalid length.
[  235.027205][T16024] wlan1: mtu less than device minimum
[  235.029737][T16024] : (slave wlan1): Error -22 calling dev_set_mtu
[  235.032633][T16024] netlink: 'syz.0.3042': attribute type 10 has an invalid length.
[  235.035940][T16024] wlan1: mtu less than device minimum
[  235.045271][T16024] : (slave wlan1): Error -22 calling dev_set_mtu
[  235.055737][T16024] netlink: 'syz.0.3042': attribute type 10 has an invalid length.
[  235.072570][T16024] wlan1: mtu less than device minimum
[  235.074869][T16024] : (slave wlan1): Error -22 calling dev_set_mtu
[  235.093814][T16024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  235.123427][T16033] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  235.126716][T16033] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  235.134334][T16033] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  235.181579][T16040] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  235.206707][T16033] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  235.210506][T16033] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  235.213830][T16033] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  236.200445][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  236.279274][T16033] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  236.283362][T16033] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  236.287623][T16033] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  236.334507][T16033] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  236.341885][T16033] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  236.347069][T16033] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  236.401251][T16053] openvswitch: netlink: IPv4 tunnel dst address is zero
[  236.429861][T16054] __nla_validate_parse: 20 callbacks suppressed
[  236.429883][T16054] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3051'.
[  236.454618][T11890] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  236.457289][T11890] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  236.468837][T11890] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  236.487645][T11890] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  236.492804][T11890] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  236.501655][T11890] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  236.510469][T11890] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  236.513239][T11890] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  236.515993][T11890] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  236.532051][T11890] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  236.537387][T11890] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  236.545404][T11890] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  236.765461][T16087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3060'.
[  236.885685][T16094] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3063'.
[  236.941739][T16100] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  236.944567][T16100] syzkaller0: entered promiscuous mode
[  236.946424][T16100] syzkaller0: entered allmulticast mode
[  236.962151][T16100] tipc: Resetting bearer <eth:syzkaller0>
[  236.966562][T16099] tipc: Resetting bearer <eth:syzkaller0>
[  236.980925][T16099] tipc: Disabling bearer <eth:syzkaller0>
[  237.228384][T16121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3072'.
[  237.232095][T16121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3072'.
[  237.235928][T16121] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3072'.
[  237.243023][T16121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3072'.
[  237.411103][T16141] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3078'.
[  237.415365][T16141] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3078'.
[  237.583813][T16160] sctp: [Deprecated]: syz.0.3084 (pid 16160) Use of int in max_burst socket option.
[  237.583813][T16160] Use struct sctp_assoc_value instead
[  237.679064][T16165] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3086'.
[  237.855842][T16172] netlink: 'syz.0.3089': attribute type 9 has an invalid length.
[  238.346229][T16189] netlink: zone id is out of range
[  238.348840][T16189] netlink: zone id is out of range
[  238.351056][T16189] netlink: set zone limit has 4 unknown bytes
[  238.393808][T16193] netlink: 'syz.2.3097': attribute type 1 has an invalid length.
[  240.123168][T16240] netlink: 'syz.2.3115': attribute type 10 has an invalid length.
[  240.584580][T16258] netlink: 'syz.2.3122': attribute type 7 has an invalid length.
[  240.620972][T16261] syzkaller1: entered promiscuous mode
[  240.622885][T16261] syzkaller1: entered allmulticast mode
[  240.629016][T16261] veth0_to_bridge: entered promiscuous mode
[  240.631889][T16261] veth0_to_bridge: left promiscuous mode
[  240.717401][T16265] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  240.721535][T16265] syzkaller0: entered promiscuous mode
[  240.723660][T16265] syzkaller0: entered allmulticast mode
[  240.735584][T16269] tipc: Resetting bearer <eth:syzkaller0>
[  240.739018][T16264] tipc: Resetting bearer <eth:syzkaller0>
[  240.747359][T16264] tipc: Disabling bearer <eth:syzkaller0>
[  240.853423][T16276] netlink: 'syz.1.3127': attribute type 1 has an invalid length.
[  240.870509][T16276] 8021q: adding VLAN 0 to HW filter on device bond20
[  240.926635][T16281] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  240.931107][T16281] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  240.935931][T16281] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  240.972238][T16281] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  240.976059][T16281] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  240.979704][T16281] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  241.023577][T16281] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  241.026914][T16281] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  241.031291][T16281] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  241.083312][T16281] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  241.086719][T16281] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  241.092215][T16281] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  241.175277][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  241.180926][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  241.183730][   T12] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  241.191620][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  241.194714][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  241.197499][   T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  241.214219][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  241.220467][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  241.223280][   T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  241.226089][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  241.235195][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  241.240635][   T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  241.278605][T16295] netlink: 'syz.0.3134': attribute type 13 has an invalid length.
[  241.396269][T16304] geneve4: entered promiscuous mode
[  241.520682][T16330] __nla_validate_parse: 19 callbacks suppressed
[  241.520696][T16330] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3144'.
[  241.533608][T16330] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3144'.
[  241.545540][T16330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3144'.
[  241.571584][T16333] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3145'.
[  241.692374][T16344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3147'.
[  241.695641][T16344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3147'.
[  241.711493][T16344] bridge0: port 3(vlan0) entered blocking state
[  241.715076][T16344] bridge0: port 3(vlan0) entered disabled state
[  241.720417][T16344] vlan0: entered allmulticast mode
[  241.723723][T16344] vlan0: left allmulticast mode
[  241.744704][T16348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3148'.
[  241.747773][T16348] netlink: 'syz.2.3148': attribute type 2 has an invalid length.
[  241.750499][T16348] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3148'.
[  241.806589][T16356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3151'.
[  241.810790][T16356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3151'.
[  241.814607][T16356] netlink: 'syz.0.3151': attribute type 20 has an invalid length.
[  241.820690][T16356] netlink: 'syz.0.3151': attribute type 20 has an invalid length.
[  242.035494][T16382] syzkaller1: entered promiscuous mode
[  242.037691][T16382] syzkaller1: entered allmulticast mode
[  242.368106][T16403] block nbd3: server does not support multiple connections per device.
[  242.375773][T16403] block nbd3: shutting down sockets
[  242.566800][T16412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  242.816149][T16445] sch_tbf: burst 2 is lower than device lo mtu (327700) !
[  242.867244][T16452] netlink: 'syz.2.3180': attribute type 282 has an invalid length.
[  242.874841][T16453] syzkaller1: entered promiscuous mode
[  242.876846][T16453] syzkaller1: entered allmulticast mode
[  242.889256][T16453] syzkaller1: left promiscuous mode
[  242.893067][T16453] syzkaller1: left allmulticast mode
[  242.993313][ T1118] block nbd1: Possible stuck request ffff888036f98000: control (read@0,1024B). Runtime 90 seconds
[  242.998150][ T1118] block nbd1: Possible stuck request ffff888036f98200: control (read@1024,1024B). Runtime 90 seconds
[  243.002536][ T1118] block nbd1: Possible stuck request ffff888036f98400: control (read@2048,1024B). Runtime 90 seconds
[  243.007323][ T1118] block nbd1: Possible stuck request ffff888036f98600: control (read@3072,1024B). Runtime 90 seconds
[  244.053536][T16498] netlink: 'syz.2.3196': attribute type 6 has an invalid length.
[  244.057093][T16498] netlink: 'syz.2.3196': attribute type 5 has an invalid length.
[  244.071551][T16498] netlink: 'syz.2.3196': attribute type 83 has an invalid length.
[  244.123920][T16502] netlink: 'syz.2.3199': attribute type 1 has an invalid length.
[  245.028891][T16545] nbd: must specify at least one socket
[  245.186137][T16556] smc: net device bond0 erased user defined pnetid SYZ
[  245.270196][T16567] netlink: 'syz.2.3220': attribute type 6 has an invalid length.
[  245.302308][T16556] bond0 (unregistering): Released all slaves
[  245.352234][T16576] vxcan1: entered allmulticast mode
[  245.401453][T16579] netlink: 'syz.2.3225': attribute type 23 has an invalid length.
[  245.811701][T16633] delete_channel: no stack
[  245.886887][T16638] netlink: 'syz.0.3244': attribute type 7 has an invalid length.
[  246.548563][T16685] __nla_validate_parse: 40 callbacks suppressed
[  246.548572][T16685] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3257'.
[  246.549855][T16684] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3257'.
[  246.590618][T16692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3259'.
[  246.607150][T16695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3260'.
[  246.628732][T16698] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3261'.
[  246.632451][T16698] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3261'.
[  246.632832][T16695] bond0: (slave bridge9): Enslaving as an active interface with an up link
[  246.635420][T16698] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3261'.
[  246.710925][T16701] netlink: 'syz.0.3260': attribute type 1 has an invalid length.
[  246.722819][T16701] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3260'.
[  246.732908][T16701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3260'.
[  246.739489][T16701] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3260'.
[  247.523471][T16744] netlink: 'syz.2.3275': attribute type 5 has an invalid length.
[  247.922504][T16784] tipc: MTU too low for tipc bearer
[  248.005338][T16795] team_slave_0: entered allmulticast mode
[  248.523557][T16836] netlink: 'syz.0.3293': attribute type 14 has an invalid length.
[  248.552378][T16836] netlink: 'syz.0.3293': attribute type 14 has an invalid length.
[  248.645088][T16858] ip6gre1: entered allmulticast mode
[  248.715441][T16866] team0: Device is already in use.
[  248.950283][T16883] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  248.954641][T16883] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  248.960132][T16883] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  249.017314][T16883] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  249.058022][T16883] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  249.061306][T16883] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  249.141046][T16883] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  249.144481][T16883] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  249.148621][T16883] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  249.191486][T16883] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  249.194984][T16883] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  249.198797][T16883] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  249.273194][ T5851] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  249.277571][ T5851] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  249.282566][ T5851] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  249.291570][ T5851] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  249.294573][ T5851] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  249.297576][ T5851] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  249.317140][ T5851] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  249.322056][ T5851] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  249.325713][ T5851] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  249.330980][ T5851] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  249.338230][ T5851] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  249.343788][ T5851] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  249.531902][T16893] tipc: New replicast peer: 255.255.255.255
[  249.535040][T16893] tipc: Enabled bearer <udp:syz2>, priority 10
[  249.562550][T16898] netlink: 'syz.0.3315': attribute type 83 has an invalid length.
[  249.655333][T16905] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  249.670198][T16907] netlink: 'syz.0.3317': attribute type 2 has an invalid length.
[  249.760804][T16921] netlink: 'syz.1.3322': attribute type 15 has an invalid length.
[  250.180044][T16971] netlink: 'syz.2.3342': attribute type 1 has an invalid length.
[  250.205356][T16974] bond8: (slave bridge0): making interface the new active one
[  250.214769][T16974] bond8: (slave bridge0): Enslaving as an active interface with an up link
[  250.336461][T16988] syzkaller0: entered promiscuous mode
[  250.340127][T16988] syzkaller0: entered allmulticast mode
[  250.610093][T17019] netlink: 'syz.0.3350': attribute type 6 has an invalid length.
[  250.649279][   T10] tipc: Node number set to 3451540437
[  251.315016][T17068] netlink: 'syz.2.3355': attribute type 39 has an invalid length.
[  251.499663][T17074] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  251.502886][T17074] syzkaller0: entered promiscuous mode
[  251.505194][T17074] syzkaller0: entered allmulticast mode
[  251.523011][T17074] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  251.530716][T17078] netlink: 'syz.2.3359': attribute type 1 has an invalid length.
[  251.542788][T17078] bond9: entered promiscuous mode
[  251.545066][T17078] 8021q: adding VLAN 0 to HW filter on device bond9
[  251.550043][T17074] tipc: Resetting bearer <eth:syzkaller0>
[  251.563534][T17078] 8021q: adding VLAN 0 to HW filter on device bond9
[  251.566426][T17078] bond9: (slave wireguard0): The slave device specified does not support setting the MAC address
[  251.571219][T17078] bond9: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  251.577533][T17078] bond9: (slave wireguard0): making interface the new active one
[  251.581198][T17078] wireguard0: entered promiscuous mode
[  251.583796][T17078] bond9: (slave wireguard0): Enslaving as an active interface with an up link
[  251.586994][T17073] tipc: Resetting bearer <eth:syzkaller0>
[  251.605654][T17073] tipc: Disabling bearer <eth:syzkaller0>
[  251.605722][T17084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  251.662513][T17086] netlink: 'syz.0.3361': attribute type 29 has an invalid length.
[  251.746947][T17089] batadv_slave_0: entered promiscuous mode
[  251.749792][T17089] __nla_validate_parse: 26 callbacks suppressed
[  251.749799][T17089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3362'.
[  251.765539][T17089] batadv_slave_0 (unregistering): left promiscuous mode
[  251.768145][T17089] batman_adv: batadv0: Removing interface: batadv_slave_0
[  252.222264][T17098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3365'.
[  252.335687][T17104] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3368'.
[  252.339751][T17104] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3368'.
[  252.344510][T17104] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3368'.
[  252.393643][T17106] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3369'.
[  252.434792][T17108] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3370'.
[  254.403883][T17121] syzkaller1: entered promiscuous mode
[  254.405765][T17121] syzkaller1: entered allmulticast mode
[  254.574058][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.577510][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.603057][   T27] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  254.677227][T17143] validate_nla: 1 callbacks suppressed
[  254.677236][T17143] netlink: 'syz.2.3380': attribute type 10 has an invalid length.
[  254.691454][T17143] team0: Device ipvlan1 failed to register rx_handler
[  254.745689][T17145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3381'.
[  254.869083][T17145] macvlan3: entered promiscuous mode
[  254.871404][T17145] macvlan3: entered allmulticast mode
[  254.874786][T17145] bond10: (slave macvlan3): Opening slave failed
[  255.164905][T17162] netlink: 'syz.2.3386': attribute type 1 has an invalid length.
[  255.194916][T17162] 8021q: adding VLAN 0 to HW filter on device bond11
[  255.199956][T17162] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3386'.
[  255.204298][T17162] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3386'.
[  255.276716][T17167] macvlan5: entered promiscuous mode
[  255.278827][T17167] macvlan5: entered allmulticast mode
[  255.281216][T17167] bond21: entered promiscuous mode
[  255.283358][T17167] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  255.287573][T17167] bond21: left promiscuous mode
[  256.427575][T17211] syzkaller0: entered promiscuous mode
[  256.430821][T17211] syzkaller0: entered allmulticast mode
[  256.454401][T17209] team1: entered promiscuous mode
[  256.456568][T17209] team1: entered allmulticast mode
[  257.627690][T17215] __nla_validate_parse: 5 callbacks suppressed
[  257.627707][T17215] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3402'.
[  257.634567][T17215] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3402'.
[  257.731106][T17219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3403'.
[  257.741077][T17219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3403'.
[  258.052712][T17243] netlink: 'syz.1.3411': attribute type 83 has an invalid length.
[  258.069467][T17247] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3412'.
[  258.180463][T17257] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3415'.
[  258.272976][T17260] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3416'.
[  258.276848][T17260] IPVS: Unknown mcast interface: wg0
[  258.280092][T17261] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3416'.
[  258.284385][T17261] IPVS: Unknown mcast interface: wg0
[  258.331647][T17271] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  258.343332][T17272] bridge10: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  258.355109][T17274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3420'.
[  258.360475][T17275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3420'.
[  259.840881][T17333] netlink: 'syz.2.3437': attribute type 20 has an invalid length.
[  259.858006][T17333] netlink: 'syz.2.3437': attribute type 20 has an invalid length.
[  259.863086][T17334] netlink: 'syz.2.3437': attribute type 20 has an invalid length.
[  259.870492][T17334] netlink: 'syz.2.3437': attribute type 20 has an invalid length.
[  259.969484][ T5834] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  259.972323][ T5834] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  259.975175][ T5834] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  259.978442][ T5834] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  260.494654][T17344] netlink: 'syz.1.3440': attribute type 10 has an invalid length.
[  260.502744][T17344] !: entered allmulticast mode
[  260.506204][T17344] team0: Port device 0! added
[  260.797432][T17367] netlink: 'syz.2.3447': attribute type 5 has an invalid length.
[  260.801282][T17373] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  260.804331][T17373] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  260.934767][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  260.937529][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  260.969898][T17388]  speed is unknown, defaulting to 1000
[  260.972827][T17388]  speed is unknown, defaulting to 1000
[  261.094984][T17387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  261.915660][T17431] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  261.918407][T17431] syzkaller0: entered promiscuous mode
[  261.920187][T17431] syzkaller0: entered allmulticast mode
[  261.931782][T17431] tipc: Resetting bearer <eth:syzkaller0>
[  261.936208][T17430] tipc: Resetting bearer <eth:syzkaller0>
[  261.947629][T17430] tipc: Disabling bearer <eth:syzkaller0>
[  262.060334][T17443] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  262.342790][T17467] netlink: 'syz.1.3481': attribute type 1 has an invalid length.
[  262.347444][T17467] workqueue: Failed to create a rescuer kthread for wq "bond22": -EINTR
[  262.674147][T17499] __nla_validate_parse: 20 callbacks suppressed
[  262.674165][T17499] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3493'.
[  262.749414][ T5860] page_pool_release_retry() stalled pool shutdown: id 45, 1 inflight 60 sec
[  262.794377][ T8151] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  262.795615][T17509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3495'.
[  262.813507][T17507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3494'.
[  262.879988][T17513] netlink: 'syz.2.3497': attribute type 3 has an invalid length.
[  262.882609][T17513] netlink: 'syz.2.3497': attribute type 16 has an invalid length.
[  262.885958][T17513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3497'.
[  262.890081][T17513] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3497'.
[  263.160393][T17534] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3506'.
[  263.859314][T17536] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3507'.
[  263.870807][T17536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3507'.
[  263.932308][T17540] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3509'.
[  263.995097][T17545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3511'.
[  264.267189][T17556] netlink: 'syz.1.3515': attribute type 4 has an invalid length.
[  264.272850][ T5860]  speed is unknown, defaulting to 1000
[  264.275510][ T5860] syz0: Port: 1 Link DOWN
[  264.281520][ T5860]  speed is unknown, defaulting to 1000
[  264.284146][ T5887]  speed is unknown, defaulting to 1000
[  264.286405][ T5887] syz0: Port: 1 Link ACTIVE
[  265.285087][T17577] bridge: RTM_NEWNEIGH with invalid ether address
[  266.034719][T17590] vlan0: entered promiscuous mode
[  266.037023][T17590] bond0: entered promiscuous mode
[  266.264750][T17600] validate_nla: 2 callbacks suppressed
[  266.264764][T17600] netlink: 'syz.2.3529': attribute type 7 has an invalid length.
[  266.283624][T17600] sctp: [Deprecated]: syz.2.3529 (pid 17600) Use of struct sctp_assoc_value in delayed_ack socket option.
[  266.283624][T17600] Use struct sctp_sack_info instead
[  266.568552][T17632]  speed is unknown, defaulting to 1000
[  266.572366][T17632]  speed is unknown, defaulting to 1000
[  267.050393][T17646] tipc: Cannot configure node identity twice
[  267.052719][T17647] tipc: Cannot configure node identity twice
[  267.114832][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  267.118279][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  267.121426][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  267.125243][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  267.129469][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  267.167061][T17653]  speed is unknown, defaulting to 1000
[  267.170206][T17653]  speed is unknown, defaulting to 1000
[  267.306152][T17659] netlink: 'syz.2.3544': attribute type 9 has an invalid length.
[  267.385634][T17653] chnl_net:caif_netlink_parms(): no params data found
[  267.655659][T17653] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.658703][T17653] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.664934][T17653] bridge_slave_0: entered allmulticast mode
[  267.678581][T17653] bridge_slave_0: entered promiscuous mode
[  267.681636][T17653] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.683903][T17653] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.686881][T17653] bridge_slave_1: entered allmulticast mode
[  267.691730][T17653] bridge_slave_1: entered promiscuous mode
[  267.732048][T17653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  267.770120][T17653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  267.799020][T17653] team0: Port device team_slave_0 added
[  267.811083][T17653] team0: Port device team_slave_1 added
[  267.866230][T17653] batman_adv: batadv0: Adding interface: batadv_slave_0
[  267.869518][T17653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.881848][T17653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  267.887513][T17653] batman_adv: batadv0: Adding interface: batadv_slave_1
[  267.891395][T17677] __nla_validate_parse: 6 callbacks suppressed
[  267.891407][T17677] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3550'.
[  267.893110][T17653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.894984][T17677] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3550'.
[  267.897478][T17653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  267.970203][T17653] hsr_slave_0: entered promiscuous mode
[  267.973522][T17653] hsr_slave_1: entered promiscuous mode
[  268.074856][T17687] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  268.090040][T17687] syzkaller0: entered promiscuous mode
[  268.092133][T17687] syzkaller0: entered allmulticast mode
[  268.196005][T17687] tipc: Resetting bearer <eth:syzkaller0>
[  268.220915][T17686] tipc: Resetting bearer <eth:syzkaller0>
[  268.234652][T17686] tipc: Disabling bearer <eth:syzkaller0>
[  268.240282][T17653] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  268.253485][T17653] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  268.259750][T17653] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  268.265524][T17653] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  268.411137][T17709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3558'.
[  268.418708][T17709] vxcan1 (unregistering): left allmulticast mode
[  268.441621][T17653] 8021q: adding VLAN 0 to HW filter on device bond0
[  268.455444][T17653] 8021q: adding VLAN 0 to HW filter on device team0
[  268.462578][ T8181] bridge0: port 1(bridge_slave_0) entered blocking state
[  268.466029][ T8181] bridge0: port 1(bridge_slave_0) entered forwarding state
[  268.475104][ T8181] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.477782][ T8181] bridge0: port 2(bridge_slave_1) entered forwarding state
[  268.736850][T17653] 8021q: adding VLAN 0 to HW filter on device batadv0
[  268.825420][T17653] veth0_vlan: entered promiscuous mode
[  268.841918][T17653] veth1_vlan: entered promiscuous mode
[  268.872694][T17653] veth0_macvtap: entered promiscuous mode
[  268.885430][T17653] veth1_macvtap: entered promiscuous mode
[  268.904041][T17653] batman_adv: batadv0: Interface activated: batadv_slave_0
[  268.916364][T17653] batman_adv: batadv0: Interface activated: batadv_slave_1
[  268.927324][ T5851] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  268.941632][ T5851] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  268.956817][ T5851] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  268.986180][ T5851] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  269.032586][ T8181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.035968][ T8181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.084457][ T8181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.091424][ T8181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.148091][   T54] Bluetooth: hci3: command tx timeout
[  269.291571][T17757] mac80211_hwsim hwsim19 wlan0: entered promiscuous mode
[  269.294872][T17757] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  269.303714][T17759] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3571'.
[  269.341667][T17761] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3573'.
[  269.404955][T17764] team0: Device sit1 is of different type
[  269.893903][T17768] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3576'.
[  269.945005][T17776] bridge14: entered promiscuous mode
[  269.947286][T17776] bridge14: entered allmulticast mode
[  270.001660][T17782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  270.058984][T17782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  270.116983][T17787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  270.126324][T17782] macvlan0: entered allmulticast mode
[  270.133599][T17782] veth1_vlan: entered allmulticast mode
[  270.135985][T17789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3583'.
[  270.140287][T17782] team0: Port device macvlan0 added
[  270.167113][T17789] hsr_slave_1 (unregistering): left promiscuous mode
[  270.873135][T17814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3592'.
[  271.195597][T17830] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3598'.
[  271.199909][T17830] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  271.216365][T17830] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  271.221719][T17830] syzkaller0: entered promiscuous mode
[  271.224110][T17830] syzkaller0: entered allmulticast mode
[  271.228329][   T54] Bluetooth: hci3: command tx timeout
[  271.235592][T17830] tipc: Resetting bearer <eth:syzkaller0>
[  271.307478][T17829] tipc: Resetting bearer <eth:syzkaller0>
[  271.322667][T17829] tipc: Disabling bearer <eth:syzkaller0>
[  271.414128][T17834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3599'.
[  271.763521][T17852] syz.1.3605: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  271.770746][T17852] CPU: 1 UID: 0 PID: 17852 Comm: syz.1.3605 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93-dirty #0 PREEMPT(full) 
[  271.770766][T17852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  271.770775][T17852] Call Trace:
[  271.770780][T17852]  <TASK>
[  271.770786][T17852]  dump_stack_lvl+0x189/0x250
[  271.770806][T17852]  ? __pfx_dump_stack_lvl+0x10/0x10
[  271.770820][T17852]  ? __pfx__printk+0x10/0x10
[  271.770837][T17852]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  271.770850][T17852]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  271.770864][T17852]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  271.770879][T17852]  warn_alloc+0x214/0x310
[  271.770895][T17852]  ? stack_depot_save_flags+0x40/0x900
[  271.770913][T17852]  ? __pfx_warn_alloc+0x10/0x10
[  271.770931][T17852]  ? kasan_save_track+0x4f/0x80
[  271.770945][T17852]  ? xskq_create+0x56/0x170
[  271.770958][T17852]  ? xsk_init_queue+0xb0/0x110
[  271.770967][T17852]  ? xsk_setsockopt+0x4dc/0x8d0
[  271.770975][T17852]  ? do_sock_setsockopt+0x17c/0x1b0
[  271.770990][T17852]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  271.771002][T17852]  ? do_syscall_64+0xfa/0x3b0
[  271.771015][T17852]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.771032][T17852]  __vmalloc_node_range_noprof+0x125/0x12f0
[  271.771067][T17852]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  271.771091][T17852]  ? __kasan_kmalloc+0x93/0xb0
[  271.771105][T17852]  vmalloc_user_noprof+0xad/0xf0
[  271.771122][T17852]  ? xskq_create+0xbf/0x170
[  271.771133][T17852]  xskq_create+0xbf/0x170
[  271.771148][T17852]  xsk_init_queue+0xb0/0x110
[  271.771161][T17852]  xsk_setsockopt+0x4dc/0x8d0
[  271.771173][T17852]  ? __pfx_xsk_setsockopt+0x10/0x10
[  271.771185][T17852]  ? __pfx_aa_sk_perm+0x10/0x10
[  271.771199][T17852]  ? aa_sock_opt_perm+0x74/0x110
[  271.771214][T17852]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  271.771224][T17852]  ? __pfx_xsk_setsockopt+0x10/0x10
[  271.771237][T17852]  do_sock_setsockopt+0x17c/0x1b0
[  271.771254][T17852]  __x64_sys_setsockopt+0x13f/0x1b0
[  271.771272][T17852]  do_syscall_64+0xfa/0x3b0
[  271.771284][T17852]  ? lockdep_hardirqs_on+0x9c/0x150
[  271.771295][T17852]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.771313][T17852]  ? exc_page_fault+0x9f/0xf0
[  271.771327][T17852]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.771340][T17852] RIP: 0033:0x7f75a8d8ebe9
[  271.771352][T17852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  271.771363][T17852] RSP: 002b:00007f75a9caa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  271.771377][T17852] RAX: ffffffffffffffda RBX: 00007f75a8fb6090 RCX: 00007f75a8d8ebe9
[  271.771385][T17852] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  271.771394][T17852] RBP: 00007f75a8e11e19 R08: 0000000000000004 R09: 0000000000000000
[  271.771401][T17852] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  271.771408][T17852] R13: 00007f75a8fb6128 R14: 00007f75a8fb6090 R15: 00007ffec6743478
[  271.771429][T17852]  </TASK>
[  271.771486][T17852] Mem-Info:
[  271.771975][T17845] bond8: (slave bridge0): Releasing active interface
[  271.776552][T17852] active_anon:14408 inactive_anon:0 isolated_anon:0
[  271.776552][T17852]  active_file:1366 inactive_file:38294 isolated_file:0
[  271.776552][T17852]  unevictable:1768 dirty:92 writeback:0
[  271.776552][T17852]  slab_reclaimable:10652 slab_unreclaimable:83289
[  271.776552][T17852]  mapped:23706 shmem:2436 pagetables:1108
[  271.776552][T17852]  sec_pagetables:0 bounce:0
[  271.776552][T17852]  kernel_misc_reclaimable:0
[  271.776552][T17852]  free:237071 free_pcp:26248 free_cma:0
[  271.776579][T17852] Node 0 active_anon:41016kB inactive_anon:0kB active_file:3420kB inactive_file:20312kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29060kB dirty:216kB writeback:0kB shmem:4836kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10040kB pagetables:2304kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  271.776601][T17852] Node 1 active_anon:16616kB inactive_anon:0kB active_file:2044kB inactive_file:132864kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:65764kB dirty:152kB writeback:0kB shmem:4908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6024kB pagetables:2128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  271.776621][T17852] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  271.959162][T17852] lowmem_reserve[]: 0 814 814 814 814
[  271.961687][T17852] Node 0 DMA32 free:282016kB boost:0kB min:33716kB low:42144kB high:50572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41152kB inactive_anon:0kB active_file:3420kB inactive_file:20312kB unevictable:3536kB writepending:216kB present:1556484kB managed:833944kB mlocked:0kB bounce:0kB free_pcp:51480kB local_pcp:15508kB free_cma:0kB
[  271.976623][T17852] lowmem_reserve[]: 0 0 0 0 0
[  271.981236][T17852] Node 1 DMA32 free:458492kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  271.995634][T17852] lowmem_reserve[]: 0 0 854 854 854
[  272.000568][T17852] Node 1 Normal free:192416kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16616kB inactive_anon:0kB active_file:2044kB inactive_file:132864kB unevictable:3536kB writepending:152kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:52936kB local_pcp:31404kB free_cma:0kB
[  272.016016][T17852] lowmem_reserve[]: 0 0 0 0 0
[  272.020154][T17852] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  272.025612][T17852] Node 0 DMA32: 898*4kB (UME) 499*8kB (UM) 442*16kB (UME) 87*32kB (UME) 84*64kB (UME) 17*128kB (UME) 8*256kB (UM) 3*512kB (M) 7*1024kB (UME) 8*2048kB (UM) 56*4096kB (UM) = 281504kB
[  272.034165][T17852] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  272.042154][T17852] Node 1 Normal: 211*4kB (ME) 605*8kB (UME) 210*16kB (UME) 216*32kB (UME) 91*64kB (UME) 59*128kB (UME) 19*256kB (UME) 19*512kB (UME) 11*1024kB (UME) 3*2048kB (UM) 32*4096kB (UM) = 192404kB
[  272.050934][T17852] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  272.055070][T17852] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  272.059218][T17852] 42096 total pagecache pages
[  272.061971][T17852] 0 pages in swap cache
[  272.063909][T17852] Free swap  = 124996kB
[  272.065858][T17852] Total swap = 124996kB
[  272.067770][T17852] 786301 pages RAM
[  272.069649][T17852] 0 pages HighMem/MovableOnly
[  272.071830][T17852] 240567 pages reserved
[  272.073810][T17852] 0 pages cma reserved
[  272.615305][T17878] netlink: 'syz.3.3610': attribute type 2 has an invalid length.
[  272.656496][T17881] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond_slave_0, syncid = 2, id = 0
[  272.958479][T17899] __nla_validate_parse: 6 callbacks suppressed
[  272.958488][T17899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3617'.
[  272.988699][T17902] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3618'.
[  272.998166][T17903] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3618'.
[  273.082864][ T1118] block nbd1: Possible stuck request ffff888036f98000: control (read@0,1024B). Runtime 120 seconds
[  273.087922][ T1118] block nbd1: Possible stuck request ffff888036f98200: control (read@1024,1024B). Runtime 120 seconds
[  273.092564][ T1118] block nbd1: Possible stuck request ffff888036f98400: control (read@2048,1024B). Runtime 120 seconds
[  273.097149][ T1118] block nbd1: Possible stuck request ffff888036f98600: control (read@3072,1024B). Runtime 120 seconds
[  273.134736][T17912] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3622'.
[  273.139458][T17912] tc_dump_action: action bad kind
[  273.271036][T17918] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3624'.
[  273.318162][   T54] Bluetooth: hci3: command tx timeout
[  273.351114][T17928] tipc: Started in network mode
[  273.353234][T17928] tipc: Node identity 4e196ef32d92, cluster identity 4711
[  273.356557][T17928] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  273.360635][T17928] syzkaller0: entered promiscuous mode
[  273.363902][T17928] syzkaller0: entered allmulticast mode
[  273.416494][T17928] tipc: Resetting bearer <eth:syzkaller0>
[  273.421953][T17927] tipc: Resetting bearer <eth:syzkaller0>
[  273.436465][T17927] tipc: Disabling bearer <eth:syzkaller0>
[  273.492040][T17941] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3631'.
[  273.541392][T17943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3632'.
[  273.573197][T17947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3633'.
[  273.633995][T17947] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3633'.
[  273.637472][T17947] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3633'.
[  273.930092][T17978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  273.945692][T17978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  273.960985][T17978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  273.967604][T17978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  273.973206][T17978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  273.977233][T17978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  274.174551][T17982] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  274.177193][T17982] syzkaller0: entered promiscuous mode
[  274.179405][T17982] syzkaller0: entered allmulticast mode
[  274.192280][T17982] tipc: Resetting bearer <eth:syzkaller0>
[  274.195550][T17982] netlink: 'syz.1.3645': attribute type 39 has an invalid length.
[  274.210205][T17982] tipc: Resetting bearer <eth:syzkaller0>
[  274.220020][T17982] tipc: Disabling bearer <eth:syzkaller0>
[  274.869953][T18013] netlink: 'syz.2.3657': attribute type 9 has an invalid length.
[  275.141618][T18036] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  275.187954][T18036] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  275.232905][T18041] nbd: must specify a size in bytes for the device
[  275.235194][T18040] nbd: must specify a size in bytes for the device
[  275.276347][T18036] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  275.362702][T18036] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  275.388482][   T54] Bluetooth: hci3: command tx timeout
[  275.444373][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  275.447067][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  275.455975][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  275.466103][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  275.674412][T18094] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  275.736214][T18094] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  275.772611][T18094] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  275.841399][T18094] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  276.475424][ T9488] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  276.482382][ T9488] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  276.511376][ T9488] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  276.515044][ T9488] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  276.681154][T18185] IPv6: NLM_F_CREATE should be specified when creating new route
[  276.797657][T18195] openvswitch: netlink: Duplicate or invalid key (type 0).
[  276.801048][T18195] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  276.983345][T18201] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.063690][T18205] netlink: 'syz.1.3720': attribute type 11 has an invalid length.
[  277.077747][T18201] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.130451][T18201] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.196688][T18201] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.281272][ T9488] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  277.296617][T18215] pimreg3: entered allmulticast mode
[  277.321912][ T9488] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  277.335332][ T9488] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  277.357110][ T9488] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  277.586640][T18239] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.615243][T18244] syzkaller0: entered promiscuous mode
[  277.617155][T18244] syzkaller0: entered allmulticast mode
[  277.624241][T18239] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.675834][T18239] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.727750][T18239] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.761882][T18253] netlink: 'syz.2.3736': attribute type 5 has an invalid length.
[  278.470738][   T56] block nbd4: Receive control failed (result -32)
[  278.470740][   T55] block nbd3: Receive control failed (result -32)
[  278.716272][T18288] : renamed from pim6reg1
[  278.884691][T18304] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  278.997746][T18312] __nla_validate_parse: 28 callbacks suppressed
[  278.997760][T18312] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3750'.
[  279.113000][T18318] netlink: 'syz.2.3753': attribute type 1 has an invalid length.
[  279.117364][T18318] netlink: 'syz.2.3753': attribute type 13 has an invalid length.
[  279.172123][T18317] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3753'.
[  279.201859][T18320] netlink: 45 bytes leftover after parsing attributes in process `syz.1.3754'.
[  279.226455][T18324] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3756'.
[  279.230860][T18324] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3756'.
[  279.530680][T18354] bridge0: port 1(gretap0) entered blocking state
[  279.533679][T18354] bridge0: port 1(gretap0) entered disabled state
[  279.536065][T18354] gretap0: entered allmulticast mode
[  279.539838][T18354] gretap0: entered promiscuous mode
[  279.569308][T18354] bridge0: port 1(gretap0) entered blocking state
[  279.572262][T18354] bridge0: port 1(gretap0) entered forwarding state
[  280.698335][T18380] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3768'.
[  280.702923][T18380] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3768'.
[  280.706577][T18380] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3768'.
[  280.711397][T18380] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3768'.
[  281.283434][T18382] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3769'.
[  281.341425][T18384] veth1_vlan: left allmulticast mode
[  281.425062][T18391] openvswitch: netlink: Message has 4 unknown bytes.
[  281.427773][T18391] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  281.574909][T18399] macvtap1: entered promiscuous mode
[  281.577237][T18399] dummy0: entered promiscuous mode
[  281.582717][T18399] macvtap1: entered allmulticast mode
[  281.584991][T18399] dummy0: entered allmulticast mode
[  281.590870][T18399] netlink: 'syz.2.3776': attribute type 4 has an invalid length.
[  281.724484][T18409] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  281.729773][T18409] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  281.733664][T18410] syzkaller0: entered promiscuous mode
[  281.736026][T18410] syzkaller0: entered allmulticast mode
[  281.748929][T18410] tipc: Resetting bearer <eth:syzkaller0>
[  281.760937][T18410] tipc: Disabling bearer <eth:syzkaller0>
[  282.054032][ T5851] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  282.063994][ T5851] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  282.075090][ T5851] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  282.083565][ T5851] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  282.312797][T18428] openvswitch: netlink: Multiple metadata blocks provided
[  282.379918][T18430] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  282.382871][T18430] syzkaller0: entered promiscuous mode
[  282.385026][T18430] syzkaller0: entered allmulticast mode
[  282.400844][T18430] sch_fq: defrate 257 ignored.
[  282.404857][T18430] tipc: Resetting bearer <eth:syzkaller0>
[  282.410656][T18429] tipc: Resetting bearer <eth:syzkaller0>
[  282.423711][T18429] tipc: Disabling bearer <eth:syzkaller0>
[  282.991854][T18445] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  283.462779][T18455] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  283.467507][T18456] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  283.535249][T18460] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  283.900715][T18474] netlink: 'syz.2.3799': attribute type 13 has an invalid length.
[  283.972275][T18474] dummy0: left allmulticast mode
[  283.974528][T18474] dummy0: left promiscuous mode
[  283.983693][T11890] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  283.989337][T11890] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  283.992332][T11890] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  283.995192][T11890] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  284.493602][T18485] netlink: zone id is out of range
[  284.496044][T18485] netlink: zone id is out of range
[  284.498869][T18485] netlink: zone id is out of range
[  284.507601][T18485] netlink: zone id is out of range
[  284.510523][T18485] netlink: zone id is out of range
[  284.513369][T18485] netlink: zone id is out of range
[  284.515737][T18485] netlink: zone id is out of range
[  284.519646][T18485] netlink: zone id is out of range
[  284.891639][T18498] netlink: 'syz.2.3805': attribute type 1 has an invalid length.
[  284.894994][T18498] netlink: 'syz.2.3805': attribute type 2 has an invalid length.
[  285.034285][T18507] __nla_validate_parse: 109 callbacks suppressed
[  285.034296][T18507] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3809'.
[  285.067519][T18509] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3810'.
[  285.100356][T18511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3811'.
[  285.523608][T18513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3812'.
[  285.527415][T18513] netlink: 'syz.2.3812': attribute type 21 has an invalid length.
[  285.581630][T18525] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  285.585236][T18525] syzkaller0: entered promiscuous mode
[  285.587641][T18525] syzkaller0: entered allmulticast mode
[  285.606189][T18525] tipc: Resetting bearer <eth:syzkaller0>
[  285.613079][T18524] tipc: Resetting bearer <eth:syzkaller0>
[  285.626707][T18524] tipc: Disabling bearer <eth:syzkaller0>
[  286.610793][T18540] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3819'.
[  287.390847][T18549] net_ratelimit: 8 callbacks suppressed
[  287.390862][T18549] openvswitch: netlink: Multiple metadata blocks provided
[  287.436809][T18552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3823'.
[  287.440293][T18552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3823'.
[  287.447128][T18552] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3823'.
[  287.583169][T18562] netlink: 'syz.1.3826': attribute type 4 has an invalid length.
[  287.592910][ T5886]  speed is unknown, defaulting to 1000
[  287.595714][T18562] netlink: 'syz.1.3826': attribute type 4 has an invalid length.
[  287.598826][ T5886] syz0: Port: 1 Link DOWN
[  287.602771][ T5886]  speed is unknown, defaulting to 1000
[  287.604887][  T791]  speed is unknown, defaulting to 1000
[  287.608267][  T791] syz0: Port: 1 Link ACTIVE
[  287.957685][T18566] netlink: 'syz.3.3828': attribute type 1 has an invalid length.
[  287.983894][T18566] 8021q: adding VLAN 0 to HW filter on device bond1
[  288.002461][T18566] bond1: (slave geneve2): making interface the new active one
[  288.006832][T18566] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  288.139183][T18571] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6
[  288.267125][T18576] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  288.313307][T18581] netlink: 'syz.3.3831': attribute type 15 has an invalid length.
[  288.574902][T18599] netlink: 252 bytes leftover after parsing attributes in process `syz.2.3833'.
[  288.927461][   T33] audit: type=1800 audit(1754496942.764:4): pid=18598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3836" name="cgroup.controllers" dev="tmpfs" ino=6464 res=0 errno=0
[  289.094531][T18605] openvswitch: netlink: Multiple metadata blocks provided
[  289.406654][T18612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3840'.
[  289.417653][T18613] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  289.615535][T18637] netlink: 'syz.2.3846': attribute type 1 has an invalid length.
[  289.637228][T18637] 8021q: adding VLAN 0 to HW filter on device bond14
[  289.650774][T18638] bond14: (slave bridge13): making interface the new active one
[  289.655048][T18638] bond14: (slave bridge13): Enslaving as an active interface with an up link
[  290.300620][T18622] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  290.304215][T18622] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  290.383129][T18667] openvswitch: netlink: IP tunnel TTL not specified.
[  290.419007][  T791] tipc: Node number set to 1670082291
[  290.669681][T18677] __nla_validate_parse: 7 callbacks suppressed
[  290.669691][T18677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3857'.
[  290.672190][T18678] : renamed from bond_slave_0
[  290.842226][T18690] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  290.847127][T18690] syzkaller0: entered promiscuous mode
[  290.849753][T18690] syzkaller0: entered allmulticast mode
[  290.857265][T18690] tipc: Resetting bearer <eth:syzkaller0>
[  290.864090][T18689] tipc: Resetting bearer <eth:syzkaller0>
[  290.873489][T18689] tipc: Disabling bearer <eth:syzkaller0>
[  291.059777][T18712] netlink: 'syz.1.3868': attribute type 1 has an invalid length.
[  291.127562][T18718] vlan3: entered promiscuous mode
[  291.129487][T18718] bond0: entered promiscuous mode
[  291.131128][T18718] team0: entered promiscuous mode
[  291.132784][T18718] !: entered promiscuous mode
[  291.134636][T18718] batadv0: entered promiscuous mode
[  291.140768][T18718] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3870'.
[  291.454234][T18731] netlink: 'syz.3.3875': attribute type 15 has an invalid length.
[  291.531817][T18735] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3876'.
[  291.556260][T18735] netlink: 'syz.3.3876': attribute type 1 has an invalid length.
[  291.736769][T18744] macvlan0: entered allmulticast mode
[  291.741517][T18744] veth1_vlan: entered allmulticast mode
[  291.745285][T18744] team0: Port device macvlan0 added
[  291.843448][T18746] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3880'.
[  291.847301][T18746] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3880'.
[  291.852841][T18746] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3880'.
[  291.856948][T18746] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3880'.
[  291.862229][T18746] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3880'.
[  291.865829][T18746] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3880'.
[  291.870650][   T54] Bluetooth: hci3: command tx timeout
[  291.874049][T18746] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3880'.
[  291.945986][T18751] netlink: 'syz.2.3882': attribute type 1 has an invalid length.
[  292.230577][T18769] ==================================================================
[  292.234062][T18769] BUG: KASAN: use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  292.237299][T18769] Read of size 2 at addr ffff88803080ee42 by task syz.2.3889/18769
[  292.241406][T18769] 
[  292.242498][T18769] CPU: 1 UID: 0 PID: 18769 Comm: syz.2.3889 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93-dirty #0 PREEMPT(full) 
[  292.242518][T18769] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  292.242526][T18769] Call Trace:
[  292.242532][T18769]  <TASK>
[  292.242540][T18769]  dump_stack_lvl+0x189/0x250
[  292.242557][T18769]  ? __kasan_check_byte+0x12/0x40
[  292.242577][T18769]  ? __pfx_dump_stack_lvl+0x10/0x10
[  292.242589][T18769]  ? lock_release+0x4b/0x3e0
[  292.242606][T18769]  ? __virt_addr_valid+0x4a5/0x5c0
[  292.242620][T18769]  print_report+0xca/0x240
[  292.242636][T18769]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  292.242650][T18769]  kasan_report+0x118/0x150
[  292.242666][T18769]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  292.242683][T18769]  __xfrm_state_lookup+0x6ad/0x8d0
[  292.242699][T18769]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  292.242714][T18769]  xfrm_state_add+0x27d/0xc40
[  292.242731][T18769]  xfrm_add_sa+0x35a1/0x4070
[  292.242751][T18769]  ? __pfx_xfrm_add_sa+0x10/0x10
[  292.242765][T18769]  ? apparmor_capable+0x137/0x1b0
[  292.242779][T18769]  ? __nla_parse+0x40/0x60
[  292.242795][T18769]  xfrm_user_rcv_msg+0x7a3/0xab0
[  292.242811][T18769]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  292.242831][T18769]  ? __pfx___mutex_trylock_common+0x10/0x10
[  292.242849][T18769]  ? rcu_is_watching+0x15/0xb0
[  292.242863][T18769]  ? trace_contention_end+0x39/0x120
[  292.242873][T18769]  ? __mutex_lock+0x335/0x1340
[  292.242887][T18769]  netlink_rcv_skb+0x208/0x470
[  292.242901][T18769]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  292.242917][T18769]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  292.242934][T18769]  ? netlink_deliver_tap+0x2e/0x1b0
[  292.242948][T18769]  ? netlink_deliver_tap+0x2e/0x1b0
[  292.242961][T18769]  xfrm_netlink_rcv+0x79/0x90
[  292.242977][T18769]  netlink_unicast+0x82f/0x9e0
[  292.242990][T18769]  ? __pfx_netlink_unicast+0x10/0x10
[  292.243002][T18769]  ? netlink_sendmsg+0x642/0xb30
[  292.243013][T18769]  ? skb_put+0x11b/0x210
[  292.243029][T18769]  netlink_sendmsg+0x805/0xb30
[  292.243044][T18769]  ? __pfx_netlink_sendmsg+0x10/0x10
[  292.243056][T18769]  ? aa_sock_msg_perm+0x94/0x160
[  292.243069][T18769]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  292.243080][T18769]  ? __pfx_netlink_sendmsg+0x10/0x10
[  292.243092][T18769]  __sock_sendmsg+0x21c/0x270
[  292.243104][T18769]  ____sys_sendmsg+0x505/0x830
[  292.243121][T18769]  ? __pfx_____sys_sendmsg+0x10/0x10
[  292.243151][T18769]  ? import_iovec+0x74/0xa0
[  292.243164][T18769]  ___sys_sendmsg+0x21f/0x2a0
[  292.243181][T18769]  ? __pfx____sys_sendmsg+0x10/0x10
[  292.243208][T18769]  ? __fget_files+0x2a/0x420
[  292.243224][T18769]  ? __fget_files+0x3a0/0x420
[  292.243240][T18769]  __x64_sys_sendmsg+0x19b/0x260
[  292.243257][T18769]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  292.243275][T18769]  ? rcu_is_watching+0x15/0xb0
[  292.243292][T18769]  ? do_syscall_64+0xbe/0x3b0
[  292.243306][T18769]  do_syscall_64+0xfa/0x3b0
[  292.243318][T18769]  ? lockdep_hardirqs_on+0x9c/0x150
[  292.243331][T18769]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.243342][T18769]  ? exc_page_fault+0x9f/0xf0
[  292.243354][T18769]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.243365][T18769] RIP: 0033:0x7f8af6b8ebe9
[  292.243409][T18769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  292.243421][T18769] RSP: 002b:00007f8af791b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  292.243436][T18769] RAX: ffffffffffffffda RBX: 00007f8af6db5fa0 RCX: 00007f8af6b8ebe9
[  292.243444][T18769] RDX: 0000000000000804 RSI: 0000200000000100 RDI: 0000000000000008
[  292.243453][T18769] RBP: 00007f8af6c11e19 R08: 0000000000000000 R09: 0000000000000000
[  292.243460][T18769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  292.243468][T18769] R13: 00007f8af6db6038 R14: 00007f8af6db5fa0 R15: 00007ffdbf1d09d8
[  292.243484][T18769]  </TASK>
[  292.243489][T18769] 
[  292.404020][T18769] The buggy address belongs to the physical page:
[  292.406809][T18769] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803080fe00 pfn:0x3080e
[  292.411158][T18769] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  292.414224][T18769] raw: 00fff00000000000 dead000000000100 dead000000000122 0000000000000000
[  292.417746][T18769] raw: ffff88803080fe00 0000000000000000 00000000ffffffff 0000000000000000
[  292.421371][T18769] page dumped because: kasan: bad access detected
[  292.424196][T18769] page_owner tracks the page as freed
[  292.426561][T18769] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x406dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_RETRY_MAYFAIL), pid 17649, tgid 17648 (syz.1.3543), ts 267317712039, free_ts 267522886265
[  292.435771][T18769]  post_alloc_hook+0x240/0x2a0
[  292.437848][T18769]  get_page_from_freelist+0x21e4/0x22c0
[  292.440226][T18769]  __alloc_frozen_pages_noprof+0x181/0x370
[  292.442721][T18769]  alloc_pages_mpol+0x232/0x4a0
[  292.444848][T18769]  alloc_pages_noprof+0xa9/0x190
[  292.447000][T18769]  __vmalloc_node_range_noprof+0x97d/0x12f0
[  292.449578][T18769]  bpf_map_area_alloc+0x12d/0x180
[  292.451773][T18769]  prealloc_init+0x123/0x630
[  292.453783][T18769]  htab_map_alloc+0x6ce/0xc70
[  292.455744][T18769]  map_create+0xaa3/0x1310
[  292.457685][T18769]  __sys_bpf+0x60f/0x870
[  292.459465][T18769]  __x64_sys_bpf+0x7c/0x90
[  292.461341][T18769]  do_syscall_64+0xfa/0x3b0
[  292.463364][T18769]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.465992][T18769] page last free pid 17649 tgid 17648 stack trace:
[  292.468947][T18769]  __free_frozen_pages+0xc71/0xe70
[  292.471101][T18769]  vfree+0x25a/0x400
[  292.472775][T18769]  htab_map_free+0x7b2/0x980
[  292.474758][T18769]  bpf_map_free+0x96/0xc0
[  292.476655][T18769]  map_create+0xdc9/0x1310
[  292.478617][T18769]  __sys_bpf+0x60f/0x870
[  292.480477][T18769]  __x64_sys_bpf+0x7c/0x90
[  292.482443][T18769]  do_syscall_64+0xfa/0x3b0
[  292.484438][T18769]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.486974][T18769] 
[  292.488024][T18769] Memory state around the buggy address:
[  292.490468][T18769]  ffff88803080ed00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  292.493969][T18769]  ffff88803080ed80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  292.497464][T18769] >ffff88803080ee00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  292.500865][T18769]                                            ^
[  292.503462][T18769]  ffff88803080ee80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  292.506794][T18769]  ffff88803080ef00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  292.510235][T18769] ==================================================================
[  292.514017][T18769] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  292.517007][T18769] CPU: 1 UID: 0 PID: 18769 Comm: syz.2.3889 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93-dirty #0 PREEMPT(full) 
[  292.522094][T18769] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  292.526536][T18769] Call Trace:
[  292.528015][T18769]  <TASK>
[  292.529315][T18769]  dump_stack_lvl+0x99/0x250
[  292.531405][T18769]  ? __asan_memcpy+0x40/0x70
[  292.533506][T18769]  ? __pfx_dump_stack_lvl+0x10/0x10
[  292.535848][T18769]  ? __pfx__printk+0x10/0x10
[  292.537885][T18769]  vpanic+0x27a/0x730
[  292.539626][T18769]  ? __pfx_vpanic+0x10/0x10
[  292.541620][T18769]  ? irqentry_exit+0x74/0x90
[  292.543686][T18769]  panic+0xb9/0xc0
[  292.545333][T18769]  ? __pfx_panic+0x10/0x10
[  292.547245][T18769]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  292.549777][T18769]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  292.552339][T18769]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  292.554657][T18769]  check_panic_on_warn+0x89/0xb0
[  292.556824][T18769]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  292.559134][T18769]  end_report+0x78/0x160
[  292.560928][T18769]  kasan_report+0x129/0x150
[  292.562896][T18769]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  292.565257][T18769]  __xfrm_state_lookup+0x6ad/0x8d0
[  292.567492][T18769]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  292.569813][T18769]  xfrm_state_add+0x27d/0xc40
[  292.571866][T18769]  xfrm_add_sa+0x35a1/0x4070
[  292.573880][T18769]  ? __pfx_xfrm_add_sa+0x10/0x10
[  292.576005][T18769]  ? apparmor_capable+0x137/0x1b0
[  292.578209][T18769]  ? __nla_parse+0x40/0x60
[  292.580180][T18769]  xfrm_user_rcv_msg+0x7a3/0xab0
[  292.582349][T18769]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  292.584750][T18769]  ? __pfx___mutex_trylock_common+0x10/0x10
[  292.587335][T18769]  ? rcu_is_watching+0x15/0xb0
[  292.589518][T18769]  ? trace_contention_end+0x39/0x120
[  292.592073][T18769]  ? __mutex_lock+0x335/0x1340
[  292.594205][T18769]  netlink_rcv_skb+0x208/0x470
[  292.596324][T18769]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  292.598725][T18769]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  292.601064][T18769]  ? netlink_deliver_tap+0x2e/0x1b0
[  292.603340][T18769]  ? netlink_deliver_tap+0x2e/0x1b0
[  292.605627][T18769]  xfrm_netlink_rcv+0x79/0x90
[  292.607717][T18769]  netlink_unicast+0x82f/0x9e0
[  292.609808][T18769]  ? __pfx_netlink_unicast+0x10/0x10
[  292.612030][T18769]  ? netlink_sendmsg+0x642/0xb30
[  292.614176][T18769]  ? skb_put+0x11b/0x210
[  292.616066][T18769]  netlink_sendmsg+0x805/0xb30
[  292.618159][T18769]  ? __pfx_netlink_sendmsg+0x10/0x10
[  292.620467][T18769]  ? aa_sock_msg_perm+0x94/0x160
[  292.622637][T18769]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  292.624949][T18769]  ? __pfx_netlink_sendmsg+0x10/0x10
[  292.627182][T18769]  __sock_sendmsg+0x21c/0x270
[  292.629232][T18769]  ____sys_sendmsg+0x505/0x830
[  292.631345][T18769]  ? __pfx_____sys_sendmsg+0x10/0x10
[  292.633654][T18769]  ? import_iovec+0x74/0xa0
[  292.635646][T18769]  ___sys_sendmsg+0x21f/0x2a0
[  292.637685][T18769]  ? __pfx____sys_sendmsg+0x10/0x10
[  292.639976][T18769]  ? __fget_files+0x2a/0x420
[  292.641931][T18769]  ? __fget_files+0x3a0/0x420
[  292.643937][T18769]  __x64_sys_sendmsg+0x19b/0x260
[  292.646112][T18769]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  292.648492][T18769]  ? rcu_is_watching+0x15/0xb0
[  292.650547][T18769]  ? do_syscall_64+0xbe/0x3b0
[  292.652466][T18769]  do_syscall_64+0xfa/0x3b0
[  292.654353][T18769]  ? lockdep_hardirqs_on+0x9c/0x150
[  292.656594][T18769]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.659218][T18769]  ? exc_page_fault+0x9f/0xf0
[  292.661277][T18769]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.663891][T18769] RIP: 0033:0x7f8af6b8ebe9
[  292.665851][T18769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  292.674060][T18769] RSP: 002b:00007f8af791b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  292.677695][T18769] RAX: ffffffffffffffda RBX: 00007f8af6db5fa0 RCX: 00007f8af6b8ebe9
[  292.681073][T18769] RDX: 0000000000000804 RSI: 0000200000000100 RDI: 0000000000000008
[  292.684400][T18769] RBP: 00007f8af6c11e19 R08: 0000000000000000 R09: 0000000000000000
[  292.687663][T18769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  292.691048][T18769] R13: 00007f8af6db6038 R14: 00007f8af6db5fa0 R15: 00007ffdbf1d09d8
[  292.694404][T18769]  </TASK>
[  292.696517][T18769] Kernel Offset: disabled
[  292.698411][T18769] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:15:46  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=ffff888021ca0444 RCX=dffffc0000000000 RDX=1ffff11004da6b58
RSI=ffffffff8db68630 RDI=ffff888021ca0000 RBP=ffff888106e7dba0 RSP=ffffc9000342f9a0
R8 =0000000000000000 R9 =ffffffff8b3f329a R10=dffffc0000000000 R11=fffffbfff1f40e47
R12=dffffc0000000000 R13=1ffff11021c18b13 R14=0000000000000074 R15=ffff88810e0c4d80
RIP=ffffffff81a6ee89 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8679000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b30763fff CR3=00000000239de000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f75a8e12e53
XMM06=0000000000000000 00007f75a8e12e4d XMM07=0000000000000000 00007f75a8e12e61
XMM08=0000000000000000 00007f75a8e12ee7 XMM09=0000000000000000 00007f75a8e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001af6 RDI=0000000000001af7 RBP=00000000000003f8 RSP=ffffc900067769d0
R8 =ffff888107860237 R9 =1ffff11020f0c046 R10=dffffc0000000000 R11=ffffffff854bdf00
R12=dffffc0000000000 R13=ffffffff99a9b922 R14=ffffffff99da04a0 R15=0000000000000000
RIP=ffffffff854bdf7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f8af791b6c0 ffffffff 00c00000
GS =0000 ffff8881a3c79000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c391c08 CR3=000000010d944000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f8af6d87498 00007f8af6d87470 XMM03=00007f8af6d874a8 00007f8af6d874a0
XMM04=00007f8af78ed100 00007f8af6d87460 XMM05=00007f8af6d87478 00007f8af6d874c0
XMM06=00007f8af6d874b8 00007f8af6d874b0 XMM07=00007f8af6d874a8 00007f8af6d874a0
XMM08=0000000000000000 00007f8af6c12ee7 XMM09=0000000000000000 00007f8af6c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
