last executing test programs:

1.910072486s ago: executing program 1 (id=4538):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000340)={<r2=>0x0, @in6={{0xa, 0x4e23, 0x0, @empty, 0x8}}, 0x6, 0xfff, 0xf, 0x7, 0x97}, &(0x7f0000000400)=0x98)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000440)={r2, 0x1}, &(0x7f0000000480)=0x8)
r3 = socket$inet6(0xa, 0x3, 0x4)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000006c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, 0x108)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000180)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x3, @empty}}}, 0x108)
sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004a23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000002c0)={0x6, 0x18, '\x00', 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0]})
r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000800)={0x0, 0x3, 0x20}, 0xc)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x38, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x62, 0x8, 0x1}, @IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x38}}, 0x0)
r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0x0, 0x3, 0x18}, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x3, &(0x7f00000005c0)=@raw=[@generic={0x4, 0x6, 0x9, 0x0, 0x49a}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}], &(0x7f0000000600)='GPL\x00', 0xb6, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x4, 0x6, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000880)=[r4, r7], &(0x7f00000008c0)=[{0x5, 0x2, 0x6, 0x8}, {0x4, 0x3, 0xd, 0x2}, {0x0, 0x5, 0x8, 0xa}], 0x10, 0x200}, 0x94)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={<r8=>0x0, 0x3, 0x0, 0x7, 0x7fffffffffffffff}, &(0x7f00000000c0)=0x18)
r9 = socket$phonet(0x23, 0x2, 0x1)
r10 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
recvfrom$phonet(r9, &(0x7f0000000500)=""/173, 0xad, 0x22002, 0x0, 0xfffffffffffffe54)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000a40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6a8, 0x2a8, 0x3f8, 0x4e8, 0x0, 0x0, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x6, &(0x7f00000009c0), {[{{@ipv6={@empty, @empty, [0xff, 0xffffff00, 0xffffffff, 0xffffffff], [0xff, 0xffffffff, 0xff, 0xff], 'hsr0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x3b, 0xf, 0x4}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@srh1={{0x90}, {0x6, 0x7f, 0x9, 0x70, 0x7ff, @mcast2, @empty, @dev={0xfe, 0x80, '\x00', 0x38}, [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], [0xffffff00, 0xff, 0xffffff00, 0xff], [0xff000000, 0xff000000, 0xffffff00], 0x3028, 0x2000}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x30}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x19}}}, {{@uncond, 0x0, 0x108, 0x150, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d2], 0x5, 0xf7, 0x1}}, @common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x3, 0x75, 0x2}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@local, @ipv4=@dev={0xac, 0x14, 0x14, 0x14}, 0x2e, 0x39, 0x60b}}}, {{@ipv6={@private2, @loopback, [0xffffff00, 0xff000000, 0xffffffff, 0xff], [0xffffffff, 0x1c88396fea02c81f, 0x0, 0xff], 'vlan0\x00', 'veth0_to_hsr\x00', {}, {0xff}, 0x2b, 0xf1, 0x3, 0x20}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv6=@mcast1, 0x6, 0x39}}}, {{@ipv6={@mcast1, @private1, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xffffff00, 0x0, 0xff], 'pimreg0\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x62, 0x6, 0x5, 0x8}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x6, {0xfffffffffffffefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x708)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r8, 0x4}, 0xc)

1.909522317s ago: executing program 1 (id=4539):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf2517000000400006803c00040067636d2861657329000000000024000000000000003d42205a2a77a44a11e6460000000000000000000000140000eb2e557917d5d82cebae"], 0x54}}, 0x4004)

1.837091097s ago: executing program 1 (id=4542):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000700)={0x1f, @none, 0x4e}, 0xa)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r2, &(0x7f0000000040)="0d000000010001", 0x7)
getsockopt$sock_buf(r1, 0x1, 0x28, 0x0, &(0x7f00000001c0))
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=ANY=[@ANYBLOB="240000004a00010000000000000001000a001800", @ANYRES32=0x0, @ANYRES32=r3], 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c8ced10900d81ab34a04ff78d800000000080001ae4b11958f3d3a453c74891400297c7fba2f7d7f995e73886f10878554a6fcd92d20fe0f2e98982b817215e2270200"/87], 0x24}, 0x1, 0x0, 0x0, 0x20000852}, 0x42811)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffff8}, 0x1c)
pwrite64(0xffffffffffffffff, &(0x7f0000000340)="6eb690e18190e18f3b138ec77482927633bedda0d9da2de104e836206ee520b91446a863e7cde6d44d796ef35d765442a38df8d180c003c15fd3efd3ac6111f0b262932ed8e7dc7dabbf687c55e96382facc98f7cf447cd61343b63e912922e9860647e3d4b5ea95b78d30636c5da023644a89dea9000000", 0x78, 0x1)
setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x48001)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000440)={'gre0\x00', &(0x7f0000000500)={'ip_vti0\x00', <r9=>0x0, 0x7, 0x7, 0x0, 0x4, {{0x36, 0x4, 0x3, 0x1, 0xd8, 0x66, 0x0, 0x3, 0x2f, 0x0, @remote, @remote, {[@timestamp_addr={0x44, 0x24, 0xbf, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x35e}, {@rand_addr=0x64010100, 0x3a4}, {@rand_addr=0x64010101, 0x6c}, {@private=0xa0100fc, 0x1}]}, @timestamp_addr={0x44, 0x1c, 0x98, 0x1, 0x8, [{@loopback, 0x46}, {@broadcast, 0x7}, {@rand_addr=0x64010102, 0xfffffff1}]}, @cipso={0x86, 0x2b, 0x2, [{0x7, 0x12, "a7bd96f9a444705f72450ffe9c5080e1"}, {0x2, 0xa, "15e4beae4813b794"}, {0x1, 0x9, "8bd4371595bd1a"}]}, @ssrr={0x89, 0x13, 0xbc, [@rand_addr=0x64010102, @empty, @multicast2, @empty]}, @timestamp={0x44, 0x1c, 0xbd, 0x0, 0xc, [0x4, 0xfb58, 0x8, 0x80000000, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x1c, 0xf, 0x3, 0x9, [{@private=0xa010101, 0x4}, {@loopback, 0x40}, {@rand_addr=0x64010100, 0x4}]}, @generic={0x83, 0xb, "b8240de35f1bca5b29"}, @end]}}}}})
sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={&(0x7f0000000400), 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@newtclass={0x24, 0x28, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xa, 0xfff1}, {0x2, 0x5}, {0xfffe, 0x10a37d0b516caa5b}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x41)
r10 = openat$cgroup_int(r8, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0)
sendfile(r7, r10, 0x0, 0x970b)
recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r11=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r11, 0xff02, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000300eaffffff000000000003000000000500000003000000e2cc000000000000000000010500000008000002010000000000000700000000006100"], 0x0, 0x4f}, 0x28)
socket$inet_udp(0x2, 0x2, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x1ff, 0x5, 0xa, 0x4, 0xc, 0x3, 0xc2, 0x4}, &(0x7f0000000040)={0x2, 0x7f, 0x7, 0x1425, 0x4, 0x3, 0x7, 0xffff}, &(0x7f0000000080)={0xa70, 0x100000001, 0xfffffffffffffff7, 0xfff, 0x3ff, 0xffffffffffffffff, 0x8, 0x3}, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)={&(0x7f0000000100), 0x8})

901.125703ms ago: executing program 1 (id=4561):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x3, &(0x7f0000000600)={0x7fffffff, {{0xa, 0x4e23, 0x8, @empty, 0x2ac4}}, {{0xa, 0x4e24, 0x4, @private0, 0x7f}}}, 0x108)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000200)=ANY=[@ANYRESHEX=r1], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x20, @local, 0x9}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000)={0xe, 0x3, 0xf7, 0x3, 0x7, 0x9, 0xfb, 0x0, 0x0, 0x3, 0xa, 0xd, 0xf, 0x3}, 0xe)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8881}, 0x4080)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="79bdbed761c74372750fa13e84808e0f7d8d8618cea635bf887111bb0b9f8b79e881273a51b9cce26a52d00f5f87b5cd68eec0c0bc390509c63f7b85d0616473e7fde0109acd15519ca1ccb15dcd0b456c7642ad6cbaa3524fab042e94fc10a3ef2ef96e1589db271f54e392bb13c242d9df47d91e5265b581192594d6266be6de78d95c5d7163992264043ff135808a95d395952f365ada6c5ea75a4e4dde54682a385af0b8fe06a112546ed04124ab56be580a5938d4f3df990c4fafbd"], 0x48)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', <r12=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000013000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r12, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r9)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r9)
getsockopt$IP6T_SO_GET_INFO(r8, 0x29, 0x40, 0x0, &(0x7f0000000400))
bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="0800000004000008040000000200020000000000", @ANYRES32=0x1, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x48)
socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c)
socket$nl_netfilter(0x10, 0x3, 0xc)

899.361029ms ago: executing program 1 (id=4562):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c000}, 0x44801)
pipe(&(0x7f0000000000))
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockname$inet6(r0, &(0x7f0000000200), &(0x7f0000000280)=0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, &(0x7f0000001b80))
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24, 0x0, @rand_addr, 0xfffffffc}, 0x1c)
connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xc0}, 0x1c)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @multicast1}, 0xc)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f0000000480)=[{&(0x7f0000000640)="3900950013000347e26f3bc8c23cc74d00000019000400040000d5b8e68e1e20c45354306480712d0007fd17e5ffff080004000000000000000011179a76588472a20ae8877ff45ab9d1a792ea84e4545c7712d2fe46682a02cd03ca7700d5ee5e6e327b33bca96d03a2817af4ba764aa1071874bfd16546d731432adaf4e1d00557aea15bbffb360cbabc349c32a796c74f97703da8ae00dc5d152122aba6670842", 0xa2}], 0x1)
writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r6 = socket$inet(0x2, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57)
setsockopt$inet_mreqsrc(r4, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1190e95fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a202304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a8640724a5f4e12ad99012a2e01ce79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe50151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa332482e6137e994d3f5259b7f51544cdc6d8cb4becc20dd3a57545b0c2621e4c5f94a23f73ee02c22ee7e27c2cc491a85947baac523c347c9b9ede5d6265997f2ad6e9719aafdb323988e62b7ec84545cd63b7a7"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000180)={r8, r7, 0x29}, 0xc)
getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000300)={<r9=>0x0, 0x72de}, &(0x7f0000000340)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000003c0)={r9, 0xb0, 0xffff}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r10=>0x0]}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000040)={r10, 0x2000}, &(0x7f0000000140)=0x8)
sendmmsg$inet6(r1, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000580)="a4ad4f", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x10000000000000da}}], 0x2, 0xc8040)

585.241466ms ago: executing program 2 (id=4568):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c80)=@newqdisc={0x94, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{}, [@TCA_NETEM_LOSS={0x48, 0xd, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0x7e0}}, @NETEM_LOSS_GI={0x18}]}]}}}]}, 0x94}}, 0x0)

527.777474ms ago: executing program 2 (id=4570):
r0 = socket$inet(0x2, 0x4000000805, 0x0)
sendmmsg(r0, &(0x7f0000000180)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local, 0x2}, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000084"], 0x18}}], 0x2, 0x844)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000002100010000000000fddbdf250a0000080000000110000000140011"], 0x30}}, 0x0)

460.074619ms ago: executing program 2 (id=4572):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f0000001140)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000280)='Xv', 0x2}], 0x1}}], 0x1, 0x200001c0)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000100)=0x8)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4)
r2 = socket$inet6_sctp(0xa, 0x4, 0x84)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0x0, 0x7}, 0x6)
setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="e8ffffff00000000", 0x8)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000300000000000000000000008500000087000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000e2ff00b705000a0800000000"], &(0x7f0000000080)='GPL\x00', 0x2}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x6}, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES64=r6, @ANYRES64=r4, @ANYRESDEC=r0, @ANYRES64=r5, @ANYRES64=r6, @ANYBLOB="1b994899f844155c350ed6c64ffa2460b75b29409658f6bb447efbdad334832715d53349737d89426edd1353eae3c3df3d4b608635ef264f00ddd989c5fafdf5ec6e3441dd46fb18212a21c32c1dd5b114b973333800b1e345fa1e5c8b15636cb6588c8126d2c2df8f4d41e590dd91339a2ebc4ae5dca5b437bb7483afa0fc25099b", @ANYRESHEX=r2], 0xd0}}, 0x20050800)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2800000091e6ac0b57eca68677557d49dd5d3dc822a097d1078c0e132476a3545f8aab1198d0936dc3781ca673000000000099a3074f7f044ff218e70e5302feb27522cf6aa4ff3285ed1d2a29df0bb9a5401153eae26ebac3dc41cd72a633135439437961860db7050000006d297ddbab4348f3977f3e6675b4528a5d5383a30f605aecc562047cf92384459589ec2b1a8f6be8806127d49eceded64edba27ca53d37bf9a0e84ecf23837fa1fc137ec441ea680dfaedac7e0c5d57706ed31a789fd38117199144520fb7df4dd647170d80525adab8c225cd34d853efebafd09fb003daaa282ac7e3a2ebc80c82c40663d101e773c34f55b4da44eb523be78f3c257db884c829e417461c94106e66276f9939971a0", @ANYRES32=r0, @ANYBLOB="8304000000000000000001000000100002800c000180080001000000000004000180"], 0x28}}, 0x0)
socket$alg(0x26, 0x5, 0x0)
r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', 0x0})
socket$kcm(0x29, 0x2, 0x0)
socket$inet6(0xa, 0x803, 0x7)
ioctl$BTRFS_IOC_INO_PATHS(r10, 0xc0389423, 0x0)

371.551956ms ago: executing program 2 (id=4574):
r0 = socket$kcm(0x11, 0xa, 0x300)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r1}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r2, 0x0, 0x80000000000}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94)
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r5, &(0x7f0000000880)={0x2a, 0x1, 0x3fff}, 0xc)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r8=>0x0})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc)
syz_open_procfs$namespace(0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x11, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0xf}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0xfffffffb, 0xcc, &(0x7f0000000480)=""/204, 0x86beeb2f6bfe33f0, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x9, 0xa09, 0x3ff}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000580)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000005c0)=[{0x1, 0x5, 0x9, 0x5}], 0x10, 0x8}, 0x94)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000200)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000000200)=0x78, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0xaf660000)
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, 0x0, &(0x7f0000000140)=0x20)
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000140)={r8, 0x1, 0x6, @local}, 0x10)
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000002c0)={r8, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10)
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000200)={r8, 0x1, 0x6, @local}, 0x10)
setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000000580)={r8, 0x1, 0x6, @local}, 0x10)
sendmsg$FOU_CMD_GET(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4002000}, 0xc, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00012abd7000ffdbdf2503000200000004000300000008000b00a9ad40d0981c66312ffb4ab030050000005a2dd901e154be6fa359755bb6bfb42f4498426e89584d79e0493a2638cbad4eacbf409bc1caa50f8acc66bd970c29aa6d9845ae7e5daca9b1de8ad3c81012578c4b0cd207a0efe6aa439f2ef889f675752c9260d7e0f674c37bf5c7dc8225c864b82ff8ca3c7548d603479204aff28c4d143fcdb32183e1f3492e2a5edc1f7245f6f7a1cbf6bf9dda2e6d7c28fd173f78f3f6c34b663afe2c01b19cb20d19485fbd03e7cd0000000000000000", @ANYRES32=r6, @ANYBLOB="080008007f00000104000500080008000a01010106000a004e20000006000a004e22000008000b00", @ANYRES32=r8, @ANYBLOB="08000800ac1e0101"], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x40)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48)

300.772991ms ago: executing program 0 (id=4576):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1d8, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xfff3}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IP_TOS_MASK={0x5}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x18c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x174, 0x1, [@m_connmark={0x7c, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x49, 0x6, "4eebdf2408e8952792009f587075f394796b87f5e6c0508e4deec5a86d24a64dacafd73234200ce6fe5d4aea9687c8c641b998a1c77c0f725ce22b72f10b8a2d3a770951c3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0xf4, 0x1d, 0x0, 0x0, {{0xf}, {0x4}, {0xc2, 0x6, "309e7046678cfa85254c612d61e3d2c3e3b6590ca2f3e70c7fcdf5868b95845dfa60edad38b3b8c47659e35d235cfa416f9d81db4b5bb82e527e794cf9c32a539860aa592d929cecb48c76df399b49231fc0de0b4c4b5e510bd82e77a2a017326f355f49b6d04814facf4b925888d5d448b4d4e4ef37878ebf401dec40c42d1ab684133014f4050f50f08d4a683f92167f6f35cf2325905a0bd90cef50513cde35ffa5bcecf5e496a4a97d5ae56a9cde24d0feba8acf1944a80e09741860"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000000000))
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

244.561531ms ago: executing program 0 (id=4577):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004)
recvmmsg(r1, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x4008101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000000c0)=""/177, 0xb1}, {&(0x7f0000000dc0)=""/262, 0x106}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000003bc0)=""/4109, 0x100d}, {&(0x7f00000017c0)=""/227, 0xe3}], 0x5}, 0x80000000}], 0x4, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newrule={0x2c, 0x1e, 0x1, 0xfffffffd, 0x7ffffe, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x4}, @FRA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800000001090300000000000000000001000006240002001600018008000100ffffffff08000200ac1e01010c00028005000100"], 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x840)

243.786983ms ago: executing program 0 (id=4578):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x18)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0xa, 0x0, 0x9, 0x2}, 0x10}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmmsg(r2, &(0x7f0000001a00)=[{{&(0x7f0000000380)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x3}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000200)="580be799c38fd703392dc46c4ed20910fdca6282a02dd61d763dcbc8496d0bb11fe5afca27229fb05f906f962517c4", 0x2f}, {&(0x7f0000000400)="a1935decf5e166c730a89df6307919dab94dceafca71d18e0f5cf4a57d5a76c6350d079de3245f3019ec998d61050f3360756cdbd791389098b79fe43e4526fd69ffbc0064f57a104b61f681232dd33acc129e00da2a158e4d0645f3444c94f6d4f81752d313fd9d7d69602d20ed7d3ef907a5d3c6d8382cbf05292e2900f69fd5ae8c3e8ca34ca6dd021d3570c301b32a6a7b9214b3a546b3f2bd4c5c1553da248737c86056cfa55ff6ed827c46e8770ad34cff1bbc609fd30bfae892e1083bf6ad3bae2e47a00389494650b0669ac83afa6b77208883ca966a82ed3771f929c80bcb707d66e1918f5b07cf347ebf3c7b7937523e9fa05625df", 0xfa}, {&(0x7f0000000500)="34dcfe88012a7550d273ef623bfa61d68020698e61cd6268c21f4643ba1c24415ec371e1b035cb3ce27bffe9b01d181ba342b3c7080a6efab08011ab16ed4c6225e652418922dc43fc4032f3f6c5d15053acd417301b4b291268d22149f781cbbbb5f1d6e099f4d74da36e4301cb26260ca1490b6a36d202eb3a707ed9c96ce4807519b68cbb155cd06a12dce3b15bb94a2112661add4d27f36a1d6b33958b6ffdb8b04db44f96c4e7c101feb81c33da33d7ca10a0", 0xb5}, {&(0x7f00000002c0)}, {&(0x7f00000005c0)}, {&(0x7f0000000600)="8f0361b0969e2e94c0b3c4e818b4d274c24664079cfe23adbfb213226b169f8d14968f07c96479305de223d529ab192a48cad3eeac5ec73275a804fdf293498909ea62deeb322231c7847c60b7d5c91ec6979cfcdfae6cfbfd706467809c943ddc8f6066dcfd3f58f3a3c2bb97440ee605539a69aa0ba4400dcf7610406b37822628196da5366835e18b71ed4bd9f584f9fd820a961d68abc18da28cafc9190d8a729c4e4d68741d102d8fda987bbe3f27fbe4966e3fa5906466a8dbb2ca37a749809dd3d75612071af7611b535d18662b72f4b4d68e226893a7946002ca7bc8efa1e0488b12221b4243a104b57e61b4b8b9433784", 0xf5}, {&(0x7f0000000700)="2ac1d9750f0843ac60806f2aabc328f2335111c82b867b89157c80a0aa9d43025b99ecf1a81dde019dc23c04dd4b8a623963feb9ff6d34d5fdd897433233df0c4410886a881b6865865d1eae1234968f93cc78a95de881cc054fd3d9e9bf7e214c84e51b34c2d0b1b1a7a0d8f28dea1a2a451168f0c9e3e4ee422a29a1d768b6797c268c5201c6fc1d774dc331b6d614be74b0079f9b7306b6a5e855e91e6dba74812cc7122b8aaa3a2dda80929847defb940091", 0xb4}], 0x7, &(0x7f0000000840)=[{0x60, 0x108, 0x0, "d61d5397e38186bf56771f7470cc47e1a8c562e850c3ecc3509ae0618102ca7773c76a4a64c9505947f65fb1ffab8fe7c754f9904c19434db45fbb2e6e4555ac7325ff76e380746e340e655d"}, {0xe8, 0x108, 0x8, "6d22b83616fafaf41f8b8246054fe76e96f29a563759595e2c03fece8bcf3abbe8e34f6af829d8892ccd1c243203bf45fb904890e68275d02cd2896840379c40b935e9beb394d3a3be7995c3b9de11d06700697718543fd4116dfdd0063692f815af3dd6163aa9cc3d677c7e9056f77b7e49f38d1b08c5999d514f386b2b0fc7f165fa22f9e94cbdc272a29be9257df11884d3880b4f353ef0e2e39cdb4a5142d629ba2ffe94454f60fb802d83289f0a44716f031c07297a478fe41a2c3a9d371bf06a621b60823f42572114fce50e79dc5a"}, {0x60, 0x10a, 0x2, "bcee44624b5bef645e0b738c4e1b96906d071abfb5919a1dd3d83e9bd42f45eee43f9dde650bdc73b3f5c14734531712f0b71dea7040fa0f491e14f2563bdfdf5f6b7b59634bc82979a0ec00"}, {0x1010, 0x3a, 0x0, "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"}], 0x11b8}}], 0x1, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @remote}, 0x2, 0x2, 0x1, 0x1}}, 0x26)

161.486984ms ago: executing program 0 (id=4579):
socket(0x11, 0x800000003, 0x0) (async)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) (async)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x558, 0x0, 0x0, 0x1a8, 0x3d8, 0x1a8, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x70}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz1\x00'}}]}, @TTL={0x28}}, {{@uncond, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={{0x40}}, @common=@ah={{0x30}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}, {{@ip={@multicast1, @private, 0x0, 0x0, 'pim6reg0\x00', 'erspan0\x00'}, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5b8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000090000008500000087000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) (async)
r1 = socket(0x10, 0x3, 0x0) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910a800000000001e000000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4)
r3 = accept4(r2, 0x0, 0x0, 0x80800)
sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40084}], 0x1, 0x0) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000001c0)='kmem_cache_free\x00', r5}, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x17, 0x13, &(0x7f0000000640)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x4, 0x0, 0x9, 0x1, 0x4, 0x100, 0x4}], &(0x7f0000000700)='GPL\x00', 0x9, 0xf1, &(0x7f0000000740)=""/241, 0x40f00, 0xb, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x4, 0x8, 0x46}, 0x10, 0x0, r5, 0x0, &(0x7f0000000b00)=[0xffffffffffffffff], &(0x7f0000000b40), 0x10, 0x2}, 0x94) (async)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async)
sendmsg$nl_generic(r1, 0x0, 0x0) (async)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000080), 0x4) (async)
sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) (async)
close(r7) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000600)=0x681, 0x4)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r8=>0x0}) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x70bd25, 0x25dfdbfc, {0xa, 0x18, 0x0, 0xfe}, [@IFA_LOCAL={0xffffffffffffff90, 0x2, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc014}, 0x8010)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r8, 0x2, 0x6}, 0x10) (async)
socket$packet(0x11, 0x3, 0x300)

159.535459ms ago: executing program 0 (id=4580):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x4, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x61, 0x61]}}, 0x0, 0x5c}, 0x20)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="500100001000130700000000fcdbdf252001000000000000000000000000000120010000000000e4ff00000000000000000000034e2100020a0000003b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0)

158.024585ms ago: executing program 2 (id=4581):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @broadcast}, 0x0, 0x3, 0x3, 0x2}}, 0x26) (async)
sendmsg$unix(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1}, 0x4040885)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x300) (async)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) (async)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) (async)
listen(r4, 0x0) (async, rerun: 64)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000000)=0x7, 0x4) (async, rerun: 64)
connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) (rerun: 64)

91.657918ms ago: executing program 0 (id=4582):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001f00000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r0, 0xda90)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)
accept4(r0, 0x0, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x34, 0x701, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
socket$inet6(0xa, 0x3, 0x3ff)
unshare(0x6a040000)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f0000000780)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00080300000000000000330000000e0001006e657464657673696d0000000f0002006e657064657673696d30000008008e0000000000"], 0x3c}}, 0x20000040)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20048010)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
socketpair(0x1a, 0x1, 0x11, &(0x7f0000000040))

91.249469ms ago: executing program 2 (id=4583):
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x20000003}}, 0x2e) (async)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x20000003}}, 0x2e)
r2 = socket$packet(0x11, 0x3, 0x300)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x0, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) (async)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r6)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r6) (async)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r6)
sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x30, r7, 0x1, 0x0, 0x0, {0x1c}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x7ffffffe}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0) (async)
sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x30, r7, 0x1, 0x0, 0x0, {0x1c}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x7ffffffe}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x28, 0x24, 0x301, 0x70bd25, 0xfffffffc, {0x1}, [@typed={0x14, 0x14e, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x28}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r9, 0x84, 0x1e, &(0x7f00000008c0)=0x2, 0x4)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x41, 0x0, 0x10820, 0x400}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}]}, 0x34}}, 0x4084)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000180)=@req3={0x7, 0x2002, 0x0, 0x2, 0x8, 0x101, 0x5}, 0x1c)

0s ago: executing program 1 (id=4584):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x20000003}}, 0x2e)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x0, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r9, 0x84, 0x1e, &(0x7f00000008c0)=0x2, 0x4)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x41, 0x0, 0x10820, 0x400}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}]}, 0x34}}, 0x4084)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000001040)={'vcan0\x00', <r11=>0x0})
ioctl$sock_inet6_SIOCDIFADDR(r7, 0x8936, &(0x7f0000001080)={@mcast2, 0x15, r11})
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="0800000002000000b514435aacbff7fbca08654f18a24897a311b0981e9eb23c0f397985238d47d72c828da024fa3a917a6464b0f8"], 0x30}}, 0x4)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c0001800b000100736f636b657400000c000280080002400000000b0900010073797a30000000000900020073797a3200000000140000991100010000000000000000000000000a"], 0x74}}, 0x0)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000180)=@req3={0x7, 0x2002, 0x0, 0x2, 0x8, 0x101, 0x5}, 0x1c)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001300))
readv(r0, &(0x7f0000001440)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001340)={&(0x7f0000001180)={0x108, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e48afc4f038afc0ec951b4ff68a42cb1774900b4904ee438"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "19386e21388088e19aa378cbfc5249173bc54e9e5e5965e2"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x108}, 0x1, 0x0, 0x0, 0x80}, 0x4000045)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000000101040000000000000000020000002400018014000180080001000000000008000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100e0000002080002000000000008000740000000003c00188008000340000000000800024000000000080001"], 0xa0}}, 0x0)

kernel console output (not intermixed with test programs):

ting to 1000
[  230.062284][ T5894] syz0: Port: 1 Link DOWN
[  230.064124][ T5894] lo speed is unknown, defaulting to 1000
[  230.862153][T16443] netlink: 'syz.1.2670': attribute type 1 has an invalid length.
[  231.086730][T16475] syzkaller1: entered promiscuous mode
[  231.088476][T16475] syzkaller1: entered allmulticast mode
[  231.092025][T16475] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  231.197430][T16479] lo speed is unknown, defaulting to 1000
[  231.464554][T16485] netlink: 'syz.1.2682': attribute type 1 has an invalid length.
[  231.470637][T16485] netlink: 'syz.1.2682': attribute type 5 has an invalid length.
[  231.983668][T16525] tipc: Resetting bearer <eth:syzkaller0>
[  232.034072][T16525] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  232.036622][T16525] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  232.039054][T16525] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  232.041761][T16525] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  232.049022][T16525] erspan0: left allmulticast mode
[  232.193005][T16534] netlink: 'syz.0.2694': attribute type 1 has an invalid length.
[  232.284215][T16537] lo speed is unknown, defaulting to 1000
[  232.695013][T16548] netlink: 'syz.1.2697': attribute type 1 has an invalid length.
[  232.805234][T16556] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  232.816956][T16563] xt_bpf: check failed: parse error
[  232.854838][ T5677] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  233.671884][T16576] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  233.699499][T16574] __nla_validate_parse: 12 callbacks suppressed
[  233.699510][T16574] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2702'.
[  233.714918][T16585] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2705'.
[  234.022133][T16599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2710'.
[  234.231201][T16606] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  234.233942][T16606] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  234.324601][T16614] SET target dimension over the limit!
[  234.332433][T16608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2713'.
[  234.372842][T16620] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2716'.
[  234.406670][T16623] netlink: 'syz.2.2718': attribute type 21 has an invalid length.
[  234.407616][T16624] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2718'.
[  234.408983][T16623] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2718'.
[  234.409018][T16623] netlink: 'syz.2.2718': attribute type 4 has an invalid length.
[  234.409025][T16623] netlink: 'syz.2.2718': attribute type 5 has an invalid length.
[  234.419467][T16623] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2718'.
[  234.490575][T16624] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  234.529390][T16629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2719'.
[  234.533305][T16629] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  234.846930][T16647] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  234.849255][T16647] syzkaller0: entered promiscuous mode
[  234.851026][T16647] syzkaller0: entered allmulticast mode
[  234.865903][T16647] tipc: Resetting bearer <eth:syzkaller0>
[  234.868814][T16647] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2724'.
[  234.869069][T16649] gretap0: entered promiscuous mode
[  234.875167][T16646] tipc: Resetting bearer <eth:syzkaller0>
[  234.884632][T16646] tipc: Disabling bearer <eth:syzkaller0>
[  235.288732][T16687] netlink: 'syz.1.2735': attribute type 32 has an invalid length.
[  235.314404][T16690] netlink: 'syz.2.2736': attribute type 10 has an invalid length.
[  235.391553][T16704] netlink: 'syz.2.2738': attribute type 9 has an invalid length.
[  235.394523][T16704] netlink: 'syz.2.2738': attribute type 6 has an invalid length.
[  235.424763][T16704] tipc: Resetting bearer <eth:syzkaller0>
[  235.553305][T16723] netlink: 'syz.1.2743': attribute type 21 has an invalid length.
[  235.684338][T16735] x9: renamed from bridge_slave_0
[  235.878818][T16754] 8021q: adding VLAN 0 to HW filter on device bond14
[  235.892682][T16754] macvlan0: entered promiscuous mode
[  235.894282][T16754] macvlan0: entered allmulticast mode
[  235.898566][T16754] bond14: (slave macvlan0): Opening slave failed
[  236.202221][T16772] nbd: must specify a size in bytes for the device
[  236.409685][T16784] lo speed is unknown, defaulting to 1000
[  237.157551][T16797] veth0_to_team: entered promiscuous mode
[  237.159306][T16797] veth0_to_team: entered allmulticast mode
[  237.292944][T16807] validate_nla: 2 callbacks suppressed
[  237.292959][T16807] netlink: 'syz.2.2769': attribute type 5 has an invalid length.
[  237.384183][T16819] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  237.386644][T16819] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  237.389065][T16819] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  237.391784][T16819] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  237.513040][T16837] netlink: 'syz.0.2779': attribute type 1 has an invalid length.
[  237.515504][T16838] netlink: 'syz.0.2779': attribute type 1 has an invalid length.
[  237.552871][T16845] bond0: Device is already in use.
[  237.554704][T16844] bond0: Device is already in use.
[  237.625455][T16853] netlink: 'syz.2.2783': attribute type 1 has an invalid length.
[  237.653580][T16853] bond56: entered promiscuous mode
[  237.655525][T16853] 8021q: adding VLAN 0 to HW filter on device bond56
[  237.690068][T16853] bond56: (slave bridge6): making interface the new active one
[  237.693175][T16853] bridge6: entered promiscuous mode
[  237.696481][T16853] bond56: (slave bridge6): Enslaving as an active interface with an up link
[  237.713678][T16858] dvmrp1: entered allmulticast mode
[  237.717270][T16858] dvmrp1: left allmulticast mode
[  237.802104][T16865] netlink: 'syz.1.2786': attribute type 29 has an invalid length.
[  237.805447][T16865] netlink: 'syz.1.2786': attribute type 29 has an invalid length.
[  237.812369][T16865] unsupported nla_type 58
[  238.020955][T16886] wg2: entered promiscuous mode
[  238.022454][T16886] wg2: entered allmulticast mode
[  238.083801][T16891] 8021q: adding VLAN 0 to HW filter on device bond57
[  238.187180][T16901] netlink: 'syz.2.2797': attribute type 1 has an invalid length.
[  238.221998][T16905] netlink: 'syz.2.2798': attribute type 1 has an invalid length.
[  238.255925][T16905] 8021q: adding VLAN 0 to HW filter on device bond58
[  238.320388][T16912] tipc: New replicast peer: 255.255.255.255
[  238.330778][T16912] tipc: Enabled bearer <udp:syz2>, priority 26
[  238.425268][T16922] lo speed is unknown, defaulting to 1000
[  238.576398][T16922] syzkaller1: entered promiscuous mode
[  238.578183][T16922] syzkaller1: entered allmulticast mode
[  238.705603][T16927] xt_time: invalid argument - start or stop time greater than 23:59:59
[  239.150119][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  239.239003][T16950] __nla_validate_parse: 29 callbacks suppressed
[  239.239014][T16950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2808'.
[  239.243679][T16950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2808'.
[  239.593461][T16958] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^Qjǥ
[  239.715672][T16962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2812'.
[  239.738256][T16970] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2813'.
[  239.770838][T16973] xt_CONNSECMARK: invalid mode: 254
[  239.775364][T16975] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2814'.
[  239.878141][T16987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2817'.
[  239.885491][T16987] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2817'.
[  239.888145][T16987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2817'.
[  239.893278][T16989] netlink: 'syz.0.2818': attribute type 9 has an invalid length.
[  239.895317][T16987] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2817'.
[  239.895797][T16989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2818'.
[  240.061370][T16998] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  240.594512][ T5829] Bluetooth: hci2: link tx timeout
[  240.598191][ T5829] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  240.650229][   T33] audit: type=1800 audit(1753080141.821:3): pid=17027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2827" name="cgroup.controllers" dev="tmpfs" ino=4925 res=0 errno=0
[  241.168861][T17094] netlink: 'syz.0.2839': attribute type 5 has an invalid length.
[  241.504607][T17112] lo speed is unknown, defaulting to 1000
[  242.031908][T17132] bond56: (slave bridge6): Releasing backup interface
[  242.033979][T17132] bridge6: left promiscuous mode
[  242.136892][T17136] lo speed is unknown, defaulting to 1000
[  242.180276][T17137] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  242.184728][T17137] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  242.191591][T17137] tipc: Resetting bearer <eth:syzkaller0>
[  242.554569][T17147] validate_nla: 2 callbacks suppressed
[  242.554581][T17147] netlink: 'syz.2.2853': attribute type 1 has an invalid length.
[  242.671454][ T5221] Bluetooth: hci2: command 0x0405 tx timeout
[  243.172405][T17181] netlink: 'syz.2.2863': attribute type 1 has an invalid length.
[  243.187988][T17181] 8021q: adding VLAN 0 to HW filter on device bond59
[  243.205206][T17181] bond59: (slave bridge7): making interface the new active one
[  243.208187][T17181] bond59: (slave bridge7): Enslaving as an active interface with an up link
[  243.227037][T17187] netlink: 'syz.1.2864': attribute type 9 has an invalid length.
[  243.232851][T17187] netlink: 'syz.1.2864': attribute type 6 has an invalid length.
[  243.290557][T17181] macvlan2: entered promiscuous mode
[  243.292149][T17181] macvlan2: entered allmulticast mode
[  243.294604][T17181] bond59: entered promiscuous mode
[  243.296234][T17181] bridge7: entered promiscuous mode
[  243.304032][T17181] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  243.310296][T17181] bond59: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  243.315744][T17181] bond59: left promiscuous mode
[  243.317305][T17181] bridge7: left promiscuous mode
[  243.701953][T17230] netlink: 'syz.1.2873': attribute type 2 has an invalid length.
[  243.713595][T17230] : entered promiscuous mode
[  243.769662][T17240] 0{X: renamed from gretap0
[  243.774878][T17240] 0{X: left promiscuous mode
[  243.776432][T17240] 0{X: entered allmulticast mode
[  243.778710][T17240] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  243.785087][T17239] 0{X: entered promiscuous mode
[  243.786681][T17239] 0{X: left allmulticast mode
[  243.881716][T17257] netlink: 'syz.0.2881': attribute type 1 has an invalid length.
[  243.884170][T17257] netlink: 'syz.0.2881': attribute type 2 has an invalid length.
[  243.986851][T17266] netlink: 'syz.2.2885': attribute type 4 has an invalid length.
[  243.994889][T17266] netlink: 'syz.2.2885': attribute type 4 has an invalid length.
[  244.242693][T17285] __nla_validate_parse: 26 callbacks suppressed
[  244.242705][T17285] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2893'.
[  244.504126][T17313] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2902'.
[  244.726792][T17319] netlink: 'syz.1.2905': attribute type 10 has an invalid length.
[  244.729256][T17319] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2905'.
[  244.733179][T17319] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  244.836713][T17320] lo speed is unknown, defaulting to 1000
[  245.367602][T17315] syz.0.2904 (17315) used greatest stack depth: 18808 bytes left
[  245.563836][T17335] 8021q: adding VLAN 0 to HW filter on device bond49
[  245.586409][T17335] 8021q: adding VLAN 0 to HW filter on device bond49
[  245.588736][T17335] bond49: (slave vxcan1): The slave device specified does not support setting the MAC address
[  245.593025][T17335] bond49: (slave vxcan1): Error -95 calling set_mac_address
[  245.627270][T17339] bond49: (slave batadv_slave_1): Enslaving as an active interface with a down link
[  245.638821][T17339] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2910'.
[  245.659660][T17339] 8021q: adding VLAN 0 to HW filter on device bond49
[  245.699251][T17341] syzkaller1: entered promiscuous mode
[  245.718336][T17341] syzkaller1: entered allmulticast mode
[  245.842846][T17358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2915'.
[  245.845634][T17358] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2915'.
[  245.858133][T17360] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2917'.
[  245.873663][ T5221] Bluetooth: hci2: command 0x0405 tx timeout
[  245.919214][T17364] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2916'.
[  245.924316][T17364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  245.950471][T17364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  245.974466][T17376] netlink: 160288 bytes leftover after parsing attributes in process `syz.1.2920'.
[  246.021653][T17378] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2921'.
[  246.042920][T17381] lo speed is unknown, defaulting to 1000
[  246.213405][T17398] openvswitch: netlink: Flow actions attr not present in new flow.
[  246.507626][T17416] 8021q: adding VLAN 0 to HW filter on device bond50
[  246.537392][T17416] veth11: entered promiscuous mode
[  246.547393][T17416] bond50: (slave veth11): Enslaving as an active interface with a down link
[  246.563973][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  246.566964][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  246.950504][T17448] syz0: rxe_newlink: already configured on lo
[  246.958394][T17448] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  246.970100][ T5836] lo speed is unknown, defaulting to 1000
[  246.971809][ T5836] syz0: Port: 1 Link ACTIVE
[  246.973203][ T5836] lo speed is unknown, defaulting to 1000
[  246.980924][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.057555][T17454] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  247.066719][T17454] tipc: Resetting bearer <eth:syzkaller0>
[  247.340808][T17480] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  247.368414][T17487] IPVS: Unknown mcast interface: vcan0
[  247.376239][T17478] lo speed is unknown, defaulting to 1000
[  247.550350][T17500] xt_CT: No such helper "snmp"
[  247.711797][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.872797][ T9595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.875810][ T9595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.962861][T17529] pimreg3: entered allmulticast mode
[  247.968393][T17529] bond49: (slave batadv_slave_1): Releasing active interface
[  247.976146][T17529] bond47: (slave veth9): Releasing backup interface
[  247.985153][T17529] bond48: (slave gretap3): Releasing active interface
[  247.990741][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.994303][T17529] bond50: (slave veth11): Releasing active interface
[  248.453134][T17532] veth5: entered promiscuous mode
[  248.454988][T17532] bridge17: port 1(veth5) entered blocking state
[  248.457037][T17532] bridge17: port 1(veth5) entered disabled state
[  248.459171][T17532] veth5: entered allmulticast mode
[  248.590168][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  248.610141][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  248.744775][T17527] pimreg3: left allmulticast mode
[  248.826140][T17543] set match dimension is over the limit!
[  249.413119][T17561] __nla_validate_parse: 12 callbacks suppressed
[  249.413138][T17561] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2967'.
[  249.440485][T17561] lo speed is unknown, defaulting to 1000
[  249.710396][T17569] syzkaller1: left promiscuous mode
[  249.718142][T17569] syzkaller1: left allmulticast mode
[  249.763717][T17573] validate_nla: 7 callbacks suppressed
[  249.763753][T17573] netlink: 'syz.1.2971': attribute type 1 has an invalid length.
[  249.813607][T17573] 8021q: adding VLAN 0 to HW filter on device bond15
[  249.849336][T17574] bond15: (slave bridge19): making interface the new active one
[  249.860544][T17574] bond15: (slave bridge19): Enslaving as an active interface with an up link
[  249.903663][T17585] netlink: 'syz.2.2975': attribute type 10 has an invalid length.
[  249.908612][T17585] dummy0: entered allmulticast mode
[  249.954399][T17589] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2978'.
[  250.047069][T17598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2980'.
[  250.062846][T17604] bond16: entered allmulticast mode
[  250.064633][T17604] 8021q: adding VLAN 0 to HW filter on device bond16
[  250.067055][T17604] bridge0: port 1(bond16) entered blocking state
[  250.069059][T17604] bridge0: port 1(bond16) entered disabled state
[  250.072542][T17604] bond16: entered promiscuous mode
[  250.120930][T17603] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  250.125425][T17603] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address
[  250.129509][T17603] bond0: (slave ipvlan1): Error -95 calling set_mac_address
[  250.299241][T17623] netlink: 'syz.0.2989': attribute type 8 has an invalid length.
[  250.309316][T17623] netlink: 428 bytes leftover after parsing attributes in process `syz.0.2989'.
[  250.314000][T17623] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2989'.
[  250.380328][T17625] ipvlan0: entered promiscuous mode
[  250.464778][T17628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2990'.
[  250.503830][T17631] ip6gre1: entered allmulticast mode
[  250.871761][T17640] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2993'.
[  250.874796][T17640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2993'.
[  250.877714][T17640] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2993'.
[  250.882061][T17640] netlink: 'syz.2.2993': attribute type 19 has an invalid length.
[  250.885197][T17640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2993'.
[  250.893468][T17640] bridge8: the hash_elasticity option has been deprecated and is always 16
[  251.154456][T17657] tipc: Resetting bearer <eth:syzkaller0>
[  251.179474][T17657] tipc: Resetting bearer <eth:syzkaller0>
[  251.385386][T17683] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  251.388134][T17683] syzkaller0: entered promiscuous mode
[  251.390989][T17683] syzkaller0: entered allmulticast mode
[  251.398416][T17683] tipc: Resetting bearer <eth:syzkaller0>
[  251.402827][T17682] tipc: Resetting bearer <eth:syzkaller0>
[  251.425323][T17682] tipc: Disabling bearer <eth:syzkaller0>
[  251.503132][T14612] tipc: Resetting bearer <eth:syzkaller0>
[  251.675601][T17698] tipc: Enabled bearer <eth:geneve1>, priority 0
[  251.811708][T17712] netlink: 'syz.2.3015': attribute type 10 has an invalid length.
[  251.965735][T17723] team0: entered promiscuous mode
[  251.970310][T17723] team0: entered allmulticast mode
[  252.016011][T17723] team1: entered promiscuous mode
[  252.020170][T17723] team1: entered allmulticast mode
[  252.053254][T17723] team2: entered promiscuous mode
[  252.070326][T17723] team2: entered allmulticast mode
[  252.092142][T17723] team3: entered promiscuous mode
[  252.095133][T17723] team3: entered allmulticast mode
[  252.133439][T17723] team4: entered promiscuous mode
[  252.135410][T17723] team4: entered allmulticast mode
[  252.156936][T17723] team5: entered promiscuous mode
[  252.158809][T17723] team5: entered allmulticast mode
[  252.175760][T17723] team6: entered promiscuous mode
[  252.177640][T17723] team6: entered allmulticast mode
[  252.192479][T17723] team7: entered promiscuous mode
[  252.194557][T17723] team7: entered allmulticast mode
[  252.209039][T17723] team8: entered promiscuous mode
[  252.211069][T17723] team8: entered allmulticast mode
[  252.221697][T17750] netlink: 'syz.0.3022': attribute type 64 has an invalid length.
[  252.225289][T17723] team9: entered promiscuous mode
[  252.227139][T17723] team9: entered allmulticast mode
[  252.258109][T17723] team10: entered promiscuous mode
[  252.261046][T17723] team10: entered allmulticast mode
[  252.282596][T17723] team11: entered promiscuous mode
[  252.288367][T17723] team11: entered allmulticast mode
[  252.302861][T17723] team12: entered promiscuous mode
[  252.304854][T17723] team12: entered allmulticast mode
[  252.318911][T17723] team13: entered promiscuous mode
[  252.321106][T17723] team13: entered allmulticast mode
[  252.334613][T17723] team14: entered promiscuous mode
[  252.336615][T17723] team14: entered allmulticast mode
[  252.355942][T17723] team15: entered promiscuous mode
[  252.357946][T17723] team15: entered allmulticast mode
[  252.372947][T17723] team16: entered promiscuous mode
[  252.375016][T17723] team16: entered allmulticast mode
[  252.406087][T17723] team17: entered promiscuous mode
[  252.408097][T17723] team17: entered allmulticast mode
[  252.419371][T17723] team18: entered promiscuous mode
[  252.422425][T17723] team18: entered allmulticast mode
[  252.435409][T17723] team19: entered promiscuous mode
[  252.437415][T17723] team19: entered allmulticast mode
[  252.448961][T17723] team20: entered promiscuous mode
[  252.450266][T17761] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0
[  252.451028][T17723] team20: entered allmulticast mode
[  252.465234][T17723] team21: entered promiscuous mode
[  252.467241][T17723] team21: entered allmulticast mode
[  252.479085][T17723] team22: entered promiscuous mode
[  252.481145][T17723] team22: entered allmulticast mode
[  252.492673][T17723] team23: entered promiscuous mode
[  252.494680][T17723] team23: entered allmulticast mode
[  252.506569][T17723] team24: entered promiscuous mode
[  252.508612][T17723] team24: entered allmulticast mode
[  252.521250][T17723] team25: entered promiscuous mode
[  252.523249][T17723] team25: entered allmulticast mode
[  252.534378][T17723] team26: entered promiscuous mode
[  252.536337][T17723] team26: entered allmulticast mode
[  252.542971][T17772] netlink: 'syz.0.3030': attribute type 1 has an invalid length.
[  252.547612][T17723] team27: entered promiscuous mode
[  252.549597][T17723] team27: entered allmulticast mode
[  252.582306][T17723] team28: entered promiscuous mode
[  252.584324][T17723] team28: entered allmulticast mode
[  252.596178][T17723] team29: entered promiscuous mode
[  252.598159][T17723] team29: entered allmulticast mode
[  252.611880][T17723] team30: entered promiscuous mode
[  252.613902][T17723] team30: entered allmulticast mode
[  252.626352][T17723] team31: entered promiscuous mode
[  252.628361][T17723] team31: entered allmulticast mode
[  252.642757][T17723] team32: entered promiscuous mode
[  252.644753][T17723] team32: entered allmulticast mode
[  252.668787][T17775] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode
[  252.682269][T17775] macsec0: entered promiscuous mode
[  252.684019][T17775] macsec0: entered allmulticast mode
[  252.685641][T17775] mac80211_hwsim hwsim22 wlan0: entered allmulticast mode
[  252.700424][T17775] netlink: 'syz.0.3031': attribute type 1 has an invalid length.
[  252.703960][T17775] netlink: 'syz.0.3031': attribute type 30 has an invalid length.
[  252.736275][T17785] bridge0: port 2(erspan0) entered blocking state
[  252.738541][T17785] bridge0: port 2(erspan0) entered disabled state
[  252.744877][T17785] erspan0: entered allmulticast mode
[  252.753478][T17785] erspan0: left allmulticast mode
[  253.176565][T17814] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  253.364594][T17836] netlink: 'syz.2.3048': attribute type 3 has an invalid length.
[  253.625607][T17853] bond0: down delay (5) is not a multiple of miimon (100), value rounded to 0 ms
[  253.628916][T17853] bond0: option all_slaves_active: invalid value (7)
[  253.637046][T17856] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  253.645849][T17856] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  253.649449][T17856] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  253.846610][T17876] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  254.523154][T17914] tipc: MTU too low for tipc bearer
[  254.724794][T17924] __nla_validate_parse: 66 callbacks suppressed
[  254.724806][T17924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3073'.
[  254.947221][T17945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3078'.
[  254.950732][T17945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3078'.
[  254.992683][T17952] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  254.996086][T17952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3080'.
[  255.013899][T17952] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3080'.
[  255.068568][T17960] validate_nla: 2 callbacks suppressed
[  255.068579][T17960] netlink: 'syz.2.3082': attribute type 4 has an invalid length.
[  255.113854][T17965] netlink: 87 bytes leftover after parsing attributes in process `syz.2.3085'.
[  255.242389][T17980] x9: renamed from bridge_slave_0
[  255.253553][T17983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3090'.
[  255.325298][T17987] netlink: 'syz.2.3091': attribute type 4 has an invalid length.
[  255.356185][T17994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3093'.
[  255.397012][T17999] netlink: 'syz.2.3094': attribute type 10 has an invalid length.
[  255.399607][T17999] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3094'.
[  255.403278][T17999] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  255.508755][T18001] lo speed is unknown, defaulting to 1000
[  255.952710][T18011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3096'.
[  256.210980][T18019] netlink: 'syz.0.3098': attribute type 21 has an invalid length.
[  256.213517][T18019] netlink: 'syz.0.3098': attribute type 4 has an invalid length.
[  256.215916][T18019] netlink: 'syz.0.3098': attribute type 3 has an invalid length.
[  256.438622][T18035] bond53: entered promiscuous mode
[  256.546793][T18040] netlink: 'syz.2.3101': attribute type 13 has an invalid length.
[  256.549656][T18040] netlink: 'syz.2.3101': attribute type 17 has an invalid length.
[  256.554304][T18040] 0{X: left promiscuous mode
[  256.556601][T18040] erspan0: left promiscuous mode
[  256.566221][T18040] 8021q: adding VLAN 0 to HW filter on device bond0
[  256.570529][T18040] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  256.592630][T18039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  256.596877][T18039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  256.931339][T18048] _Z`Ԁ@: entered promiscuous mode
[  256.934483][T18048] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  256.936996][T18048] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  256.939481][T18048] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  256.943159][T18048] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  256.946706][T18048] tipc: Resetting bearer <eth:geneve1>
[  257.013799][T18055] : renamed from batadv_slave_1
[  257.021494][T18055] netlink: 'syz.1.3106': attribute type 2 has an invalid length.
[  257.027499][T18055] `: entered promiscuous mode
[  257.063761][T18057] netlink: 'syz.1.3107': attribute type 1 has an invalid length.
[  257.138762][T18064] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  257.271406][T18066] lo speed is unknown, defaulting to 1000
[  257.386852][T18078] bridge_slave_0: default FDB implementation only supports local addresses
[  257.418382][T18083] bridge0: port 1(gretap0) entered blocking state
[  257.420830][T18083] bridge0: port 1(gretap0) entered disabled state
[  257.422925][T18083] gretap0: entered allmulticast mode
[  257.425432][T18083] gretap0: entered promiscuous mode
[  257.600495][T18087] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  257.704845][T18093] dvmrp1: entered allmulticast mode
[  257.711691][T18093] dvmrp1: left allmulticast mode
[  257.878702][T18105] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  257.972342][T18111] k*]: entered promiscuous mode
[  258.078395][T18116] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  258.230413][T18119] gretap0: left allmulticast mode
[  258.231991][T18119] gretap0: left promiscuous mode
[  258.233623][T18119] bridge0: port 1(gretap0) entered disabled state
[  258.278010][T18131] syzkaller1: entered promiscuous mode
[  258.279662][T18131] syzkaller1: entered allmulticast mode
[  258.510925][T18137] block nbd1: server does not support multiple connections per device.
[  258.515774][T18137] block nbd1: shutting down sockets
[  258.971979][T18170] tipc: Resetting bearer <eth:syzkaller0>
[  258.981576][T18169] tipc: Resetting bearer <eth:syzkaller0>
[  259.076314][T18179] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  259.124236][T18183] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  259.339501][T18198] bridge0: left allmulticast mode
[  259.512837][T18202] lo speed is unknown, defaulting to 1000
[  259.629869][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.828897][T14612] tipc: Resetting bearer <eth:syzkaller0>
[  259.972453][T18221] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  260.221309][T18231] tipc: Resetting bearer <eth:syzkaller0>
[  260.613148][T18251] : renamed from vlan0
[  260.704026][T18264] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  261.165052][T18280] lo speed is unknown, defaulting to 1000
[  261.608213][T18286] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  261.749415][T18303] Bluetooth: hci0: Opcode 0x080f failed: -22
[  261.816671][T18307] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  261.824650][T18307] tipc: Resetting bearer <eth:syzkaller0>
[  261.909445][T18312] __nla_validate_parse: 27 callbacks suppressed
[  261.909460][T18312] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3174'.
[  262.042114][T18317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3176'.
[  262.052954][T18314] lo speed is unknown, defaulting to 1000
[  262.081216][T18317] sctp: [Deprecated]: syz.0.3176 (pid 18317) Use of int in max_burst socket option.
[  262.081216][T18317] Use struct sctp_assoc_value instead
[  262.143425][T18321] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3177'.
[  262.471322][T18307] Set syz1 is full, maxelem 65536 reached
[  262.499499][T18330] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3179'.
[  262.504123][T18330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3179'.
[  262.619197][T18337] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  262.621603][T18337] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  262.625522][T18337] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3181'.
[  262.628214][T18337] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3181'.
[  262.698698][T18342] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3183'.
[  262.712340][T18344] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3183'.
[  262.716946][T18342] validate_nla: 6 callbacks suppressed
[  262.716958][T18342] netlink: 'syz.2.3183': attribute type 10 has an invalid length.
[  262.725035][T18346] netlink: 86 bytes leftover after parsing attributes in process `syz.1.3182'.
[  262.776804][T18350] netlink: 'syz.2.3184': attribute type 1 has an invalid length.
[  262.801754][T18349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  262.937565][T18358] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  262.940629][T18358] tipc: Resetting bearer <eth:syzkaller0>
[  263.205599][T18379] netlink: 'syz.0.3189': attribute type 13 has an invalid length.
[  263.208076][T18379] netlink: 'syz.0.3189': attribute type 17 has an invalid length.
[  263.217087][T18379] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  263.224671][T18375] lo speed is unknown, defaulting to 1000
[  263.241026][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  263.270787][T18368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  263.274616][T18368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  263.335107][T18383] netlink: 'syz.2.3192': attribute type 1 has an invalid length.
[  263.363282][T18388] rdma_op ffff88803bf1f9f0 conn xmit_rdma 0000000000000000
[  263.527910][T18392] lo speed is unknown, defaulting to 1000
[  263.649216][ T5677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  263.651926][ T5677] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  263.873230][T18413] netlink: 'syz.0.3198': attribute type 8 has an invalid length.
[  264.051892][T18439] netlink: 'syz.1.3202': attribute type 1 has an invalid length.
[  264.069583][T18439] xt_CT: No such helper "snmp"
[  264.110440][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  264.169949][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  264.177158][T18453] lo speed is unknown, defaulting to 1000
[  264.512262][T18476] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  264.515425][T18476] netlink: 'syz.0.3211': attribute type 13 has an invalid length.
[  264.523612][T18476] tipc: Resetting bearer <eth:gre0>
[  264.538635][T18476] erspan0: refused to change device tx_queue_len
[  264.540801][T18476] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  264.545370][ T5895] lo speed is unknown, defaulting to 1000
[  264.547172][ T5895] syz0: Port: 1 Link DOWN
[  264.548527][ T5895] lo speed is unknown, defaulting to 1000
[  264.581909][T18478] tipc: Resetting bearer <eth:geneve1>
[  264.584255][T18478] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  264.586738][T18478] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  264.589448][T18478] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  264.592234][T18478] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  264.727524][T18487] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  264.785939][T18495] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 37389 - 0
[  264.788620][T18495] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 37389 - 0
[  264.793024][T18495] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 37389 - 0
[  264.796011][T18495] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 37389 - 0
[  264.798901][T18495] geneve3: entered promiscuous mode
[  264.800923][T18495] geneve3: entered allmulticast mode
[  264.821848][T18497] lo speed is unknown, defaulting to 1000
[  265.038436][T18513] tipc: Resetting bearer <eth:syzkaller0>
[  265.054460][T18511] tipc: Resetting bearer <eth:syzkaller0>
[  265.254566][T18527] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0
[  265.352579][T18529] syzkaller1: entered promiscuous mode
[  265.354701][T18529] syzkaller1: entered allmulticast mode
[  265.572800][T18550] netlink: 'syz.1.3238': attribute type 13 has an invalid length.
[  265.576370][T18550] gretap0: refused to change device tx_queue_len
[  265.582547][T18546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  265.670986][T14612] tipc: Resetting bearer <eth:syzkaller0>
[  265.933529][T18581] netlink: 'syz.1.3247': attribute type 20 has an invalid length.
[  266.274367][T18602] 8021q: adding VLAN 0 to HW filter on device bond18
[  266.289255][T18602] 8021q: adding VLAN 0 to HW filter on device bond18
[  266.291657][T18602] bond18: (slave vxcan3): The slave device specified does not support setting the MAC address
[  266.295588][T18602] bond18: (slave vxcan3): Error -95 calling set_mac_address
[  266.332729][T18604] 8021q: adding VLAN 0 to HW filter on device bond18
[  266.714349][T18628] xt_policy: output policy not valid in PREROUTING and INPUT
[  266.755427][T18633] net_ratelimit: 1 callbacks suppressed
[  266.755440][T18633] openvswitch: netlink: IP tunnel TTL not specified.
[  266.759652][T18633] openvswitch: netlink: Flow key attr not present in new flow.
[  267.174403][T18658] __nla_validate_parse: 96 callbacks suppressed
[  267.174416][T18658] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3268'.
[  267.273318][T18660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3269'.
[  267.282686][T18660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3269'.
[  267.298294][T18669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3271'.
[  267.348288][T18673] lo speed is unknown, defaulting to 1000
[  267.499364][T18686] pim6reg: entered allmulticast mode
[  267.515270][T18686] pim6reg: left allmulticast mode
[  267.568295][T18689] macsec1: entered allmulticast mode
[  267.660543][T18694] xt_hashlimit: size too large, truncated to 1048576
[  267.825335][T18702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3282'.
[  267.828100][T18702] validate_nla: 1 callbacks suppressed
[  267.828107][T18702] netlink: 'syz.1.3282': attribute type 5 has an invalid length.
[  267.839926][T18702] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3282'.
[  267.849911][T18702] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  267.857392][T18702] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  267.861110][T18702] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  267.863432][T18702] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  267.865825][T18702] geneve4: entered promiscuous mode
[  267.867877][T18702] geneve4: entered allmulticast mode
[  267.935978][T18715] tipc: Resetting bearer <eth:syzkaller0>
[  267.953944][T18715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3286'.
[  267.957515][T18714] tipc: Resetting bearer <eth:syzkaller0>
[  267.977410][T18707] tipc: Can't bind to reserved service type 1
[  268.100896][T18730] openvswitch: netlink: Actions may not be safe on all matching packets
[  268.122149][T18733] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  268.125648][T18733] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  268.182058][T18738] netlink: 'syz.1.3291': attribute type 1 has an invalid length.
[  268.200327][T18738] 8021q: adding VLAN 0 to HW filter on device bond20
[  268.203896][T18738] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3291'.
[  268.207373][T18738] 8021q: VLANs not supported on ip6_vti0
[  268.223572][T18741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3293'.
[  268.243121][T18747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  268.442256][T18755] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3296'.
[  268.813790][T18781] delete_channel: no stack
[  268.841503][T14617] tipc: Resetting bearer <eth:syzkaller0>
[  268.888614][ T5677] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  268.892184][ T5677] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  268.910230][   T96] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  268.967095][T18808] netlink: 'syz.0.3312': attribute type 10 has an invalid length.
[  268.969588][T18808] dummy0: entered promiscuous mode
[  268.971686][T18808] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  269.131790][T18827] netlink: 'syz.1.3316': attribute type 9 has an invalid length.
[  269.249951][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  269.274767][T18833] syzkaller1: entered promiscuous mode
[  269.276460][T18833] syzkaller1: entered allmulticast mode
[  269.440813][T18841] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  269.443703][T18841] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 37389 - 0
[  269.446520][T18841] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  269.507581][T18841] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  269.510641][T18841] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 37389 - 0
[  269.513467][T18841] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  269.554413][T18841] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  269.557241][T18841] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 37389 - 0
[  269.561135][T18841] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  269.601700][T18841] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  269.606397][T18841] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 37389 - 0
[  269.609300][T18841] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  269.680431][T18841] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  269.683178][T18841] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  269.685781][T18841] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 37389 - 0
[  269.699159][T18841] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  269.704894][T18841] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  269.707250][T18841] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 37389 - 0
[  269.717095][T18841] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  269.719517][T18841] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  269.723869][T18841] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 37389 - 0
[  269.732161][T18841] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  269.734543][T18841] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  269.738369][T18841] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 37389 - 0
[  269.870852][   T96] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  270.698947][T18895] lo speed is unknown, defaulting to 1000
[  270.735367][T18896] netlink: 'syz.2.3333': attribute type 2 has an invalid length.
[  271.238097][T18926] gtp0: entered promiscuous mode
[  271.247457][T18926] veth0: entered promiscuous mode
[  271.266837][T18926] veth0 (unregistering): left promiscuous mode
[  271.476206][T18937] xt_hashlimit: size too large, truncated to 1048576
[  271.484612][T18937] syz.0.3343: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  271.490293][T18937] CPU: 0 UID: 0 PID: 18937 Comm: syz.0.3343 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  271.490306][T18937] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  271.490312][T18937] Call Trace:
[  271.490316][T18937]  <TASK>
[  271.490321][T18937]  dump_stack_lvl+0x189/0x250
[  271.490339][T18937]  ? __pfx_dump_stack_lvl+0x10/0x10
[  271.490351][T18937]  ? __pfx__printk+0x10/0x10
[  271.490363][T18937]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  271.490374][T18937]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  271.490386][T18937]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  271.490398][T18937]  warn_alloc+0x214/0x310
[  271.490409][T18937]  ? __pfx_warn_alloc+0x10/0x10
[  271.490421][T18937]  ? __get_vm_area_node+0x28f/0x300
[  271.490433][T18937]  ? htable_create+0xfc/0x7a0
[  271.490444][T18937]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  271.490470][T18937]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  271.490491][T18937]  ? rcu_is_watching+0x15/0xb0
[  271.490501][T18937]  ? htable_create+0xfc/0x7a0
[  271.490508][T18937]  ? htable_create+0xfc/0x7a0
[  271.490515][T18937]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  271.490528][T18937]  ? htable_create+0xfc/0x7a0
[  271.490535][T18937]  ? hashlimit_pernet+0x23/0x240
[  271.490546][T18937]  htable_create+0xfc/0x7a0
[  271.490557][T18937]  hashlimit_mt_check_common+0x719/0xa10
[  271.490569][T18937]  xt_check_match+0x3d1/0xab0
[  271.490582][T18937]  ? __pfx___mutex_lock+0x10/0x10
[  271.490593][T18937]  ? __pfx_xt_check_match+0x10/0x10
[  271.490607][T18937]  ? pcpu_alloc_noprof+0xfdd/0x16b0
[  271.490623][T18937]  ? xt_find_match+0x1f7/0x250
[  271.490639][T18937]  translate_table+0x1553/0x2040
[  271.490688][T18937]  ? __pfx_translate_table+0x10/0x10
[  271.490701][T18937]  ? __might_fault+0xb0/0x130
[  271.490723][T18937]  ? _copy_from_user+0x94/0xb0
[  271.490737][T18937]  do_ip6t_set_ctl+0x970/0xce0
[  271.490752][T18937]  ? rcu_is_watching+0x15/0xb0
[  271.490761][T18937]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  271.490782][T18937]  ? __pfx___mutex_lock+0x10/0x10
[  271.490791][T18937]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  271.490804][T18937]  ? __lock_acquire+0xab9/0xd20
[  271.490816][T18937]  nf_setsockopt+0x26f/0x290
[  271.490831][T18937]  rawv6_setsockopt+0x23b/0x5b0
[  271.490841][T18937]  ? __pfx_rawv6_setsockopt+0x10/0x10
[  271.490849][T18937]  ? aa_sock_opt_perm+0x74/0x110
[  271.490858][T18937]  ? sock_common_setsockopt+0x36/0xc0
[  271.490869][T18937]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  271.490879][T18937]  do_sock_setsockopt+0x17c/0x1b0
[  271.490894][T18937]  __x64_sys_setsockopt+0x13f/0x1b0
[  271.490908][T18937]  do_syscall_64+0xfa/0x3b0
[  271.490917][T18937]  ? lockdep_hardirqs_on+0x9c/0x150
[  271.490925][T18937]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.490933][T18937]  ? exc_page_fault+0x9f/0xf0
[  271.490942][T18937]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.490950][T18937] RIP: 0033:0x7efd00b8e9a9
[  271.490959][T18937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  271.490967][T18937] RSP: 002b:00007efd01a33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  271.490976][T18937] RAX: ffffffffffffffda RBX: 00007efd00db5fa0 RCX: 00007efd00b8e9a9
[  271.490982][T18937] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004
[  271.490987][T18937] RBP: 00007efd00c10ca1 R08: 00000000000005c0 R09: 0000000000000000
[  271.490992][T18937] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000
[  271.490997][T18937] R13: 0000000000000000 R14: 00007efd00db5fa0 R15: 00007ffdbe9314b8
[  271.491010][T18937]  </TASK>
[  271.491014][T18937] Mem-Info:
[  271.600754][T18937] active_anon:13964 inactive_anon:0 isolated_anon:0
[  271.600754][T18937]  active_file:1241 inactive_file:38294 isolated_file:0
[  271.600754][T18937]  unevictable:1768 dirty:27 writeback:0
[  271.600754][T18937]  slab_reclaimable:10541 slab_unreclaimable:110312
[  271.600754][T18937]  mapped:18347 shmem:2587 pagetables:1023
[  271.600754][T18937]  sec_pagetables:0 bounce:0
[  271.600754][T18937]  kernel_misc_reclaimable:0
[  271.600754][T18937]  free:219342 free_pcp:21256 free_cma:0
[  271.613795][T18937] Node 0 active_anon:16152kB inactive_anon:0kB active_file:1380kB inactive_file:20396kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28972kB dirty:20kB writeback:0kB shmem:5412kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9944kB pagetables:1632kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  271.624342][T18937] Node 1 active_anon:39704kB inactive_anon:0kB active_file:3584kB inactive_file:132780kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:44416kB dirty:88kB writeback:0kB shmem:4936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6416kB pagetables:2460kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  271.634017][T18937] Node 0 DMA free:14680kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:616kB local_pcp:312kB free_cma:0kB
[  271.643653][T18937] lowmem_reserve[]: 0 812 812 812 812
[  271.645487][T18937] Node 0 DMA32 free:181484kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16152kB inactive_anon:0kB active_file:1380kB inactive_file:20396kB unevictable:3536kB writepending:20kB present:1556484kB managed:831984kB mlocked:0kB bounce:0kB free_pcp:42880kB local_pcp:28392kB free_cma:0kB
[  271.655732][T18937] lowmem_reserve[]: 0 0 0 0 0
[  271.657127][T18937] Node 1 DMA32 free:452292kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:6324kB local_pcp:4196kB free_cma:0kB
[  271.666708][T18937] lowmem_reserve[]: 0 0 854 854 854
[  271.668226][T18937] Node 1 Normal free:228912kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39704kB inactive_anon:0kB active_file:3584kB inactive_file:132780kB unevictable:3536kB writepending:88kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:35204kB local_pcp:19700kB free_cma:0kB
[  271.677369][T18937] lowmem_reserve[]: 0 0 0 0 0
[  271.678808][T18937] Node 0 DMA: 8*4kB (UM) 7*8kB (U) 8*16kB (UM) 12*32kB (U) 12*64kB (UM) 6*128kB (UM) 7*256kB (UM) 5*512kB (UM) 4*1024kB (UM) 2*2048kB (U) 0*4096kB = 14680kB
[  271.684440][T18937] Node 0 DMA32: 727*4kB (UM) 746*8kB (UM) 388*16kB (UME) 188*32kB (UME) 146*64kB (UM) 100*128kB (UM) 50*256kB (UM) 27*512kB (UE) 19*1024kB (UME) 7*2048kB (UM) 19*4096kB (UM) = 181484kB
[  271.689859][T18937] Node 1 DMA32: 3*4kB (UM) 3*8kB (UM) 4*16kB (UM) 3*32kB (UM) 4*64kB (UM) 2*128kB (UM) 2*256kB (M) 3*512kB (UM) 3*1024kB (UM) 2*2048kB (M) 108*4096kB (UM) = 452292kB
[  271.694817][T18937] Node 1 Normal: 264*4kB (UME) 1490*8kB (UME) 636*16kB (UME) 288*32kB (UME) 310*64kB (UME) 146*128kB (UME) 75*256kB (UM) 55*512kB (UME) 48*1024kB (UM) 6*2048kB (UM) 12*4096kB (UM) = 228848kB
[  271.700463][T18937] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  271.703141][T18937] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  271.705848][T18937] 42122 total pagecache pages
[  271.707220][T18937] 0 pages in swap cache
[  271.708436][T18937] Free swap  = 124996kB
[  271.709677][T18937] Total swap = 124996kB
[  271.711252][T18937] 786301 pages RAM
[  271.712423][T18937] 0 pages HighMem/MovableOnly
[  271.713799][T18937] 241057 pages reserved
[  271.715011][T18937] 0 pages cma reserved
[  271.766691][T18942] pim6reg1: entered promiscuous mode
[  271.768400][T18942] pim6reg1: entered allmulticast mode
[  272.039500][T18956] netdevsim0: entered promiscuous mode
[  272.042137][T18956] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  272.098218][T18961] pim6reg1: entered promiscuous mode
[  272.101476][T18961] pim6reg1: entered allmulticast mode
[  272.255274][T18966] syzkaller0: left promiscuous mode
[  272.257137][T18966] syzkaller0: left allmulticast mode
[  272.258918][T18966] tipc: Resetting bearer <eth:syzkaller0>
[  272.302561][T18971] __nla_validate_parse: 14 callbacks suppressed
[  272.302595][T18971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3354'.
[  272.303475][T18972] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3355'.
[  272.306476][T18971] netlink: 'syz.0.3354': attribute type 1 has an invalid length.
[  272.308466][T18972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3355'.
[  272.334119][T18971] 8021q: adding VLAN 0 to HW filter on device bond54
[  272.336660][T18972] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  272.340901][T18972] syzkaller0: entered promiscuous mode
[  272.342665][T18972] syzkaller0: entered allmulticast mode
[  272.344650][T18972] tipc: Resetting bearer <eth:syzkaller0>
[  272.457622][T18979] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3357'.
[  272.506796][T18982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3358'.
[  272.509541][T18982] openvswitch: netlink: nsh attr 2560 is out of range max 3
[  272.512537][T18982] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  273.239972][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  273.824147][T19016] wlan1 speed is unknown, defaulting to 1000
[  273.826037][T19016] wlan1 speed is unknown, defaulting to 1000
[  273.828300][T19016] wlan1 speed is unknown, defaulting to 1000
[  273.838542][T19016] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  273.857656][T19016] wlan1 speed is unknown, defaulting to 1000
[  273.866985][T19016] wlan1 speed is unknown, defaulting to 1000
[  273.869637][T19016] wlan1 speed is unknown, defaulting to 1000
[  273.884270][T19020] IPv6: sit7: Disabled Multicast RS
[  273.948651][T19031] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  273.951493][T19031] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  273.954107][T19031] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  273.956435][T19031] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  274.199583][T19066] workqueue: Failed to create a rescuer kthread for wq "bond21": -EINTR
[  274.226178][T19072] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  274.231173][T19072] syzkaller0: entered promiscuous mode
[  274.232971][T19072] syzkaller0: entered allmulticast mode
[  274.338671][T19090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3383'.
[  274.342410][T19090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3383'.
[  274.569580][T19103] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3387'.
[  274.572949][T19102] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3387'.
[  275.028529][T19102] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3387'.
[  275.088024][T19106] openvswitch: netlink: nsh attribute has 65520 unknown bytes.
[  275.092698][T19106] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  275.241131][T19133] netlink: 'syz.2.3395': attribute type 1 has an invalid length.
[  275.268989][T19133] xt_CT: No such helper "snmp"
[  275.292714][T19131] syzkaller1: entered promiscuous mode
[  275.294429][T19131] syzkaller1: entered allmulticast mode
[  275.400204][T19151] tipc: Resetting bearer <eth:syzkaller0>
[  275.407435][T19150] tipc: Resetting bearer <eth:syzkaller0>
[  275.781737][T11590] tipc: Resetting bearer <eth:syzkaller0>
[  275.816210][T19194] 8021q: VLANs not supported on xfrm0
[  276.028752][T19210] veth0_to_team: left promiscuous mode
[  276.030870][T19210] veth0_to_team: left allmulticast mode
[  276.078356][T19215] netlink: 'syz.1.3422': attribute type 1 has an invalid length.
[  276.464957][T19239] bond0 (unregistering): Released all slaves
[  276.523838][T19250] netlink: 'syz.0.3434': attribute type 2 has an invalid length.
[  276.592015][T19250] : entered promiscuous mode
[  276.594838][T19256] tipc: Resetting bearer <eth:syzkaller0>
[  276.789631][T19279] tipc: Resetting bearer <eth:syzkaller0>
[  276.879522][T19278] tipc: Resetting bearer <eth:syzkaller0>
[  276.886338][T19298] mac80211_hwsim hwsim24 wlan1: entered allmulticast mode
[  276.902841][T19298] bond59: (slave bridge7): Releasing active interface
[  276.913466][T19298] netlink: 'syz.2.3445': attribute type 10 has an invalid length.
[  276.916974][T19298] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  276.922506][T19298] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  277.026849][T19315] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  277.029451][T19315] openvswitch: netlink: Message has 8454 unknown bytes.
[  277.816993][T19325] __nla_validate_parse: 35 callbacks suppressed
[  277.817005][T19325] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3452'.
[  277.872004][T19337] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3455'.
[  277.875346][T14617] tipc: Resetting bearer <eth:syzkaller0>
[  277.923511][T19335] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3454'.
[  277.930864][T19344] IPVS: set_ctl: invalid protocol: 60 172.30.1.3:19999
[  277.953324][T19347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3459'.
[  277.956016][T19347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3459'.
[  278.070660][T19356] dummy0: left promiscuous mode
[  278.294245][T19372] bridge0: port 1(erspan0) entered blocking state
[  278.296272][T19372] bridge0: port 1(erspan0) entered disabled state
[  278.298523][T19372] erspan0: entered allmulticast mode
[  278.304161][T19372] erspan0: entered promiscuous mode
[  278.306850][T19372] erspan0: left allmulticast mode
[  278.308445][T19372] erspan0: left promiscuous mode
[  278.311288][T19372] bridge0: port 1(erspan0) entered disabled state
[  278.355287][T19383] tipc: Resetting bearer <eth:gre0>
[  278.374955][T19385] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3470'.
[  278.377743][T19385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3470'.
[  278.396926][T19387] netlink: 'syz.0.3471': attribute type 64 has an invalid length.
[  278.461075][T19387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3471'.
[  278.770342][T19407] tipc: Resetting bearer <eth:syzkaller0>
[  278.778250][T19411] dvmrp1: entered allmulticast mode
[  278.799242][T19411] dvmrp1: left allmulticast mode
[  278.814077][T19407] tipc: Resetting bearer <eth:syzkaller0>
[  278.891223][T11590] tipc: Resetting bearer <eth:syzkaller0>
[  278.909436][T19423] netlink: 'syz.2.3482': attribute type 10 has an invalid length.
[  278.913001][T19423] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3482'.
[  278.916087][T19423] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  279.026443][T19441] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3486'.
[  279.061340][T19443] netlink: 'syz.1.3487': attribute type 1 has an invalid length.
[  279.063626][T19443] netlink: 'syz.1.3487': attribute type 2 has an invalid length.
[  279.189004][T19454] x_tables: duplicate underflow at hook 2
[  279.192172][T19455] x_tables: duplicate underflow at hook 2
[  279.194718][T19454] x_tables: duplicate underflow at hook 2
[  279.355292][T19459] tipc: Resetting bearer <eth:syzkaller0>
[  279.357696][T19459] veth5: left allmulticast mode
[  279.359344][T19459] bridge17: port 1(veth5) entered disabled state
[  279.372954][T19459] bond15: (slave bridge19): Releasing active interface
[  279.380611][T19459] bond16: left promiscuous mode
[  279.382211][T19459] bridge0: port 1(bond16) entered disabled state
[  279.586341][T19478] sctp: [Deprecated]: syz.1.3494 (pid 19478) Use of struct sctp_assoc_value in delayed_ack socket option.
[  279.586341][T19478] Use struct sctp_sack_info instead
[  279.750806][T19480] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  279.895195][T19498] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  279.992206][T19511] netlink: zone id is out of range
[  279.993813][T19511] netlink: zone id is out of range
[  279.995325][T19511] netlink: set zone limit has 4 unknown bytes
[  280.194926][T19529] bridge10: port 1(ip6gretap2) entered blocking state
[  280.197057][T19529] bridge10: port 1(ip6gretap2) entered disabled state
[  280.199231][T19529] ip6gretap2: entered allmulticast mode
[  280.203146][T19529] ip6gretap2: entered promiscuous mode
[  280.227787][T19529] veth13: entered promiscuous mode
[  280.646205][T19561] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  280.714881][T19565] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  280.787027][T19387] Set syz1 is full, maxelem 65536 reached
[  280.787534][T19569] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  280.792332][T19569] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  280.794610][T19569] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  280.797415][T19569] tipc: Resetting bearer <eth:syzkaller0>
[  280.855290][T19576] tipc: Resetting bearer <eth:syzkaller0>
[  280.869058][T19576] netlink: 'syz.1.3523': attribute type 7 has an invalid length.
[  280.878620][T19576] : entered promiscuous mode
[  280.888472][T19575] tipc: Resetting bearer <eth:syzkaller0>
[  280.898222][T19578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  280.903363][T19578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  280.906809][T19581] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  280.917236][T11590] tipc: Resetting bearer <eth:syzkaller0>
[  280.937221][T19578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  280.946423][T19583] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  280.966511][T19585] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  280.981255][T19585] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  281.363753][T19608] netlink: 'syz.1.3533': attribute type 9 has an invalid length.
[  281.789842][ T5829] Bluetooth: hci0: command tx timeout
[  282.029919][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  282.460077][T19621] netlink: 'syz.0.3536': attribute type 39 has an invalid length.
[  282.487182][T19633] tipc: Resetting bearer <eth:syzkaller0>
[  282.504822][T19632] tipc: Resetting bearer <eth:syzkaller0>
[  282.880956][T19653] netlink: 'syz.1.3546': attribute type 13 has an invalid length.
[  282.883661][T19653] __nla_validate_parse: 22 callbacks suppressed
[  282.883670][T19653] netlink: 292 bytes leftover after parsing attributes in process `syz.1.3546'.
[  282.906522][T19653] lo speed is unknown, defaulting to 1000
[  282.961140][T14612] tipc: Resetting bearer <eth:syzkaller0>
[  283.011199][T19653] wlan1 speed is unknown, defaulting to 1000
[  283.151684][T19651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  283.219201][T19660] netlink: 'syz.0.3547': attribute type 13 has an invalid length.
[  283.219201][T19658] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3547'.
[  283.221932][T19660] netlink: 'syz.0.3547': attribute type 17 has an invalid length.
[  283.227369][T19658] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3547'.
[  283.230224][T19658] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3547'.
[  283.233148][T19658] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3547'.
[  283.235950][T19658] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3547'.
[  283.238733][T19660] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  283.238819][T19658] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3547'.
[  283.246621][T19658] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3547'.
[  283.247609][    T9] lo speed is unknown, defaulting to 1000
[  283.249459][T19658] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3547'.
[  283.252176][T19660] netlink: 'syz.0.3547': attribute type 13 has an invalid length.
[  283.254406][T19658] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3547'.
[  283.256616][    T9] syz0: Port: 1 Link ACTIVE
[  283.261781][    T9] lo speed is unknown, defaulting to 1000
[  283.264582][T19660] netlink: 'syz.0.3547': attribute type 17 has an invalid length.
[  283.269921][T19660] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  283.274618][T19660] netlink: 'syz.0.3547': attribute type 13 has an invalid length.
[  283.276950][T19660] netlink: 'syz.0.3547': attribute type 17 has an invalid length.
[  284.554227][T19722] lo speed is unknown, defaulting to 1000
[  284.653599][T19722] wlan1 speed is unknown, defaulting to 1000
[  285.024987][T19733] net_ratelimit: 1 callbacks suppressed
[  285.024998][T19733] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  285.377245][T19754] smc: removing net device bond0 with user defined pnetid SYZ2
[  285.382642][T19754] bond0 (unregistering): Released all slaves
[  285.503211][   T33] audit: type=1107 audit(1753080186.681:4): pid=19783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  285.505257][T19784] openvswitch: netlink: nsh attribute has 65520 unknown bytes.
[  285.536620][T19784] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  286.849031][ T9595] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  287.753181][T14619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  287.755583][T14619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  288.021324][T19866] block nbd1: server does not support multiple connections per device.
[  288.025099][T19866] block nbd1: shutting down sockets
[  288.096451][T19876] __nla_validate_parse: 37 callbacks suppressed
[  288.096464][T19876] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3602'.
[  288.102822][T19879] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3602'.
[  288.237354][T19888] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3605'.
[  288.244179][T19888] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3605'.
[  288.247402][T19888] nft_compat: unsupported protocol 0
[  288.298942][T19890] lo speed is unknown, defaulting to 1000
[  288.765267][T19890] wlan1 speed is unknown, defaulting to 1000
[  288.780353][T19893] validate_nla: 5 callbacks suppressed
[  288.780365][T19893] netlink: 'syz.2.3606': attribute type 6 has an invalid length.
[  288.952594][T19908] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3611'.
[  288.955423][T19908] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3611'.
[  289.071021][   T51] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  289.097708][T19914] tipc: Resetting bearer <eth:syzkaller0>
[  289.302184][T19932] tipc: Resetting bearer <eth:syzkaller0>
[  289.323081][T19932] gretap0: left promiscuous mode
[  289.342007][T19931] tipc: Resetting bearer <eth:syzkaller0>
[  289.346711][T19933] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  289.365966][T19933] syzkaller0: mtu greater than device maximum
[  289.381250][T19937] tipc: Resetting bearer <eth:syzkaller0>
[  289.386276][T19935] netlink: 'syz.0.3617': attribute type 39 has an invalid length.
[  289.465681][T19948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3621'.
[  289.468512][T19948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3621'.
[  289.500163][T19953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3623'.
[  289.510470][T19955] netlink: 'syz.2.3625': attribute type 1 has an invalid length.
[  289.512836][T19955] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3625'.
[  289.528887][T19957] openvswitch: netlink: VXLAN extension message has 2 unknown bytes.
[  289.547356][T19959] sctp: [Deprecated]: syz.0.3626 (pid 19959) Use of int in maxseg socket option.
[  289.547356][T19959] Use struct sctp_assoc_value instead
[  289.590213][T19961] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  289.700299][ T5836] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  290.351645][T11590] tipc: Resetting bearer <eth:syzkaller0>
[  290.474693][T19995] xt_policy: neither incoming nor outgoing policy selected
[  290.782728][T20013] pimreg: entered allmulticast mode
[  290.789378][T20013] pimreg: left allmulticast mode
[  290.867103][T20017] tipc: Enabling of bearer <udp:s> rejected, max 3 bearers permitted
[  291.298846][T20038] netlink: 'syz.2.3647': attribute type 1 has an invalid length.
[  291.498062][T20057] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  291.507675][T20057] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig
[  291.625126][T20074] tipc: Resetting bearer <eth:syzkaller0>
[  291.714674][T20073] tipc: Resetting bearer <eth:syzkaller0>
[  291.727907][T20093] syzkaller0: Caught tx_queue_len zero misconfig
[  291.813611][T20102] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  292.036332][T20132] netlink: 'syz.0.3675': attribute type 9 has an invalid length.
[  292.140557][T20139] vti0: entered promiscuous mode
[  292.164299][T20141] netlink: 'syz.0.3678': attribute type 5 has an invalid length.
[  292.246825][T20150] netlink: 'syz.1.3681': attribute type 2 has an invalid length.
[  292.254949][T20150] : entered promiscuous mode
[  292.304295][T20154] netlink: 'syz.1.3683': attribute type 1 has an invalid length.
[  292.320870][T20152] lo speed is unknown, defaulting to 1000
[  292.411245][T20152] wlan1 speed is unknown, defaulting to 1000
[  292.433923][T14619] tipc: Resetting bearer <eth:syzkaller0>
[  292.531225][T20167] netlink: 'syz.1.3687': attribute type 1 has an invalid length.
[  292.534151][T20168] netlink: 'syz.1.3687': attribute type 1 has an invalid length.
[  292.567141][T20167] xt_CT: No such helper "snmp"
[  293.258638][T20224] __nla_validate_parse: 55 callbacks suppressed
[  293.258650][T20224] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3704'.
[  293.272034][T20224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3704'.
[  293.274137][T20226] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  293.707818][T20237] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3709'.
[  293.735819][T20239] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3710'.
[  294.032325][T20254] pim6reg1: entered promiscuous mode
[  294.034130][T20254] pim6reg1: entered allmulticast mode
[  294.123445][T20264] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3715'.
[  294.146576][T20267] nlmon0: Master is either lo or non-ether device
[  294.344009][T20296] validate_nla: 1 callbacks suppressed
[  294.344020][T20296] netlink: 'syz.2.3724': attribute type 83 has an invalid length.
[  294.348048][T20295] netlink: 'syz.2.3724': attribute type 83 has an invalid length.
[  294.406579][T20298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3725'.
[  294.595964][T20313] ip6gretap0: entered allmulticast mode
[  294.632398][T20317] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3730'.
[  294.717879][T20319] lo speed is unknown, defaulting to 1000
[  294.744001][T20321] veth0: entered promiscuous mode
[  294.991671][T20319] wlan1 speed is unknown, defaulting to 1000
[  295.057576][T20318] veth0: left promiscuous mode
[  295.118468][T20328] netlink: 'syz.0.3733': attribute type 4 has an invalid length.
[  295.124115][T20328] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3733'.
[  295.182284][T20331] netlink: 'syz.0.3734': attribute type 1 has an invalid length.
[  295.238033][T20331] 8021q: adding VLAN 0 to HW filter on device bond55
[  295.288627][T20331] bond55: (slave bridge13): making interface the new active one
[  295.298768][T20331] bond55: (slave bridge13): Enslaving as an active interface with an up link
[  295.352078][T20339] netlink: 'syz.1.3736': attribute type 21 has an invalid length.
[  295.354384][T20339] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3736'.
[  295.356002][T20342] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3738'.
[  295.442471][T20353] netlink: 'syz.2.3741': attribute type 2 has an invalid length.
[  295.455891][T20353] : entered promiscuous mode
[  295.464773][T20356] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  295.764997][T20376] bond56: (slave vxcan1): The slave device specified does not support setting the MAC address
[  295.769122][T20376] bond56: (slave vxcan1): Error -95 calling set_mac_address
[  295.821038][T20377] macvlan0: entered promiscuous mode
[  295.823071][T20377] macvlan0: entered allmulticast mode
[  295.824921][T20377] bond56: (slave macvlan0): Error -98 calling set_mac_address
[  295.873338][T20384] macvlan0: entered promiscuous mode
[  295.875185][T20384] macvlan0: entered allmulticast mode
[  295.877299][T20384] bond56: (slave macvlan0): Error -98 calling set_mac_address
[  295.911357][T20386] lo speed is unknown, defaulting to 1000
[  296.092057][T20386] wlan1 speed is unknown, defaulting to 1000
[  296.422822][T20383] lo speed is unknown, defaulting to 1000
[  296.522941][T20383] wlan1 speed is unknown, defaulting to 1000
[  297.239162][T20476] mac80211_hwsim hwsim23 wlan1: entered allmulticast mode
[  297.254615][T20476] tipc: Resetting bearer <eth:syzkaller0>
[  297.284460][T11592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  297.287105][T11592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  297.794058][T20512] tipc: Resetting bearer <eth:syzkaller0>
[  297.804572][T20512] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  297.807211][T20512] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  297.810273][T20512] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  297.813533][T20512] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  297.860766][T20512] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 37389 - 0
[  297.865492][T20512] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 37389 - 0
[  297.868947][T20512] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 37389 - 0
[  297.874690][T20512] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 37389 - 0
[  297.889102][T20512] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  297.893828][T20512] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  297.897039][T20512] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  297.900655][T20512] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  298.068982][T20527] lo speed is unknown, defaulting to 1000
[  298.291700][T20527] wlan1 speed is unknown, defaulting to 1000
[  298.816486][T20565] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  298.819367][T20565] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  298.942897][T20579] __nla_validate_parse: 12 callbacks suppressed
[  298.942913][T20579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3791'.
[  298.948593][T20579] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  299.252321][T20591] ip6gre2: entered allmulticast mode
[  299.317193][T20597] nbd: socks must be embedded in a SOCK_ITEM attr
[  299.325171][T20591] nbd: socks must be embedded in a SOCK_ITEM attr
[  299.328179][T20597] x_tables: duplicate underflow at hook 1
[  299.663582][T20616] netlink: 'syz.1.3799': attribute type 6 has an invalid length.
[  299.666020][T20616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3799'.
[  299.949902][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  299.994213][T20633] netlink: 'syz.1.3805': attribute type 1 has an invalid length.
[  300.022014][T20633] bond0: (slave bridge0): Enslaving as a backup interface with an up link
[  300.125354][T20642] netlink: 'syz.0.3808': attribute type 1 has an invalid length.
[  300.204976][T20648] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3810'.
[  300.262473][T20650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3811'.
[  300.344669][T20666] netlink: 'syz.1.3814': attribute type 1 has an invalid length.
[  300.382217][T20666] bond21: entered promiscuous mode
[  300.383903][T20666] bond21: entered allmulticast mode
[  300.386645][T20666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3814'.
[  300.396772][T20666] bridge23: the hash_elasticity option has been deprecated and is always 16
[  300.404112][T20666] bond21: (slave bridge23): making interface the new active one
[  300.406450][T20666] bridge23: entered promiscuous mode
[  300.409461][T20666] bridge23: entered allmulticast mode
[  300.412737][T20666] bond21: (slave bridge23): Enslaving as an active interface with an up link
[  300.440272][T20675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3816'.
[  300.588154][T20693] netlink: 'syz.2.3821': attribute type 5 has an invalid length.
[  300.596457][T20694] netlink: 'syz.1.3820': attribute type 1 has an invalid length.
[  300.624381][T20694] 8021q: adding VLAN 0 to HW filter on device bond22
[  300.772619][T20712] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  300.868991][T20722] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3828'.
[  301.352155][T20734] xt_CT: No such helper "snmp"
[  301.517654][T20738] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3834'.
[  301.638658][T20742] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3836'.
[  301.869356][T20765] pim6reg1: entered promiscuous mode
[  301.873072][T20765] pim6reg1: entered allmulticast mode
[  301.924639][T20768] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3843'.
[  301.934849][T20774] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  302.515284][T20810] netlink: 'syz.2.3855': attribute type 1 has an invalid length.
[  302.517719][T20810] netlink: 'syz.2.3855': attribute type 11 has an invalid length.
[  302.525485][T20811] netlink: 'syz.2.3855': attribute type 10 has an invalid length.
[  302.899527][T20837] bond_slave_1: left allmulticast mode
[  303.139130][T20870] openvswitch: netlink: nsh attribute has 65520 unknown bytes.
[  303.142132][T20870] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  303.405290][T20894] 8021q: adding VLAN 0 to HW filter on device bond23
[  303.415515][T20894] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  303.422104][T20894] bond23: (slave macvlan0): Enslaving as a backup interface with a down link
[  303.427369][T20894] bond0: (slave bridge0): Releasing backup interface
[  303.432541][T20894] bond21: (slave bridge23): Releasing active interface
[  303.434766][T20894] bridge23: left promiscuous mode
[  303.436624][T20894] bridge23: left allmulticast mode
[  303.439658][T20894] bond23: (slave macvlan0): Releasing backup interface
[  303.475414][T20897] netlink: 'syz.1.3879': attribute type 1 has an invalid length.
[  303.743930][T20912] xt_CT: You must specify a L4 protocol and not use inversions on it
[  303.897268][T20922] lo speed is unknown, defaulting to 1000
[  304.005534][T20927] __nla_validate_parse: 17 callbacks suppressed
[  304.005572][T20927] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3886'.
[  304.014806][T20927] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3886'.
[  304.027984][T20922] wlan1 speed is unknown, defaulting to 1000
[  304.116311][T20932] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3888'.
[  304.121726][T20932] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3888'.
[  304.442911][T20955] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3893'.
[  304.569358][T20963] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3896'.
[  304.669434][T20968] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3898'.
[  304.842548][T20973] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3899'.
[  304.935409][T20981] 8021q: adding VLAN 0 to HW filter on device bond57
[  304.937856][T20981] bridge0: port 1(bond57) entered blocking state
[  304.940389][T20981] bridge0: port 1(bond57) entered disabled state
[  304.942804][T20981] bond57: entered allmulticast mode
[  304.945714][T20981] bond57: entered promiscuous mode
[  305.113938][T21008] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3910'.
[  305.118212][T21008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3910'.
[  305.163770][T21016] validate_nla: 1 callbacks suppressed
[  305.163789][T21016] netlink: 'syz.0.3911': attribute type 1 has an invalid length.
[  305.224405][T21016] 8021q: adding VLAN 0 to HW filter on device bond58
[  305.238884][T21017] bond58: (slave batadv_slave_1): Enslaving as an active interface with a down link
[  305.335015][T21033] lo speed is unknown, defaulting to 1000
[  305.466199][T21050] ip6gre2: entered allmulticast mode
[  305.473352][T21049] block nbd1: not configured, cannot reconfigure
[  305.525424][T21033] wlan1 speed is unknown, defaulting to 1000
[  305.653016][T21065] ip6gretap2: left allmulticast mode
[  305.654726][T21065] ip6gretap2: left promiscuous mode
[  305.656604][T21065] bridge10: port 1(ip6gretap2) entered disabled state
[  305.736647][T21065] netlink: 'syz.2.3925': attribute type 10 has an invalid length.
[  305.747189][T21065] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  305.755358][T21065] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  305.823043][T21075] netlink: 'syz.0.3929': attribute type 7 has an invalid length.
[  305.889523][T21083] netlink: 'syz.0.3933': attribute type 1 has an invalid length.
[  305.938646][T21083] 8021q: adding VLAN 0 to HW filter on device bond59
[  306.114572][T21106] vlan0: entered promiscuous mode
[  306.116292][T21106] bridge0: entered promiscuous mode
[  306.167436][T21106] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  306.185630][T21113] tipc: Resetting bearer <eth:syzkaller0>
[  306.203034][T21106] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  306.244100][T21106] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  306.283921][T21106] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  306.337821][T21106] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  306.347543][T21106] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  306.357599][T21106] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  306.366194][T21106] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  306.985746][T21145] netlink: 'syz.2.3949': attribute type 1 has an invalid length.
[  307.002446][T21145] 8021q: adding VLAN 0 to HW filter on device bond61
[  307.021437][T21145] 8021q: adding VLAN 0 to HW filter on device bond61
[  307.024583][T21145] bond61: (slave vxcan1): The slave device specified does not support setting the MAC address
[  307.028658][T21145] bond61: (slave vxcan1): Error -95 calling set_mac_address
[  307.062406][T21149] batadv_slave_1: entered promiscuous mode
[  307.064263][T21149] batadv_slave_1: left allmulticast mode
[  307.070054][T21149] bond61: (slave batadv_slave_1): Enslaving as an active interface with a down link
[  307.076807][T21149] 8021q: adding VLAN 0 to HW filter on device bond61
[  307.085288][T21148] syzkaller1: entered allmulticast mode
[  307.169312][T21153] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  307.237854][T21159] netlink: 'syz.1.3955': attribute type 14 has an invalid length.
[  307.240713][T21159] netlink: 'syz.1.3955': attribute type 13 has an invalid length.
[  307.355552][T21167] openvswitch: netlink: Message has 24 unknown bytes.
[  307.357675][T21167] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  307.364942][T21168] openvswitch: netlink: Message has 24 unknown bytes.
[  307.367579][T21168] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  307.926751][T21200] netlink: 'syz.1.3966': attribute type 15 has an invalid length.
[  307.937065][T21200] batman_adv: batadv0: Adding interface: macvlan35
[  307.939570][T21200] batman_adv: batadv0: The MTU of interface macvlan35 is too small (216) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  307.948359][T21200] batman_adv: batadv0: Interface activated: macvlan35
[  308.248437][T21214] netlink: 'syz.2.3970': attribute type 3 has an invalid length.
[  308.884036][T21238] tipc: Resetting bearer <eth:syzkaller0>
[  309.117477][T21253] can: request_module (can-proto-0) failed.
[  309.120172][T21253] __nla_validate_parse: 87 callbacks suppressed
[  309.120182][T21253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3984'.
[  309.124634][T21253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3984'.
[  309.157800][T21261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3986'.
[  309.217853][T21265] lo speed is unknown, defaulting to 1000
[  309.344551][T21265] wlan1 speed is unknown, defaulting to 1000
[  309.345842][T21272] lo speed is unknown, defaulting to 1000
[  309.544144][T21272] wlan1 speed is unknown, defaulting to 1000
[  309.613412][T21283] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  309.658294][T21283] lo speed is unknown, defaulting to 1000
[  309.788075][T21283] wlan1 speed is unknown, defaulting to 1000
[  309.986083][T21297] lo speed is unknown, defaulting to 1000
[  310.109400][T21300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3993'.
[  310.242717][T21300] lo speed is unknown, defaulting to 1000
[  310.251627][T21297] wlan1 speed is unknown, defaulting to 1000
[  310.281884][T21298] 0: reclassify loop, rule prio 0, protocol 800
[  310.424525][T21300] wlan1 speed is unknown, defaulting to 1000
[  311.145969][T21337] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4002'.
[  311.149192][T21336] lo speed is unknown, defaulting to 1000
[  311.164824][T21337] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4002'.
[  311.178849][T21337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4002'.
[  311.317243][T21345] tipc: Enabling of bearer <et:g> rejected, media not registered
[  311.352159][T21336] wlan1 speed is unknown, defaulting to 1000
[  311.396238][T21349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4008'.
[  311.592935][T21369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4014'.
[  311.606150][T21369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4014'.
[  311.657737][T21371] netlink: 'syz.1.4015': attribute type 10 has an invalid length.
[  311.805388][T21378] batman_adv: batadv0: Interface deactivated: macvlan35
[  311.812755][T21378] batman_adv: batadv0: Removing interface: macvlan35
[  311.819135][T21380] netlink: 'syz.2.4018': attribute type 64 has an invalid length.
[  312.047940][T21403] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  312.051016][T21403] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  312.062243][T21403] netlink: 'syz.2.4025': attribute type 11 has an invalid length.
[  312.334029][T21424] netlink: 'syz.0.4033': attribute type 10 has an invalid length.
[  312.383029][T21434] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig
[  312.475876][T21441] 8021q: adding VLAN 0 to HW filter on device bond60
[  312.478270][T21441] bridge0: port 2(bond60) entered blocking state
[  312.482374][T21441] bridge0: port 2(bond60) entered disabled state
[  312.484774][T21441] bond60: entered allmulticast mode
[  312.487832][T21441] bond60: entered promiscuous mode
[  312.677908][T21463] netlink: 'syz.0.4040': attribute type 12 has an invalid length.
[  312.880604][T21468] bond58: (slave batadv_slave_1): Releasing active interface
[  312.913228][T21468] bond55: (slave bridge13): Releasing active interface
[  312.931021][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  312.935119][T21468] bond57: left allmulticast mode
[  312.942278][T21468] bond57: left promiscuous mode
[  312.947281][T21468] bridge0: port 1(bond57) entered disabled state
[  312.961234][T21468] bond60: left allmulticast mode
[  312.967678][T21468] bond60: left promiscuous mode
[  312.972041][T21468] bridge0: port 2(bond60) entered disabled state
[  313.141201][T21474] bridge0: port 1(vlan0) entered blocking state
[  313.143185][T21474] bridge0: port 1(vlan0) entered disabled state
[  313.145167][T21474] vlan0: entered allmulticast mode
[  313.146751][T21474] bond0: entered allmulticast mode
[  313.170173][T21474] vlan0: entered promiscuous mode
[  313.171773][T21474] bond0: entered promiscuous mode
[  313.424441][T21486] x_tables: duplicate underflow at hook 2
[  313.457075][T21494] netlink: 'syz.2.4049': attribute type 1 has an invalid length.
[  313.593411][T21497] lo speed is unknown, defaulting to 1000
[  313.711029][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  313.759203][T21497] wlan1 speed is unknown, defaulting to 1000
[  313.788368][T21523] pim6reg9: entered allmulticast mode
[  313.805815][T21525] vxcan0: entered promiscuous mode
[  314.198253][T21550] __nla_validate_parse: 18 callbacks suppressed
[  314.198265][T21550] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4062'.
[  314.219106][T21550] lo speed is unknown, defaulting to 1000
[  314.258705][T21555] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4063'.
[  314.262769][T21555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4063'.
[  314.336207][T21550] wlan1 speed is unknown, defaulting to 1000
[  314.561080][T21578] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4069'.
[  314.566131][T21580] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4070'.
[  314.615069][T21584] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4071'.
[  314.667048][T21586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4072'.
[  314.678099][T21588] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4073'.
[  314.682404][T21586] netlink: 'syz.1.4072': attribute type 11 has an invalid length.
[  314.686692][T21588] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4073'.
[  314.696123][T21586] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4072'.
[  314.836587][T21606] warn_alloc: 1 callbacks suppressed
[  314.836601][T21606] syz.2.4080: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  314.852338][T21606] CPU: 0 UID: 0 PID: 21606 Comm: syz.2.4080 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  314.852361][T21606] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  314.852372][T21606] Call Trace:
[  314.852379][T21606]  <TASK>
[  314.852387][T21606]  dump_stack_lvl+0x189/0x250
[  314.852411][T21606]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  314.852435][T21606]  ? __pfx_dump_stack_lvl+0x10/0x10
[  314.852445][T21606]  ? __pfx__printk+0x10/0x10
[  314.852457][T21606]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  314.852469][T21606]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  314.852483][T21606]  warn_alloc+0x214/0x310
[  314.852495][T21606]  ? __pfx_warn_alloc+0x10/0x10
[  314.852535][T21606]  ? __get_vm_area_node+0x28f/0x300
[  314.852548][T21606]  ? packet_set_ring+0x6f4/0x2380
[  314.852564][T21606]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  314.852590][T21606]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  314.852603][T21606]  ? alloc_pages_mpol+0x3cd/0x4a0
[  314.852617][T21606]  ? packet_set_ring+0x6f4/0x2380
[  314.852629][T21606]  vzalloc_noprof+0xb2/0xf0
[  314.852641][T21606]  ? packet_set_ring+0x6f4/0x2380
[  314.852654][T21606]  packet_set_ring+0x6f4/0x2380
[  314.852676][T21606]  ? __pfx_packet_set_ring+0x10/0x10
[  314.852697][T21606]  ? _copy_from_user+0x94/0xb0
[  314.852712][T21606]  packet_setsockopt+0xc5a/0x12c0
[  314.852724][T21606]  ? __schedule+0x1713/0x4d00
[  314.852733][T21606]  ? __pfx_packet_setsockopt+0x10/0x10
[  314.852747][T21606]  ? __lock_acquire+0xab9/0xd20
[  314.852760][T21606]  ? aa_sk_perm+0x81e/0x950
[  314.852777][T21606]  ? __pfx_aa_sk_perm+0x10/0x10
[  314.852791][T21606]  ? __fget_files+0x2a/0x420
[  314.852799][T21606]  ? aa_sock_opt_perm+0x74/0x110
[  314.852809][T21606]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  314.852819][T21606]  ? __pfx_packet_setsockopt+0x10/0x10
[  314.852831][T21606]  do_sock_setsockopt+0x17c/0x1b0
[  314.852847][T21606]  __x64_sys_setsockopt+0x13f/0x1b0
[  314.852862][T21606]  do_syscall_64+0xfa/0x3b0
[  314.852872][T21606]  ? lockdep_hardirqs_on+0x9c/0x150
[  314.852880][T21606]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.852889][T21606]  ? exc_page_fault+0x9f/0xf0
[  314.852898][T21606]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.852906][T21606] RIP: 0033:0x7f9afcb8e9a9
[  314.852916][T21606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  314.852923][T21606] RSP: 002b:00007f9afda1c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  314.852933][T21606] RAX: ffffffffffffffda RBX: 00007f9afcdb5fa0 RCX: 00007f9afcb8e9a9
[  314.852939][T21606] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000009
[  314.852944][T21606] RBP: 00007f9afcc10ca1 R08: 000000000000001c R09: 0000000000000000
[  314.852949][T21606] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000
[  314.852954][T21606] R13: 0000000000000000 R14: 00007f9afcdb5fa0 R15: 00007ffce5676e48
[  314.852968][T21606]  </TASK>
[  314.853772][T21606] Mem-Info:
[  314.941098][T21606] active_anon:13831 inactive_anon:0 isolated_anon:0
[  314.941098][T21606]  active_file:1241 inactive_file:38310 isolated_file:0
[  314.941098][T21606]  unevictable:1768 dirty:88 writeback:0
[  314.941098][T21606]  slab_reclaimable:10722 slab_unreclaimable:162037
[  314.941098][T21606]  mapped:18282 shmem:2594 pagetables:1068
[  314.941098][T21606]  sec_pagetables:0 bounce:0
[  314.941098][T21606]  kernel_misc_reclaimable:0
[  314.941098][T21606]  free:171595 free_pcp:21195 free_cma:0
[  314.954015][T21606] Node 0 active_anon:15928kB inactive_anon:0kB active_file:1396kB inactive_file:20396kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29004kB dirty:20kB writeback:0kB shmem:5436kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10392kB pagetables:1816kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  314.965715][T21606] Node 1 active_anon:39396kB inactive_anon:0kB active_file:3568kB inactive_file:132844kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:44124kB dirty:332kB writeback:0kB shmem:4940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6696kB pagetables:2456kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  314.975302][T21606] Node 0 DMA free:14736kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:592kB local_pcp:312kB free_cma:0kB
[  314.983780][T21606] lowmem_reserve[]: 0 812 812 812 812
[  314.985374][T21606] Node 0 DMA32 free:125048kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15928kB inactive_anon:0kB active_file:1396kB inactive_file:20396kB unevictable:3536kB writepending:20kB present:1556484kB managed:831984kB mlocked:0kB bounce:0kB free_pcp:30632kB local_pcp:15160kB free_cma:0kB
[  315.042715][T21606] lowmem_reserve[]: 0 0 0 0 0
[  315.044196][T21606] Node 1 DMA32 free:384500kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:4464kB local_pcp:2336kB free_cma:0kB
[  315.079811][T21606] lowmem_reserve[]: 0 0 854 854 854
[  315.081644][T21606] Node 1 Normal free:162096kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39532kB inactive_anon:0kB active_file:3568kB inactive_file:132844kB unevictable:3536kB writepending:332kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:49988kB local_pcp:19964kB free_cma:0kB
[  315.114734][T21606] lowmem_reserve[]: 0 0 0 0 0
[  315.116214][T21606] Node 0 DMA: 6*4kB (UM) 3*8kB (U) 6*16kB (UM) 12*32kB (U) 12*64kB (UM) 7*128kB (UM) 7*256kB (UM) 5*512kB (UM) 4*1024kB (UM) 2*2048kB (U) 0*4096kB = 14736kB
[  315.123619][T21606] Node 0 DMA32: 995*4kB (UM) 934*8kB (UM) 748*16kB (UME) 312*32kB (UM) 137*64kB (UM) 92*128kB (UM) 57*256kB (UME) 35*512kB (UM) 21*1024kB (UME) 8*2048kB (UM) 0*4096kB = 124348kB
[  315.128726][T21606] Node 1 DMA32: 4*4kB (UM) 3*8kB (UM) 4*16kB (UM) 3*32kB (UM) 3*64kB (UM) 3*128kB (UM) 3*256kB (UM) 4*512kB (UM) 2*1024kB (M) 3*2048kB (UM) 91*4096kB (M) = 384520kB
[  315.133558][T21606] Node 1 Normal: 1232*4kB (UM) 952*8kB (UME) 683*16kB (UME) 118*32kB (UME) 189*64kB (UME) 139*128kB (UME) 60*256kB (UME) 51*512kB (UME) 46*1024kB (UME) 8*2048kB (UM) 0*4096kB = 162096kB
[  315.138857][T21606] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  315.141625][T21606] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  315.147081][T21606] 42145 total pagecache pages
[  315.148607][T21606] 0 pages in swap cache
[  315.151817][T21606] Free swap  = 124996kB
[  315.153112][T21606] Total swap = 124996kB
[  315.156319][T21606] 786301 pages RAM
[  315.157499][T21606] 0 pages HighMem/MovableOnly
[  315.158870][T21606] 241057 pages reserved
[  315.160239][T21606] 0 pages cma reserved
[  315.235497][T21651] netlink: 'syz.0.4089': attribute type 1 has an invalid length.
[  315.504595][T21682] netlink: 'syz.1.4097': attribute type 3 has an invalid length.
[  315.573154][T21690] veth10: entered allmulticast mode
[  316.081244][T21697] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  316.084247][T21697] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  316.542246][T21712] netlink: 'syz.1.4110': attribute type 12 has an invalid length.
[  317.037095][T21745] tipc: Resetting bearer <eth:syzkaller0>
[  317.830665][T21744] tipc: Resetting bearer <eth:syzkaller0>
[  318.052794][T21819] 8021q: adding VLAN 0 to HW filter on device bond24
[  318.056041][T21819] bond24: entered promiscuous mode
[  318.057657][T21819] bond24: entered allmulticast mode
[  318.059507][T21819] bond0: (slave bond24): Enslaving as a backup interface with a down link
[  318.075047][T21826] netlink: 'syz.0.4140': attribute type 1 has an invalid length.
[  318.220500][T21835] sctp: [Deprecated]: syz.1.4143 (pid 21835) Use of int in max_burst socket option.
[  318.220500][T21835] Use struct sctp_assoc_value instead
[  318.600718][T14612] tipc: Resetting bearer <eth:syzkaller0>
[  318.787809][T21858] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  318.790883][T21858] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  318.955013][T21864] netlink: 'syz.2.4150': attribute type 2 has an invalid length.
[  318.957653][T21864] netlink: 'syz.2.4150': attribute type 5 has an invalid length.
[  319.104187][T21871] 1: renamed from 70
[  319.108274][T21871] 1: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  319.115511][T21871] A link change request failed with some changes committed already. Interface 71 may have been left with an inconsistent configuration, please check.
[  319.171031][T21873] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  319.557641][T21881] __nla_validate_parse: 40 callbacks suppressed
[  319.557657][T21881] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4155'.
[  319.564697][T21881] unsupported nlmsg_type 40
[  319.597101][T21877] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4155'.
[  319.757613][T21887] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4158'.
[  319.761001][T21887] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4158'.
[  319.763964][T21887] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4158'.
[  319.780988][T21887] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4158'.
[  319.872340][T21891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4158'.
[  319.876748][T21891] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4158'.
[  320.000401][T21899] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4161'.
[  320.003037][T21899] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4161'.
[  320.032866][T21902] ip6tnl7: entered promiscuous mode
[  320.225220][T21912] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  320.227717][T21912] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  320.255309][T21918] pimreg: entered allmulticast mode
[  320.279270][T21918] pimreg: left allmulticast mode
[  320.370187][T21924] vlan0: entered promiscuous mode
[  320.371939][T21924] vlan0: entered allmulticast mode
[  320.373557][T21924] bridge0: entered allmulticast mode
[  320.602350][T21934] 0: renamed from hsr_slave_1
[  320.605652][T21934] 0: entered allmulticast mode
[  320.607554][T21934] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  320.696637][T21939] netlink: 'syz.2.4174': attribute type 12 has an invalid length.
[  321.039599][T21973] netlink: 'syz.1.4186': attribute type 2 has an invalid length.
[  321.044254][T21975] netlink: 'syz.1.4186': attribute type 2 has an invalid length.
[  321.311599][T21998] mac80211_hwsim hwsim22 wlan0: left allmulticast mode
[  321.314004][T21998] mac80211_hwsim hwsim22 wlan0: left promiscuous mode
[  321.316406][T21998] macsec0: left promiscuous mode
[  321.319350][T21998] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode
[  321.322770][T21998] mac80211_hwsim hwsim22 wlan0: entered allmulticast mode
[  321.327265][T21998] macsec0: left allmulticast mode
[  321.328874][T21998] mac80211_hwsim hwsim22 wlan0: left allmulticast mode
[  321.649010][T22027] dvmrp8: entered allmulticast mode
[  321.655517][T22020] dvmrp8: left allmulticast mode
[  321.818772][T22050] netlink: 'syz.2.4205': attribute type 3 has an invalid length.
[  321.828635][T22050] netlink: 'syz.2.4205': attribute type 3 has an invalid length.
[  321.832395][T22050] netlink: 'syz.2.4205': attribute type 3 has an invalid length.
[  321.834785][T22050] netlink: 'syz.2.4205': attribute type 3 has an invalid length.
[  321.926267][T22059] syzkaller1: entered promiscuous mode
[  321.928039][T22059] syzkaller1: entered allmulticast mode
[  322.663983][T22096] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  322.673587][T22095] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  323.228032][T22133] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  323.236799][T22133] siw: device registration error -23
[  323.593124][T22158] lo speed is unknown, defaulting to 1000
[  323.628768][T22159] delete_channel: no stack
[  323.740456][T22158] wlan1 speed is unknown, defaulting to 1000
[  324.135054][T22192] validate_nla: 62 callbacks suppressed
[  324.135067][T22192] netlink: 'syz.0.4245': attribute type 1 has an invalid length.
[  324.187762][T22197] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  324.287177][T22201] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  324.549195][T22213] dvmrp8: entered allmulticast mode
[  324.618195][T22227] __nla_validate_parse: 31 callbacks suppressed
[  324.618208][T22227] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4256'.
[  324.636830][T22229] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4257'.
[  324.663536][T22231] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  324.916576][T22241] openvswitch: netlink: IP tunnel dst address not specified
[  325.476138][T22238] pimreg: entered allmulticast mode
[  325.498851][T22243] netlink: 47 bytes leftover after parsing attributes in process `syz.2.4260'.
[  325.654129][T22264] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  325.662396][T22264] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  325.666061][T22268] netlink: 'syz.1.4265': attribute type 1 has an invalid length.
[  325.677254][T22270] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4264'.
[  325.682309][T22270] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4264'.
[  325.694832][T22268] 8021q: adding VLAN 0 to HW filter on device bond25
[  325.717169][T22268] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  325.719959][T22268] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  325.722346][T22268] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  325.724903][T22268] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  325.729370][T22268] bond25: (slave geneve0): making interface the new active one
[  325.735435][T22268] bond25: (slave geneve0): Enslaving as an active interface with an up link
[  325.775165][T22268] bond25: entered promiscuous mode
[  325.776748][T22268] geneve0: entered promiscuous mode
[  325.952412][T22285] openvswitch: netlink: IP tunnel dst address not specified
[  326.096389][T22305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4275'.
[  326.102264][T22305] netlink: 'syz.1.4275': attribute type 5 has an invalid length.
[  326.104606][T22305] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4275'.
[  326.156109][T22312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4278'.
[  326.162173][T22313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4277'.
[  326.167622][T22315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4278'.
[  326.463275][T22341] tipc: Resetting bearer <eth:syzkaller0>
[  326.466106][T22341] vlan0: left allmulticast mode
[  326.467747][T22341] bond0: left allmulticast mode
[  326.469258][T22341] bond24: left allmulticast mode
[  326.472766][T22341] vlan0: left promiscuous mode
[  326.474198][T22341] bond0: left promiscuous mode
[  326.475733][T22341] bond24: left promiscuous mode
[  326.477518][T22341] bridge0: port 1(vlan0) entered disabled state
[  326.485270][T22341] bond0: (slave bond24): Releasing backup interface
[  326.491232][T22341] bond25: (slave geneve0): Releasing active interface
[  326.493516][T22341] geneve0: left promiscuous mode
[  326.499011][T22341] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  326.501803][T22341] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  326.504452][T22341] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  326.507048][T22341] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  326.520968][T22340] netlink: 'syz.1.4284': attribute type 10 has an invalid length.
[  326.785115][T22376] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  327.002866][T22385] xt_hashlimit: size too large, truncated to 1048576
[  327.138685][T22401] bridge0: port 1(hsr0) entered blocking state
[  327.140969][T22401] bridge0: port 1(hsr0) entered disabled state
[  327.143300][T22401] hsr0: entered allmulticast mode
[  327.145380][T22401] hsr_slave_0: entered allmulticast mode
[  327.154228][T22401] hsr0: left allmulticast mode
[  327.155821][T22401] hsr_slave_0: left allmulticast mode
[  327.658636][T22413] syzkaller1: left promiscuous mode
[  327.670040][T22413] syzkaller1: left allmulticast mode
[  327.833704][T22418] lo speed is unknown, defaulting to 1000
[  328.009666][T22418] wlan1 speed is unknown, defaulting to 1000
[  328.043777][T22429] netlink: 'syz.1.4309': attribute type 13 has an invalid length.
[  328.046333][T22429] netlink: 'syz.1.4309': attribute type 17 has an invalid length.
[  328.048808][T22429] netlink: 'syz.1.4309': attribute type 27 has an invalid length.
[  328.693566][T22463] wireguard0: entered promiscuous mode
[  328.709390][T22463] wireguard0: entered allmulticast mode
[  329.446310][T22507] bond61: (slave batadv_slave_1): Releasing active interface
[  329.459403][T22511] netlink: 'syz.0.4331': attribute type 15 has an invalid length.
[  329.462641][T22507] netlink: 'syz.2.4329': attribute type 10 has an invalid length.
[  329.598841][T22520] team33: entered promiscuous mode
[  329.601249][T22520] team33: entered allmulticast mode
[  329.694915][T22532] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  329.822620][T22548] tipc: Resetting bearer <eth:syzkaller0>
[  329.855502][T22553] __nla_validate_parse: 10 callbacks suppressed
[  329.855515][T22553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4344'.
[  329.948359][T22570] tipc: Resetting bearer <eth:syzkaller0>
[  329.979594][T22570] tipc: Resetting bearer <eth:syzkaller0>
[  330.004656][T22577] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4350'.
[  330.021611][T22577] netlink: 'syz.0.4350': attribute type 4 has an invalid length.
[  330.023919][T22577] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4350'.
[  330.042304][T22579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4352'.
[  330.068763][T22584] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4353'.
[  330.145241][T22591] tipc: Resetting bearer <eth:gre0>
[  330.196907][T22595] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4354'.
[  330.243984][T22598] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4355'.
[  330.262788][T22591] tipc: Resetting bearer <eth:syzkaller0>
[  330.284156][T22591] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  330.286763][T22591] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  330.289301][T22591] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  330.292058][T22591] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  330.314048][T22599] xt_CT: No such helper "snmp"
[  330.322862][ T5836] lo speed is unknown, defaulting to 1000
[  330.324661][ T5836] syz0: Port: 1 Link DOWN
[  330.326748][ T5836] lo speed is unknown, defaulting to 1000
[  330.416917][T22611] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4356'.
[  330.420248][T22611] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4356'.
[  330.436924][T22609] netlink: 'syz.0.4358': attribute type 64 has an invalid length.
[  330.482571][T22609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4358'.
[  330.565291][T22620] veth25: entered promiscuous mode
[  330.567150][T22620] bridge16: port 1(veth25) entered blocking state
[  330.569238][T22620] bridge16: port 1(veth25) entered disabled state
[  330.571496][T22620] veth25: entered allmulticast mode
[  330.651588][T22631] bridge11: entered promiscuous mode
[  330.653587][T22631] bridge11: entered allmulticast mode
[  330.663186][T22631] team0: Port device bridge11 added
[  330.804573][T22651] netlink: 'syz.0.4372': attribute type 2 has an invalid length.
[  330.841801][T11592] tipc: Resetting bearer <eth:syzkaller0>
[  331.168125][T22664] netlink: 'syz.0.4376': attribute type 9 has an invalid length.
[  331.368514][T22680] lo speed is unknown, defaulting to 1000
[  331.479272][T22680] wlan1 speed is unknown, defaulting to 1000
[  331.579991][T22693] tipc: Resetting bearer <eth:syzkaller0>
[  331.648702][T22698] tipc: Resetting bearer <eth:syzkaller0>
[  331.682008][T22697] tipc: Resetting bearer <eth:syzkaller0>
[  331.815282][T22707] lo speed is unknown, defaulting to 1000
[  331.856657][T11592] tipc: Resetting bearer <eth:syzkaller0>
[  331.936196][T22707] wlan1 speed is unknown, defaulting to 1000
[  332.020488][T22723] bridge0: port 1(erspan0) entered blocking state
[  332.022771][T22723] bridge0: port 1(erspan0) entered disabled state
[  332.024919][T22723] erspan0: entered allmulticast mode
[  332.027337][T22723] erspan0: entered promiscuous mode
[  332.031506][T22723] erspan0: left allmulticast mode
[  332.033008][T22723] erspan0: left promiscuous mode
[  332.034617][T22723] bridge0: port 1(erspan0) entered disabled state
[  332.376759][T22745] veth0_to_team: entered promiscuous mode
[  332.378479][T22745] veth0_to_team: entered allmulticast mode
[  332.666097][T22771] netlink: 'syz.1.4413': attribute type 6 has an invalid length.
[  332.676126][T22771] netlink: 'syz.1.4413': attribute type 6 has an invalid length.
[  332.734188][T22779] rdma_rxe: rxe_newlink: failed to add bond0
[  332.784502][T22786] pim6reg1: entered promiscuous mode
[  332.786764][T22786] pim6reg1: entered allmulticast mode
[  333.825728][T22831] lo speed is unknown, defaulting to 1000
[  333.914626][T22831] wlan1 speed is unknown, defaulting to 1000
[  334.096121][T22846] netlink: 'syz.2.4428': attribute type 1 has an invalid length.
[  334.142854][T22846] bond62: entered promiscuous mode
[  334.144799][T22846] bond62: entered allmulticast mode
[  334.146922][T22846] 8021q: adding VLAN 0 to HW filter on device bond62
[  334.190012][T22846] tipc: Resetting bearer <eth:syzkaller0>
[  334.522475][T22853] batadv_slave_0: entered promiscuous mode
[  334.702212][T22860] atomic_op ffff88803c20b198 conn xmit_atomic 0000000000000000
[  335.098654][T22870] netlink: 'syz.2.4433': attribute type 1 has an invalid length.
[  335.104316][T22864] __nla_validate_parse: 28 callbacks suppressed
[  335.104328][T22864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4435'.
[  335.181578][T22864] lo speed is unknown, defaulting to 1000
[  335.318828][T22864] wlan1 speed is unknown, defaulting to 1000
[  335.533088][T22901] SET target dimension over the limit!
[  335.579470][T22908] netlink: 'syz.1.4447': attribute type 10 has an invalid length.
[  335.614723][T22909] netlink: 'syz.0.4442': attribute type 1 has an invalid length.
[  335.617021][T22909] netlink: 'syz.0.4442': attribute type 1 has an invalid length.
[  335.633854][T22908] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  335.636625][T22908] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  335.701384][T22906] lo speed is unknown, defaulting to 1000
[  335.811444][T22906] wlan1 speed is unknown, defaulting to 1000
[  336.058328][T22922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4449'.
[  336.074786][T22922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4449'.
[  336.213017][T22924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4450'.
[  336.304620][T22930] sit4: entered promiscuous mode
[  336.357983][T22934] lo speed is unknown, defaulting to 1000
[  336.493097][T22934] wlan1 speed is unknown, defaulting to 1000
[  336.493137][T22935] lo speed is unknown, defaulting to 1000
[  336.526269][T22940] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4452'.
[  336.636721][T22935] wlan1 speed is unknown, defaulting to 1000
[  336.742463][T22953] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4455'.
[  336.745888][T22953] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4455'.
[  336.751611][T22955] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  336.865712][T22965] netlink: 'syz.1.4458': attribute type 3 has an invalid length.
[  336.875837][T22968] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4459'.
[  336.878920][T22965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4458'.
[  337.029320][T22974] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4461'.
[  337.047036][T22977] netlink: 'syz.1.4462': attribute type 3 has an invalid length.
[  337.161259][T22983] netlink: 'syz.0.4464': attribute type 4 has an invalid length.
[  337.161997][T22984] netlink: 'syz.0.4464': attribute type 4 has an invalid length.
[  337.321446][T22999] @: renamed from bond_slave_0
[  337.482247][T23017] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  337.493123][T23019] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  337.497396][T23019] tipc: Resetting bearer <eth:syzkaller0>
[  337.569448][T23032] netlink: 'syz.1.4481': attribute type 5 has an invalid length.
[  337.593776][T23030] netlink: 'syz.0.4480': attribute type 13 has an invalid length.
[  337.625113][T23030] ip6gretap0: left allmulticast mode
[  337.629201][T23030] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  337.636688][    T9] lo speed is unknown, defaulting to 1000
[  337.638572][    T9] syz0: Port: 1 Link ACTIVE
[  337.643213][    T9] lo speed is unknown, defaulting to 1000
[  337.697753][T23030] lo speed is unknown, defaulting to 1000
[  337.724489][T23045] 8021q: adding VLAN 0 to HW filter on device bond63
[  337.727081][T23045] bridge0: port 1(bond63) entered blocking state
[  337.739632][T23045] bridge0: port 1(bond63) entered disabled state
[  337.749096][T23045] bond63: entered allmulticast mode
[  337.752440][T23045] bond63: entered promiscuous mode
[  337.803475][T23051] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  337.863340][T23055] syzkaller1: entered promiscuous mode
[  337.865048][T23055] syzkaller1: entered allmulticast mode
[  337.893185][T23030] wlan1 speed is unknown, defaulting to 1000
[  338.024198][T23070] team0: Port device bridge11 removed
[  338.026984][T23070] bond63: left allmulticast mode
[  338.028842][T23070] bond63: left promiscuous mode
[  338.033267][T23070] bridge0: port 1(bond63) entered disabled state
[  338.231621][T23085] tipc: Resetting bearer <eth:syzkaller0>
[  338.248907][T23085] syzkaller0: create flow: hash 2753742874 index 1
[  338.253411][T23085] syzkaller0: delete flow: hash 2753742874 index 1
[  338.255857][T23085] tipc: Resetting bearer <eth:syzkaller0>
[  338.436675][T23097] lo speed is unknown, defaulting to 1000
[  338.506740][T23110] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0
[  338.618771][T23097] wlan1 speed is unknown, defaulting to 1000
[  338.928755][T23147] syzkaller1: left promiscuous mode
[  338.938693][T23147] syzkaller1: left allmulticast mode
[  339.046542][T23155] Cannot find add_set index 0 as target
[  339.103687][T23158] lo speed is unknown, defaulting to 1000
[  339.217549][T23168] syzkaller1: entered promiscuous mode
[  339.219281][T23168] syzkaller1: entered allmulticast mode
[  339.241120][T23171] veth25: left allmulticast mode
[  339.242792][T23171] bridge16: port 1(veth25) entered disabled state
[  339.262184][T23158] wlan1 speed is unknown, defaulting to 1000
[  339.313308][T14620] tipc: Resetting bearer <eth:syzkaller0>
[  339.474290][T23181] bpq0: entered promiscuous mode
[  339.475784][T23181] bpq0: entered allmulticast mode
[  339.527516][T23188] gtp1: entered promiscuous mode
[  339.529208][T23188] gtp1: entered allmulticast mode
[  339.689410][T23194] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  339.803254][T23218] syzkaller1: left promiscuous mode
[  339.806189][T23218] syzkaller1: left allmulticast mode
[  339.826747][T23222] x9: left promiscuous mode
[  339.831431][T23222] veth0_to_team: left promiscuous mode
[  339.833985][T23222] veth0_to_team: left allmulticast mode
[  339.838154][T23222] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  340.188532][T23259] __nla_validate_parse: 136 callbacks suppressed
[  340.188543][T23259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4543'.
[  340.202206][T23259] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 47770 - 0
[  340.207144][T23259] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 47770 - 0
[  340.210228][T23259] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 47770 - 0
[  340.213306][T23259] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 47770 - 0
[  340.216154][T23259] geneve6: entered promiscuous mode
[  340.217867][T23259] geneve6: entered allmulticast mode
[  340.251582][T23264] vti1: entered promiscuous mode
[  340.253131][T23264] vti1: entered allmulticast mode
[  340.257093][T23264] validate_nla: 5 callbacks suppressed
[  340.257102][T23264] netlink: 'syz.2.4544': attribute type 30 has an invalid length.
[  340.286475][T23272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4546'.
[  340.291813][T23272] netlink: 'syz.0.4546': attribute type 5 has an invalid length.
[  340.295342][T23272] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4546'.
[  340.437249][T23282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4551'.
[  340.655724][T23317] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  340.661981][T23317] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4555'.
[  340.664665][T23317] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4555'.
[  340.747415][T23326] netlink: 'syz.2.4558': attribute type 1 has an invalid length.
[  340.750001][T23326] netlink: 208 bytes leftover after parsing attributes in process `syz.2.4558'.
[  340.752622][T23326] netlink: 'syz.2.4558': attribute type 1 has an invalid length.
[  340.754919][T23326] netlink: 'syz.2.4558': attribute type 2 has an invalid length.
[  340.757855][T23327] netlink: 'syz.2.4558': attribute type 1 has an invalid length.
[  340.760399][T23327] netlink: 208 bytes leftover after parsing attributes in process `syz.2.4558'.
[  340.763001][T23327] netlink: 'syz.2.4558': attribute type 1 has an invalid length.
[  340.765250][T23327] netlink: 'syz.2.4558': attribute type 2 has an invalid length.
[  340.773906][T23326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4558'.
[  340.783059][T23319] netlink: 'syz.0.4556': attribute type 4 has an invalid length.
[  341.020580][T23344] netlink: 'syz.1.4562': attribute type 4 has an invalid length.
[  341.044332][T23347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4563'.
[  341.302831][T23364] syzkaller0: left promiscuous mode
[  341.304590][T23364] syzkaller0: left allmulticast mode
[  341.308726][T23364] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  341.312402][T23364] syzkaller0: entered promiscuous mode
[  341.314461][T23364] syzkaller0: entered allmulticast mode
[  341.457337][T23381] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  341.685206][T23396] bond0: entered promiscuous mode
[  341.686896][T23396] bond0: entered allmulticast mode
[  341.689041][T23396] 8021q: adding VLAN 0 to HW filter on device bond0
[  341.788827][T23408] bridge14: port 1(dummy0) entered blocking state
[  341.794220][T23408] bridge14: port 1(dummy0) entered disabled state
[  341.796343][T23408] dummy0: entered allmulticast mode
[  341.798855][T23408] dummy0: entered promiscuous mode
[  341.897998][T23413] lo speed is unknown, defaulting to 1000
[  342.000896][T23413] wlan1 speed is unknown, defaulting to 1000
[  342.190176][    C1] ==================================================================
[  342.193078][    C1] BUG: KFENCE: use-after-free write in rose_timer_expiry+0x22d/0x4b0
[  342.193078][    C1] 
[  342.196684][    C1] Use-after-free write at 0xffff888136548e2a (in kfence-#163):
[  342.199599][    C1]  rose_timer_expiry+0x22d/0x4b0
[  342.201348][    C1]  call_timer_fn+0x17e/0x5f0
[  342.202949][    C1]  __run_timer_base+0x61a/0x860
[  342.204749][    C1]  run_timer_softirq+0xb7/0x180
[  342.206354][    C1]  handle_softirqs+0x286/0x870
[  342.208082][    C1]  __irq_exit_rcu+0xca/0x1f0
[  342.209563][    C1]  irq_exit_rcu+0x9/0x30
[  342.211137][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  342.212903][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  342.214827][    C1]  pv_native_safe_halt+0x13/0x20
[  342.216594][    C1]  default_idle+0x13/0x20
[  342.218029][    C1]  default_idle_call+0x74/0xb0
[  342.219669][    C1]  do_idle+0x1e8/0x510
[  342.221134][    C1]  cpu_startup_entry+0x44/0x60
[  342.222831][    C1]  start_secondary+0x101/0x110
[  342.224478][    C1]  common_startup_64+0x13e/0x147
[  342.226073][    C1] 
[  342.226811][    C1] kfence-#163: 0xffff888136548000-0xffff88813654823f, size=576, cache=radix_tree_node
[  342.226811][    C1] 
[  342.230849][    C1] allocated by task 22912 on cpu 0 at 335.820444s (6.410404s ago):
[  342.233479][    C1]  xas_create+0x116b/0x1b90
[  342.234908][    C1]  xas_store+0x95/0x1880
[  342.236332][    C1]  shmem_add_to_page_cache+0x7c7/0xb10
[  342.238361][    C1]  shmem_alloc_and_add_folio+0x846/0xf60
[  342.240450][    C1]  shmem_get_folio_gfp+0x59d/0x1660
[  342.242273][    C1]  shmem_fault+0x179/0x390
[  342.243916][    C1]  __do_fault+0x138/0x390
[  342.245476][    C1]  __handle_mm_fault+0x37ed/0x5620
[  342.247158][    C1]  handle_mm_fault+0x40a/0x8e0
[  342.248593][    C1]  __get_user_pages+0x1af4/0x30b0
[  342.250380][    C1]  populate_vma_page_range+0x26b/0x340
[  342.251989][    C1]  __mm_populate+0x24c/0x380
[  342.253348][    C1]  vm_mmap_pgoff+0x3f0/0x4c0
[  342.254762][    C1]  do_syscall_64+0xfa/0x3b0
[  342.256363][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.258497][    C1] 
[  342.259414][    C1] freed by task 0 on cpu 0 at 335.939886s (6.319527s ago):
[  342.261692][    C1]  rcu_core+0xca8/0x1710
[  342.262925][    C1]  handle_softirqs+0x286/0x870
[  342.264399][    C1]  __irq_exit_rcu+0xca/0x1f0
[  342.265932][    C1]  irq_exit_rcu+0x9/0x30
[  342.267461][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  342.269485][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  342.271637][    C1]  pv_native_safe_halt+0x13/0x20
[  342.273413][    C1]  default_idle+0x13/0x20
[  342.274989][    C1]  default_idle_call+0x74/0xb0
[  342.276706][    C1]  do_idle+0x1e8/0x510
[  342.278192][    C1]  cpu_startup_entry+0x44/0x60
[  342.279930][    C1]  rest_init+0x2de/0x300
[  342.281459][    C1]  start_kernel+0x47d/0x500
[  342.283097][    C1]  x86_64_start_reservations+0x24/0x30
[  342.285161][    C1]  x86_64_start_kernel+0x143/0x1c0
[  342.287002][    C1]  common_startup_64+0x13e/0x147
[  342.288766][    C1] 
[  342.289645][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  342.293782][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  342.297335][    C1] RIP: 0010:rose_timer_expiry+0x22d/0x4b0
[  342.299365][    C1] Code: 80 3c 28 00 74 08 4c 89 e7 e8 2f 78 bf f7 4d 8b 24 24 49 83 c4 2a 4c 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 2c 02 00 00 <66> 41 ff 0c 24 4c 89 ff be 6e 00 00 00 ba ff ff ff ff b9 ff ff ff
[  342.306130][    C1] RSP: 0018:ffffc900001e0b68 EFLAGS: 00010246
[  342.308283][    C1] RAX: 0000000000000000 RBX: ffff8881132396f8 RCX: ffff888100698000
[  342.311073][    C1] RDX: 0000000000000100 RSI: ffffffff8f678db0 RDI: 0000000000000002
[  342.313935][    C1] RBP: 1ffff110226472bd R08: ffff888100698000 R09: 0000000000000004
[  342.316724][    C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffff888136548e2a
[  342.319249][    C1] R13: dffffc0000000000 R14: ffff8881132391c0 R15: ffff888113239000
[  342.321542][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c26000(0000) knlGS:0000000000000000
[  342.324089][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  342.326026][    C1] CR2: ffff888136548e2a CR3: 0000000126b98000 CR4: 00000000000006f0
[  342.328331][    C1] Call Trace:
[  342.329342][    C1]  <IRQ>
[  342.330201][    C1]  call_timer_fn+0x17e/0x5f0
[  342.331565][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  342.333191][    C1]  ? call_timer_fn+0xbe/0x5f0
[  342.334562][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  342.336060][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  342.337588][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  342.339096][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  342.340683][    C1]  __run_timer_base+0x61a/0x860
[  342.342127][    C1]  ? ktime_get+0x3e/0x1f0
[  342.343414][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  342.345005][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  342.346815][    C1]  run_timer_softirq+0xb7/0x180
[  342.348216][    C1]  handle_softirqs+0x286/0x870
[  342.349633][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  342.351046][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  342.352581][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  342.354112][    C1]  __irq_exit_rcu+0xca/0x1f0
[  342.355446][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  342.356961][    C1]  irq_exit_rcu+0x9/0x30
[  342.358209][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  342.359852][    C1]  </IRQ>
[  342.360709][    C1]  <TASK>
[  342.361574][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  342.363344][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  342.365076][    C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 93 cd 1a 00 f3 0f 1e fa fb f4 <e9> c8 dd 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  342.370631][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000286
[  342.372399][    C1] RAX: 2a1448650afca400 RBX: ffffffff81976c78 RCX: 2a1448650afca400
[  342.374682][    C1] RDX: 0000000000000001 RSI: ffffffff8d996069 RDI: ffffffff8be28c40
[  342.376990][    C1] RBP: ffffc90000177f20 R08: ffff888136632f5b R09: 1ffff11026cc65eb
[  342.379279][    C1] R10: dffffc0000000000 R11: ffffed1026cc65ec R12: ffffffff8fa1d5f0
[  342.381551][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d3000
[  342.383892][    C1]  ? do_idle+0x1e8/0x510
[  342.385218][    C1]  default_idle+0x13/0x20
[  342.386550][    C1]  default_idle_call+0x74/0xb0
[  342.387986][    C1]  do_idle+0x1e8/0x510
[  342.389182][    C1]  ? __pfx_do_idle+0x10/0x10
[  342.390521][    C1]  cpu_startup_entry+0x44/0x60
[  342.391942][    C1]  start_secondary+0x101/0x110
[  342.393352][    C1]  common_startup_64+0x13e/0x147
[  342.394795][    C1]  </TASK>
[  342.395712][    C1] ==================================================================
[  342.398037][    C1] Kernel panic - not syncing: KFENCE: panic_on_warn set ...
[  342.400789][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  342.404209][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  342.407107][    C1] Call Trace:
[  342.408086][    C1]  <IRQ>
[  342.408929][    C1]  dump_stack_lvl+0x99/0x250
[  342.410315][    C1]  ? __asan_memcpy+0x40/0x70
[  342.411686][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  342.413243][    C1]  ? __pfx__printk+0x10/0x10
[  342.414625][    C1]  panic+0x2db/0x790
[  342.415760][    C1]  ? __pfx_panic+0x10/0x10
[  342.417053][    C1]  ? _printk+0xcf/0x120
[  342.418271][    C1]  ? __pfx__printk+0x10/0x10
[  342.419626][    C1]  check_panic_on_warn+0x89/0xb0
[  342.421113][    C1]  kfence_report_error+0x748/0xa40
[  342.422691][    C1]  ? __pfx_kfence_report_error+0x10/0x10
[  342.424384][    C1]  ? rose_timer_expiry+0x22d/0x4b0
[  342.425896][    C1]  ? call_timer_fn+0x17e/0x5f0
[  342.427319][    C1]  ? __run_timer_base+0x61a/0x860
[  342.428820][    C1]  ? run_timer_softirq+0xb7/0x180
[  342.430302][    C1]  ? handle_softirqs+0x286/0x870
[  342.431790][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  342.433219][    C1]  ? irq_exit_rcu+0x9/0x30
[  342.434548][    C1]  ? sysvec_apic_timer_interrupt+0xa6/0xc0
[  342.436310][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  342.438149][    C1]  ? pv_native_safe_halt+0x13/0x20
[  342.439647][    C1]  ? default_idle+0x13/0x20
[  342.440956][    C1]  ? default_idle_call+0x74/0xb0
[  342.442411][    C1]  ? do_idle+0x1e8/0x510
[  342.443669][    C1]  ? cpu_startup_entry+0x44/0x60
[  342.445153][    C1]  ? start_secondary+0x101/0x110
[  342.446616][    C1]  ? common_startup_64+0x13e/0x147
[  342.448153][    C1]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  342.449723][    C1]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  342.451451][    C1]  ? search_bpf_extables+0x26/0x3c0
[  342.452966][    C1]  kfence_handle_page_fault+0x358/0x4d0
[  342.454555][    C1]  page_fault_oops+0x19f/0xa10
[  342.455964][    C1]  ? stack_trace_save+0x9c/0xe0
[  342.457367][    C1]  ? __pfx_fixup_exception+0x10/0x10
[  342.458905][    C1]  ? __pfx_page_fault_oops+0x10/0x10
[  342.460466][    C1]  ? is_prefetch+0x403/0x640
[  342.461818][    C1]  ? check_path+0x21/0x40
[  342.463080][    C1]  ? __pfx_is_prefetch+0x10/0x10
[  342.464542][    C1]  ? validate_chain+0x897/0x2140
[  342.466014][    C1]  __bad_area_nosemaphore+0x11a/0x780
[  342.467574][    C1]  ? __pfx___bad_area_nosemaphore+0x10/0x10
[  342.469299][    C1]  ? spurious_kernel_fault+0x1c7/0x6b0
[  342.470905][    C1]  ? do_kern_addr_fault+0x30/0x80
[  342.472367][    C1]  exc_page_fault+0xc3/0xf0
[  342.473692][    C1]  asm_exc_page_fault+0x26/0x30
[  342.475126][    C1] RIP: 0010:rose_timer_expiry+0x22d/0x4b0
[  342.476780][    C1] Code: 80 3c 28 00 74 08 4c 89 e7 e8 2f 78 bf f7 4d 8b 24 24 49 83 c4 2a 4c 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 2c 02 00 00 <66> 41 ff 0c 24 4c 89 ff be 6e 00 00 00 ba ff ff ff ff b9 ff ff ff
[  342.482335][    C1] RSP: 0018:ffffc900001e0b68 EFLAGS: 00010246
[  342.484135][    C1] RAX: 0000000000000000 RBX: ffff8881132396f8 RCX: ffff888100698000
[  342.486455][    C1] RDX: 0000000000000100 RSI: ffffffff8f678db0 RDI: 0000000000000002
[  342.488825][    C1] RBP: 1ffff110226472bd R08: ffff888100698000 R09: 0000000000000004
[  342.491171][    C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffff888136548e2a
[  342.493479][    C1] R13: dffffc0000000000 R14: ffff8881132391c0 R15: ffff888113239000
[  342.495768][    C1]  ? rose_timer_expiry+0x1ea/0x4b0
[  342.497277][    C1]  call_timer_fn+0x17e/0x5f0
[  342.498641][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  342.500239][    C1]  ? call_timer_fn+0xbe/0x5f0
[  342.501615][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  342.503105][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  342.504631][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  342.506140][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  342.507703][    C1]  __run_timer_base+0x61a/0x860
[  342.509139][    C1]  ? ktime_get+0x3e/0x1f0
[  342.510389][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  342.511950][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  342.513780][    C1]  run_timer_softirq+0xb7/0x180
[  342.515208][    C1]  handle_softirqs+0x286/0x870
[  342.516628][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  342.518046][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  342.519559][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  342.521109][    C1]  __irq_exit_rcu+0xca/0x1f0
[  342.522469][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  342.524010][    C1]  irq_exit_rcu+0x9/0x30
[  342.525286][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  342.526943][    C1]  </IRQ>
[  342.527840][    C1]  <TASK>
[  342.528719][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  342.530496][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  342.532160][    C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 93 cd 1a 00 f3 0f 1e fa fb f4 <e9> c8 dd 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  342.537734][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000286
[  342.539514][    C1] RAX: 2a1448650afca400 RBX: ffffffff81976c78 RCX: 2a1448650afca400
[  342.541807][    C1] RDX: 0000000000000001 RSI: ffffffff8d996069 RDI: ffffffff8be28c40
[  342.544164][    C1] RBP: ffffc90000177f20 R08: ffff888136632f5b R09: 1ffff11026cc65eb
[  342.546459][    C1] R10: dffffc0000000000 R11: ffffed1026cc65ec R12: ffffffff8fa1d5f0
[  342.548724][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d3000
[  342.551032][    C1]  ? do_idle+0x1e8/0x510
[  342.552300][    C1]  default_idle+0x13/0x20
[  342.553570][    C1]  default_idle_call+0x74/0xb0
[  342.554983][    C1]  do_idle+0x1e8/0x510
[  342.556173][    C1]  ? __pfx_do_idle+0x10/0x10
[  342.557534][    C1]  cpu_startup_entry+0x44/0x60
[  342.558935][    C1]  start_secondary+0x101/0x110
[  342.560323][    C1]  common_startup_64+0x13e/0x147
[  342.561793][    C1]  </TASK>
[  342.563283][    C1] Kernel Offset: disabled
[  342.565280][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
06:44:03  Registers:
info registers vcpu 0

CPU#0
RAX=255b2d09d1c48700 RBX=ffffffff81976c78 RCX=255b2d09d1c48700 RDX=0000000000000001
RSI=ffffffff8d996069 RDI=ffffffff8be28c40 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1d5f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6d64d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000020000000c2c0 CR3=000000004956c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000001010a00 000000280a000000
XMM02=307a797300010009 00000002d5ff1a5e XMM03=0000002c03000000 4002000800000000
XMM04=0100110000001400 000000327a797300 XMM05=0300090000000030 7a79730001000900
XMM06=00000200000000ff e6000003010a0300 XMM07=00002c0300000040 0200080000000030
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f9afcc11df9
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001dfdf0
R8 =ffff888021720237 R9 =1ffff110042e4046 R10=dffffc0000000000 R11=ffffffff85460db0
R12=dffffc0000000000 R13=ffffffff99aee890 R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=ffff888136548e2a CR3=0000000126b98000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=000f0000006d6973 76656474656e0001
XMM02=00000000008e0008 0000306d69737665 XMM03=6470656e0002000f 0000006d69737665
XMM04=00007efd018ed100 00007efd00d86440 XMM05=00007efd00d86458 00007efd00d864a0
XMM06=00007efd00d86498 00007efd00d86490 XMM07=00007efd00d86488 00007efd00d86480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007efd00c11df9
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
