last executing test programs:

1.751482516s ago: executing program 2 (id=3830):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x2d, 0x2, 0x0)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40041)
sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0xc800)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="010000000200000008000000030000008002000059229b0da1ed342b29a76f2f5f4171911e120e84c7146c1ed90a258e0d68b6cccfb65b2cd3c10619f9c6d89614ba8b1f8c5cfd2d29594ae592733c8d16c4d8423d6bd3c14a49b54463d283386b5bdb83c3d3b336358b6d40ebe8fde497bed91ce7d23749abf93035dae38a24d3f79c11f0a1180b48c13b2637d09d63471703d3c87b3f568ee55265726af664269021632566818da945b0e6a06d38f3c74cbb8105bca6ebea576c763ee36d322dd616918e57", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000400"/28], 0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000bc0)=[{&(0x7f0000000080)="580000001500add427323b472545b4562d117fffffff81000e224e237f000001925aa80020007b0009008000", 0x2c}, {&(0x7f0000000ac0)="da31f93c3bf3da4969f48044cbc032ac78009d74e589bdb72c1c5c2883e04c38d66d0891494f01b38af416d4", 0x2c}], 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r3, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e6ef1f00060000007f00000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000700), 0x0, 0x7, r7}, 0x38)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6], 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)='f', 0x1}], 0x1}, 0x40480d5)
setsockopt$sock_attach_bpf(r9, 0x1, 0xa, &(0x7f0000000180), 0x4)
recvmsg$unix(r9, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x100)
setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108)
setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000a80)={0x9, {{0x2, 0x4e26, @multicast2}}, 0x0, 0x1, [{{0x2, 0x4e24, @loopback}}]}, 0x110)
socket$kcm(0xa, 0x5, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r12 = openat$cgroup_procs(r11, &(0x7f0000000080)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r12, &(0x7f0000000300), 0x12)

1.618169142s ago: executing program 2 (id=3837):
r0 = socket$kcm(0xa, 0x1, 0x106)
socket$kcm(0x10, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x4)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e1d, @remote}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r1, 0x1, 0x27, &(0x7f00006dbffc)=0xffe, 0x4)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000001240)="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", 0x480}], 0x2}, 0x0)
sendmsg$alg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='contention_end\x00', r2}, 0x18)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0))
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000001640)={0xe3f0, 0x9, 0x9, 0x3, 0x200, 0x7, 0x8, 0x800}, &(0x7f0000000040)={0x95fc, 0x2, 0x1b4, 0x4, 0x1000, 0xf9, 0x1000, 0x381d930a}, 0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x2)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000100000010000000000000000130000000c0002006ec1f9395f313100"], 0x20}}, 0x0)
recvmmsg(r5, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000003200)=""/4104, 0x1008}], 0x3}}], 0x1, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000200)}, {&(0x7f00000016c0)="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", 0x6}], 0x2, 0x0, 0xfffffd68}, 0x80)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000002200)=""/4094, 0xffe}], 0x1}, 0x40)

764.010708ms ago: executing program 0 (id=3846):
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1a, 0x4, 0x6, 0x1, 0x14, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x80dc}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, 0x0, 0x0)
sendmsg$tipc(r0, 0x0, 0x4000000)
ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @broadcast})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000780)=@ethtool_drvinfo={0x3, "33b12a917279c6c58edbb39713911114a1ba99880fc09a8c9b86080060c98058", "08b7d7d8e1ae11d5bbc97c42ddd38de1aeec624bb138ba3067e16d354e31feda", "a6c8450e711200b17d05a2afdda58713a4dfe60fc8a6d449ab34d1af6211957a", "922adadc7cbc7f75dd883c42e7cb093f1c1dee40bd14163f14a6b39ea65aa92e", "ea0b0e050331c6c317cc0c30f824f1f2505fdbf3d47b6569d072422bb6f23a4d", "1e23f60a92c023ff03b65b01", 0x5, 0x6, 0x7f, 0x7, 0x1}})
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$kcm(0x29, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="620ac4ff000000007110b00000000000850000007500000095"], &(0x7f0000000480)='GPL\x00'}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190)
setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000"], 0x190)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x4e22, @multicast2}}}, 0x88)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000440)={0x0, 'xfrm0\x00', {0x2}, 0x8})
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e)
getsockopt(r10, 0x111, 0x6, 0x0, &(0x7f0000000080))

691.628099ms ago: executing program 2 (id=3847):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x1638, 0x1408, 0x1408, 0x12d0, 0x12d0, 0x12d0, 0x1568, 0x1568, 0x1568, 0x1568, 0x1568, 0x6, 0x0, {[{{@ipv6={@loopback, @local, [0x100fffe00, 0xffffff00, 0x0, 0xffffffff], [0xff, 0xff, 0xff, 0xffffff00], 'netpci0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x4, 0x8, 0x3, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x6f}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x0, 0x7}, 0x0, 0x1108, 0x1130, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x1, './cgroup.cpu/syz1\x00', 0x7, {0x5}}}, @common=@inet=@l2tp={{0x30}, {0x2, 0x3, 0x3, 0x1, 0x4}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x10, @ipv4=@remote, 0x4e20}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@loopback, 0x9, 0xb, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1698)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x50)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x80, 0x0, 0x84}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d5, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x1f}, {}, {0x8000, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x70bd2b, 0x0, 0x2, 0x1, 0x0, 0x22}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0)
pipe(&(0x7f00000016c0)={<r2=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000001840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_idx_val={0x18, 0x65b4a97cbc83bc75, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xd, 0xb, 0x7, 0x4, 0xfffffffffffffff0}, @alu={0x4, 0x1, 0x1, 0x9, 0x2, 0xfffffffffffffff0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x20, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1}, 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000000000000850000000f000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x0, 0x29, 0x0, &(0x7f0000000380)="cc9f4d42d0e005000000bb03d0b5afd0", 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='ext4_writepages\x00', r3}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r5, 0x58, &(0x7f0000000380)}, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
pwrite64(r0, &(0x7f0000001900)="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", 0x1000, 0x6baf)
r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6)
sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x58, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x58}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000002900)={0x0, 0x15, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd"], 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x48c0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0)

644.629468ms ago: executing program 0 (id=3850):
syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r2)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000090a01040000000000000000010000000900020073797a32000000000900010073797a300000000008000540000000e4000e0a01020000000000000000010000000900020073797a320000000054000380500000804c0001804500010049b36ac25d8357bb94fbc9881f5c8c2a2d54ceda5f64959cbc1899db9cb546d1427a726c12ebc53e51f9c92b94c6150926b5f26e2e06cdb6667444b652f61948500000000900010073797a3000000000140000001000010000002000000000000000000a000000"], 0xdc}, 0x1, 0x0, 0x0, 0x804}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040026bd7000fedbdf251f000000070021006262000008009a000100000004002280180022801400008008000600fa010000080005000400000008000100800000000600210061002000"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4044000)
r7 = socket(0x10, 0x803, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x400, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xffea}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0x3}}}]}, 0x38}}, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f00000001c0))
r10 = socket$inet(0x2, 0x5, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x1, 0x4)
getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000140)=0x8)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@delchain={0x2c, 0x65, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x8, 0x4}, {0x4, 0xfff1}, {0x0, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x3fd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b924, 0x80000, {0x0, 0x0, 0x0, r5, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7f, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x8, 0x5, 0x5f82, 0x2, 0x9, 0xd, 0x8, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0x9, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

553.402845ms ago: executing program 0 (id=3851):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000000c0)=0x100000, 0x4) (async, rerun: 32)
getsockopt$XDP_STATISTICS(r1, 0x11b, 0x8, &(0x7f0000000040), &(0x7f0000000000)=0x30) (async, rerun: 32)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async, rerun: 64)
shutdown(r0, 0x1) (rerun: 64)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=@base={0xa, 0x16, 0x800, 0x7f}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x94) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_serviced\x00', 0x0, 0x0)
preadv(r2, 0x0, 0x0, 0x1000, 0x0) (async, rerun: 32)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x24008004) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000350000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142da7646c4fe02996b60cf81ebcd50fa9ea4318123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a728995b1531bd20360d33d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c55969a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed03a6fe7860b3e13c3173a60a1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a0000000000000001ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada186b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8f09c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39289f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3b8dad4c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f200000000000000000089de7f8485d9507164a187220b36ddc7fa645d4bd0c1414c30a416"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)

539.997051ms ago: executing program 2 (id=3853):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3000018000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x55}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

533.171045ms ago: executing program 0 (id=3855):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x8, 0x1, 0x4}, 0x38)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0)
close(r1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cffeb849b4f"})
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000f40)="d8000000580081044e81f782db44b904021d080009000200e8fe55a1180015000600142603600e120900210000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x6c}, {&(0x7f0000000ec0)="c9df04cd8ce4f37656ffabb858c02ee95c69ff108ad5b76475bf8916734cbd57c84685f29a99074838097ed28b3d45bd4f24b1ad5ed7661fcf04c5f4e9fbfcebef046540294bb08de607993d1594343d19b89e6da0c4d2f7d7b92a2222268aa59e3113070d539092c09406c9", 0x6c}], 0x2}, 0x24004880)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x88fb, @generic={{0x5, 0x4, 0x1, 0x16, 0x14, 0x64, 0x0, 0x2, 0x21, 0x0, @broadcast, @multicast2}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x8, 0x1, 0x4}, 0x38) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) (async)
close(r1) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cffeb849b4f"}) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000f40)="d8000000580081044e81f782db44b904021d080009000200e8fe55a1180015000600142603600e120900210000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x6c}, {&(0x7f0000000ec0)="c9df04cd8ce4f37656ffabb858c02ee95c69ff108ad5b76475bf8916734cbd57c84685f29a99074838097ed28b3d45bd4f24b1ad5ed7661fcf04c5f4e9fbfcebef046540294bb08de607993d1594343d19b89e6da0c4d2f7d7b92a2222268aa59e3113070d539092c09406c9", 0x6c}], 0x2}, 0x24004880) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async)
syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x88fb, @generic={{0x5, 0x4, 0x1, 0x16, 0x14, 0x64, 0x0, 0x2, 0x21, 0x0, @broadcast, @multicast2}}}}}, 0x0) (async)

471.63219ms ago: executing program 2 (id=3856):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x70, 0x0, &(0x7f0000000300)=0xaf00)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000014001a80100004"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x44048010)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001340)={0x9, <r4=>0x0}, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1c, 0xe, &(0x7f0000001380)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="0bb2858c99263f2e9290a1bf9e59db4121a0f1af796cf69e21d421560f6b38494ef00f739a8b230a61d0b862ba6453b775a9c08a28ce227310023b0a7af8aa7346e6eca8417ef763c975930ffc4ae57209417cb8007056f1d34ceac2ac4e2f94a1d7695596d7add7f956d0474db6726f2e6d17dc4688d46b42162d9768df67f025fc633f0408b526e8bcb832", @ANYRESOCT=r2], &(0x7f0000001300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f086dd47", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_emit_ethernet(0x83, &(0x7f00000001c0)={@broadcast, @remote, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x49, 0x3a, 0x0, @private0={0xfc, 0x0, '\x00', 0xfd}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}, @local, [@hopopts={0x11}], "fafb17c163a3040b7758ba1b5be6d88a91"}}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001140)={r5, 0x0, 0x70, 0x1000, &(0x7f0000000080)="8e39fa3df57caa7d71dca627dac3f29ff6fdbb06aa187be25a3d373b0a61484505622b5794acbda10be9bed60946e91f6f680ec51f03db9f23df259c81051fb607bc28409eaee9a86e8d1e64ea59369c45ea9d2c5e188a5e9362373392ef4b7fbf8a99f54f3e6f75ecfdcf050743df8c", &(0x7f0000000100)=""/4096, 0x0, 0x0, 0x15, 0x29, &(0x7f0000000000)="4419e97df10d6afd5f15a00fb6749de1ab4d6386e7", &(0x7f0000001100)="b7ce0d0ed7a47de1d41ecab1b61aecbaa1685ea187593b9d7434c42458a7f44a2907af8b315ecca2aa", 0x1, 0x0, 0x9}, 0x50)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001240)={'syztnl2\x00', &(0x7f00000011c0)={'syztnl0\x00', <r6=>0x0, 0x2, 0x80, 0x2, 0x6, 0xb, @mcast2, @mcast2, 0x8000, 0x1, 0x80000000, 0x939a}})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000001280)=ANY=[@ANYBLOB="b4000000000000006111340000000008c6000000000000009500000000000000e2944d71398df5c47d020a80b74b5ab19bc8a8a5882e7e6e79d30ab58188b259d294b2e3d4720f7772e7875859387889e840e547ef2e71ba9c17ff3bf1be3dce971319817093b90a70d9c05270520951"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r6, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)

470.149954ms ago: executing program 2 (id=3858):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40000015})
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b0008000000000000000000000004", @ANYRESOCT=r1, @ANYRES16=r0, @ANYRESOCT, @ANYBLOB="25c4d2a732b678845725df71289ed9651c65e43a565ed6d2fdb51d8927c64b8ffd44e046987523f6ff279f7a48dc1fc0ce71086c0b8ff5c55e916a6ef11b0e4c752f6b17323c471498a8da15030160fb259fae97b80d98e189b78010b250b8f937033e0d3b006e50dd91d3f1b094f8028834d2ec72d2a18cb07e13e8a41570756c8ea431de37fe04b817bf3a37243d7fb87d50a62381c48b6824b58a1fa6691eaa152f156ec5069d6c6d143ca29a24e20d99d78fa18632ea4e22c1a0214edc1cd1e3d46ee2"], 0x48)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r3)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0xfffffffffffffeea)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100003050000000000c36ef3ad000000", @ANYRES32=r4, @ANYRES8=r0, @ANYRES32=r4, @ANYBLOB="2102000020800600"], 0x48}}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000080)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb181e7d37bcf9e433c29", 0x28}], 0x2}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b34, &(0x7f0000000000)={'wlan0\x00'})
socket$packet(0x11, 0x2, 0x300)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x20, &(0x7f0000000440)={&(0x7f0000000540)=""/45, 0x2d, <r6=>0x0, &(0x7f0000000580)=""/36, 0x24}}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x12, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0300000000000000000000000000000504000000000000000000000b04000000000000000000000b020000000000000061"], 0x0, 0x52}, 0x28)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0x3}, 0x0, &(0x7f0000000100)={0x3ff, 0x0, 0x0, 0x6, 0x0, 0x1, 0x7fffffff, 0x3}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000)
r8 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'pcbc(fcrypt-generic)\x00'}}}, 0xe0}}, 0x0)
sendmsg$nl_crypto(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000005e340000000000000002000004"], &(0x7f0000001f80)=""/212, 0x1a, 0xd4, 0xa}, 0x28)
connect$pppl2tp(r9, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x2000, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26)
shutdown(r0, 0x1)

384.68971ms ago: executing program 0 (id=3860):
r0 = socket(0x1, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
sendmmsg$unix(r0, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$alg(0x26, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket(0x15, 0x5, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$inet6_sctp(0xa, 0x801, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c00023f1c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

383.855194ms ago: executing program 0 (id=3861):
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async)
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0x9, 0xa3}, 0x2)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x57, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x82000000}, {0x7, 0x0, 0x4}, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x33}, 0x2, @in=@broadcast, 0x3507, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
socket$kcm(0x10, 0x2, 0x0) (async)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x300)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000380)="34db5520c3a1e26f91a88a3a40a15933e4e7875cdcb3e33ad985a1aca999adedc38b664d90d5c2e8bc52edf39b7c4b0bf3f66d814d5370241d5dd5465b282467ffae57d756514c52f5b4a1ee206a35a08576ecf020d3c6f71f3d8878066155ed59092fca0a019228af70b05dcc3e19c43c1ed2173f67a09c89fd70ed7dc27e4ba29ab70a2b53004f06b38766a6d73fa99236e5b15c5819610ae4de0a31c43558bf7485c44247834127e985a9b805b1c6085b5317285734e0bf1724e0009793709777a000ced5edf50e6f3f7f4bd4fa7931708ad72fee533b96690e1db67ab5e7fc12760468b25581a647", 0xea}, {&(0x7f0000001200)="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", 0x1000}], 0x2)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)

242.785471ms ago: executing program 1 (id=3865):
r0 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000000)={0x14, r0, 0x401, 0x70bd28, 0x10000, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)

242.427586ms ago: executing program 1 (id=3866):
r0 = socket(0x10, 0x803, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) (async)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000440)=@ccm_128={{0x304}, "65b5fa053b9e9506", "e72b30b15bf3b7ee57b870438fb01de4", "fa790dfd", "1e3282bc4211aac9"}, 0x28) (async)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x437, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x40c89}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44801}, 0x0)
r3 = socket$inet(0x2, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a3000000000400000001b0a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a30"], 0xd8}}, 0x80) (async)
sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @loopback}}}], 0x20}}], 0x1, 0x4040880)

74.109351ms ago: executing program 1 (id=3867):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) (async)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e)
sendto$inet(r0, &(0x7f0000000780)="25d7fe75fa3496bb8e75411fe8ffffffffffffff000000000020", 0x1a, 0x1, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x70, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'syz_tun\x00'}, @IFLA_PORT_SELF={0x34, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x2f, 0x2, 'sy\x86\x92z_`un\x00L+\xa4\xacA\x98q\n\x81\xc56\xe1\xb3\xbf2\x03>q\xfa\x15<G\x80\xb8\"aW\x1c\xb7F\xacoe'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x427}]}, 0x70}, 0x1, 0x0, 0x0, 0x4600}, 0x24044800)

73.417733ms ago: executing program 1 (id=3868):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000008c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x0, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40080)
r2 = socket(0x10, 0x803, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000900)='memory.swap.current\x00', 0x275a, 0x0)
r4 = ioctl$NS_GET_PARENT(r3, 0xb702, 0x0)
ioctl$BTRFS_IOC_FS_INFO(r4, 0x8400941f, &(0x7f00000004c0))
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00'}, 0x94)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2)
sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x40, r5, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x3da}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000010}, 0x8008000)
sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff1e, &(0x7f0000000080)=[{&(0x7f0000000040)="c010020023000b05d25a806f8c6394f90824fc60070206000a740108053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000370400000000ffffffff1f000000", @ANYRES32=r7, @ANYBLOB="0b12050000000000240012800b00010069703667726500001400028008000100", @ANYRES32=r7, @ANYBLOB="08000c0000ff"], 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
unshare(0x8000400)
r8 = socket$rxrpc(0x21, 0x2, 0x2)
getsockopt(r8, 0x110, 0x6, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{0x0}, {0xfffffffffffffffd}], 0x2}}], 0x2, 0x0)

1.362746ms ago: executing program 1 (id=3869):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x20000000, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x4d6, 0x0, 0x0, 0xfe, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x20, 0x0, @in={0x2, 0x4e1d, @private=0xa010102}}]}, 0x50}}, 0x0)

0s ago: executing program 1 (id=3870):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x6, 0x1002, 0x0, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE={0x14, 0x6, {0x1, 0x80, 0x7, 0x7a7}}]}}}]}, 0x6c}}, 0x20000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711226000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

resent:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:40588kB local_pcp:20736kB free_cma:0kB
[  455.182933][T13653] lowmem_reserve[]: 0 0 0 0 0
[  455.184521][T13653] Node 0 DMA: 1*4kB (M) 2*8kB (UM) 10*16kB (UM) 15*32kB (UM) 15*64kB (UM) 6*128kB (UM) 4*256kB (UM) 4*512kB (UM) 5*1024kB (UM) 0*2048kB 1*4096kB (U) = 14676kB
[  455.193272][T13653] Node 0 DMA32: 1195*4kB (UME) 929*8kB (UM) 400*16kB (UME) 55*32kB (M) 24*64kB (UME) 89*128kB (UME) 76*256kB (UM) 23*512kB (U) 7*1024kB (U) 6*2048kB (UM) 19*4096kB (UM) = 161812kB
[  455.199386][T13653] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  455.204876][T13653] Node 1 Normal: 853*4kB (UME) 979*8kB (UME) 481*16kB (UME) 512*32kB (UME) 314*64kB (UME) 149*128kB (UM) 68*256kB (UME) 41*512kB (UME) 15*1024kB (UME) 2*2048kB (U) 42*4096kB (UM) = 304380kB
[  455.210781][T13653] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  455.213697][T13653] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  455.218549][T13653] 42077 total pagecache pages
[  455.220034][T13653] 0 pages in swap cache
[  455.221546][T13653] Free swap  = 124996kB
[  455.225465][T13653] Total swap = 124996kB
[  455.226826][T13653] 786301 pages RAM
[  455.228040][T13653] 0 pages HighMem/MovableOnly
[  455.229842][T13653] 241056 pages reserved
[  455.231214][T13653] 0 pages cma reserved
[  456.337436][T13683] lo speed is unknown, defaulting to 1000
[  456.340058][T13683] lo speed is unknown, defaulting to 1000
[  456.523593][T13690] wireguard0: entered promiscuous mode
[  456.525570][T13690] wireguard0: entered allmulticast mode
[  456.637640][T13704] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  456.640375][T13704] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  456.643053][T13704] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  456.645803][T13704] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  456.649111][T13704] geneve4: entered promiscuous mode
[  456.840218][T13721] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  456.842911][T13721] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  456.854704][T13721] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  456.857474][T13721] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  457.046922][T13746] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  457.049778][T13746] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  457.052397][T13746] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  457.055649][T13746] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  457.063725][T13746] vxlan0: entered promiscuous mode
[  457.065903][T13746] team0: Port device vxlan0 added
[  457.973498][T13788] __nla_validate_parse: 18 callbacks suppressed
[  457.973508][T13788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2025'.
[  457.984792][    C1] net_ratelimit: 746 callbacks suppressed
[  457.984801][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.046793][T13793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.049823][T13793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.053148][T13793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.068042][T13793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.073228][T13793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.114110][T13802] 8021q: adding VLAN 0 to HW filter on device bond16
[  458.121491][T13802] bridge0: port 1(bond16) entered blocking state
[  458.123610][T13802] bridge0: port 1(bond16) entered disabled state
[  458.126065][T13802] bond16: entered allmulticast mode
[  458.128748][T13802] bond16: entered promiscuous mode
[  458.136860][T13802] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2031'.
[  458.139676][T13802] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2031'.
[  458.152366][T13809] mac80211_hwsim hwsim23 wlan1: entered allmulticast mode
[  458.179403][T13815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2035'.
[  458.182407][T13815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2035'.
[  458.193047][T13815] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744071844200453)
[  458.200646][T13815] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  458.388361][T13833] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2041'.
[  458.391409][T13833] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2041'.
[  458.394281][T13833] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2041'.
[  458.397549][T13833] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2041'.
[  458.432941][T13835] netlink: 208 bytes leftover after parsing attributes in process `syz.1.2042'.
[  458.734759][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.199089][T13881] lo speed is unknown, defaulting to 1000
[  459.201923][T13881] lo speed is unknown, defaulting to 1000
[  459.631772][T13894] netlink: 'syz.0.2055': attribute type 1 has an invalid length.
[  459.835625][T13908] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  459.844161][T13908] vxlan0: left promiscuous mode
[  459.848531][T13908] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  459.851315][T13908] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  459.854013][T13908] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  459.856956][T13908] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  459.864558][T13908] team0: Port device vxlan0 removed
[  459.872562][T13908] team0: Unable to change to the same mode the team is in
[  459.876921][T13908] vlan0: entered promiscuous mode
[  459.879670][T13907] netlink: 'syz.0.2060': attribute type 7 has an invalid length.
[  460.088303][T13927] team0: Master is either lo or non-ether device
[  460.110406][T13929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.855729][T13942] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  460.858778][T13942] syzkaller0: entered promiscuous mode
[  460.860570][T13942] syzkaller0: entered allmulticast mode
[  460.872558][T13942] tipc: Resetting bearer <eth:syzkaller0>
[  460.878567][T13941] tipc: Resetting bearer <eth:syzkaller0>
[  460.888267][T13941] tipc: Disabling bearer <eth:syzkaller0>
[  460.946994][T13944] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  461.113559][T13960] netlink: 'syz.1.2074': attribute type 1 has an invalid length.
[  461.129920][T13960] netlink: 'syz.1.2074': attribute type 10 has an invalid length.
[  461.186958][T13972] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  461.253068][T13983] netlink: 'syz.2.2081': attribute type 21 has an invalid length.
[  461.255875][T13983] netlink: 'syz.2.2081': attribute type 1 has an invalid length.
[  461.302509][T13995] pim6reg1: entered promiscuous mode
[  461.304554][T13995] pim6reg1: entered allmulticast mode
[  461.308058][T13996] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  461.322951][T13996] syzkaller0: mtu greater than device maximum
[  461.437060][T13995] 8021q: adding VLAN 0 to HW filter on device bond16
[  461.440040][T13995] team0: Port device bond16 added
[  461.990769][T14034] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  461.998127][T14034] gretap0: entered promiscuous mode
[  462.033783][T14034] 0{X: renamed from gretap0
[  462.037384][T14034] 0{X: left promiscuous mode
[  462.039165][T14034] 0{X: entered allmulticast mode
[  462.990635][T14056] TCP: TCP_TX_DELAY enabled
[  463.320270][T14058] SET target dimension over the limit!
[  463.451371][T14066] lo speed is unknown, defaulting to 1000
[  463.462727][T14066] lo speed is unknown, defaulting to 1000
[  463.534959][   T33] audit: type=1800 audit(1753025408.069:11): pid=14060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2102" name="cgroup.controllers" dev="tmpfs" ino=3605 res=0 errno=0
[  464.003664][T14086] netlink: 'syz.1.2108': attribute type 1 has an invalid length.
[  464.007442][T14086] __nla_validate_parse: 62 callbacks suppressed
[  464.007449][T14086] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2108'.
[  464.012273][T14086] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2108'.
[  464.076638][T14091] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  464.349850][T14111] lo speed is unknown, defaulting to 1000
[  464.352978][T14111] lo speed is unknown, defaulting to 1000
[  464.824067][T14122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2116'.
[  465.436931][T14150] netlink: 'syz.1.2121': attribute type 1 has an invalid length.
[  465.453972][T14150] gretap3: entered promiscuous mode
[  465.569631][T14163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2125'.
[  465.630048][   T33] audit: type=1800 audit(1753025410.169:12): pid=14173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2129" name="memory.events" dev="tmpfs" ino=4079 res=0 errno=0
[  465.655378][T14177] ipt_REJECT: TCP_RESET invalid for non-tcp
[  465.671490][T14177] syzkaller1: entered allmulticast mode
[  465.678135][T14177] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2131'.
[  465.779534][T14190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2135'.
[  465.833538][T14195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2137'.
[  465.884577][T14202] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2139'.
[  465.910749][T14200] SET target dimension over the limit!
[  465.940795][T14205] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  465.943434][T14205] syzkaller0: entered promiscuous mode
[  465.947487][T14205] syzkaller0: entered allmulticast mode
[  465.967721][T14205] tipc: Resetting bearer <eth:syzkaller0>
[  465.973105][T14204] tipc: Resetting bearer <eth:syzkaller0>
[  465.984199][T14204] tipc: Disabling bearer <eth:syzkaller0>
[  466.086317][T14218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2143'.
[  466.130151][T14226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2145'.
[  466.334757][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  466.842140][T14255] lo speed is unknown, defaulting to 1000
[  466.846774][T14255] lo speed is unknown, defaulting to 1000
[  467.186085][T14280] netlink: 'syz.0.2158': attribute type 1 has an invalid length.
[  467.190329][T14280] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  467.457831][T14303] netlink: 'syz.1.2165': attribute type 16 has an invalid length.
[  468.028009][T14306] x_tables: ip6_tables: mh match: only valid for protocol 135
[  468.187343][T14320] syzkaller1: entered promiscuous mode
[  468.189395][T14320] syzkaller1: entered allmulticast mode
[  468.287330][T14334] bond12: (slave bridge3): Releasing active interface
[  468.291006][T14334] bond14: (slave bond15): Releasing backup interface
[  468.293159][T14334] bond14: (slave bond15): the permanent HWaddr of slave - fe:d8:bd:63:40:28 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  468.302336][T14334] bond14: (slave gretap3): making interface the new active one
[  468.307806][T14334] bond14: (slave gretap3): Releasing backup interface
[  468.314492][T14334] team0: Port device bond16 removed
[  468.325289][T14334] net_ratelimit: 24 callbacks suppressed
[  468.325299][T14334] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  468.751522][T14353] openvswitch: : Dropping previously announced user features
[  468.759622][T14353] netlink: 'syz.2.2179': attribute type 1 has an invalid length.
[  468.774326][T14353] 8021q: adding VLAN 0 to HW filter on device bond17
[  468.788397][T14353] bond17: (slave gretap4): making interface the new active one
[  468.791479][T14353] bond17: (slave gretap4): Enslaving as an active interface with an up link
[  469.028329][T14369] __nla_validate_parse: 10 callbacks suppressed
[  469.028342][T14369] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2184'.
[  469.329047][T14384] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2188'.
[  469.332589][T14384] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2188'.
[  469.380141][T14390] delete_channel: no stack
[  469.468502][T14397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2192'.
[  469.473651][T14399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2192'.
[  469.476850][T14399] bond16: left allmulticast mode
[  469.478570][T14399] bond16: left promiscuous mode
[  469.480337][T14399] bridge0: port 1(bond16) entered disabled state
[  469.732694][T14412] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  469.859632][T14428] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  469.865329][T14428] syzkaller0: entered promiscuous mode
[  469.867008][T14428] syzkaller0: entered allmulticast mode
[  469.886907][T14428] tipc: Resetting bearer <eth:syzkaller0>
[  469.889924][T14430] gre0: entered allmulticast mode
[  469.890892][T14432] sctp: [Deprecated]: syz.2.2204 (pid 14432) Use of int in max_burst socket option.
[  469.890892][T14432] Use struct sctp_assoc_value instead
[  469.896983][T14427] tipc: Resetting bearer <eth:syzkaller0>
[  469.898128][T14432] netlink: 'syz.2.2204': attribute type 21 has an invalid length.
[  469.907009][T14427] tipc: Disabling bearer <eth:syzkaller0>
[  469.918333][T14432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2204'.
[  470.008144][T14439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2206'.
[  470.026937][T14446] bridge: RTM_NEWNEIGH with invalid ether address
[  470.037879][T14450] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2209'.
[  470.060606][T14452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2210'.
[  470.139622][T14459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2212'.
[  470.278186][T14468] netlink: 'syz.2.2216': attribute type 16 has an invalid length.
[  470.280771][T14468] netlink: 'syz.2.2216': attribute type 17 has an invalid length.
[  470.291351][T14468] IPv6: NLM_F_REPLACE set, but no existing node found!
[  470.572136][T14485] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  470.574949][T14485] syzkaller0: entered promiscuous mode
[  470.576745][T14485] syzkaller0: entered allmulticast mode
[  470.591127][T14485] tipc: Resetting bearer <eth:syzkaller0>
[  470.594393][T14484] tipc: Resetting bearer <eth:syzkaller0>
[  470.602866][T14484] tipc: Disabling bearer <eth:syzkaller0>
[  470.745853][T14489] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  470.851276][T14503] macvlan5: entered allmulticast mode
[  470.853126][T14503] veth1_vlan: entered allmulticast mode
[  470.856061][T14503] veth1_vlan: left allmulticast mode
[  470.908775][T14507] dvmrp8: entered allmulticast mode
[  470.922660][T14497] dvmrp8: left allmulticast mode
[  471.170719][   T33] audit: type=1804 audit(1753025415.709:13): pid=14526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2227" name="/newroot/820/x000000000000000700000000000000000000007" dev="tmpfs" ino=4229 res=1 errno=0
[  471.194551][   T33] audit: type=1800 audit(1753025415.709:14): pid=14526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2227" name="x000000000000000700000000000000000000007" dev="tmpfs" ino=4229 res=0 errno=0
[  471.427750][T14558] netlink: 'syz.0.2231': attribute type 1 has an invalid length.
[  471.479634][T14558] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  471.483200][T14558] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  471.487538][T14558] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  471.490214][T14558] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  471.493907][T14558] bond17: (slave geneve3): making interface the new active one
[  471.499468][T14558] bond17: (slave geneve3): Enslaving as an active interface with an up link
[  471.551674][T14558] 8021q: adding VLAN 0 to HW filter on device bond17
[  471.569723][T14558] syz.0.2231 (14558) used greatest stack depth: 19280 bytes left
[  471.607593][T14575] tipc: Resetting bearer <eth:syzkaller0>
[  471.624183][T14575] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  471.627068][T14575] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  471.629740][T14575] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  471.632904][T14575] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  471.637138][ T5296] lo speed is unknown, defaulting to 1000
[  471.640175][ T5296] syz0: Port: 1 Link DOWN
[  471.642476][ T5296] lo speed is unknown, defaulting to 1000
[  471.940817][T14599] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551103)
[  471.944109][T14599] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  472.611917][T14638] netlink: 'syz.2.2246': attribute type 1 has an invalid length.
[  472.614561][T14638] netlink: 'syz.2.2246': attribute type 2 has an invalid length.
[  472.938821][T14666] bridge0: port 1(erspan0) entered blocking state
[  472.941175][T14666] bridge0: port 1(erspan0) entered disabled state
[  472.943537][T14666] erspan0: entered allmulticast mode
[  472.959183][T14666] erspan0: left allmulticast mode
[  473.111436][T14687] @: renamed from bond_slave_0
[  473.298057][T14713] : left promiscuous mode
[  473.308130][T14713] bond8: left promiscuous mode
[  473.309709][T14713] bond8: left allmulticast mode
[  473.311616][T14713] veth7: left promiscuous mode
[  473.313234][T14713] bond11: left promiscuous mode
[  473.320339][T14713] mac80211_hwsim hwsim23 wlan1: left allmulticast mode
[  473.322872][T14713] geneve4: left promiscuous mode
[  474.017517][T14788] bond14: (slave veth7): Releasing active interface
[  474.021394][T14788] bond17: (slave geneve3): Releasing active interface
[  474.030335][T14788] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  474.209073][ T5882] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  474.284360][T14821] __nla_validate_parse: 22 callbacks suppressed
[  474.284371][T14821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2279'.
[  474.316418][T14823] 8021q: adding VLAN 0 to HW filter on device bond3
[  474.321576][T14823] bond17: (slave gretap4): Releasing active interface
[  474.350977][T14827] : entered promiscuous mode
[  474.393050][T14830] veth9: entered promiscuous mode
[  474.514554][T14841] netlink: 'syz.2.2287': attribute type 2 has an invalid length.
[  474.523524][T14841] : entered promiscuous mode
[  474.553148][T14845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2288'.
[  474.681227][T14849] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2289'.
[  475.062138][T14863] netlink: 'syz.1.2292': attribute type 1 has an invalid length.
[  475.077082][T14863] smc: adding net device bond0 with user defined pnetid SYZ2
[  475.081625][T14863] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2292'.
[  475.086805][T14863] 8021q: adding VLAN 0 to HW filter on device bond0
[  475.141580][T14870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2295'.
[  475.186586][T14876] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2299'.
[  475.191424][T14879] lo speed is unknown, defaulting to 1000
[  475.194436][T14879] lo speed is unknown, defaulting to 1000
[  475.274473][T14886] vlan6: entered promiscuous mode
[  475.277182][T14886] bridge0: entered promiscuous mode
[  475.366386][T14889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2302'.
[  475.533730][T14904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2306'.
[  475.719297][T14923] lo speed is unknown, defaulting to 1000
[  475.721915][T14923] lo speed is unknown, defaulting to 1000
[  475.880094][T14929] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2312'.
[  475.972892][T14873] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  475.976097][T14874] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  476.431560][T14953] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  476.490002][T14956] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2321'.
[  476.493312][T14956] netlink: 'syz.1.2321': attribute type 10 has an invalid length.
[  476.953359][T14969] lo speed is unknown, defaulting to 1000
[  476.958163][T14969] lo speed is unknown, defaulting to 1000
[  477.003941][T14973] netlink: 'syz.0.2327': attribute type 2 has an invalid length.
[  477.446774][T14990] lo speed is unknown, defaulting to 1000
[  477.449729][T14990] lo speed is unknown, defaulting to 1000
[  477.560231][T14994] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  477.641648][T14999] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  477.887752][T15017] x_tables: duplicate underflow at hook 3
[  477.890547][T15017] netlink: 'syz.0.2338': attribute type 29 has an invalid length.
[  477.897998][T15017] netlink: 'syz.0.2338': attribute type 29 has an invalid length.
[  477.900784][T15017] netlink: 'syz.0.2338': attribute type 29 has an invalid length.
[  477.903478][T15017] netlink: 'syz.0.2338': attribute type 29 has an invalid length.
[  477.908153][T15017] netlink: 'syz.0.2338': attribute type 29 has an invalid length.
[  477.911313][T15017] netlink: 'syz.0.2338': attribute type 29 has an invalid length.
[  477.914100][T15017] netlink: 'syz.0.2338': attribute type 29 has an invalid length.
[  477.917093][T15017] netlink: 'syz.0.2338': attribute type 29 has an invalid length.
[  478.564310][T15027] veth0_macvtap: left promiscuous mode
[  479.048954][T15052] x_tables: duplicate underflow at hook 2
[  479.407734][T15064] __nla_validate_parse: 12 callbacks suppressed
[  479.407753][T15064] netlink: 4916 bytes leftover after parsing attributes in process `syz.0.2352'.
[  479.436368][T15074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2353'.
[  479.542524][T15078] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  479.550813][T15078] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  479.583443][T15085] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  479.589599][T15084] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  479.696637][T15090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2358'.
[  479.726243][T15094] !: renamed from dummy0
[  479.749795][T15095] 8021q: adding VLAN 0 to HW filter on device bond18
[  479.762644][T15095] veth11: entered promiscuous mode
[  479.769689][T15095] bond18: (slave veth11): Enslaving as a backup interface with a down link
[  479.870330][T15108] lo speed is unknown, defaulting to 1000
[  479.877246][T15108] lo speed is unknown, defaulting to 1000
[  479.916994][T15115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2363'.
[  479.925674][T15115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2363'.
[  480.350998][T15134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2366'.
[  480.547013][T15147] netlink: 3072 bytes leftover after parsing attributes in process `syz.0.2372'.
[  480.569574][T15145] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  480.588641][T15156] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  480.659937][T15161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2376'.
[  480.663726][T15161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2376'.
[  482.298979][T15177] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2381'.
[  482.377102][T15184] validate_nla: 37 callbacks suppressed
[  482.377112][T15184] netlink: 'syz.0.2384': attribute type 1 has an invalid length.
[  482.488121][   T33] audit: type=1800 audit(1753025427.029:15): pid=15200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2389" name=869F dev="tmpfs" ino=4235 res=0 errno=0
[  482.567185][T15210] netlink: 'syz.1.2393': attribute type 1 has an invalid length.
[  482.593032][T15210] netlink: 'syz.1.2393': attribute type 2 has an invalid length.
[  482.597523][T15210] bond8: entered promiscuous mode
[  482.601461][T15214] netlink: 'syz.0.2391': attribute type 16 has an invalid length.
[  482.601823][T15210] bond8: entered allmulticast mode
[  482.604278][T15214] netlink: 'syz.0.2391': attribute type 17 has an invalid length.
[  482.610599][T15215] netlink: 'syz.2.2394': attribute type 1 has an invalid length.
[  482.610738][T15210] 8021q: adding VLAN 0 to HW filter on device bond8
[  482.617620][T15214] tipc: Resetting bearer <eth:syzkaller0>
[  482.627457][T15210] ip6gretap2: entered promiscuous mode
[  482.629358][T15210] ip6gretap2: entered allmulticast mode
[  482.631502][T15210] bond8: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  482.666484][T15217] x_tables: duplicate entry at hook 2
[  482.706954][   T12] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  482.748234][T15225] netlink: 'syz.1.2397': attribute type 1 has an invalid length.
[  482.768157][T15225] xt_CT: No such helper "snmp"
[  482.815111][   T13] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  482.942645][T15239] x_tables: duplicate underflow at hook 2
[  482.944919][T15240] x_tables: duplicate underflow at hook 2
[  483.047925][T15247] netlink: 'syz.2.2405': attribute type 4 has an invalid length.
[  483.135604][T15253] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  483.138585][T15253] syzkaller0: entered promiscuous mode
[  483.140566][T15253] syzkaller0: entered allmulticast mode
[  483.152174][T15253] tipc: Resetting bearer <eth:syzkaller0>
[  483.398666][T15257] netlink: 'syz.0.2408': attribute type 1 has an invalid length.
[  483.401363][T15257] netlink: 'syz.0.2408': attribute type 11 has an invalid length.
[  483.458913][T15261] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  483.502927][T15266] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  483.739192][T15281] IPv6: sit5: Disabled Multicast RS
[  483.833765][T15286] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  483.954012][T15297] x_tables: duplicate underflow at hook 3
[  483.967241][T15252] tipc: Resetting bearer <eth:syzkaller0>
[  483.986413][T15252] tipc: Disabling bearer <eth:syzkaller0>
[  484.867526][T15316] openvswitch: netlink: IP tunnel dst address not specified
[  485.023930][T15333] __nla_validate_parse: 48 callbacks suppressed
[  485.023942][T15333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2428'.
[  485.072006][T15337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2429'.
[  485.092302][T15337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2429'.
[  485.097576][T15339] lo speed is unknown, defaulting to 1000
[  485.101450][T15339] lo speed is unknown, defaulting to 1000
[  485.153208][T15344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2432'.
[  485.179796][T15344] 8021q: adding VLAN 0 to HW filter on device bond19
[  485.198279][T15344] macvlan5: entered promiscuous mode
[  485.200624][T15344] macvlan5: entered allmulticast mode
[  485.203444][T15344] bond19: entered promiscuous mode
[  485.206206][T15344] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  485.212101][T15344] bond19: left promiscuous mode
[  485.573368][T15385] syzkaller0: entered allmulticast mode
[  485.650628][T15387] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2444'.
[  485.653732][T15387] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2444'.
[  485.658966][T15387] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2444'.
[  486.030714][T15395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2447'.
[  486.259959][T15398] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2448'.
[  486.352516][T15406] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2450'.
[  487.625734][T15466] validate_nla: 67 callbacks suppressed
[  487.625747][T15466] netlink: 'syz.0.2466': attribute type 1 has an invalid length.
[  487.658640][T15466] bond19: (slave vxcan1): The slave device specified does not support setting the MAC address
[  487.666336][T15466] bond19: (slave vxcan1): Error -95 calling set_mac_address
[  487.709309][T15466] gretap0: entered promiscuous mode
[  487.713871][T15466] bond19: (slave gretap0): making interface the new active one
[  487.728337][T15466] bond19: (slave gretap0): Enslaving as an active interface with an up link
[  487.738381][T15466] macvlan0: entered promiscuous mode
[  487.740146][T15466] macvlan0: entered allmulticast mode
[  487.742217][T15466] bond19: entered promiscuous mode
[  487.744380][T15466] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  487.750458][T15466] bond19: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap0
[  487.761622][T15466] bond19: left promiscuous mode
[  487.833250][T15489] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  487.840731][T15489] syzkaller0: entered promiscuous mode
[  487.842592][T15489] syzkaller0: entered allmulticast mode
[  487.849636][T15489] erspan0: left allmulticast mode
[  487.858361][T15489] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  487.880156][T15488] tipc: Resetting bearer <eth:syzkaller0>
[  487.891318][T15488] tipc: Disabling bearer <eth:syzkaller0>
[  487.913286][T15494] netlink: 'syz.2.2475': attribute type 5 has an invalid length.
[  487.957006][T15495] netlink: 'syz.0.2474': attribute type 1 has an invalid length.
[  488.358188][T15529] 8021q: adding VLAN 0 to HW filter on device bond9
[  488.361233][T15532] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  488.363730][T15532] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  488.405917][T15535] nbd: must specify a size in bytes for the device
[  488.492804][T15542] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  488.495644][T15542] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  488.968769][T15569] veth0: entered promiscuous mode
[  488.971677][T15569] veth0 (unregistering): left promiscuous mode
[  489.153979][T15580] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  489.285626][T15591] netlink: 'syz.0.2504': attribute type 1 has an invalid length.
[  489.288361][T15591] netlink: 'syz.0.2504': attribute type 1 has an invalid length.
[  489.760074][T15627] syzkaller0: entered promiscuous mode
[  489.761975][T15627] syzkaller0: entered allmulticast mode
[  489.765828][T15628] netlink: 'syz.2.2517': attribute type 15 has an invalid length.
[  489.959364][T15643] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  489.999556][T15650] netlink: 'syz.2.2524': attribute type 1 has an invalid length.
[  490.002154][T15650] NCSI netlink: No device for ifindex 0
[  490.716655][T15658] __nla_validate_parse: 47 callbacks suppressed
[  490.716667][T15658] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2527'.
[  490.722979][T15658] netlink: 'syz.1.2527': attribute type 9 has an invalid length.
[  490.732122][T15658] netlink: 'syz.1.2527': attribute type 7 has an invalid length.
[  490.736549][T15658] netlink: 'syz.1.2527': attribute type 8 has an invalid length.
[  490.775470][T15663] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2528'.
[  490.879448][T15674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2530'.
[  490.932047][T15678] syzkaller1: entered promiscuous mode
[  490.940896][T15678] syzkaller1: entered allmulticast mode
[  491.036221][T15698] xt_ecn: cannot match TCP bits for non-tcp packets
[  491.040885][T15698] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2538'.
[  491.074041][T15699] lo speed is unknown, defaulting to 1000
[  491.076947][T15699] lo speed is unknown, defaulting to 1000
[  491.090455][T15705] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  491.098583][T15703] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  491.103234][T15703] tipc: Resetting bearer <eth:syzkaller0>
[  491.116183][T15702] tipc: Disabling bearer <eth:syzkaller0>
[  491.345369][T15727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2546'.
[  491.473337][T15738] lo speed is unknown, defaulting to 1000
[  491.499029][T15738] lo speed is unknown, defaulting to 1000
[  491.571994][T15748] syzkaller1: entered allmulticast mode
[  491.664284][T15753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2553'.
[  491.745961][T15758] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ0
[  491.749985][T15757] set match dimension is over the limit!
[  491.790863][T15761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2555'.
[  492.374937][T15774] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2561'.
[  492.378184][T15776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2562'.
[  492.878170][T15808] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2570'.
[  492.882449][T15808] tipc: Enabled bearer <eth:vlan0>, priority 18
[  492.991953][T15814] xt_bpf: check failed: parse error
[  493.010779][T15814] validate_nla: 1 callbacks suppressed
[  493.010796][T15814] netlink: 'syz.2.2572': attribute type 10 has an invalid length.
[  493.133413][T15824] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  493.190461][T15831] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  493.268295][T15839] lo speed is unknown, defaulting to 1000
[  493.271087][T15839] lo speed is unknown, defaulting to 1000
[  493.472576][T15853] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  493.610507][T15865] netlink: 'syz.2.2585': attribute type 1 has an invalid length.
[  493.694446][T15872] xt_CT: You must specify a L4 protocol and not use inversions on it
[  493.793796][T15874] "syz.1.2588" (15874) uses obsolete ecb(arc4) skcipher
[  493.875035][T15879] xt_hashlimit: size too large, truncated to 1048576
[  494.006103][   T47] tipc: Node number set to 3034333971
[  494.525205][T15891] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  494.731064][T15908] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  494.733945][T15908] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  494.736812][T15908] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  494.739455][T15908] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  494.748720][T15908] vxlan1: entered promiscuous mode
[  494.751768][T15908] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  494.754532][T15908] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  494.757389][T15908] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  494.760286][T15908] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  494.778472][T15913] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  494.851033][T15931] syzkaller0: entered promiscuous mode
[  494.852873][T15931] syzkaller0: entered allmulticast mode
[  494.864038][T15929] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  494.940585][T15929] tipc: Resetting bearer <eth:syzkaller0>
[  494.955322][T15929] tipc: Disabling bearer <eth:syzkaller0>
[  494.961410][T15940] netlink: 'syz.0.2606': attribute type 23 has an invalid length.
[  495.164183][T15954] netlink: 'syz.2.2612': attribute type 1 has an invalid length.
[  495.874442][T15989] __nla_validate_parse: 153 callbacks suppressed
[  495.874454][T15989] netlink: 22 bytes leftover after parsing attributes in process `syz.0.2624'.
[  495.884137][T15989] netlink: 'syz.0.2624': attribute type 1 has an invalid length.
[  495.887081][T15989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2624'.
[  496.339986][T16013] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  496.369776][T16013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2630'.
[  496.489505][T16024] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  496.493958][T16024] syzkaller0: entered promiscuous mode
[  496.497215][T16024] syzkaller0: entered allmulticast mode
[  496.512385][T16024] tipc: Resetting bearer <eth:syzkaller0>
[  496.523723][T16023] tipc: Resetting bearer <eth:syzkaller0>
[  496.532898][T16023] tipc: Disabling bearer <eth:syzkaller0>
[  496.595764][T16032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2637'.
[  496.599843][T16032] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  496.634389][T16040] netlink: 'syz.2.2638': attribute type 13 has an invalid length.
[  496.641235][T16040] netlink: 'syz.2.2638': attribute type 17 has an invalid length.
[  496.665210][T16040] : left promiscuous mode
[  496.668277][T16040] 8021q: adding VLAN 0 to HW filter on device 
[  496.671329][T16040] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  496.697996][T16035] lo speed is unknown, defaulting to 1000
[  496.700520][T16035] lo speed is unknown, defaulting to 1000
[  496.771635][T16061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2645'.
[  496.776985][T16061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2645'.
[  497.061355][T16078] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2649'.
[  497.064511][T16078] 0{X: renamed from gretap0
[  497.068937][T16078] 0{X: entered allmulticast mode
[  497.071295][T16078] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  497.138988][T16082] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  497.176382][T16084] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  497.179542][T16084] syzkaller0: entered promiscuous mode
[  497.181367][T16084] syzkaller0: entered allmulticast mode
[  497.186668][T16084] tipc: Resetting bearer <eth:syzkaller0>
[  497.189126][T16083] tipc: Resetting bearer <eth:syzkaller0>
[  497.198354][T16083] tipc: Disabling bearer <eth:syzkaller0>
[  497.279792][T16092] lo speed is unknown, defaulting to 1000
[  497.282566][T16092] lo speed is unknown, defaulting to 1000
[  497.373496][T16098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2654'.
[  497.568927][T16112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2657'.
[  497.649464][T16112] 8021q: adding VLAN 0 to HW filter on device bond21
[  497.814365][T16133] lo speed is unknown, defaulting to 1000
[  497.817463][T16133] lo speed is unknown, defaulting to 1000
[  497.862374][T16131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2662'.
[  497.962239][T16138] syzkaller1: entered promiscuous mode
[  497.964153][T16138] syzkaller1: entered allmulticast mode
[  498.333098][T16168] lo speed is unknown, defaulting to 1000
[  498.336480][T16168] lo speed is unknown, defaulting to 1000
[  498.815983][T16198] dvmrp8: entered allmulticast mode
[  498.820469][T16197] dvmrp8: left allmulticast mode
[  499.081343][T16211] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  499.096966][T16211] syzkaller0: entered promiscuous mode
[  499.099609][T16211] syzkaller0: entered allmulticast mode
[  499.156525][T16211] tipc: Resetting bearer <eth:syzkaller0>
[  499.159742][T16216] netlink: 'syz.2.2686': attribute type 1 has an invalid length.
[  499.194220][T16218] bridge0: port 1(erspan0) entered blocking state
[  499.198114][T16218] bridge0: port 1(erspan0) entered disabled state
[  499.200564][T16218] erspan0: entered allmulticast mode
[  499.220823][T16218] erspan0: left allmulticast mode
[  499.246458][T16207] tipc: Resetting bearer <eth:syzkaller0>
[  499.266437][T16207] tipc: Disabling bearer <eth:syzkaller0>
[  499.349898][T16223] lo speed is unknown, defaulting to 1000
[  499.353563][T16223] lo speed is unknown, defaulting to 1000
[  499.596817][T16228] 8021q: adding VLAN 0 to HW filter on device team0
[  500.564540][T16256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  500.621579][T16257] netlink: 'syz.2.2697': attribute type 13 has an invalid length.
[  500.624367][T16257] netlink: 'syz.2.2697': attribute type 17 has an invalid length.
[  500.630207][T16257] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  500.651186][T16256] lo speed is unknown, defaulting to 1000
[  500.653777][T16256] lo speed is unknown, defaulting to 1000
[  500.831694][T16267] lo speed is unknown, defaulting to 1000
[  500.844879][T16267] lo speed is unknown, defaulting to 1000
[  500.846228][T16272] netlink: 'syz.0.2702': attribute type 5 has an invalid length.
[  500.884510][T16274] __nla_validate_parse: 78 callbacks suppressed
[  500.884522][T16274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2703'.
[  501.000552][T16277] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2704'.
[  501.059768][T16282] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.2705'.
[  501.062860][T16282] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  501.207635][T16286] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2706'.
[  501.351381][T16309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2710'.
[  501.354549][T16309] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  501.500358][T16317] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2715'.
[  501.503768][T16317] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.2715'.
[  501.579959][T16321] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2717'.
[  501.780279][T16326] delete_channel: no stack
[  502.203717][T16333] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2721'.
[  502.344213][T16346] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2725'.
[  502.400264][T16349] pimreg: left allmulticast mode
[  503.638182][T16384] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  504.467793][T16451] lo speed is unknown, defaulting to 1000
[  504.470425][T16451] lo speed is unknown, defaulting to 1000
[  504.639900][T16467] netlink: 'syz.1.2756': attribute type 29 has an invalid length.
[  504.928867][T16490] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  505.321142][T16493] xt_SECMARK: invalid mode: 0
[  505.594284][T16508] lo speed is unknown, defaulting to 1000
[  505.601141][T16508] lo speed is unknown, defaulting to 1000
[  505.706724][T16517] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  505.985294][T16546] __nla_validate_parse: 11 callbacks suppressed
[  505.985305][T16546] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2780'.
[  506.032673][T16553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2783'.
[  506.036188][T16553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2783'.
[  506.052598][T16553] x_tables: duplicate underflow at hook 2
[  506.056146][T16553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2783'.
[  506.058982][T16553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2783'.
[  506.063473][T16553] netlink: 'syz.2.2783': attribute type 14 has an invalid length.
[  506.240693][T16562] netlink: 'syz.0.2786': attribute type 10 has an invalid length.
[  506.352096][T16570] netlink: 'syz.0.2787': attribute type 32 has an invalid length.
[  506.798908][T16586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2790'.
[  507.099830][T16604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2794'.
[  507.102854][T16604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2794'.
[  507.171348][T16610] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2798'.
[  507.228583][T16618] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  507.511972][T16648] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2807'.
[  507.934090][T16665] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  507.939479][T16665] syzkaller0: entered promiscuous mode
[  507.941842][T16665] syzkaller0: entered allmulticast mode
[  507.968686][T16665] tipc: Resetting bearer <eth:syzkaller0>
[  507.972559][T16664] tipc: Resetting bearer <eth:syzkaller0>
[  507.982697][T16664] tipc: Disabling bearer <eth:syzkaller0>
[  508.314679][T16672] lo speed is unknown, defaulting to 1000
[  508.317299][T16672] lo speed is unknown, defaulting to 1000
[  508.525661][T16683] netlink: 'syz.2.2817': attribute type 1 has an invalid length.
[  508.569752][T16683] 8021q: adding VLAN 0 to HW filter on device bond22
[  508.578797][T16686] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  508.607976][T16683] veth13: entered promiscuous mode
[  508.611484][T16683] bond22: (slave veth13): Enslaving as an active interface with a down link
[  508.619460][T16683] erspan0: entered allmulticast mode
[  508.750432][T16696] lo speed is unknown, defaulting to 1000
[  508.753115][T16696] lo speed is unknown, defaulting to 1000
[  508.757837][T16698] netlink: 'syz.2.2822': attribute type 5 has an invalid length.
[  508.851226][T16707] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  508.853954][T16707] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  508.868295][T16707] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  508.884796][T16707] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  508.888481][T16707] geneve4: entered promiscuous mode
[  508.911208][T16712] netlink: 'syz.2.2826': attribute type 8 has an invalid length.
[  509.297402][T16734] block nbd0: must specify backend
[  509.617717][T16752] lo speed is unknown, defaulting to 1000
[  509.624166][T16752] lo speed is unknown, defaulting to 1000
[  510.175590][T16781] lo speed is unknown, defaulting to 1000
[  510.177450][T16781] lo speed is unknown, defaulting to 1000
[  510.179550][T16781] lo speed is unknown, defaulting to 1000
[  510.188229][T16781] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  510.196230][T16783] netlink: 'syz.1.2852': attribute type 16 has an invalid length.
[  510.199013][T16783] netlink: 'syz.1.2852': attribute type 17 has an invalid length.
[  510.199971][T16781] lo speed is unknown, defaulting to 1000
[  510.207745][T16781] lo speed is unknown, defaulting to 1000
[  510.207910][T16783] IPv6: NLM_F_REPLACE set, but no existing node found!
[  510.210296][T16781] lo speed is unknown, defaulting to 1000
[  510.214401][T16781] lo speed is unknown, defaulting to 1000
[  510.260078][T16785] 8021q: adding VLAN 0 to HW filter on device bond10
[  510.269864][T16785] macvlan2: entered promiscuous mode
[  510.271734][T16785] macvlan2: entered allmulticast mode
[  510.288091][T16785] bond10: entered promiscuous mode
[  510.294973][T16785] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  510.310031][T16785] bond10: left promiscuous mode
[  511.411828][T16835] openvswitch: netlink: VXLAN extension 274 out of range max 1
[  511.573117][T16812] __nla_validate_parse: 17 callbacks suppressed
[  511.573129][T16812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2859'.
[  511.704075][T16841] syzkaller0: mtu less than device minimum
[  511.743665][T16851] pimreg: entered allmulticast mode
[  511.749103][T16851] pimreg: left allmulticast mode
[  511.842284][T16857] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2869'.
[  511.845288][T16857] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2869'.
[  511.976649][T16860] team0 (unregistering): left promiscuous mode
[  512.160269][T16885] 8021q: adding VLAN 0 to HW filter on device bond0
[  512.160797][T16884] set match dimension is over the limit!
[  512.301224][   T24] lo speed is unknown, defaulting to 1000
[  512.514546][T16938] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2896'.
[  512.563518][T16941] sctp: [Deprecated]: syz.0.2897 (pid 16941) Use of int in max_burst socket option.
[  512.563518][T16941] Use struct sctp_assoc_value instead
[  512.985280][T16992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2905'.
[  513.062983][T17007] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2911'.
[  513.120804][T17009] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2912'.
[  513.126458][T17010] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2912'.
[  513.131445][T17010] netlink: 'syz.1.2912': attribute type 1 has an invalid length.
[  513.135814][T17010] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  513.140714][T17009] netlink: 'syz.1.2912': attribute type 1 has an invalid length.
[  513.143330][T17009] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  513.201855][T17014] lo speed is unknown, defaulting to 1000
[  513.204398][T17014] lo speed is unknown, defaulting to 1000
[  513.296446][T17014] lo speed is unknown, defaulting to 1000
[  513.357127][T17025] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2916'.
[  513.819751][T17040] xt_CT: You must specify a L4 protocol and not use inversions on it
[  513.823444][T17040] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2920'.
[  514.075028][T17052] netlink: 'syz.0.2923': attribute type 10 has an invalid length.
[  514.381877][T17077] netlink: 'syz.2.2930': attribute type 2 has an invalid length.
[  514.533167][T17090] IPVS: persistence engine module ip_vs_pe_ not found
[  515.570674][T17123] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  515.574779][T17125] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  515.734116][T17134] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  515.928754][T17168] sock: sock_timestamping_bind_phc: sock not bind to device
[  515.996941][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  516.293094][T17193] lo speed is unknown, defaulting to 1000
[  516.295959][T17193] lo speed is unknown, defaulting to 1000
[  516.370843][T17193] lo speed is unknown, defaulting to 1000
[  516.839518][T17199] netlink: 'syz.0.2962': attribute type 1 has an invalid length.
[  516.842091][T17199] __nla_validate_parse: 4 callbacks suppressed
[  516.842098][T17199] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2962'.
[  516.856482][T17199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2962'.
[  516.894798][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  517.006973][T17209] bond19: (slave gretap0): Releasing active interface
[  517.017186][T17209] netlink: 'syz.0.2965': attribute type 10 has an invalid length.
[  517.053568][T17223] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  517.060148][T17223] syzkaller0: mtu greater than device maximum
[  517.147562][T17234] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2972'.
[  517.190377][T17241] netlink: 'syz.1.2974': attribute type 1 has an invalid length.
[  517.210316][T17241] bond11: entered promiscuous mode
[  517.212314][T17241] 8021q: adding VLAN 0 to HW filter on device bond11
[  517.224045][T17241] 8021q: adding VLAN 0 to HW filter on device bond11
[  517.227087][T17241] bond11: (slave vcan0): The slave device specified does not support setting the MAC address
[  517.230254][T17241] bond11: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  517.235758][T17241] bond11: (slave vcan0): making interface the new active one
[  517.238276][T17241] vcan0: entered promiscuous mode
[  517.240571][T17241] bond11: (slave vcan0): Enslaving as an active interface with an up link
[  517.273093][T17245] xt_hashlimit: size too large, truncated to 1048576
[  518.020103][T17257] ip_vti0: mtu less than device minimum
[  518.097509][T17272] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2982'.
[  518.097518][T17273] netlink: 'syz.0.2982': attribute type 13 has an invalid length.
[  518.097531][T17273] netlink: 'syz.0.2982': attribute type 17 has an invalid length.
[  518.107977][T17273] gre0: left allmulticast mode
[  518.111504][T17273] 0{X: left allmulticast mode
[  518.114450][T17273] erspan0: left promiscuous mode
[  518.146488][T17273] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  518.152109][   T24] lo speed is unknown, defaulting to 1000
[  518.154090][   T24] syz0: Port: 1 Link ACTIVE
[  518.155444][T15745] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  518.158421][T15745] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  518.161568][T17276] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2983'.
[  518.165412][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  518.166513][   T24] lo speed is unknown, defaulting to 1000
[  518.207624][T17281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2984'.
[  518.262154][T17276] vlan0: entered promiscuous mode
[  518.265343][T17276] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  518.277325][T17283] netlink: 676 bytes leftover after parsing attributes in process `syz.1.2985'.
[  518.280363][T17283] netlink: 676 bytes leftover after parsing attributes in process `syz.1.2985'.
[  518.374269][T17297] netlink: 'syz.2.2989': attribute type 58 has an invalid length.
[  518.377078][T17297] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2989'.
[  518.435318][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  518.454310][T17305] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2991'.
[  518.514426][T17313] C: renamed from team_slave_0
[  518.519518][T17313] netlink: 'syz.2.2992': attribute type 1 has an invalid length.
[  518.522167][T17313] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  518.639236][T17326] netlink: 'syz.0.2998': attribute type 1 has an invalid length.
[  518.827171][T17343] nbd1: detected capacity change from 0 to 63
[  518.831307][T17343] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  518.835051][T17343] syzkaller0: entered promiscuous mode
[  518.837404][T17343] syzkaller0: entered allmulticast mode
[  518.843121][T17343] tipc: Resetting bearer <eth:syzkaller0>
[  518.847340][   T56] block nbd1: Receive control failed (result -32)
[  518.852311][T17342] tipc: Resetting bearer <eth:syzkaller0>
[  518.862693][T17342] tipc: Disabling bearer <eth:syzkaller0>
[  518.961937][T17350] bridge: RTM_NEWNEIGH with invalid ether address
[  518.976384][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  519.261648][T17356] lo speed is unknown, defaulting to 1000
[  519.264325][T17356] lo speed is unknown, defaulting to 1000
[  519.361814][T17356] lo speed is unknown, defaulting to 1000
[  519.706279][T17376] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  519.717379][T17365] Set syz1 is full, maxelem 0 reached
[  519.721503][T17376] openvswitch: netlink: Flow actions attr not present in new flow.
[  519.729776][T17365] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  519.733559][T17365] CPU: 1 UID: 0 PID: 17365 Comm: syz.0.3009 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  519.733572][T17365] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  519.733577][T17365] Call Trace:
[  519.733582][T17365]  <TASK>
[  519.733586][T17365]  dump_stack_lvl+0x189/0x250
[  519.733603][T17365]  ? __pfx_dump_stack_lvl+0x10/0x10
[  519.733614][T17365]  ? __pfx__printk+0x10/0x10
[  519.733628][T17365]  ? kernfs_path_from_node+0x2c/0x260
[  519.733639][T17365]  ? kernfs_path_from_node+0x2c/0x260
[  519.733646][T17365]  ? kernfs_path_from_node+0x2c/0x260
[  519.733655][T17365]  ? kernfs_path_from_node+0x22c/0x260
[  519.733662][T17365]  ? kernfs_path_from_node+0x2c/0x260
[  519.733672][T17365]  sysfs_warn_dup+0x8e/0xa0
[  519.733685][T17365]  sysfs_do_create_link_sd+0xc0/0x110
[  519.733694][T17365]  device_add_class_symlinks+0x1cf/0x240
[  519.733707][T17365]  device_add+0x475/0xb50
[  519.733719][T17365]  wiphy_register+0x199a/0x26b0
[  519.733739][T17365]  ? __pfx_wiphy_register+0x10/0x10
[  519.733749][T17365]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  519.733764][T17365]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  519.733777][T17365]  ieee80211_register_hw+0x33e1/0x4120
[  519.733796][T17365]  ? ieee80211_register_hw+0x14d1/0x4120
[  519.733810][T17365]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  519.733823][T17365]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  519.733860][T17365]  ? __hrtimer_setup+0x187/0x210
[  519.733871][T17365]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  519.733885][T17365]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  519.733909][T17365]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  519.733920][T17365]  ? trace_kmalloc+0x1f/0xd0
[  519.733931][T17365]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  519.733942][T17365]  ? kstrndup+0xbf/0x160
[  519.733956][T17365]  hwsim_new_radio_nl+0xea4/0x1b10
[  519.733969][T17365]  ? __pfx___nla_validate_parse+0x10/0x10
[  519.733985][T17365]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  519.734002][T17365]  ? __nla_parse+0x40/0x60
[  519.734014][T17365]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  519.734026][T17365]  genl_family_rcv_msg_doit+0x215/0x300
[  519.734037][T17365]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  519.734050][T17365]  ? bpf_lsm_capable+0x9/0x20
[  519.734066][T17365]  ? security_capable+0x7e/0x2e0
[  519.734076][T17365]  genl_rcv_msg+0x60e/0x790
[  519.734087][T17365]  ? __pfx_genl_rcv_msg+0x10/0x10
[  519.734094][T17365]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  519.734111][T17365]  netlink_rcv_skb+0x208/0x470
[  519.734121][T17365]  ? __pfx_genl_rcv_msg+0x10/0x10
[  519.734130][T17365]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  519.734147][T17365]  ? down_read+0x1ad/0x2e0
[  519.734157][T17365]  genl_rcv+0x28/0x40
[  519.734165][T17365]  netlink_unicast+0x75c/0x8e0
[  519.734180][T17365]  netlink_sendmsg+0x805/0xb30
[  519.734196][T17365]  ? __pfx_netlink_sendmsg+0x10/0x10
[  519.734209][T17365]  ? aa_sock_msg_perm+0x94/0x160
[  519.734219][T17365]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  519.734227][T17365]  ? __pfx_netlink_sendmsg+0x10/0x10
[  519.734238][T17365]  __sock_sendmsg+0x21c/0x270
[  519.734249][T17365]  ____sys_sendmsg+0x505/0x830
[  519.734262][T17365]  ? __pfx_____sys_sendmsg+0x10/0x10
[  519.734277][T17365]  ? import_iovec+0x74/0xa0
[  519.734289][T17365]  ___sys_sendmsg+0x21f/0x2a0
[  519.734301][T17365]  ? __pfx____sys_sendmsg+0x10/0x10
[  519.734329][T17365]  ? __fget_files+0x2a/0x420
[  519.734335][T17365]  ? __fget_files+0x3a0/0x420
[  519.734347][T17365]  __x64_sys_sendmsg+0x19b/0x260
[  519.734357][T17365]  ? _raw_spin_unlock_irq+0x23/0x50
[  519.734369][T17365]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  519.734385][T17365]  ? rcu_is_watching+0x15/0xb0
[  519.734396][T17365]  ? do_syscall_64+0xbe/0x3b0
[  519.734407][T17365]  do_syscall_64+0xfa/0x3b0
[  519.734414][T17365]  ? lockdep_hardirqs_on+0x9c/0x150
[  519.734422][T17365]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.734429][T17365]  ? exc_page_fault+0x9f/0xf0
[  519.734437][T17365]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.734444][T17365] RIP: 0033:0x7f97d9d8e9a9
[  519.734453][T17365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  519.734460][T17365] RSP: 002b:00007f97dab46038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  519.734469][T17365] RAX: ffffffffffffffda RBX: 00007f97d9fb5fa0 RCX: 00007f97d9d8e9a9
[  519.734475][T17365] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  519.734479][T17365] RBP: 00007f97d9e10ca1 R08: 0000000000000000 R09: 0000000000000000
[  519.734484][T17365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  519.734488][T17365] R13: 0000000000000000 R14: 00007f97d9fb5fa0 R15: 00007ffc5dec7ff8
[  519.734501][T17365]  </TASK>
[  520.818792][T17401] lo speed is unknown, defaulting to 1000
[  520.821416][T17401] lo speed is unknown, defaulting to 1000
[  520.899785][T17401] lo speed is unknown, defaulting to 1000
[  521.020677][T17409] Cannot find add_set index 0 as target
[  521.023396][T17409] Cannot find add_set index 0 as target
[  521.414449][T17424] netlink: 'syz.1.3027': attribute type 1 has an invalid length.
[  521.431822][T17424] bond12: (slave ip6gretap3): Enslaving as a backup interface with an up link
[  521.439312][   T12] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  521.439768][T17424] 8021q: adding VLAN 0 to HW filter on device bond12
[  521.456915][T17424] veth7: entered promiscuous mode
[  521.461191][T17424] bond12: (slave veth7): Enslaving as a backup interface with a down link
[  521.465518][T17424] bond8: (slave ip6gretap2): Removing an active aggregator
[  521.468300][T17424] bond8: (slave ip6gretap2): Releasing backup interface
[  521.471055][T17424] ip6gretap2: left promiscuous mode
[  521.472821][T17424] ip6gretap2: left allmulticast mode
[  521.476513][T17424] bond11: (slave vcan0): Releasing backup interface
[  521.478712][T17424] vcan0: left promiscuous mode
[  521.484496][T17424] bond12: (slave ip6gretap3): Removing an active aggregator
[  521.487344][T17424] bond12: (slave ip6gretap3): Releasing backup interface
[  521.489713][T17424] bond12: (slave ip6gretap3): the permanent HWaddr of slave - d6:39:00:a8:1b:e0 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  521.498819][T17424] bond12: (slave veth7): Releasing backup interface
[  521.707929][   T33] audit: type=1800 audit(1753025466.249:16): pid=17431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3030" name="cgroup.controllers" dev="tmpfs" ino=4850 res=0 errno=0
[  521.890447][T17444] __nla_validate_parse: 10 callbacks suppressed
[  521.890456][T17444] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3034'.
[  522.008427][T17449] netlink: 'syz.1.3035': attribute type 4 has an invalid length.
[  522.414733][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  522.622679][T17456] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3037'.
[  522.689200][T17462] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3039'.
[  522.767252][T17464] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  522.787468][T17448] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  522.998238][T17493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3048'.
[  523.001169][T17493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3048'.
[  523.024327][T17490] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3047'.
[  523.027923][T17490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3047'.
[  523.030852][T17490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3047'.
[  523.100906][T17510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3051'.
[  523.154323][T17514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3052'.
[  523.996655][T17539] Bluetooth: MGMT ver 1.23
[  524.082769][T17544] sctp: [Deprecated]: syz.0.3062 (pid 17544) Use of struct sctp_assoc_value in delayed_ack socket option.
[  524.082769][T17544] Use struct sctp_sack_info instead
[  524.133432][T17553] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  524.333015][T17571] bond18: (slave veth11): Releasing backup interface
[  524.343774][T17571] bond22: (slave veth13): Releasing active interface
[  524.568195][T17599] 0{X: left allmulticast mode
[  524.574913][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  524.588398][T17599] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  524.593530][   T24] lo speed is unknown, defaulting to 1000
[  524.596449][   T24] syz2: Port: 1 Link ACTIVE
[  524.614939][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  524.769673][T17612] netlink: 'syz.1.3079': attribute type 64 has an invalid length.
[  525.199144][T17627] veth0: entered promiscuous mode
[  525.211686][T17627] veth0 (unregistering): left promiscuous mode
[  525.534928][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  525.976353][T17670] x_tables: duplicate underflow at hook 1
[  526.321094][T17685] lo speed is unknown, defaulting to 1000
[  526.323880][T17685] lo speed is unknown, defaulting to 1000
[  526.397547][T17615] Set syz1 is full, maxelem 65536 reached
[  526.399848][T17668] Set syz1 is full, maxelem 0 reached
[  526.464563][T17685] lo speed is unknown, defaulting to 1000
[  526.568328][T17711] xt_hashlimit: max too large, truncated to 1048576
[  526.576027][T15745] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  526.615650][T17718] syzkaller0: entered promiscuous mode
[  526.617432][T17718] syzkaller0: entered allmulticast mode
[  526.723637][T17723] netlink: 'syz.0.3111': attribute type 2 has an invalid length.
[  526.818903][T17736] lo speed is unknown, defaulting to 1000
[  526.821528][T17736] lo speed is unknown, defaulting to 1000
[  526.916323][T17736] lo speed is unknown, defaulting to 1000
[  526.967771][T17751] __nla_validate_parse: 21 callbacks suppressed
[  526.967805][T17751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3116'.
[  526.981264][T17751] team0: entered promiscuous mode
[  526.983356][T17751] team0: entered allmulticast mode
[  527.081911][T17763] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3120'.
[  527.111048][T17763] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  527.135779][  T792] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  527.233584][T17768] netlink: 280 bytes leftover after parsing attributes in process `syz.0.3121'.
[  527.320229][T17777] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  527.398956][T17790] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  527.615906][ T5882] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  527.620439][ T5882] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  527.629299][T17809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3135'.
[  527.632888][T17805] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3134'.
[  527.669303][T17816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3135'.
[  527.681330][T17815] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3136'.
[  527.687008][T17815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3136'.
[  527.691131][T17815] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3136'.
[  527.696010][T17815] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3136'.
[  527.708600][T17821] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  527.713588][  T792] lo speed is unknown, defaulting to 1000
[  527.717181][  T792] syz0: Port: 1 Link DOWN
[  527.718656][  T792] lo speed is unknown, defaulting to 1000
[  527.756107][T17824] bond0: (slave rose0): Error: Device can not be enslaved while up
[  527.886950][T17834] bond0: (slave rose0): Error: Device can not be enslaved while up
[  527.889715][T17835] bond0: (slave rose0): Error: Device can not be enslaved while up
[  527.950628][T17837] lo speed is unknown, defaulting to 1000
[  527.953252][T17837] lo speed is unknown, defaulting to 1000
[  527.976395][T17839] erspan0: left allmulticast mode
[  527.981717][T17839] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  528.015062][  T792] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  528.066863][T17845] netlink: 'syz.2.3145': attribute type 4 has an invalid length.
[  528.092535][T17845] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  528.099220][T17837] lo speed is unknown, defaulting to 1000
[  528.181088][T17852] lo speed is unknown, defaulting to 1000
[  528.183663][T17852] lo speed is unknown, defaulting to 1000
[  528.285498][T17852] lo speed is unknown, defaulting to 1000
[  528.478492][ T5865] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  528.481251][ T5865] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  528.862381][T17892] netlink: 'syz.0.3157': attribute type 21 has an invalid length.
[  528.942310][T17899] netlink: 'syz.2.3159': attribute type 21 has an invalid length.
[  529.149289][T17914] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  529.780108][T17938] lo speed is unknown, defaulting to 1000
[  529.782872][T17938] lo speed is unknown, defaulting to 1000
[  529.874997][T17938] lo speed is unknown, defaulting to 1000
[  530.020730][T17938] Set syz1 is full, maxelem 0 reached
[  530.141513][T17950] sctp: [Deprecated]: syz.2.3174 (pid 17950) Use of struct sctp_assoc_value in delayed_ack socket option.
[  530.141513][T17950] Use struct sctp_sack_info instead
[  530.420645][T17966] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  530.425879][T17966] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  530.583120][T17971] sctp: [Deprecated]: syz.1.3180 (pid 17971) Use of int in maxseg socket option.
[  530.583120][T17971] Use struct sctp_assoc_value instead
[  530.954739][T17983] block nbd2: server does not support multiple connections per device.
[  530.959207][T17983] block nbd2: shutting down sockets
[  530.974739][    C1] ip6_tnl_xmit_ctl: 4 callbacks suppressed
[  530.974774][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  531.484479][T18017] mac80211_hwsim hwsim23 wlan1: entered allmulticast mode
[  531.505788][T18017] netlink: 'syz.2.3194': attribute type 10 has an invalid length.
[  531.512551][T18018] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  531.516370][T18020] IPVS: set_ctl: invalid protocol: 103 255.255.255.255:20000
[  531.525247][  T792] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  531.545270][  T792] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  531.621134][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  531.702345][T18037] lo speed is unknown, defaulting to 1000
[  531.704796][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  531.705649][T18037] lo speed is unknown, defaulting to 1000
[  531.789996][T18037] lo speed is unknown, defaulting to 1000
[  531.857466][T18041] netlink: 'syz.2.3200': attribute type 1 has an invalid length.
[  531.873689][T18041] xt_CT: No such helper "snmp"
[  531.988326][  T792] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  532.664848][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  532.734828][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  532.955295][T18101] lo speed is unknown, defaulting to 1000
[  532.958155][T18101] lo speed is unknown, defaulting to 1000
[  532.996446][T18103] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  532.998852][T18103] IPv6: NLM_F_CREATE should be set when creating new route
[  533.053124][T18101] lo speed is unknown, defaulting to 1000
[  533.060140][T18108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  533.150863][T18111] lo speed is unknown, defaulting to 1000
[  533.153439][T18111] lo speed is unknown, defaulting to 1000
[  533.249102][T18111] lo speed is unknown, defaulting to 1000
[  533.268553][T18117] __nla_validate_parse: 21 callbacks suppressed
[  533.268563][T18117] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3220'.
[  533.277039][T18117] openvswitch: netlink: Duplicate or invalid key (type 0).
[  533.291001][T18117] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  533.308673][T18117] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3220'.
[  533.534849][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  534.210271][T18157] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  534.306954][T18161] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3231'.
[  534.313063][T18161] batadv_slave_1: entered promiscuous mode
[  534.402034][T18171] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3233'.
[  534.405318][T18172] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3233'.
[  534.497521][T18177] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  534.500076][T18177] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3234'.
[  534.503146][T18177] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  534.691349][T18179] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3235'.
[  534.807526][T18183] pimreg: entered allmulticast mode
[  534.820904][T18183] pimreg: left allmulticast mode
[  534.835897][T18185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3237'.
[  534.950983][T18192] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3238'.
[  535.167341][T18204] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3242'.
[  535.235073][T18207] lo speed is unknown, defaulting to 1000
[  535.237769][T18207] lo speed is unknown, defaulting to 1000
[  535.337697][T18207] lo speed is unknown, defaulting to 1000
[  536.016658][ T5218] Bluetooth: hci2: command 0x0405 tx timeout
[  536.176455][T18233] xt_CT: You must specify a L4 protocol and not use inversions on it
[  536.176953][T18234] xt_CT: You must specify a L4 protocol and not use inversions on it
[  536.208022][T18237] lo speed is unknown, defaulting to 1000
[  536.210963][T18237] lo speed is unknown, defaulting to 1000
[  536.308971][T18237] lo speed is unknown, defaulting to 1000
[  536.447787][T18247] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  536.483414][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  536.584399][T18263] IPVS: length: 148 != 24
[  537.215520][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  537.740906][T18311] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  538.414170][T18338] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  538.476057][T18338] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  538.525660][T18338] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  538.585044][T18338] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  538.654244][T18338] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  538.667716][T18338] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  538.678427][T18338] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  538.690736][T18338] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  538.853828][T18355] lo speed is unknown, defaulting to 1000
[  538.862751][T18355] lo speed is unknown, defaulting to 1000
[  538.881974][T18365] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  538.896914][T18367] netlink: 'syz.0.3282': attribute type 13 has an invalid length.
[  538.899505][T18367] netlink: 'syz.0.3282': attribute type 17 has an invalid length.
[  538.909991][T18367] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  538.929369][   T10] lo speed is unknown, defaulting to 1000
[  538.931558][   T10] syz0: Port: 1 Link ACTIVE
[  538.933215][   T10] lo speed is unknown, defaulting to 1000
[  538.950143][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  539.036332][T18374] netlink: 'syz.1.3288': attribute type 13 has an invalid length.
[  539.068006][T18355] lo speed is unknown, defaulting to 1000
[  539.750661][T18381] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  539.753228][T18381] syzkaller0: entered promiscuous mode
[  539.755278][T18381] syzkaller0: entered allmulticast mode
[  539.807859][T18381] __nla_validate_parse: 7 callbacks suppressed
[  539.807870][T18381] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3290'.
[  539.848575][T18381] tipc: Resetting bearer <eth:syzkaller0>
[  539.860389][T18381] tipc: Disabling bearer <eth:syzkaller0>
[  539.894884][  T792] tipc: Node number set to 632394428
[  539.925901][T18396] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3293'.
[  539.935132][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  539.938289][  T792] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  540.027894][T18404] netlink: 208 bytes leftover after parsing attributes in process `syz.1.3296'.
[  540.068617][T18406] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3297'.
[  540.091706][T18410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3298'.
[  540.134022][T18419] netlink: 'syz.0.3300': attribute type 32 has an invalid length.
[  540.138965][T18419] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3300'.
[  540.168383][T18425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3302'.
[  540.226272][T18421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3301'.
[  540.319514][T18444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3305'.
[  540.323454][T18444] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  540.327876][T18444] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  540.331482][T18443] lo speed is unknown, defaulting to 1000
[  540.336585][T18443] lo speed is unknown, defaulting to 1000
[  540.346341][T18449] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3306'.
[  540.504283][T18443] lo speed is unknown, defaulting to 1000
[  540.710524][T18468] wireguard0: entered promiscuous mode
[  540.715975][T18468] wireguard0: entered allmulticast mode
[  541.217960][T18492] xt_cgroup: invalid path, errno=-2
[  541.332785][T18499] sctp: [Deprecated]: syz.2.3314 (pid 18499) Use of struct sctp_assoc_value in delayed_ack socket option.
[  541.332785][T18499] Use struct sctp_sack_info instead
[  541.420374][   T33] audit: type=1804 audit(1753025485.959:17): pid=18501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3315" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=5808 res=1 errno=0
[  541.429605][   T33] audit: type=1800 audit(1753025485.959:18): pid=18501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3315" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=5808 res=0 errno=0
[  541.555504][T18511] netlink: 'syz.2.3318': attribute type 1 has an invalid length.
[  541.800584][T18543] lo speed is unknown, defaulting to 1000
[  541.803343][T18543] lo speed is unknown, defaulting to 1000
[  541.854769][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  541.889808][T18543] lo speed is unknown, defaulting to 1000
[  541.920281][T18551] lo speed is unknown, defaulting to 1000
[  541.922939][T18551] lo speed is unknown, defaulting to 1000
[  542.053145][T18551] lo speed is unknown, defaulting to 1000
[  542.581612][T18598] syzkaller1: entered promiscuous mode
[  542.583550][T18598] syzkaller1: entered allmulticast mode
[  542.631127][T18598] set match dimension is over the limit!
[  542.991145][T18629] bond0: entered promiscuous mode
[  542.993485][T18629] bond0: left promiscuous mode
[  543.009503][T18632] veth9: entered promiscuous mode
[  543.011202][T18632] veth9: entered allmulticast mode
[  543.431020][T18662] lo speed is unknown, defaulting to 1000
[  543.434039][T18662] lo speed is unknown, defaulting to 1000
[  543.532639][T18662] lo speed is unknown, defaulting to 1000
[  543.732165][T18697] netlink: 'syz.1.3359': attribute type 11 has an invalid length.
[  544.619323][T18765] netlink: 'syz.2.3378': attribute type 1 has an invalid length.
[  545.093309][T18772] __nla_validate_parse: 19 callbacks suppressed
[  545.093321][T18772] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3381'.
[  545.098676][T18772] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3381'.
[  545.242710][T18782] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  545.340203][T18783] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3384'.
[  545.620941][T18791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3386'.
[  545.657593][T18793] lo speed is unknown, defaulting to 1000
[  545.660326][T18793] lo speed is unknown, defaulting to 1000
[  545.745110][T18793] lo speed is unknown, defaulting to 1000
[  545.857984][T18798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3388'.
[  545.860921][T18798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3388'.
[  545.909232][T18800] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  545.914232][   T47] lo speed is unknown, defaulting to 1000
[  545.916346][   T47] syz1: Port: 1 Link DOWN
[  545.921573][T18801] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  545.992990][T18805] lo speed is unknown, defaulting to 1000
[  546.000810][T18805] lo speed is unknown, defaulting to 1000
[  546.094969][ T5851] Bluetooth: hci2: command 0x0405 tx timeout
[  546.119073][T18805] lo speed is unknown, defaulting to 1000
[  546.223333][T18817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3393'.
[  546.233406][T18817] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3393'.
[  546.462142][T18825] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3395'.
[  546.668355][T18829] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3396'.
[  546.884024][T18847] netlink: 'syz.2.3401': attribute type 1 has an invalid length.
[  546.902875][T18847] 8021q: adding VLAN 0 to HW filter on device bond24
[  546.936232][T18847] 8021q: adding VLAN 0 to HW filter on device bond24
[  546.938615][T18847] bond24: (slave vxcan1): The slave device specified does not support setting the MAC address
[  546.946279][T18847] bond24: (slave vxcan1): Error -95 calling set_mac_address
[  547.083508][T18847] macvlan5: entered promiscuous mode
[  547.085568][T18847] macvlan5: entered allmulticast mode
[  547.087751][T18847] bond24: entered promiscuous mode
[  547.089942][T18847] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  547.094548][T18847] bond24: left promiscuous mode
[  547.336811][T18869] xt_socket: unknown flags 0x8
[  547.338584][T18869] xt_socket: unknown flags 0x8
[  547.345046][T18869] xt_socket: unknown flags 0x8
[  547.346715][T18869] xt_socket: unknown flags 0x8
[  547.348329][T18869] xt_socket: unknown flags 0x8
[  547.354314][T18869] xt_socket: unknown flags 0x8
[  547.357664][T18869] xt_socket: unknown flags 0x8
[  547.373294][T18869] xt_socket: unknown flags 0x8
[  547.376270][T18869] xt_socket: unknown flags 0x8
[  547.381362][T18869] xt_socket: unknown flags 0x8
[  547.416785][T18876] netlink: 'syz.2.3409': attribute type 5 has an invalid length.
[  547.614759][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  548.659051][T18882] $: renamed from team_slave_1
[  548.670704][T18900] lo speed is unknown, defaulting to 1000
[  548.673438][T18900] lo speed is unknown, defaulting to 1000
[  548.777351][T18900] lo speed is unknown, defaulting to 1000
[  549.078129][T18948] veth16: entered allmulticast mode
[  549.088674][T18948] veth17: entered promiscuous mode
[  549.864392][T19024] netlink: 'syz.1.3442': attribute type 21 has an invalid length.
[  550.187437][T19053] lo speed is unknown, defaulting to 1000
[  550.190180][T19053] lo speed is unknown, defaulting to 1000
[  550.293462][T19055] __nla_validate_parse: 14 callbacks suppressed
[  550.293476][T19055] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3449'.
[  550.301647][T19055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3449'.
[  550.313334][T19053] lo speed is unknown, defaulting to 1000
[  551.027429][T19066] x_tables: duplicate underflow at hook 1
[  551.346522][T19062] lo speed is unknown, defaulting to 1000
[  551.349339][T19062] lo speed is unknown, defaulting to 1000
[  551.471778][T19068] netlink: 3072 bytes leftover after parsing attributes in process `syz.2.3452'.
[  551.481311][T19062] lo speed is unknown, defaulting to 1000
[  551.493899][T19072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3453'.
[  551.500876][T19072] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3453'.
[  551.749326][T19086] batadv_slave_1: left promiscuous mode
[  551.753192][T19086] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  551.755892][T19086] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  551.758780][T19086] macvtap1: left promiscuous mode
[  551.760377][T19086] macvtap1: left allmulticast mode
[  551.762580][T19086] veth3: left allmulticast mode
[  551.764228][T19086] bridge1: left promiscuous mode
[  551.768121][T19086] bridge1: left allmulticast mode
[  551.769953][T19086] geneve2: left promiscuous mode
[  551.771930][T19086] vlan4: left promiscuous mode
[  551.773482][T19086] bond5: left promiscuous mode
[  551.775312][T19086] vlan4: left allmulticast mode
[  551.777818][T19086] bond5: left allmulticast mode
[  551.779962][T19086] gretap3: left promiscuous mode
[  551.781721][T19086] bond8: left promiscuous mode
[  551.783262][T19086] bond8: left allmulticast mode
[  551.787147][T19086] bond11: left promiscuous mode
[  551.788983][T19086] veth7: left promiscuous mode
[  551.793413][   T24] lo speed is unknown, defaulting to 1000
[  551.798701][   T24] syz2: Port: 1 Link DOWN
[  551.921682][T19095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3460'.
[  552.020876][T19107] netlink: 'syz.2.3464': attribute type 1 has an invalid length.
[  552.023322][T19107] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  552.039653][T19107] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  552.042491][T19107] syzkaller0: entered promiscuous mode
[  552.044944][T19107] syzkaller0: entered allmulticast mode
[  552.045151][T19105] rdma_rxe: rxe_newlink: failed to add lo
[  552.073147][T19105] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  552.079373][   T24] lo speed is unknown, defaulting to 1000
[  552.081254][   T24] syz2: Port: 1 Link ACTIVE
[  552.082736][T19107] tipc: Resetting bearer <eth:syzkaller0>
[  552.089495][T19106] tipc: Resetting bearer <eth:syzkaller0>
[  552.097622][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  552.116838][T19106] tipc: Disabling bearer <eth:syzkaller0>
[  552.131350][T19113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3467'.
[  552.134202][T19113] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3467'.
[  552.191446][T19115] lo speed is unknown, defaulting to 1000
[  552.193995][T19115] lo speed is unknown, defaulting to 1000
[  552.207857][T19121] syzkaller1: entered promiscuous mode
[  552.209551][T19121] syzkaller1: entered allmulticast mode
[  552.221389][T19123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3470'.
[  552.224407][T19123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3470'.
[  552.230146][T19123] netlink: 'syz.0.3470': attribute type 20 has an invalid length.
[  552.250287][T19123] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  552.299717][T19115] lo speed is unknown, defaulting to 1000
[  552.329200][T19130] rdma_rxe: rxe_newlink: failed to add lo
[  552.354031][T19130] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  552.360776][   T10] lo speed is unknown, defaulting to 1000
[  552.362640][   T10] syz1: Port: 1 Link ACTIVE
[  552.385010][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  552.421092][T19139] SET target dimension over the limit!
[  552.497645][T19147] netlink: 'syz.2.3477': attribute type 13 has an invalid length.
[  552.500187][T19147] netlink: 'syz.2.3477': attribute type 17 has an invalid length.
[  552.525738][T19147] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  552.536437][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  552.552105][T19147] lo speed is unknown, defaulting to 1000
[  552.563906][T19147] lo speed is unknown, defaulting to 1000
[  552.664795][T19147] lo speed is unknown, defaulting to 1000
[  552.707623][T19157] netlink: 'syz.1.3480': attribute type 16 has an invalid length.
[  552.710283][T19157] netlink: 'syz.1.3480': attribute type 17 has an invalid length.
[  552.759249][   T10] lo speed is unknown, defaulting to 1000
[  552.761413][   T10] syz2: Port: 1 Link DOWN
[  552.781229][T19157] IPv6: NLM_F_REPLACE set, but no existing node found!
[  552.945384][T19178] openvswitch: netlink: Key type 251 is out of range max 32
[  552.980070][T19180] lo speed is unknown, defaulting to 1000
[  552.982726][T19180] lo speed is unknown, defaulting to 1000
[  553.075985][T19183] tipc: Resetting bearer <eth:syzkaller0>
[  553.085476][T19183] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  553.088229][T19183] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  553.090913][T19183] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  553.093538][T19183] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  553.112858][   T10] lo speed is unknown, defaulting to 1000
[  553.114132][T19184] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (39785) !
[  553.115005][   T10] syz0: Port: 1 Link DOWN
[  553.139059][   T10] lo speed is unknown, defaulting to 1000
[  553.170193][T19180] lo speed is unknown, defaulting to 1000
[  553.295964][T15745] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  553.301559][T15745] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  553.483032][T19201] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  553.487387][T19201] CPU: 1 UID: 0 PID: 19201 Comm: syz.1.3492 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  553.487399][T19201] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  553.487403][T19201] Call Trace:
[  553.487407][T19201]  <TASK>
[  553.487410][T19201]  dump_stack_lvl+0x189/0x250
[  553.487425][T19201]  ? __pfx_dump_stack_lvl+0x10/0x10
[  553.487434][T19201]  ? __pfx__printk+0x10/0x10
[  553.487444][T19201]  ? kernfs_path_from_node+0x2c/0x260
[  553.487453][T19201]  ? kernfs_path_from_node+0x2c/0x260
[  553.487459][T19201]  ? kernfs_path_from_node+0x2c/0x260
[  553.487466][T19201]  ? kernfs_path_from_node+0x22c/0x260
[  553.487472][T19201]  ? kernfs_path_from_node+0x2c/0x260
[  553.487480][T19201]  sysfs_warn_dup+0x8e/0xa0
[  553.487492][T19201]  sysfs_do_create_link_sd+0xc0/0x110
[  553.487505][T19201]  device_add_class_symlinks+0x1cf/0x240
[  553.487519][T19201]  device_add+0x475/0xb50
[  553.487531][T19201]  wiphy_register+0x199a/0x26b0
[  553.487548][T19201]  ? __pfx_wiphy_register+0x10/0x10
[  553.487557][T19201]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  553.487570][T19201]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  553.487606][T19201]  ieee80211_register_hw+0x33e1/0x4120
[  553.487625][T19201]  ? ieee80211_register_hw+0x14d1/0x4120
[  553.487639][T19201]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  553.487652][T19201]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  553.487668][T19201]  ? __hrtimer_setup+0x187/0x210
[  553.487676][T19201]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  553.487689][T19201]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  553.487712][T19201]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  553.487722][T19201]  ? trace_kmalloc+0x1f/0xd0
[  553.487731][T19201]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  553.487741][T19201]  ? kstrndup+0xbf/0x160
[  553.487753][T19201]  hwsim_new_radio_nl+0xea4/0x1b10
[  553.487765][T19201]  ? __pfx___nla_validate_parse+0x10/0x10
[  553.487780][T19201]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  553.487796][T19201]  ? __nla_parse+0x40/0x60
[  553.487806][T19201]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  553.487819][T19201]  genl_family_rcv_msg_doit+0x215/0x300
[  553.487829][T19201]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  553.487842][T19201]  ? bpf_lsm_capable+0x9/0x20
[  553.487852][T19201]  ? security_capable+0x7e/0x2e0
[  553.487863][T19201]  genl_rcv_msg+0x60e/0x790
[  553.487873][T19201]  ? __pfx_genl_rcv_msg+0x10/0x10
[  553.487880][T19201]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  553.487897][T19201]  netlink_rcv_skb+0x208/0x470
[  553.487907][T19201]  ? __pfx_genl_rcv_msg+0x10/0x10
[  553.487915][T19201]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  553.487932][T19201]  ? down_read+0x1ad/0x2e0
[  553.487942][T19201]  genl_rcv+0x28/0x40
[  553.487948][T19201]  netlink_unicast+0x75c/0x8e0
[  553.487962][T19201]  netlink_sendmsg+0x805/0xb30
[  553.487977][T19201]  ? __pfx_netlink_sendmsg+0x10/0x10
[  553.487988][T19201]  ? aa_sock_msg_perm+0x94/0x160
[  553.487997][T19201]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  553.488005][T19201]  ? __pfx_netlink_sendmsg+0x10/0x10
[  553.488015][T19201]  __sock_sendmsg+0x21c/0x270
[  553.488026][T19201]  ____sys_sendmsg+0x505/0x830
[  553.488040][T19201]  ? __pfx_____sys_sendmsg+0x10/0x10
[  553.488055][T19201]  ? import_iovec+0x74/0xa0
[  553.488067][T19201]  ___sys_sendmsg+0x21f/0x2a0
[  553.488079][T19201]  ? __pfx____sys_sendmsg+0x10/0x10
[  553.488106][T19201]  ? __fget_files+0x2a/0x420
[  553.488113][T19201]  ? __fget_files+0x3a0/0x420
[  553.488124][T19201]  __x64_sys_sendmsg+0x19b/0x260
[  553.488136][T19201]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  553.488152][T19201]  ? rcu_is_watching+0x15/0xb0
[  553.488163][T19201]  ? do_syscall_64+0xbe/0x3b0
[  553.488173][T19201]  do_syscall_64+0xfa/0x3b0
[  553.488180][T19201]  ? lockdep_hardirqs_on+0x9c/0x150
[  553.488187][T19201]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  553.488194][T19201]  ? exc_page_fault+0x9f/0xf0
[  553.488202][T19201]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  553.488209][T19201] RIP: 0033:0x7fdf0478e9a9
[  553.488217][T19201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  553.488223][T19201] RSP: 002b:00007fdf056db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  553.488231][T19201] RAX: ffffffffffffffda RBX: 00007fdf049b5fa0 RCX: 00007fdf0478e9a9
[  553.488237][T19201] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005
[  553.488241][T19201] RBP: 00007fdf04810ca1 R08: 0000000000000000 R09: 0000000000000000
[  553.488245][T19201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  553.488250][T19201] R13: 0000000000000000 R14: 00007fdf049b5fa0 R15: 00007fff6ed35bd8
[  553.488262][T19201]  </TASK>
[  553.719527][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  553.801024][T19208] lo speed is unknown, defaulting to 1000
[  553.803632][T19208] lo speed is unknown, defaulting to 1000
[  553.916832][T19211] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  553.920188][T19211] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  553.934206][T19208] lo speed is unknown, defaulting to 1000
[  554.051330][T19215] nbd: must specify a size in bytes for the device
[  554.219874][T19242] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  554.223267][T19242] netlink: 'syz.0.3498': attribute type 4 has an invalid length.
[  554.283398][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  554.714383][T19247] netlink: 'syz.2.3504': attribute type 3 has an invalid length.
[  555.149698][T19272] tap0: tun_chr_ioctl cmd 1074025680
[  555.154025][T19272] tap0: tun_chr_ioctl cmd 35108
[  555.163260][T19278] tap0: tun_chr_ioctl cmd 1074025673
[  555.257472][T19283] syzkaller1: entered promiscuous mode
[  555.259234][T19283] syzkaller1: entered allmulticast mode
[  555.289652][T19285] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  555.375142][T19290] netlink: 'syz.0.3516': attribute type 23 has an invalid length.
[  555.437051][T19292] __nla_validate_parse: 11 callbacks suppressed
[  555.437065][T19292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3518'.
[  555.477265][T19308] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.3519'.
[  555.610609][T19326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3523'.
[  555.663962][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xea
[  555.719345][T19335] syzkaller0: left promiscuous mode
[  555.773978][T19339] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3527'.
[  555.812816][T19344] bond0: (slave rose0): Error: Device can not be enslaved while up
[  556.673788][T19361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3533'.
[  556.677858][T19361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3533'.
[  556.974760][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  557.359007][T19370] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address
[  557.362511][T19370] bond0: (slave ip_vti0): Error -95 calling set_mac_address
[  557.372773][T19371] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address
[  557.378616][T19371] bond0: (slave ip_vti0): Error -95 calling set_mac_address
[  557.484122][T19393] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3540'.
[  557.488159][T19393] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3540'.
[  557.495491][T19393] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3540'.
[  557.508524][T19393] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  557.599731][T19402] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3542'.
[  558.188000][T19449] syzkaller0: entered promiscuous mode
[  558.229752][T19451] lo speed is unknown, defaulting to 1000
[  558.232453][T19451] lo speed is unknown, defaulting to 1000
[  558.272879][T19452] xt_CT: You must specify a L4 protocol and not use inversions on it
[  558.321256][T19451] lo speed is unknown, defaulting to 1000
[  558.483013][T19464] netlink: 'syz.0.3561': attribute type 3 has an invalid length.
[  558.524301][T19464] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3942. macoff=106
[  558.834393][T19487] lo speed is unknown, defaulting to 1000
[  558.838716][T19487] lo speed is unknown, defaulting to 1000
[  558.892559][T19488] lo speed is unknown, defaulting to 1000
[  558.916862][T19487] lo speed is unknown, defaulting to 1000
[  558.917006][T19488] lo speed is unknown, defaulting to 1000
[  559.012607][T19488] lo speed is unknown, defaulting to 1000
[  559.151580][T19493] netlink: 'syz.0.3568': attribute type 1 has an invalid length.
[  559.200335][T19493] 8021q: adding VLAN 0 to HW filter on device bond24
[  559.799645][T19516] vlan0: left promiscuous mode
[  559.805495][T19516] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  559.810267][T19516] veth9: left promiscuous mode
[  559.813964][T19516] veth11: left promiscuous mode
[  559.826657][T19516] veth13: left promiscuous mode
[  559.831950][T19516] veth17: left promiscuous mode
[  559.833818][  T792] lo speed is unknown, defaulting to 1000
[  559.835939][  T792] syz1: Port: 1 Link DOWN
[  561.219352][T19548] __nla_validate_parse: 8 callbacks suppressed
[  561.219361][T19548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3583'.
[  561.356141][T19560] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  562.168783][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  562.174199][T19592] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3591'.
[  562.302979][T19601] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3594'.
[  562.307783][T19601] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3594'.
[  562.311595][T19601] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3594'.
[  563.040160][T19612] netlink: 'syz.2.3596': attribute type 1 has an invalid length.
[  563.070841][T19612] 8021q: adding VLAN 0 to HW filter on device bond25
[  563.283938][T19625] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3600'.
[  564.048312][T19637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3603'.
[  564.082182][T19639] xt_TCPMSS: Only works on TCP SYN packets
[  564.209788][T19644] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3606'.
[  564.254059][T19646] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3607'.
[  564.403380][T19648] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3608'.
[  564.677511][   T33] audit: type=1804 audit(1753025509.219:19): pid=19661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3612" name="/newroot/1244/cgroup.controllers" dev="tmpfs" ino=6423 res=1 errno=0
[  564.689326][   T33] audit: type=1800 audit(1753025509.219:20): pid=19661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3612" name="cgroup.controllers" dev="tmpfs" ino=6423 res=0 errno=0
[  564.701796][   T33] audit: type=1800 audit(1753025509.219:21): pid=19661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3612" name="cgroup.controllers" dev="tmpfs" ino=6423 res=0 errno=0
[  564.717531][T19663] netlink: 'syz.2.3613': attribute type 15 has an invalid length.
[  564.913602][T19671] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  564.921375][T19669] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  565.090627][T19689] siw: device registration error -23
[  565.223250][T19696] netlink: 'syz.0.3626': attribute type 9 has an invalid length.
[  565.508841][T19719] netlink: 'syz.2.3632': attribute type 1 has an invalid length.
[  565.542768][T19719] bond26: (slave bridge8): making interface the new active one
[  565.545827][T19719] bond26: (slave bridge8): Enslaving as an active interface with an up link
[  565.576937][T19724] ip6gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue
[  565.580694][T19722] syzkaller1: entered promiscuous mode
[  565.582545][T19722] syzkaller1: entered allmulticast mode
[  565.736091][T19732] lo speed is unknown, defaulting to 1000
[  565.740568][T19732] lo speed is unknown, defaulting to 1000
[  565.830963][T19732] lo speed is unknown, defaulting to 1000
[  566.063295][T19751] siw: device registration error -23
[  566.158860][T19766] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  566.177176][T19766] 8021q: adding VLAN 0 to HW filter on device bond25
[  566.183028][T19766] macvlan0: entered promiscuous mode
[  566.185810][T19766] macvlan0: entered allmulticast mode
[  566.188281][T19766] bond25: entered promiscuous mode
[  566.190337][T19766] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  566.195105][T19766] bond25: left promiscuous mode
[  566.339089][T19777] netlink: 'syz.0.3649': attribute type 25 has an invalid length.
[  566.351542][T19777] __nla_validate_parse: 13 callbacks suppressed
[  566.351555][T19777] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3649'.
[  566.427115][T19781] bpq0: entered promiscuous mode
[  566.437162][T19781] pim6reg: entered allmulticast mode
[  566.440181][T19781] pim6reg: left allmulticast mode
[  566.529426][T19785] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3652'.
[  566.572876][T19787] lo speed is unknown, defaulting to 1000
[  566.576365][T19787] lo speed is unknown, defaulting to 1000
[  566.659021][T19787] lo speed is unknown, defaulting to 1000
[  566.957572][T19813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3660'.
[  566.964174][T19813] macvtap2: entered promiscuous mode
[  566.967406][T19813] erspan0: entered promiscuous mode
[  566.969259][T19813] macvtap2: entered allmulticast mode
[  566.971025][T19813] erspan0: entered allmulticast mode
[  566.979405][T19813] erspan0: left allmulticast mode
[  566.981036][T19813] erspan0: left promiscuous mode
[  567.010177][T19815] x_tables: duplicate underflow at hook 1
[  567.085726][T19825] lo speed is unknown, defaulting to 1000
[  567.088239][T19825] lo speed is unknown, defaulting to 1000
[  567.100987][T19827] lo speed is unknown, defaulting to 1000
[  567.144207][T19829] netlink: 'syz.2.3665': attribute type 21 has an invalid length.
[  567.144782][T19830] netlink: 'syz.2.3665': attribute type 21 has an invalid length.
[  567.146837][T19829] netlink: 'syz.2.3665': attribute type 6 has an invalid length.
[  567.151897][T19829] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3665'.
[  567.175120][T19830] netlink: 'syz.2.3665': attribute type 6 has an invalid length.
[  567.177727][T19830] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3665'.
[  567.187913][T19829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3665'.
[  567.194034][T19825] lo speed is unknown, defaulting to 1000
[  567.194782][T19827] lo speed is unknown, defaulting to 1000
[  567.237909][T19833] lo speed is unknown, defaulting to 1000
[  567.304427][T19827] lo speed is unknown, defaulting to 1000
[  567.304544][T19833] lo speed is unknown, defaulting to 1000
[  567.440900][T19833] lo speed is unknown, defaulting to 1000
[  567.742820][T19854] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3673'.
[  567.745828][T19854] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3673'.
[  567.763490][T19851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3672'.
[  567.772586][T19857] netlink: 'syz.1.3674': attribute type 1 has an invalid length.
[  567.788116][T19857] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR
[  567.846504][T19868] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3676'.
[  567.958902][T19878] lo speed is unknown, defaulting to 1000
[  567.979074][T19878] lo speed is unknown, defaulting to 1000
[  568.110434][T19898] xt_hashlimit: size too large, truncated to 1048576
[  568.149220][   T47] lo speed is unknown, defaulting to 1000
[  568.151124][   T47] syz1: Port: 1 Link ACTIVE
[  568.344009][T19878] lo speed is unknown, defaulting to 1000
[  568.622670][T19951] netlink: 'syz.0.3693': attribute type 1 has an invalid length.
[  568.642254][T19955] netlink: 'syz.2.3694': attribute type 9 has an invalid length.
[  568.663161][T19951] bond26: (slave vti1): The slave device specified does not support setting the MAC address
[  568.667531][T19951] bond26: (slave vti1): Setting fail_over_mac to active for active-backup mode
[  568.675651][T19951] bond26: (slave vti1): making interface the new active one
[  568.678958][T19951] bond26: (slave vti1): Enslaving as an active interface with an up link
[  568.851760][T19976] vlan4: entered promiscuous mode
[  568.853597][T19976] vlan3: entered promiscuous mode
[  569.157161][T20012] lo speed is unknown, defaulting to 1000
[  569.161153][T20012] lo speed is unknown, defaulting to 1000
[  569.259779][T20012] lo speed is unknown, defaulting to 1000
[  569.315329][T20033] netlink: 'syz.2.3716': attribute type 5 has an invalid length.
[  569.562845][T20051] lo speed is unknown, defaulting to 1000
[  569.569002][T20051] lo speed is unknown, defaulting to 1000
[  569.702643][T20076] nbd: nbd1 already in use
[  569.704779][T20076] block nbd1: NBD_DISCONNECT
[  569.706318][T20076] block nbd1: Send disconnect failed -32
[  569.709251][T20076] block nbd1: shutting down sockets
[  569.728636][T20051] lo speed is unknown, defaulting to 1000
[  569.800817][T20085] vlan3: entered promiscuous mode
[  569.802645][T20085] bond0: entered promiscuous mode
[  569.804371][T20085] vlan3: entered allmulticast mode
[  569.806939][T20085] bond0: entered allmulticast mode
[  569.847801][T20085] siw: device registration error -23
[  569.918795][T20101] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  570.070091][T20115] netlink: 'syz.2.3736': attribute type 1 has an invalid length.
[  570.400040][T20132] bond26: (slave vti1): Releasing backup interface
[  570.437066][T20132] netlink: 'syz.0.3741': attribute type 10 has an invalid length.
[  570.472012][T20132] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  570.475180][T20132] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  570.944259][T20160] lo speed is unknown, defaulting to 1000
[  570.947380][T20160] lo speed is unknown, defaulting to 1000
[  571.017773][T20162] lo speed is unknown, defaulting to 1000
[  571.050801][T20160] lo speed is unknown, defaulting to 1000
[  571.053260][T20162] lo speed is unknown, defaulting to 1000
[  571.198344][T20162] lo speed is unknown, defaulting to 1000
[  571.228047][T20171] SET target dimension over the limit!
[  571.385841][T20190] netlink: 'syz.2.3753': attribute type 1 has an invalid length.
[  571.388358][T20190] __nla_validate_parse: 20 callbacks suppressed
[  571.388365][T20190] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3753'.
[  571.497182][T20199] lo speed is unknown, defaulting to 1000
[  571.499196][T20197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3755'.
[  571.499950][T20199] lo speed is unknown, defaulting to 1000
[  571.502504][T20198] lo speed is unknown, defaulting to 1000
[  571.528052][T20203] netlink: 'syz.1.3758': attribute type 32 has an invalid length.
[  571.675150][T20198] lo speed is unknown, defaulting to 1000
[  571.757948][T20232] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.3763'.
[  571.835454][T20199] lo speed is unknown, defaulting to 1000
[  571.840235][T20236] "syz.1.3765" (20236) uses obsolete ecb(arc4) skcipher
[  571.846489][T20236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3765'.
[  571.849550][T20198] lo speed is unknown, defaulting to 1000
[  571.877765][T20241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3766'.
[  572.678686][T20259] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  572.739271][T20260] tipc: Resetting bearer <eth:syzkaller0>
[  573.298728][T20278] netlink: 'syz.2.3779': attribute type 1 has an invalid length.
[  573.315577][T20278] 8021q: adding VLAN 0 to HW filter on device bond27
[  573.328376][T20278] 8021q: adding VLAN 0 to HW filter on device bond27
[  573.330772][T20278] bond27: (slave vxcan1): The slave device specified does not support setting the MAC address
[  573.334942][T20278] bond27: (slave vxcan1): Error -95 calling set_mac_address
[  573.380000][T20280] veth21: entered promiscuous mode
[  573.383532][T20280] bond27: (slave veth21): Enslaving as an active interface with a down link
[  573.389049][T20278] erspan0: entered allmulticast mode
[  573.547547][T20290] sock: sock_set_timeout: `syz.2.3783' (pid 20290) tries to set negative timeout
[  573.564157][T20292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3784'.
[  573.619325][T20298] lo speed is unknown, defaulting to 1000
[  573.621976][T20298] lo speed is unknown, defaulting to 1000
[  573.655557][T20301] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  573.660579][T20301] tipc: Resetting bearer <eth:syzkaller0>
[  573.695460][T20307] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3786'.
[  573.757662][T20298] lo speed is unknown, defaulting to 1000
[  573.807205][T20317] syzkaller0: entered allmulticast mode
[  573.812072][T20317] "syz.2.3792" (20317) uses obsolete ecb(arc4) skcipher
[  573.814867][T20317] netlink: 'syz.2.3792': attribute type 5 has an invalid length.
[  574.766938][T20347] Unknown options in mask 700
[  574.771981][T20347] netlink: 252 bytes leftover after parsing attributes in process `syz.2.3800'.
[  574.793469][T20340] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3798'.
[  574.832150][T20352] netlink: 'syz.2.3802': attribute type 1 has an invalid length.
[  574.836043][T20353] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3801'.
[  574.846493][T20353] netlink: 'syz.1.3801': attribute type 1 has an invalid length.
[  575.099233][T20385] xt_hashlimit: size too large, truncated to 1048576
[  575.131691][T20388] lo speed is unknown, defaulting to 1000
[  575.134279][T20388] lo speed is unknown, defaulting to 1000
[  575.331091][T20403] netlink: 'syz.0.3815': attribute type 1 has an invalid length.
[  575.338670][T20403] vlan4: entered allmulticast mode
[  575.340337][T20403] veth1: entered allmulticast mode
[  575.347680][T20388] lo speed is unknown, defaulting to 1000
[  575.471595][T20417] lo speed is unknown, defaulting to 1000
[  575.474307][T20417] lo speed is unknown, defaulting to 1000
[  575.516591][T20419] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) !
[  575.621025][T20417] lo speed is unknown, defaulting to 1000
[  575.821323][T20451] sch_tbf: burst 0 is lower than device ip6gre0 mtu (39785) !
[  575.862736][T20460] netlink: 'syz.2.3828': attribute type 26 has an invalid length.
[  575.888792][T20462] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  575.967902][T20467] SET target dimension over the limit!
[  576.026513][T20475] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  576.047726][T20479] netlink: 'syz.0.3834': attribute type 13 has an invalid length.
[  576.050696][T20479] netlink: 'syz.0.3834': attribute type 17 has an invalid length.
[  576.078746][T20479] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  576.091429][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  576.093952][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  576.100972][T20481] xt_hashlimit: size too large, truncated to 1048576
[  576.105054][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  576.107967][   T47] lo speed is unknown, defaulting to 1000
[  576.109803][   T47] syz0: Port: 1 Link ACTIVE
[  576.111286][   T47] lo speed is unknown, defaulting to 1000
[  576.245993][T20494] syzkaller1: entered promiscuous mode
[  576.248244][T20494] syzkaller1: entered allmulticast mode
[  576.445137][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  576.490900][T20503] __nla_validate_parse: 9 callbacks suppressed
[  576.490913][T20503] netlink: 316 bytes leftover after parsing attributes in process `syz.1.3842'.
[  576.524920][   T47] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  576.585578][T20508] syz.1.3843: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  576.590117][T20508] CPU: 0 UID: 0 PID: 20508 Comm: syz.1.3843 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  576.590129][T20508] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  576.590134][T20508] Call Trace:
[  576.590138][T20508]  <TASK>
[  576.590142][T20508]  dump_stack_lvl+0x189/0x250
[  576.590158][T20508]  ? __pfx_dump_stack_lvl+0x10/0x10
[  576.590169][T20508]  ? __pfx__printk+0x10/0x10
[  576.590182][T20508]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  576.590195][T20508]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  576.590206][T20508]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  576.590218][T20508]  warn_alloc+0x214/0x310
[  576.590227][T20508]  ? stack_depot_save_flags+0x40/0x900
[  576.590237][T20508]  ? __pfx_warn_alloc+0x10/0x10
[  576.590245][T20508]  ? kasan_save_track+0x4f/0x80
[  576.590255][T20508]  ? xskq_create+0x56/0x170
[  576.590262][T20508]  ? xsk_init_queue+0xb0/0x110
[  576.590269][T20508]  ? xsk_setsockopt+0x43f/0x710
[  576.590281][T20508]  ? do_sock_setsockopt+0x17c/0x1b0
[  576.590293][T20508]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  576.590303][T20508]  ? do_syscall_64+0xfa/0x3b0
[  576.590313][T20508]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.590324][T20508]  __vmalloc_node_range_noprof+0x125/0x12f0
[  576.590349][T20508]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  576.590363][T20508]  ? __kasan_kmalloc+0x93/0xb0
[  576.590375][T20508]  vmalloc_user_noprof+0xad/0xf0
[  576.590387][T20508]  ? xskq_create+0xbf/0x170
[  576.590416][T20508]  xskq_create+0xbf/0x170
[  576.590425][T20508]  xsk_init_queue+0xb0/0x110
[  576.590432][T20508]  xsk_setsockopt+0x43f/0x710
[  576.590445][T20508]  ? __pfx_xsk_setsockopt+0x10/0x10
[  576.590462][T20508]  ? __fget_files+0x2a/0x420
[  576.590470][T20508]  ? aa_sock_opt_perm+0x74/0x110
[  576.590481][T20508]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  576.590493][T20508]  ? __pfx_xsk_setsockopt+0x10/0x10
[  576.590504][T20508]  do_sock_setsockopt+0x17c/0x1b0
[  576.590517][T20508]  __x64_sys_setsockopt+0x13f/0x1b0
[  576.590530][T20508]  do_syscall_64+0xfa/0x3b0
[  576.590537][T20508]  ? lockdep_hardirqs_on+0x9c/0x150
[  576.590547][T20508]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.590555][T20508]  ? exc_page_fault+0x9f/0xf0
[  576.590563][T20508]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.590570][T20508] RIP: 0033:0x7fdf0478e9a9
[  576.590578][T20508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  576.590584][T20508] RSP: 002b:00007fdf056db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  576.590593][T20508] RAX: ffffffffffffffda RBX: 00007fdf049b5fa0 RCX: 00007fdf0478e9a9
[  576.590598][T20508] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000d
[  576.590603][T20508] RBP: 00007fdf04810ca1 R08: 0000000000000004 R09: 0000000000000000
[  576.590608][T20508] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  576.590612][T20508] R13: 0000000000000000 R14: 00007fdf049b5fa0 R15: 00007fff6ed35bd8
[  576.590624][T20508]  </TASK>
[  576.590627][T20508] Mem-Info:
[  576.686219][T20508] active_anon:18917 inactive_anon:0 isolated_anon:0
[  576.686219][T20508]  active_file:1276 inactive_file:38125 isolated_file:0
[  576.686219][T20508]  unevictable:1768 dirty:144 writeback:0
[  576.686219][T20508]  slab_reclaimable:10697 slab_unreclaimable:107044
[  576.686219][T20508]  mapped:18120 shmem:2463 pagetables:947
[  576.686219][T20508]  sec_pagetables:0 bounce:0
[  576.686219][T20508]  kernel_misc_reclaimable:0
[  576.686219][T20508]  free:217644 free_pcp:24290 free_cma:0
[  576.723808][T20508] Node 0 active_anon:69420kB inactive_anon:0kB active_file:3744kB inactive_file:147716kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:49888kB dirty:460kB writeback:0kB shmem:5096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6932kB pagetables:2348kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  576.734288][T20508] Node 1 active_anon:6180kB inactive_anon:0kB active_file:1360kB inactive_file:4784kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:22592kB dirty:116kB writeback:0kB shmem:4756kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6688kB pagetables:1508kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  576.745048][T20508] Node 0 DMA free:14584kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:768kB local_pcp:400kB free_cma:0kB
[  576.755371][T20508] lowmem_reserve[]: 0 812 812 812 812
[  576.757176][T20508] Node 0 DMA32 free:150156kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:69416kB inactive_anon:0kB active_file:3744kB inactive_file:147716kB unevictable:3536kB writepending:460kB present:1556484kB managed:831988kB mlocked:0kB bounce:0kB free_pcp:36624kB local_pcp:16192kB free_cma:0kB
[  576.769452][T20508] lowmem_reserve[]: 0 0 0 0 0
[  576.771095][T20508] Node 1 DMA32 free:438424kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:20192kB local_pcp:8412kB free_cma:0kB
[  576.781463][T20508] lowmem_reserve[]: 0 0 854 854 854
[  576.783491][T20508] Node 1 Normal free:276076kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6180kB inactive_anon:0kB active_file:1360kB inactive_file:4784kB unevictable:3536kB writepending:116kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:38624kB local_pcp:20940kB free_cma:0kB
[  576.793348][T20508] lowmem_reserve[]: 0 0 0 0 0
[  576.795263][T20508] Node 0 DMA: 3*4kB (UM) 2*8kB (UM) 10*16kB (UM) 14*32kB (UM) 14*64kB (UM) 6*128kB (UM) 4*256kB (UM) 4*512kB (UM) 5*1024kB (UM) 0*2048kB 1*4096kB (U) = 14588kB
[  576.800770][T20508] Node 0 DMA32: 1505*4kB (UM) 955*8kB (UME) 679*16kB (UME) 362*32kB (UME) 340*64kB (UM) 139*128kB (UME) 85*256kB (UM) 29*512kB (UME) 15*1024kB (UME) 7*2048kB (UME) 2*4096kB (U) = 150156kB
[  576.807084][T20508] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 3*32kB (UM) 2*64kB (M) 1*128kB (M) 3*256kB (UM) 2*512kB (M) 2*1024kB (M) 0*2048kB 106*4096kB (M) = 438424kB
[  576.812285][T20508] Node 1 Normal: 878*4kB (UME) 611*8kB (UME) 723*16kB (UME) 604*32kB (UME) 415*64kB (UM) 171*128kB (UME) 64*256kB (UE) 24*512kB (UM) 14*1024kB (U) 7*2048kB (UM) 32*4096kB (UM) = 276160kB
[  576.818509][T20508] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  576.821497][T20508] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  576.824494][T20508] 41869 total pagecache pages
[  576.826181][T20508] 5 pages in swap cache
[  576.827509][T20508] Free swap  = 124480kB
[  576.828959][T20508] Total swap = 124996kB
[  576.830289][T20508] 786301 pages RAM
[  576.831511][T20508] 0 pages HighMem/MovableOnly
[  576.833103][T20508] 241056 pages reserved
[  576.834431][T20508] 0 pages cma reserved
[  576.960096][T20524] xt_l2tp: invalid flags combination: 4
[  576.987553][T20519] 8021q: VLANs not supported on xfrm0
[  577.049548][T20531] netlink: 3072 bytes leftover after parsing attributes in process `syz.1.3849'.
[  577.113572][T20541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3852'.
[  577.142989][T20545] netlink: 'syz.1.3854': attribute type 11 has an invalid length.
[  577.153973][T20545] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3854'.
[  577.209181][T20549] netlink: 'syz.0.3855': attribute type 2 has an invalid length.
[  577.211646][T20549] netlink: 'syz.0.3855': attribute type 1 has an invalid length.
[  577.214142][T20549] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3855'.
[  577.227094][T20549] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  577.252803][T20564] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3858'.
[  577.256524][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  577.281230][T20568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3860'.
[  577.334570][T20577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3863'.
[  577.585320][T20587] syz_tun: entered allmulticast mode
[  577.587406][T20587] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  577.694866][    C1] ==================================================================
[  577.697501][    C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0
[  577.699991][    C1] Read of size 2 at addr ffff888021480c2a by task swapper/1/0
[  577.703198][    C1] 
[  577.704031][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  577.704041][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  577.704046][    C1] Call Trace:
[  577.704051][    C1]  <IRQ>
[  577.704056][    C1]  dump_stack_lvl+0x189/0x250
[  577.704069][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  577.704079][    C1]  ? rcu_is_watching+0x15/0xb0
[  577.704088][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  577.704095][    C1]  ? rcu_is_watching+0x15/0xb0
[  577.704102][    C1]  ? lock_release+0x4b/0x3e0
[  577.704111][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  577.704119][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  577.704127][    C1]  print_report+0xd2/0x2b0
[  577.704135][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  577.704143][    C1]  kasan_report+0x118/0x150
[  577.704154][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  577.704163][    C1]  rose_timer_expiry+0x471/0x4b0
[  577.704171][    C1]  call_timer_fn+0x17e/0x5f0
[  577.704178][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  577.704186][    C1]  ? call_timer_fn+0xbe/0x5f0
[  577.704192][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  577.704199][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  577.704210][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  577.704218][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  577.704226][    C1]  __run_timer_base+0x61a/0x860
[  577.704235][    C1]  ? ktime_get+0x3e/0x1f0
[  577.704245][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  577.704254][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  577.704266][    C1]  run_timer_softirq+0xb7/0x180
[  577.704276][    C1]  handle_softirqs+0x286/0x870
[  577.704284][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  577.704292][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  577.704300][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  577.704310][    C1]  __irq_exit_rcu+0xca/0x1f0
[  577.704317][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  577.704326][    C1]  irq_exit_rcu+0x9/0x30
[  577.704332][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  577.704338][    C1]  </IRQ>
[  577.704341][    C1]  <TASK>
[  577.704343][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  577.704352][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  577.704365][    C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 93 dd 1a 00 f3 0f 1e fa fb f4 <e9> c8 dd 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  577.704371][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000286
[  577.704397][    C1] RAX: 422858b9e0542a00 RBX: ffffffff81976c78 RCX: 422858b9e0542a00
[  577.704403][    C1] RDX: 0000000000000001 RSI: ffffffff8d99603b RDI: ffffffff8be28c40
[  577.704408][    C1] RBP: ffffc90000177f20 R08: ffff888136632f5b R09: 1ffff11026cc65eb
[  577.704413][    C1] R10: dffffc0000000000 R11: ffffed1026cc65ec R12: ffffffff8fa1d5f0
[  577.704418][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1102001d000
[  577.704423][    C1]  ? do_idle+0x1e8/0x510
[  577.704433][    C1]  default_idle+0x13/0x20
[  577.704440][    C1]  default_idle_call+0x74/0xb0
[  577.704448][    C1]  do_idle+0x1e8/0x510
[  577.704456][    C1]  ? __pfx_do_idle+0x10/0x10
[  577.704466][    C1]  cpu_startup_entry+0x44/0x60
[  577.704473][    C1]  start_secondary+0x101/0x110
[  577.704479][    C1]  common_startup_64+0x13e/0x147
[  577.704492][    C1]  </TASK>
[  577.704494][    C1] 
[  577.804990][    C1] Allocated by task 19796:
[  577.806414][    C1]  kasan_save_track+0x3e/0x80
[  577.807906][    C1]  __kasan_kmalloc+0x93/0xb0
[  577.809370][    C1]  __kmalloc_cache_noprof+0x230/0x3d0
[  577.811058][    C1]  virtio_transport_do_socket_init+0x57/0x2f0
[  577.813006][    C1]  vsock_assign_transport+0x5ae/0x770
[  577.814682][    C1]  vsock_connect+0x5ab/0xe20
[  577.816125][    C1]  __sys_connect+0x316/0x440
[  577.817708][    C1]  __x64_sys_connect+0x7a/0x90
[  577.819203][    C1]  do_syscall_64+0xfa/0x3b0
[  577.820663][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  577.822529][    C1] 
[  577.823299][    C1] Freed by task 19795:
[  577.824593][    C1]  kasan_save_track+0x3e/0x80
[  577.826094][    C1]  kasan_save_free_info+0x46/0x50
[  577.827697][    C1]  __kasan_slab_free+0x62/0x70
[  577.829267][    C1]  kfree+0x18e/0x440
[  577.830547][    C1]  virtio_transport_destruct+0x59/0x80
[  577.832269][    C1]  vsock_sk_destruct+0x1c5/0x2d0
[  577.833843][    C1]  __sk_destruct+0x89/0x660
[  577.835274][    C1]  vsock_release+0x99/0x100
[  577.836695][    C1]  sock_close+0xc3/0x240
[  577.838017][    C1]  __fput+0x44c/0xa70
[  577.839296][    C1]  task_work_run+0x1d4/0x260
[  577.840773][    C1]  exit_to_user_mode_loop+0xec/0x110
[  577.842527][    C1]  do_syscall_64+0x2bd/0x3b0
[  577.844044][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  577.845941][    C1] 
[  577.846733][    C1] The buggy address belongs to the object at ffff888021480c00
[  577.846733][    C1]  which belongs to the cache kmalloc-512 of size 512
[  577.850990][    C1] The buggy address is located 42 bytes inside of
[  577.850990][    C1]  freed 512-byte region [ffff888021480c00, ffff888021480e00)
[  577.855186][    C1] 
[  577.855969][    C1] The buggy address belongs to the physical page:
[  577.857980][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888021480c00 pfn:0x21480
[  577.861084][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  577.863742][    C1] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[  577.866426][    C1] page_type: f5(slab)
[  577.867729][    C1] raw: 00fff00000000240 ffff88801a441c80 ffff88801a4407c8 ffffea0000e72910
[  577.870369][    C1] raw: ffff888021480c00 0000000000100006 00000000f5000000 0000000000000000
[  577.873199][    C1] head: 00fff00000000240 ffff88801a441c80 ffff88801a4407c8 ffffea0000e72910
[  577.875913][    C1] head: ffff888021480c00 0000000000100006 00000000f5000000 0000000000000000
[  577.878662][    C1] head: 00fff00000000002 ffffea0000852001 00000000ffffffff 00000000ffffffff
[  577.881283][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  577.883970][    C1] page dumped because: kasan: bad access detected
[  577.885974][    C1] page_owner tracks the page as allocated
[  577.887757][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6437, tgid 6436 (syz.2.162), ts 308183772236, free_ts 305977396757
[  577.894070][    C1]  post_alloc_hook+0x240/0x2a0
[  577.895571][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  577.897241][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  577.899049][    C1]  alloc_pages_mpol+0x232/0x4a0
[  577.900585][    C1]  allocate_slab+0x8a/0x3b0
[  577.901985][    C1]  ___slab_alloc+0xbfc/0x1480
[  577.903450][    C1]  __kmalloc_noprof+0x305/0x4f0
[  577.905026][    C1]  fib6_info_alloc+0x30/0xf0
[  577.906517][    C1]  ip6_route_info_create+0x142/0x860
[  577.908166][    C1]  ip6_route_add+0x49/0x1b0
[  577.909623][    C1]  add_v4_addrs+0x8b3/0xbd0
[  577.911049][    C1]  addrconf_init_auto_addrs+0x393/0xab0
[  577.912800][    C1]  addrconf_notify+0xacc/0x1010
[  577.914346][    C1]  notifier_call_chain+0x1b6/0x3e0
[  577.916004][    C1]  __dev_notify_flags+0x18d/0x2e0
[  577.917603][    C1]  netif_change_flags+0xe8/0x1a0
[  577.919146][    C1] page last free pid 23 tgid 23 stack trace:
[  577.921032][    C1]  __free_frozen_pages+0xc71/0xe70
[  577.922698][    C1]  __tlb_remove_table+0x2d2/0x3b0
[  577.924331][    C1]  tlb_remove_table_rcu+0x85/0x100
[  577.925968][    C1]  rcu_core+0xca8/0x1710
[  577.927318][    C1]  handle_softirqs+0x286/0x870
[  577.928814][    C1]  run_ksoftirqd+0x9b/0x100
[  577.930245][    C1]  smpboot_thread_fn+0x542/0xa60
[  577.931804][    C1]  kthread+0x711/0x8a0
[  577.933090][    C1]  ret_from_fork+0x3fc/0x770
[  577.934584][    C1]  ret_from_fork_asm+0x1a/0x30
[  577.936119][    C1] 
[  577.936894][    C1] Memory state around the buggy address:
[  577.938644][    C1]  ffff888021480b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  577.941152][    C1]  ffff888021480b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  577.943605][    C1] >ffff888021480c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  577.946056][    C1]                                   ^
[  577.947718][    C1]  ffff888021480c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  577.950191][    C1]  ffff888021480d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  577.952683][    C1] ==================================================================
[  577.955499][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  577.957772][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  577.961496][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  577.964880][    C1] Call Trace:
[  577.965936][    C1]  <IRQ>
[  577.966878][    C1]  dump_stack_lvl+0x99/0x250
[  577.968364][    C1]  ? __asan_memcpy+0x40/0x70
[  577.969860][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  577.971545][    C1]  ? __pfx__printk+0x10/0x10
[  577.973049][    C1]  panic+0x2db/0x790
[  577.974331][    C1]  ? __pfx_panic+0x10/0x10
[  577.975790][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  577.977687][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  577.979588][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  577.981585][    C1]  ? print_memory_metadata+0x314/0x400
[  577.983332][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  577.984985][    C1]  check_panic_on_warn+0x89/0xb0
[  577.986587][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  577.988327][    C1]  end_report+0x78/0x160
[  577.989704][    C1]  kasan_report+0x129/0x150
[  577.991249][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  577.992921][    C1]  rose_timer_expiry+0x471/0x4b0
[  577.994521][    C1]  call_timer_fn+0x17e/0x5f0
[  577.995997][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  577.997798][    C1]  ? call_timer_fn+0xbe/0x5f0
[  577.999325][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  578.001111][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  578.002797][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  578.004481][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  578.006247][    C1]  __run_timer_base+0x61a/0x860
[  578.007852][    C1]  ? ktime_get+0x3e/0x1f0
[  578.009265][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  578.010998][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  578.013023][    C1]  run_timer_softirq+0xb7/0x180
[  578.014595][    C1]  handle_softirqs+0x286/0x870
[  578.016124][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  578.017679][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  578.019361][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  578.021025][    C1]  __irq_exit_rcu+0xca/0x1f0
[  578.022510][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  578.024174][    C1]  irq_exit_rcu+0x9/0x30
[  578.025585][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  578.027355][    C1]  </IRQ>
[  578.028307][    C1]  <TASK>
[  578.029266][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  578.031470][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  578.033313][    C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 93 dd 1a 00 f3 0f 1e fa fb f4 <e9> c8 dd 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  578.039271][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000286
[  578.041178][    C1] RAX: 422858b9e0542a00 RBX: ffffffff81976c78 RCX: 422858b9e0542a00
[  578.043711][    C1] RDX: 0000000000000001 RSI: ffffffff8d99603b RDI: ffffffff8be28c40
[  578.046247][    C1] RBP: ffffc90000177f20 R08: ffff888136632f5b R09: 1ffff11026cc65eb
[  578.048732][    C1] R10: dffffc0000000000 R11: ffffed1026cc65ec R12: ffffffff8fa1d5f0
[  578.051182][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1102001d000
[  578.053669][    C1]  ? do_idle+0x1e8/0x510
[  578.055008][    C1]  default_idle+0x13/0x20
[  578.056360][    C1]  default_idle_call+0x74/0xb0
[  578.057902][    C1]  do_idle+0x1e8/0x510
[  578.059199][    C1]  ? __pfx_do_idle+0x10/0x10
[  578.060696][    C1]  cpu_startup_entry+0x44/0x60
[  578.062215][    C1]  start_secondary+0x101/0x110
[  578.063799][    C1]  common_startup_64+0x13e/0x147
[  578.065355][    C1]  </TASK>
[  578.066987][    C1] Kernel Offset: disabled
[  578.068361][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:32:02  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b4c210 RBX=ffff88804b03b1c0 RCX=ffff88803c308000 RDX=0000000000000001
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90007337800 RSP=ffffc90007337698
R8 =ffffffff8fa1d5f7 R9 =1ffffffff1f43abe R10=dffffc0000000000 R11=fffffbfff1f43abf
R12=1ffff11026cc7f5d R13=dffffc0000000000 R14=0000000000000001 R15=ffff88813663fae8
RIP=ffffffff81c02c58 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fdf056dafc8 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002f RBX=000000000000002f RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001e0450
R8 =ffff888107370237 R9 =1ffff11020e6e046 R10=dffffc0000000000 R11=ffffffff85460db0
R12=dffffc0000000000 R13=ffffffff99aee8cf R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001200 CR3=0000000046720000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
