last executing test programs:

1.702834794s ago: executing program 0 (id=12388):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r1, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0)
syz_80211_join_ibss(&(0x7f0000000280)='wlan1\x00', &(0x7f0000000340)=@random='\r', 0x1, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f00000000c0)=@random="70723ff21195ecf4", 0x8, 0x1)

1.617750066s ago: executing program 0 (id=12392):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002b000b0000000000000000000800001008000300040001000c0001800600000088480000"], 0x28}}, 0x8000)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000440)) (async)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000440))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r2=>0x0})
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) (async)
bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, &(0x7f0000000340))
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000012b80)=[{{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000240)=""/24, 0x18}, {&(0x7f000000d280)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/4109, 0x100d}, {&(0x7f0000000680)=""/141, 0x8d}], 0x4, &(0x7f0000000780)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r5=>0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{0x0, 0x0, &(0x7f000000f480), 0x0, &(0x7f000000f4c0)}}, {{&(0x7f000000f540), 0x6e, &(0x7f0000012a00)=[{&(0x7f000000f5c0)=""/186, 0xba}, {&(0x7f000000f680)=""/238, 0xee}, {&(0x7f0000010780)=""/121, 0x79}, {0x0}, {&(0x7f0000011940)=""/4096, 0x1000}, {&(0x7f0000012940)=""/176, 0xb0}], 0x6, &(0x7f0000012ac0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}], 0x3, 0x160, &(0x7f0000012c40)={0x0, 0x989680})
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x0) (async)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x0)
socket(0x1, 0x803, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$sock_netrom_SIOCDELRT(r5, 0x890c, &(0x7f00000003c0)={0x0, @default, @rose={'rose', 0x0}, 0x9, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xd2, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r11 = socket(0x2b, 0x80801, 0x1)
setsockopt$inet6_int(r11, 0x29, 0x1e, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'veth1\x00', <r12=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)
ioctl$FS_IOC_GETFSSYSFSPATH(r3, 0x80811501, &(0x7f0000000500)={0x80}) (async)
ioctl$FS_IOC_GETFSSYSFSPATH(r3, 0x80811501, &(0x7f0000000500)={0x80})

1.532337014s ago: executing program 0 (id=12393):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff014}, {0x6, 0x9, 0x7, 0xd}]}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', <r2=>0x0})
socketpair(0x23, 0x2, 0x0, &(0x7f0000000040))
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e1f, @private=0xa010100}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xfe, 0xffffffffffffffff, 0x7, 0x6}, 0x3, r2}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x10100}, 0x2000a804)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x4884)

1.354164338s ago: executing program 0 (id=12396):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000180)={r1, 0x2, 0x1, "17"}, 0x9)
r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
listen(r2, 0x2)
accept4(r2, 0x0, 0x0, 0x80800)
sendmsg$inet(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x8081)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x100, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x2180}}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x0)

1.25113905s ago: executing program 2 (id=12397):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)}], 0x1)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000080)=0x48b5, 0x4)
close(r0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, 0x0, &(0x7f0000000500))
close(0xffffffffffffffff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @remote}]}}}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x44}, 0x1, 0xba01, 0x0, 0x20000000}, 0x40080)

1.16071133s ago: executing program 1 (id=12398):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x30, 0x0, &(0x7f0000000040))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0xc, 0x1a, 0x0, 0x0, @u64=0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x2406c089}, 0x20000000)
getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x8, &(0x7f00000000c0), &(0x7f0000002140)=0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000007}, [@call={0x85, 0x0, 0x0, 0x3b}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000003800010310bd7000ffdbdf250d"], 0x14}, 0x1, 0x0, 0x0, 0x8004000}, 0x40)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="240000005e00250e00000000000000000c00008008000000080000e307000180"], 0x24}], 0x1}, 0x0)
r8 = socket(0x6, 0x5, 0xa)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bond0\x00', <r9=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r9})
ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x8936, &(0x7f0000000000))
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48)
r11 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r11, 0x65, 0x4, 0x0, 0x0)
unshare(0x22020400)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000000)={r10, 0x0, 0x0}, 0x20)
sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001800090400000000fddbdf250a0000000000f9240000049c03071e0001000000080017004e234e236c7421a965dc0e558f6d7c8371d432241ed2927f681ea5c14b3603016db3423688484e340d0cd7e8295fef9e016c158d36284cf21c12f77a9d151ad2390913c0c0d84df8cf74e33a7f1612023b8768bda48abebd1bb83084ce74d39f3007c4e200005538142cf3d3ddb47d9a82b3bb753d6a9a4c04cf43a63c555b6f7641fadcbb62c08278902322cc1c8baa1daef79578709657ae26b67205a75c2149be4901a2ed3a493f80230a39000000000000"], 0x2c}}, 0x0)
syz_emit_ethernet(0xa2, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0)
sendmsg$NL80211_CMD_SET_CHANNEL(r8, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08f12cbd7000ffdbdf2541000000070000000800a000000005001801170000120800270002000000050019010b000800000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x2000}, 0x40001)

906.864123ms ago: executing program 1 (id=12399):
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) (async, rerun: 32)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (rerun: 32)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r1, 0x1000) (async)
preadv(r0, &(0x7f0000000440)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x2, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0xd6, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
writev(r4, &(0x7f0000000900)=[{&(0x7f0000000540)='x', 0x1}], 0x1) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14}, 0x90) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) (async, rerun: 32)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (rerun: 32)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) (async)
syz_emit_ethernet(0xa4, &(0x7f0000000100)={@multicast, @link_local, @void, {@ipv4={0x800, @dccp={{0xa, 0x4, 0x1, 0xe, 0x96, 0x68, 0x0, 0x9, 0x21, 0x0, @multicast2, @empty, {[@lsrr={0x83, 0xf, 0x50, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102]}, @ra={0x94, 0x4}]}}, {{0x4e21, 0x4e22, 0x4, 0x1, 0x7, 0x0, 0x0, 0x5, 0x3, "f05a80", 0xa8, "e3e76b"}, "5779646325a176e112827d52bb31be7e9c90a11f5ea4ad988eca047bcafc601dd5aadb8d27b69c4f108847191f617144042cbf51636367bc35915b1f0e6f0a6e6da5b20ec61d7d5cf0e47b1ba336c5da68f870df9f6b8775817b7fc2d767"}}}}}, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000108fdfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000042104020008001b000000000038001a8004002d000a80"], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0)

883.936734ms ago: executing program 2 (id=12400):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000800", @ANYRES16=r2, @ANYBLOB="000826bd7000fddbdf2502000000"], 0x14}}, 0x8010)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001d0001008a0000000000000007000000", @ANYRES32=r5, @ANYBLOB="080012000a0002"], 0x28}}, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'hsr0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'hsr0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="ffc30000000000003c0012800c0001006d6163766c616e002c0002800a000900ffffbfffffff00000a000400aaaaaaaaaabb00000600020001000000440003000000000008000500", @ANYRES32=<r8=>r6], 0x64}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES16=r6, @ANYRES8=r0, @ANYRES16=r9, @ANYRES32=r8], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0)
r11 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_ERRQUEUE(r11, 0x6b, 0x4, 0x0, &(0x7f0000000040))
socket(0x2, 0x80805, 0x0) (async)
r12 = socket(0x2, 0x80805, 0x0)
syz_emit_ethernet(0x12f, &(0x7f0000000700)=ANY=[@ANYBLOB="0580c2000000aaaaaaaaaa19884700000f004503011d0066000000069078e0000001000000004e214e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e002000790780004040204021307aef8c3c087020481001e03090402220d7eb1291fff0dcf9a2a30f90303046edf8be05cf4a5af820a4d53caf8b29b603120e34bfef58479f5449e079d7d6cdf61c139a450e8d6e7b9434ddefb38020735e09982af1eafa85273c12be214e77ef324b5d4b829a23017ab813e5c1f52fc690ef6fdab69724cae583a43c88f2dbd9fc157fad90c00a73f5764600de8d97c993ddab5d1fdeb5c584b29becb2a876d15096273679e796424fbc797d7eafed194d35bf966a5ebe4b69e000279c8dccf5c1814aeb6bc6b3f1d89832960eba26b13bd4a903980a889e59d1373d1457a89bf00"/253], 0x0) (async)
syz_emit_ethernet(0x12f, &(0x7f0000000700)=ANY=[@ANYBLOB="0580c2000000aaaaaaaaaa19884700000f004503011d0066000000069078e0000001000000004e214e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e002000790780004040204021307aef8c3c087020481001e03090402220d7eb1291fff0dcf9a2a30f90303046edf8be05cf4a5af820a4d53caf8b29b603120e34bfef58479f5449e079d7d6cdf61c139a450e8d6e7b9434ddefb38020735e09982af1eafa85273c12be214e77ef324b5d4b829a23017ab813e5c1f52fc690ef6fdab69724cae583a43c88f2dbd9fc157fad90c00a73f5764600de8d97c993ddab5d1fdeb5c584b29becb2a876d15096273679e796424fbc797d7eafed194d35bf966a5ebe4b69e000279c8dccf5c1814aeb6bc6b3f1d89832960eba26b13bd4a903980a889e59d1373d1457a89bf00"/253], 0x0)
r13 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r13, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r12, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44)
r14 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r14, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x3, 0x181a}, {@private=0xa010101, 0x4e20, 0x4, 0xa, 0x80012d58, 0x12d5c}}, 0x44)
r15 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, 0x0)

798.885238ms ago: executing program 1 (id=12401):
connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0, 0x0, 0x3}, 0x18) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x20}, 0x14}, 0x1, 0x0, 0x0, 0x844}, 0x4040050)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) (async, rerun: 64)
r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r5, 0x400448c9, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000002c0)='nv\x00', 0x2) (async)
sendto$inet6(r6, &(0x7f00000000c0), 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x6, 0x10}}) (async)
shutdown(r6, 0x1) (async)
sendmmsg$inet(r4, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2400c042) (async, rerun: 32)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) (rerun: 32)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00', @ANYBLOB="010000000020000000001a0000001c0000800400010200000800060000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async, rerun: 64)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) (rerun: 64)

640.677973ms ago: executing program 1 (id=12402):
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4018, r2}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0x7f, 0x6e, &(0x7f0000000240)="83481edb834923d812172472d4efe95bd7ea742ee26ea7ec62483514a667a99c997d72e68b03b54b09d62e14d5a41a534d5004c9b36804bed8fcf772c16744f3a923d9245cc684d988bd43cc40d0eb64e9d35b79d4621cea34ab4ef09762ce8a06e86cec8cef2549698ff70cc05fcb0b5965facc0ad48e5ca57a92f4e1acbb", &(0x7f0000000180)=""/110, 0x7, 0x0, 0xd5, 0x0, &(0x7f0000000300)="022d480e280e42061ffb367c0ce761743fcc0664dd6fa51fb47aadf8ab69c3be243814d799d35fcacac04ca9b819c454dfeed636b1a526d5389d2498e8641162ab6b0f5ac8339f7587d45903129b52fbe2ebdb20ad02507294a3d4f26df2cbc9d7d2717ad8e45e6663539489473fd60afcb8736ddedbf7c9ffd31e01edc48fdb08fd20103e117fabfaaec511a31b18ffd06309027a5838df9e352f0cf8e15afd8454af9e38699a04ed432e8913d6fd22f4bdb8f3ee88ab49e67dc134ed0a20f520b8da934cea2166c56cd7a3fe79df9e930e3dd2c8", &(0x7f0000000500), 0x1}, 0x50)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xfffffffd}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8}]}}}]}]}], {0x14}}, 0x94}}, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_GET_POWER_SAVE(r5, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x28, r6, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xf, 0x12}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x800)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000000c0)={'sit0\x00', 0x0})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r8 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c)
ioctl$sock_qrtr_TIOCINQ(r8, 0x541b, 0x0)
setsockopt$MRT_DEL_MFC(r8, 0x0, 0xcd, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000840))
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)

559.914834ms ago: executing program 2 (id=12403):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r1=>0x0})
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000000000000000f67163520800010003000000140004800500030001000000050003000dd85283f2a96a9f03000000"], 0x38}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'geneve0\x00'})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000080)={r5, 0x101, 0x6, 0x80000001, 0x8, 0xffff}, 0x14)
sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r8, 0x0, 0x10, &(0x7f0000000100), 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000064000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f280011800e000100636f6e6e6c696d6974000000140002800800024000001c00080001"], 0xac}}, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r10 = socket$kcm(0x2, 0xa, 0x2)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async)
r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r12, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090)
bind$bt_l2cap(r11, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r6, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0)

423.011728ms ago: executing program 1 (id=12404):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="100000000000002500000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xa, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback=0x21}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000200)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10)
close(0x4)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r2, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003002aea091428000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x21, 0x71867}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x44040)

420.968668ms ago: executing program 2 (id=12405):
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) (async)
r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
gettid() (async)
r1 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
write$cgroup_pid(r0, &(0x7f00000000c0)=r1, 0x12)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0xb, 0x803, 0xffff)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="a400000001020101000000000000000003000007080004400000000208000440000000010800093c000000e20600074000020000540001800c000280050001003a001c002c0001801400030080000000000000000000000000001114000400ff01000000000000000000000000000106000340000000000600034000020afc3e4bae980669e29a1721c2e2000006000340000300000a000b00512e393331000000080000"], 0xa4}, 0x1, 0x0, 0x0, 0x4008801}, 0x8000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRESDEC=r2, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='io_uring_create\x00', r9, 0xe4, 0x7f}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='io_uring_create\x00', r9, 0xe4, 0x7f}, 0x18)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r10) (async)
close(r10)
r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r11, 0xc004743e, 0x110e22fff6) (async)
ioctl$TUNSETOFFLOAD(r11, 0xc004743e, 0x110e22fff6)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="1802187dc85b1525c263afb6c1d47efb3549be955461b76324d2271c0d820a0d2dd9f53077714478d8b273fd42e86602934a8816ed57bee75365a811d845e1c92a965fa972c8f8b4a87cff4d9bd476202e39f887be5889cbc63508d275c9769b2f7111c626d1f8b2ab9ef41e210874671cbe4a2f0fd4c01ec733368347f908a82719864dab43864153e6a1884b894c5e12cd1d6305f30f6647fe3910c9361956d34a86dcfa7dce64b82a639608fae80aac68941054d45cd6a338e998235d6e9c3294e46290bdf46c68c31fe978cfbed2e2afdda5b6e21428f9d4ed2c03"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
ioctl$TUNGETVNETLE(r10, 0x4010744d, &(0x7f0000000180)) (async)
ioctl$TUNGETVNETLE(r10, 0x4010744d, &(0x7f0000000180))
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r7], 0x54}}, 0x0)
r12 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x20, 0xf8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x401, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)

414.970461ms ago: executing program 0 (id=12406):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x2}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x28) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x2}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x28)
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000080)='@', 0x1}], 0x1}, 0x400c0)
r1 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80000)
recvfrom$unix(r1, &(0x7f0000000540)=""/238, 0xee, 0x12120, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) (async)
write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
writev(r0, &(0x7f0000000bc0)=[{&(0x7f0000000200)="ecb6d2d4ae9a1666f0eddd1bf0a629cb9058dbe7e2f6638086302b82dbb6910d059d797cd3ebfa86b484fdeaf5a70693b1352da02b848e581f991dcb1afaffef430bd599bf68b0320460833512a24015cbdcb6205549ea713c75bf69f98b629efd5d474b245e8ad39efb4e5954a6f6917b0bff", 0x73}, {&(0x7f0000000180)="f12575268e22eeaeb865ec381c13a6c2f52f3dbcd932a5dddd6347152dcc48c5875552ef7abc2e94906a5b3287859dce474d1ee0777d", 0x36}, {&(0x7f0000000640)="5b5a787511b6b1435ae2fe6a9f452bb7625bf363bb7c920186a5eab3b952ceb4652e68a857c8bf807ba493d7f3e2f016e2cf550bab17f6b97164d8045904e05d5529fa179c6221eb6bc72f704b65495c0737e3a3d930b55609d5f0bee803d0aba08e20602c75ffbd450d738a28dcc5bae0b04a7605cb3fa6bc91446c69f437e5e50072c773cd062f2dcb7b767395503413dfe612c51c941becd68604a9346abaaf6fcda9b3e86d65d8ce37ee73ee9edd2049ff0c62d076013e8d547f583be1219fdbaeebb2c27a92c757c5cb766579f965cbaa4ed09a75d1edfa273f9f9fc2074c47e07195af5460d1ec8c2b913afc3c", 0xf0}, {&(0x7f0000000740)="52158abf2f91b71e27fe5e3382c2f521e3d2d5dc13049a9324503d058d87a9e351d8f85e9d5e15d50d1fdb91125a1372003b5f8a9896cf38cf0afeb418844e204789c8c0f09afcb416dc3fa434e334bd18a4962c33f586072ec37846c93e57dce420627694ba8c27b76205b73db846634fbdda49322e642995637f41cb69eb108c4864f5d68c9dbdc5487f1c1ba9e9e1d9dc9b0b925b47ae69acfc39040c18197559da0aa22730966c6e97ced0e36c03ac054fb282ca8a076b3e3858dda66542a1574efed455c5ab52df1a176a6d7824e7ef5833f6876eb8d75b0ecdef263c552abf9dbd00464b55afc01e6b0daa9af84b7a5529", 0xf4}, {&(0x7f0000000840)="17f25a999fb24a581d7a31fe6087653270c23e337b1107e35915a75e75316b0776872089c0d280203c6d083060afb1ffe9ec78f733960892a9f7a90ee9841384a3f8fccd94f7ff932f85a6fd54bad553a96b75e7db18609a7ced904e5016428977704471d00e9016bb42b573dd7a52d5fd84eb3d68a223b7cded9ad2a6d177b9f6c6fd8ebd19", 0x86}, {&(0x7f0000000900)="1fcc50dbcfd81918e2e73133a6f9d194675508e4717b1f74b0a73996feeafef48cf1d3557df6344b076e8c598e2e0730b6d77ac5756a56a1e2d2b7f4d507c60fdcdcbba6bb58ba49f06f0ee3f86cc7c66e17570b43e2c950d42fa4d4f71ab7ef2ab22efff088ccdb22cb93f4b2f09804c9f8c5cdebccc2c2c84411537fec91adbe670e7015a4778bc126c4544e211801d1629f6338569c21e3b1dd119b5b07efbbe51e5fb3bec087cf", 0xa9}, {&(0x7f00000009c0)="60ad2e0cee2f82c3270676ca5f52f2f09961b3e179911ee0d77f3bc44298bfd5e13ee004c434fb5e26a7627e3aa57124e2ba54ec91784f7ee2cd61b075ce78f49203b1f98d189186e114e5fa4ec1f0cbf04c0709a5e5f97004e64cc715a28ea1182c0bace47f57e8729e10e822e09c4ab8f51a191e3016f87f6d2f3550f04b6e7933a81799221e074a03fd620f7fb45598e50aeb50194e0f8001910e04e889f5ad1b6b16ccb726eed42081", 0xab}, {&(0x7f0000000a80)="b1da4de47d540ed30d2e97e09f8e99544bc07ee0fb91ccc5bec15a373635871f049701cb090e5da40268f41c622e305f12e136ebef3db30e1a913a9face3cafa7fa2fab463ba591f6174b9fe02ee00fdc8477e147feede141814e7227797e2de90f2d29c0358cb8ced8309735c268b7e", 0x70}, {&(0x7f0000000b00)="345afe5bcebbecd15d972d1edc377120395c5a36c29482c3581725bd6e21832cc5146994efed80eae944e9d1ff8f4a74b33f1e02be784138e0fdd27245f586d382f5feb2b4cf7e83898a45c3e33685a0ab5c9053e1d411bdc5487b5e0abcb4aa537108a96d812c3b08e4a07ac2c059fe8feeeacc0c0098592001824d4de8577850b3f78623bf20863af8580b92a6a38e59c58be31c93f6c6ee38", 0x9a}], 0x9)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0x20, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x0, 0x443, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r4, 0x8b2a, &(0x7f0000000040))
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000000)={0x0, 0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000018c0)={'team0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000018c0)={'team0\x00', <r6=>0x0})
socket$inet_udp(0x2, 0x2, 0x0) (async)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @loopback, @empty}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', <r8=>0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @loopback, @empty}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000040)={'tunl0\x00', r8, 0x20, 0x7, 0x7fffffd, 0x6, {{0x5, 0x4, 0x0, 0x16, 0x35, 0xfffc, 0x0, 0x7f, 0x4, 0x0, @empty, @rand_addr=0x64010101}}}})
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETLINK(r10, 0x400454cd, 0x6)
socket$kcm(0x2, 0xa, 0x2) (async)
r11 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast})
close(0x3)
sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="7fa5ac03aaa4cf590000000000000200000000000000b6f0f6b57563"], 0x14}], 0x1}, 0x0) (async)
sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="7fa5ac03aaa4cf590000000000000200000000000000b6f0f6b57563"], 0x14}], 0x1}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=ANY=[@ANYBLOB="4000000010003b150c00"/20, @ANYRES32=r0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES8=r9, @ANYRES16=r1, @ANYRES32=r6, @ANYBLOB], 0x40}}, 0x48010)

318.700418ms ago: executing program 2 (id=12407):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r2, @ANYBLOB="059900f3ffffff111800128008000100677470000c000280050005"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r4, 0xfffffff2)
recvmmsg(r4, &(0x7f00000002c0), 0x220, 0x100, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1ff, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0x3, 0x10}}}, 0x24}}, 0x0)

150.408906ms ago: executing program 0 (id=12408):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0xb0, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@nested={0x9c, 0x4, 0x0, 0x1, [@nested={0x96, 0x12, 0x0, 0x1, [@generic="a437fa54a0cc5d1124ab2b2806e7f423b6e257262cccca9a82234d912f8d4196192c1ddd5dcb13d7f0921142632c5ebd28b4b4513d200e3c56c2dfd37d0f42fb34dc396d5a11005f6bfe5993e5c04528fba03ac92ee6ed1d968a7554517590de2c1900000000", @nested={0x29, 0xde, 0x0, 0x1, [@generic="d3915f12712a643d4966212c4f25b0f088ecbcca05e2c38719e4adaad0c012779c2e654b7a"]}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="b4000000000000006910810000000000040000000000000095000000000000007220abb1b364768c328613d20a4d2451a69f9642"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)
r5 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r5, &(0x7f00000001c0)='FROZEN\x00', 0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='svcrdma_decode_short_err\x00', r4, 0x0, 0xfc}, 0x18)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)

149.785521ms ago: executing program 2 (id=12409):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x4c, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f3030a7d3f408004a00003c0003000302059078ac1414000a0101004408f57000007fff070909b173380000010000004e240000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6100000090780003"], 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500000008000a"], 0x1c}}, 0x20000086)
openat$nci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
socket$unix(0x1, 0x5, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
r4 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10)
r5 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge0\x00'})
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'dvmrp1\x00', 0x84aebfbd6349b7f2})
socket(0x10, 0x803, 0x0)

0s ago: executing program 1 (id=12410):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vlan1\x00', <r0=>0x0})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600}}, 0x20)
r2 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$sock(r2, &(0x7f0000000740)={&(0x7f0000000100)=@nl=@unspec, 0x80, &(0x7f0000000680)}, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={<r5=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={<r6=>r5, @in6={{0xa, 0x3, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}}}, &(0x7f0000000000)=0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000400)={r6, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}, 0x2, 0x9}, &(0x7f00000000c0)=0x90)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r7, 0x1, 0x6, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="37ec0000000000001c0012800b0001006970766c616e00000c000280060002000200000008000500", @ANYRES32=r0, @ANYBLOB="3e8e00236a9758fa8341ff86af2f40a59d5c1bcd83c0c17eec391817c3cbf02302abe4881d772c54b198b00a6664982743bc9a8edeca0063e40466233ea4fced150aa03c40ad86a0f188c3520e6189848ac4b5e931eb70e27e6eb0a72ea4db867ab565b623388aa7dae9ed3d15c5e6cbf77e14bb869b"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc040006)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r9, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0), 0x2, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010026bd7000fedbdf2505000900080009000200000008000c00a50a000008d4082ab60c28c26155468f3585880c8089d54669d0000b000000c2264700000600010005000000"], 0x34}}, 0x20)
r13 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r13, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="dca68ec00c623afa"], &(0x7f0000000340)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x8, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x1, 0x8, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0xffffffffffffffff, r8], &(0x7f0000000440)=[{0x1, 0x3, 0xe, 0x4}], 0x10, 0xa}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af9cc9e5ef6bda9df2c3af36effff9af2551ce935b0f327cb3f011a2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7511d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1525320e716660000000000b02b001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d3294000000000000000000000000000000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10738d3c9f7a98eccb26f7e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe977076ce7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d1a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1c77a211bfa02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc084075ad10727522934a87a4ddcdb112754ca5bdec0ead14b6c0f19a4b126bbe0c2b8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcb1a47a87baf63e4edf11c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c158ae8f44bfbfa7c2730302b66a99f66705b71e6205e7cbf36435e1eabb9a63fcd604d5cc27e1317ad94cf438d7187a2fe4e06fa6cbf84ef1efa82cb2c4af6bd1370616cdbe2b98fd89b79824ba089df1f81e6fcef073059f5f1d6a221d791839d7826ed1759c2153532c393fd1bd7be2e7f5abf2f0800000000ea46c07adee10d0f2bc85cf37182256e4fd8f56942726efc07180eaa5421d697665c8bacd39cdb392e6153af80bc1a69e3bfab032e78c9a96eab13be845a0d44ef2a4ab414ac2e4802a3b5d3aa2a4a4fc259206d97d0cc1602d6b45ff414c53fc9f5f68438f0423e168a97923ca0464b40b2f797841fb2bb2e5a"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)

kernel console output (not intermixed with test programs):

rer <eth:syzkaller0>
[  813.375013][T19647] tipc: Disabling bearer <eth:syzkaller0>
[  813.385604][T19653] bond76: (slave bridge84): Enslaving as a backup interface with an up link
[  813.491474][ T5881] lo speed is unknown, defaulting to 1000
[  813.493994][ T5881] syz0: Port: 1 Link DOWN
[  813.496091][ T5881] lo speed is unknown, defaulting to 1000
[  813.842637][T19669] bond76: (slave bridge84): Releasing backup interface
[  813.904471][T19675] netlink: 'syz.1.11777': attribute type 10 has an invalid length.
[  814.652448][T19682] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  814.667404][T19682] pimreg0: entered promiscuous mode
[  814.669646][T19682] pimreg0: entered allmulticast mode
[  814.682522][T19682] tipc: Resetting bearer <eth:syzkaller0>
[  814.687759][T19681] tipc: Disabling bearer <eth:syzkaller0>
[  814.967942][T19709] lo speed is unknown, defaulting to 1000
[  815.045716][T19709] lo speed is unknown, defaulting to 1000
[  815.099430][T19718] lo speed is unknown, defaulting to 1000
[  815.147168][T19718] lo speed is unknown, defaulting to 1000
[  815.254800][T19725] lo speed is unknown, defaulting to 1000
[  815.306948][T19725] lo speed is unknown, defaulting to 1000
[  815.613917][T19742] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  815.622832][T19742] pimreg1: entered promiscuous mode
[  815.624759][T19742] pimreg1: entered allmulticast mode
[  815.661090][T19741] tipc: Disabling bearer <eth:syzkaller0>
[  815.681100][T19749] macsec0: entered promiscuous mode
[  815.683343][T19749] mac80211_hwsim hwsim430 wlan0: entered promiscuous mode
[  815.686124][T19749] macsec0: entered allmulticast mode
[  815.687972][T19749] mac80211_hwsim hwsim430 wlan0: entered allmulticast mode
[  815.762068][T19755] __nla_validate_parse: 12 callbacks suppressed
[  815.762078][T19755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11798'.
[  815.799321][T19763] syzkaller0: entered promiscuous mode
[  815.802074][T19763] syzkaller0: entered allmulticast mode
[  815.894928][T19763] netlink: 'syz.1.11800': attribute type 1 has an invalid length.
[  815.898138][T19763] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11800'.
[  815.938651][T19771] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  815.957597][T19771] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  815.962708][T19769] tipc: Resetting bearer <eth:syzkaller0>
[  816.018372][T19769] tipc: Disabling bearer <eth:syzkaller0>
[  816.097711][T19777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11803'.
[  816.102578][T19777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11803'.
[  816.167940][T19785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11805'.
[  816.171894][T19785] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11805'.
[  816.273387][T19789] netlink: 'syz.2.11807': attribute type 1 has an invalid length.
[  816.278238][T19789] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  816.428636][T19798] netlink: 'syz.2.11810': attribute type 7 has an invalid length.
[  816.440332][T19798] netlink: 'syz.2.11810': attribute type 8 has an invalid length.
[  816.443891][T19798] netlink: 'syz.2.11810': attribute type 4 has an invalid length.
[  816.447732][T19798] netlink: 204 bytes leftover after parsing attributes in process `syz.2.11810'.
[  816.553387][T19803] netlink: 'syz.0.11811': attribute type 13 has an invalid length.
[  816.562348][T19803] gretap0: entered promiscuous mode
[  816.565534][T19803] erspan0: left allmulticast mode
[  816.571447][T19803] tipc: Resetting bearer <ib:ip6gre0>
[  816.573858][T19803] tipc: Resetting bearer <ib:ip6gre0>
[  816.577550][T19803] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  816.582911][ T2272] lo speed is unknown, defaulting to 1000
[  816.587393][ T2272] syz2: Port: 1 Link ACTIVE
[  816.603386][T19801] lo speed is unknown, defaulting to 1000
[  816.658847][T19801] lo speed is unknown, defaulting to 1000
[  816.874198][T19811] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  816.885050][T19811] syzkaller0: entered promiscuous mode
[  816.887604][T19811] syzkaller0: entered allmulticast mode
[  816.891573][T19812] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  816.900988][T19812] syzkaller0: entered promiscuous mode
[  816.903262][T19812] syzkaller0: entered allmulticast mode
[  816.911453][T19811] tipc: Resetting bearer <eth:syzkaller0>
[  816.920161][T19809] tipc: Resetting bearer <eth:syzkaller0>
[  816.931055][T19809] tipc: Disabling bearer <eth:syzkaller0>
[  816.943307][T19812] tipc: Resetting bearer <eth:syzkaller0>
[  816.978117][T19812] tipc: Resetting bearer <eth:syzkaller0>
[  816.982656][T19812] tipc: Disabling bearer <eth:syzkaller0>
[  817.004253][T19814] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  817.062176][T19816] 8021q: adding VLAN 0 to HW filter on device bond77
[  817.074742][T19816] 8021q: adding VLAN 0 to HW filter on device bond77
[  817.077803][T19816] bond77: (slave vxcan1): The slave device specified does not support setting the MAC address
[  817.086092][T19816] bond77: (slave vxcan1): Error -95 calling set_mac_address
[  817.149841][T19821] tipc: Resetting bearer <ib:ip6gre0>
[  817.159648][T19821] mac80211_hwsim hwsim508 wlan1: left allmulticast mode
[  817.163534][T19821] veth55: left promiscuous mode
[  817.168705][T19821] bridge69: left promiscuous mode
[  817.175101][ T5881] lo speed is unknown, defaulting to 1000
[  817.177139][ T5881] syz2: Port: 1 Link DOWN
[  817.227715][T19826] netlink: 410 bytes leftover after parsing attributes in process `syz.1.11820'.
[  817.242458][T19826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11820'.
[  817.266812][T19828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11821'.
[  817.298677][T19833] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  817.301629][T19833] CPU: 1 UID: 0 PID: 19833 Comm: syz.0.11822 Not tainted syzkaller #0 PREEMPT(full) 
[  817.301667][T19833] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  817.301676][T19833] Call Trace:
[  817.301682][T19833]  <TASK>
[  817.301688][T19833]  dump_stack_lvl+0x189/0x250
[  817.301708][T19833]  ? __pfx_dump_stack_lvl+0x10/0x10
[  817.301731][T19833]  ? __pfx__printk+0x10/0x10
[  817.301748][T19833]  ? kernfs_root+0x1c/0x230
[  817.301764][T19833]  ? kernfs_path_from_node+0x2f/0x290
[  817.301779][T19833]  ? kernfs_path_from_node+0x250/0x290
[  817.301792][T19833]  ? kernfs_path_from_node+0x2f/0x290
[  817.301809][T19833]  sysfs_warn_dup+0x8e/0xa0
[  817.301822][T19833]  sysfs_do_create_link_sd+0xc0/0x110
[  817.301836][T19833]  device_add_class_symlinks+0x1cf/0x240
[  817.301851][T19833]  device_add+0x475/0xb50
[  817.301864][T19833]  wiphy_register+0x1ba6/0x28d0
[  817.301888][T19833]  ? __pfx_wiphy_register+0x10/0x10
[  817.301904][T19833]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  817.301919][T19833]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  817.301939][T19833]  ieee80211_register_hw+0x3484/0x4100
[  817.301956][T19833]  ? ieee80211_register_hw+0x14a1/0x4100
[  817.301972][T19833]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  817.301985][T19833]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  817.302003][T19833]  ? __hrtimer_setup+0x187/0x210
[  817.302014][T19833]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  817.302032][T19833]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  817.302056][T19833]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  817.302072][T19833]  ? trace_kmalloc+0x1f/0xd0
[  817.302085][T19833]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  817.302100][T19833]  ? kstrndup+0xbf/0x160
[  817.302117][T19833]  hwsim_new_radio_nl+0xea4/0x1b10
[  817.302132][T19833]  ? __pfx___nla_validate_parse+0x10/0x10
[  817.302154][T19833]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  817.302172][T19833]  ? __nla_parse+0x40/0x60
[  817.302190][T19833]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  817.302209][T19833]  genl_family_rcv_msg_doit+0x215/0x300
[  817.302225][T19833]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  817.302242][T19833]  ? bpf_lsm_capable+0x9/0x20
[  817.302259][T19833]  ? security_capable+0x7e/0x2e0
[  817.302277][T19833]  genl_rcv_msg+0x60e/0x790
[  817.302293][T19833]  ? __pfx_genl_rcv_msg+0x10/0x10
[  817.302305][T19833]  ? __kasan_slab_alloc+0x6c/0x80
[  817.302321][T19833]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  817.302335][T19833]  ? __netlink_lookup+0xbd/0x810
[  817.302345][T19833]  ? rcu_is_watching+0x15/0xb0
[  817.302359][T19833]  netlink_rcv_skb+0x208/0x470
[  817.302376][T19833]  ? __pfx_genl_rcv_msg+0x10/0x10
[  817.302389][T19833]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  817.302409][T19833]  ? lock_release+0x4b/0x3e0
[  817.302428][T19833]  ? down_read+0x1ad/0x2e0
[  817.302439][T19833]  genl_rcv+0x28/0x40
[  817.302451][T19833]  netlink_unicast+0x82f/0x9e0
[  817.302498][T19833]  ? __pfx_netlink_unicast+0x10/0x10
[  817.302517][T19833]  ? netlink_sendmsg+0x642/0xb30
[  817.302533][T19833]  ? skb_put+0x11b/0x210
[  817.302545][T19833]  netlink_sendmsg+0x805/0xb30
[  817.302565][T19833]  ? __pfx_netlink_sendmsg+0x10/0x10
[  817.302603][T19833]  ? futex_unqueue+0x22/0x240
[  817.302616][T19833]  ? aa_sock_msg_perm+0xf1/0x1d0
[  817.302628][T19833]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  817.302640][T19833]  ? __pfx_netlink_sendmsg+0x10/0x10
[  817.302658][T19833]  __sock_sendmsg+0x21c/0x270
[  817.302674][T19833]  ____sys_sendmsg+0x505/0x830
[  817.302689][T19833]  ? __pfx_____sys_sendmsg+0x10/0x10
[  817.302703][T19833]  ? import_iovec+0x74/0xa0
[  817.302719][T19833]  ___sys_sendmsg+0x21f/0x2a0
[  817.302738][T19833]  ? __pfx____sys_sendmsg+0x10/0x10
[  817.302753][T19833]  ? futex_wait+0x285/0x360
[  817.302778][T19833]  ? __fget_files+0x2a/0x420
[  817.302796][T19833]  ? __fget_files+0x3a0/0x420
[  817.302816][T19833]  __x64_sys_sendmsg+0x19b/0x260
[  817.302829][T19833]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  817.302846][T19833]  ? rcu_is_watching+0x15/0xb0
[  817.302860][T19833]  do_syscall_64+0xfa/0x3b0
[  817.302878][T19833]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  817.302891][T19833]  ? exc_page_fault+0x9f/0xf0
[  817.302907][T19833]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  817.302918][T19833] RIP: 0033:0x7fb05df8ebe9
[  817.302931][T19833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  817.302942][T19833] RSP: 002b:00007fb05ee0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  817.302957][T19833] RAX: ffffffffffffffda RBX: 00007fb05e1b5fa0 RCX: 00007fb05df8ebe9
[  817.302966][T19833] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  817.302975][T19833] RBP: 00007fb05e011e19 R08: 0000000000000000 R09: 0000000000000000
[  817.302982][T19833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  817.302990][T19833] R13: 00007fb05e1b6038 R14: 00007fb05e1b5fa0 R15: 00007ffcd2fe8958
[  817.303004][T19833]  </TASK>
[  817.548694][T19848] dvmrp1: entered allmulticast mode
[  817.554302][T19848] dvmrp0: left allmulticast mode
[  817.556145][T19848] dvmrp1: left allmulticast mode
[  818.057015][T19865] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  818.067196][T19865] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  818.084255][T19865] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  818.141404][T19866] tipc: Disabling bearer <eth:syzkaller0>
[  819.611222][T19924] validate_nla: 2 callbacks suppressed
[  819.611232][T19924] netlink: 'syz.2.11843': attribute type 1 has an invalid length.
[  819.651093][T19924] veth45: entered promiscuous mode
[  819.654231][T19924] bond72: (slave veth45): Enslaving as a backup interface with a down link
[  820.306778][T19927] netlink: 'syz.2.11844': attribute type 4 has an invalid length.
[  820.604252][T19939] netlink: 'syz.1.11847': attribute type 1 has an invalid length.
[  820.630128][T19939] netlink: 'syz.1.11847': attribute type 1 has an invalid length.
[  820.872507][T19950] __nla_validate_parse: 12 callbacks suppressed
[  820.872520][T19950] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11848'.
[  820.881052][T19939] vlan0: entered allmulticast mode
[  820.901379][T19947] netlink: 'syz.0.11848': attribute type 23 has an invalid length.
[  820.915154][T19951] netlink: 'syz.0.11848': attribute type 12 has an invalid length.
[  820.927299][T19951] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.11848'.
[  821.354110][T19957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11850'.
[  821.367613][T19957] netlink: 140 bytes leftover after parsing attributes in process `syz.1.11850'.
[  821.478576][T19962] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  821.496238][T19962] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11851'.
[  821.520303][T19965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11852'.
[  821.523776][T19965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11852'.
[  821.530316][T19962] syzkaller0: entered promiscuous mode
[  821.532494][T19962] syzkaller0: entered allmulticast mode
[  821.603524][T19969] tipc: Resetting bearer <eth:syzkaller0>
[  822.112346][T19959] tipc: Resetting bearer <eth:syzkaller0>
[  822.138417][T19959] tipc: Disabling bearer <eth:syzkaller0>
[  822.432262][T19977] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  822.462226][T19980] netlink: 'syz.0.11856': attribute type 1 has an invalid length.
[  822.680179][T19983] syz.2.11857 (19983) used greatest stack depth: 17160 bytes left
[  822.683198][T19980] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11856'.
[  822.687303][T19980] 8021q: adding VLAN 0 to HW filter on device bond70
[  822.822781][T19988] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  822.835901][T19988] syzkaller0: entered promiscuous mode
[  822.838144][T19988] syzkaller0: entered allmulticast mode
[  822.882674][T19988] tipc: Resetting bearer <eth:syzkaller0>
[  822.940742][T19988] tipc: Resetting bearer <eth:syzkaller0>
[  822.990469][T19988] tipc: Disabling bearer <eth:syzkaller0>
[  823.155473][T19999] syzkaller1: entered allmulticast mode
[  823.181906][T20004] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[  823.341560][T20020] netlink: 10 bytes leftover after parsing attributes in process `syz.2.11865'.
[  823.356994][T20022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11866'.
[  823.366078][T20022] netlink: 'syz.1.11866': attribute type 4 has an invalid length.
[  823.427043][T20025] IPVS: set_ctl: invalid protocol: 12 172.20.20.24:20000
[  823.463399][T20027] netlink: 'syz.1.11868': attribute type 1 has an invalid length.
[  823.468737][T20027] netlink: 'syz.1.11868': attribute type 2 has an invalid length.
[  823.648617][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  823.652171][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  823.662414][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  823.667607][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  824.125059][T20042] pim6reg1: entered promiscuous mode
[  824.127288][T20042] pim6reg1: entered allmulticast mode
[  824.292552][T20056] mac80211_hwsim hwsim508 wlan1: entered allmulticast mode
[  824.299044][T20057] bond69: (slave veth55): Releasing active interface
[  824.330327][T20063] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  824.343631][T20063] tipc: Disabling bearer <eth:syzkaller0>
[  824.438196][T20072] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  824.446116][T20072] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  824.449172][T20071] tipc: Resetting bearer <eth:syzkaller0>
[  824.518166][T20071] tipc: Disabling bearer <eth:syzkaller0>
[  824.678340][T20088] bridge51: entered allmulticast mode
[  824.695981][T20087] bridge51: left allmulticast mode
[  825.061898][T20101] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  825.065242][T20101] syzkaller0: entered promiscuous mode
[  825.067562][T20101] syzkaller0: entered allmulticast mode
[  825.099119][T20101] tipc: Resetting bearer <eth:syzkaller0>
[  825.112087][T20100] tipc: Resetting bearer <eth:syzkaller0>
[  825.122556][T20100] tipc: Disabling bearer <eth:syzkaller0>
[  825.137043][T20109] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  825.141973][T20109] syzkaller0: entered promiscuous mode
[  825.144370][T20109] syzkaller0: entered allmulticast mode
[  825.150719][T20109] tipc: Resetting bearer <eth:syzkaller0>
[  825.154896][T20108] tipc: Resetting bearer <eth:syzkaller0>
[  825.163392][T20108] tipc: Disabling bearer <eth:syzkaller0>
[  825.224318][T20113] validate_nla: 4 callbacks suppressed
[  825.224331][T20113] netlink: 'syz.2.11891': attribute type 1 has an invalid length.
[  825.229076][T20113] netlink: 'syz.2.11891': attribute type 1 has an invalid length.
[  825.367436][T20128] 8021q: VLANs not supported on syzkaller1
[  825.393331][T20130] pim6reg1: entered promiscuous mode
[  825.395974][T20130] pim6reg1: entered allmulticast mode
[  825.549770][T20153] pimreg0: left promiscuous mode
[  825.553005][T20153] pimreg0: left allmulticast mode
[  825.562023][T20153] pimreg1: left promiscuous mode
[  825.563779][T20153] pimreg1: left allmulticast mode
[  825.572102][   T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  825.574797][   T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  825.582054][   T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  825.584705][   T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  825.652075][T20159] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  825.654441][T20158] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  825.657642][T20159] syzkaller0: entered promiscuous mode
[  825.659460][T20159] syzkaller0: entered allmulticast mode
[  825.673498][T20158] tipc: Resetting bearer <eth:syzkaller0>
[  825.677195][T20157] tipc: Resetting bearer <eth:syzkaller0>
[  825.682944][T20157] tipc: Disabling bearer <eth:syzkaller0>
[  825.908998][T20188] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  825.942646][T20194] openvswitch: netlink: Multiple metadata blocks provided
[  826.011612][T20194] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  826.014940][T20194] syzkaller0: entered promiscuous mode
[  826.017104][T20194] syzkaller0: entered allmulticast mode
[  826.025536][T20194] tipc: Resetting bearer <eth:syzkaller0>
[  826.029194][T20193] tipc: Resetting bearer <eth:syzkaller0>
[  826.032923][T20193] tipc: Disabling bearer <eth:syzkaller0>
[  826.226048][T20208] netlink: 'syz.1.11914': attribute type 1 has an invalid length.
[  826.228629][T20208] netlink: 'syz.1.11914': attribute type 1 has an invalid length.
[  826.259336][T20213] dvmrp0: entered allmulticast mode
[  826.596003][T20228] __nla_validate_parse: 19 callbacks suppressed
[  826.596013][T20228] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11919'.
[  826.682239][T20172] tipc: Disabling bearer <eth:syzkaller0>
[  826.694289][T20235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11921'.
[  826.715009][T20240] netlink: 'syz.1.11922': attribute type 23 has an invalid length.
[  826.786687][T20245] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11924'.
[  826.794302][T20247] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  826.829880][T20252] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  826.890912][T20254] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11927'.
[  826.901431][T20254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11927'.
[  826.904927][T20254] netlink: 56 bytes leftover after parsing attributes in process `syz.1.11927'.
[  826.985844][T20268] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  826.989196][T20268] syzkaller0: entered promiscuous mode
[  826.994678][T20268] syzkaller0: entered allmulticast mode
[  827.036417][T20273] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11932'.
[  827.073205][T20268] tipc: Resetting bearer <eth:syzkaller0>
[  827.081072][T20267] tipc: Resetting bearer <eth:syzkaller0>
[  827.085604][T20267] tipc: Disabling bearer <eth:syzkaller0>
[  827.097110][T20278] tun0: tun_chr_ioctl cmd 2148553947
[  827.102689][T20279] netlink: 'syz.1.11934': attribute type 4 has an invalid length.
[  827.105863][T20281] netlink: 'syz.0.11933': attribute type 10 has an invalid length.
[  827.110808][T20278] netlink: 'syz.1.11934': attribute type 4 has an invalid length.
[  827.128128][T20283] mac80211_hwsim hwsim508 wlan1: left allmulticast mode
[  827.161869][T20285] netlink: 19 bytes leftover after parsing attributes in process `syz.2.11936'.
[  827.176921][T20292] mac80211_hwsim hwsim409 wlan1: entered allmulticast mode
[  827.204356][T20299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11940'.
[  827.208798][T20299] gtp27: entered promiscuous mode
[  827.211465][T20299] gtp27: entered allmulticast mode
[  827.214508][T20301] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  827.217428][T20301] syzkaller0: entered promiscuous mode
[  827.219291][T20301] syzkaller0: entered allmulticast mode
[  827.238465][T20300] tipc: Resetting bearer <eth:syzkaller0>
[  827.241237][T20302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11939'.
[  827.250942][T20300] tipc: Disabling bearer <eth:syzkaller0>
[  827.447942][T20319] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  827.456072][T20319] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  827.462040][T20318] tipc: Resetting bearer <eth:syzkaller0>
[  827.500514][T20318] tipc: Disabling bearer <eth:syzkaller0>
[  827.603595][T20329] netlink: 'syz.2.11949': attribute type 4 has an invalid length.
[  827.639114][T20340] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  827.643986][T20340] syzkaller0: entered promiscuous mode
[  827.646184][T20340] syzkaller0: entered allmulticast mode
[  827.686628][T20340] tipc: Resetting bearer <eth:syzkaller0>
[  827.692990][T20340] tipc: Disabling bearer <eth:syzkaller0>
[  828.048079][T20376] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  828.067046][T20378] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  828.131428][T20381] pim6reg1: entered promiscuous mode
[  828.133781][T20381] pim6reg1: entered allmulticast mode
[  828.137509][T20382] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  828.153585][T20382] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  828.173519][T20379] tipc: Resetting bearer <eth:syzkaller0>
[  828.191614][T20379] tipc: Disabling bearer <eth:syzkaller0>
[  828.264523][T20381] bond71 (unregistering): Released all slaves
[  828.317732][T20392] bond72: (slave veth45): Releasing backup interface
[  828.356489][T20392] lo speed is unknown, defaulting to 1000
[  828.415914][T20392] lo speed is unknown, defaulting to 1000
[  828.717521][T20411] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  828.725816][T20411] CPU: 1 UID: 0 PID: 20411 Comm: syz.2.11963 Not tainted syzkaller #0 PREEMPT(full) 
[  828.725829][T20411] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  828.725836][T20411] Call Trace:
[  828.725840][T20411]  <TASK>
[  828.725844][T20411]  dump_stack_lvl+0x189/0x250
[  828.725858][T20411]  ? __pfx_dump_stack_lvl+0x10/0x10
[  828.725868][T20411]  ? __pfx__printk+0x10/0x10
[  828.725877][T20411]  ? kernfs_root+0x1c/0x230
[  828.725887][T20411]  ? kernfs_path_from_node+0x2f/0x290
[  828.725894][T20411]  ? kernfs_path_from_node+0x250/0x290
[  828.725902][T20411]  ? kernfs_path_from_node+0x2f/0x290
[  828.725910][T20411]  sysfs_warn_dup+0x8e/0xa0
[  828.725918][T20411]  sysfs_do_create_link_sd+0xc0/0x110
[  828.725927][T20411]  device_add_class_symlinks+0x1cf/0x240
[  828.725935][T20411]  device_add+0x475/0xb50
[  828.725942][T20411]  wiphy_register+0x1ba6/0x28d0
[  828.725956][T20411]  ? __pfx_wiphy_register+0x10/0x10
[  828.725965][T20411]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  828.725974][T20411]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  828.725987][T20411]  ieee80211_register_hw+0x3484/0x4100
[  828.725997][T20411]  ? ieee80211_register_hw+0x14a1/0x4100
[  828.726006][T20411]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  828.726014][T20411]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  828.726025][T20411]  ? __hrtimer_setup+0x187/0x210
[  828.726032][T20411]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  828.726043][T20411]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  828.726056][T20411]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  828.726065][T20411]  ? trace_kmalloc+0x1f/0xd0
[  828.726074][T20411]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  828.726084][T20411]  ? kstrndup+0xbf/0x160
[  828.726093][T20411]  hwsim_new_radio_nl+0xea4/0x1b10
[  828.726103][T20411]  ? __pfx___nla_validate_parse+0x10/0x10
[  828.726116][T20411]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  828.726126][T20411]  ? __nla_parse+0x40/0x60
[  828.726137][T20411]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  828.726147][T20411]  genl_family_rcv_msg_doit+0x215/0x300
[  828.726157][T20411]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  828.726167][T20411]  ? bpf_lsm_capable+0x9/0x20
[  828.726177][T20411]  ? security_capable+0x7e/0x2e0
[  828.726190][T20411]  genl_rcv_msg+0x60e/0x790
[  828.726203][T20411]  ? __pfx_genl_rcv_msg+0x10/0x10
[  828.726214][T20411]  ? __kasan_slab_alloc+0x6c/0x80
[  828.726228][T20411]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  828.726242][T20411]  ? __netlink_lookup+0xbd/0x810
[  828.726253][T20411]  ? rcu_is_watching+0x15/0xb0
[  828.726267][T20411]  netlink_rcv_skb+0x208/0x470
[  828.726283][T20411]  ? __pfx_genl_rcv_msg+0x10/0x10
[  828.726295][T20411]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  828.726313][T20411]  ? lock_release+0x4b/0x3e0
[  828.726331][T20411]  ? down_read+0x1ad/0x2e0
[  828.726343][T20411]  genl_rcv+0x28/0x40
[  828.726354][T20411]  netlink_unicast+0x82f/0x9e0
[  828.726371][T20411]  ? __pfx_netlink_unicast+0x10/0x10
[  828.726386][T20411]  ? netlink_sendmsg+0x642/0xb30
[  828.726402][T20411]  ? skb_put+0x11b/0x210
[  828.726423][T20411]  netlink_sendmsg+0x805/0xb30
[  828.726468][T20411]  ? __pfx_netlink_sendmsg+0x10/0x10
[  828.726488][T20411]  ? aa_sock_msg_perm+0xf1/0x1d0
[  828.726500][T20411]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  828.726514][T20411]  ? __pfx_netlink_sendmsg+0x10/0x10
[  828.726533][T20411]  __sock_sendmsg+0x21c/0x270
[  828.726550][T20411]  ____sys_sendmsg+0x505/0x830
[  828.726566][T20411]  ? __pfx_____sys_sendmsg+0x10/0x10
[  828.726580][T20411]  ? import_iovec+0x74/0xa0
[  828.726595][T20411]  ___sys_sendmsg+0x21f/0x2a0
[  828.726606][T20411]  ? __pfx____sys_sendmsg+0x10/0x10
[  828.726619][T20411]  ? futex_wake+0x4b2/0x560
[  828.726641][T20411]  ? __fget_files+0x2a/0x420
[  828.726658][T20411]  ? __fget_files+0x3a0/0x420
[  828.726677][T20411]  __x64_sys_sendmsg+0x19b/0x260
[  828.726690][T20411]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  828.726705][T20411]  ? rcu_is_watching+0x15/0xb0
[  828.726717][T20411]  ? rcu_is_watching+0x15/0xb0
[  828.726730][T20411]  do_syscall_64+0xfa/0x3b0
[  828.726747][T20411]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  828.726761][T20411]  ? exc_page_fault+0x9f/0xf0
[  828.726777][T20411]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  828.726790][T20411] RIP: 0033:0x7f0b3918ebe9
[  828.726802][T20411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  828.726813][T20411] RSP: 002b:00007f0b39f76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  828.726828][T20411] RAX: ffffffffffffffda RBX: 00007f0b393b5fa0 RCX: 00007f0b3918ebe9
[  828.726838][T20411] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  828.726847][T20411] RBP: 00007f0b39211e19 R08: 0000000000000000 R09: 0000000000000000
[  828.726855][T20411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  828.726862][T20411] R13: 00007f0b393b6038 R14: 00007f0b393b5fa0 R15: 00007fff30671178
[  828.726877][T20411]  </TASK>
[  828.914603][T20413] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  828.922314][T20413] syzkaller0: entered promiscuous mode
[  828.924499][T20413] syzkaller0: entered allmulticast mode
[  828.931414][T20415] pim6reg1: entered promiscuous mode
[  828.933590][T20415] pim6reg1: entered allmulticast mode
[  828.947614][T20417] netlink: 'syz.1.11964': attribute type 1 has an invalid length.
[  828.971643][T20417] bond78: (slave vti3): The slave device specified does not support setting the MAC address
[  828.974949][T20417] bond78: (slave vti3): Setting fail_over_mac to active for active-backup mode
[  828.980049][T20417] bond78: (slave vti3): making interface the new active one
[  828.983326][T20417] bond78: (slave vti3): Enslaving as an active interface with an up link
[  829.057216][T20425] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  829.091104][T20413] tipc: Resetting bearer <eth:syzkaller0>
[  829.098591][T20413] tipc: Disabling bearer <eth:syzkaller0>
[  829.122513][T20419] bond73 (unregistering): Released all slaves
[  829.331601][   T10] lo speed is unknown, defaulting to 1000
[  829.333973][   T10] syz0: Port: 1 Link ACTIVE
[  829.335690][ T4535] lo speed is unknown, defaulting to 1000
[  829.367204][T20450] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  829.499873][T20464] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  829.521651][T20459] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  829.533105][T20459] syzkaller0: entered promiscuous mode
[  829.535412][T20459] syzkaller0: entered allmulticast mode
[  829.552350][T20466] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  829.558949][T20465] tipc: Disabling bearer <eth:syzkaller0>
[  829.606678][T20468] 8021q: adding VLAN 0 to HW filter on device bond73
[  829.623013][T20468] 8021q: adding VLAN 0 to HW filter on device bond73
[  829.626008][T20468] bond73: (slave vxcan7): The slave device specified does not support setting the MAC address
[  829.631786][T20468] bond73: (slave vxcan7): Error -95 calling set_mac_address
[  829.649194][T20458] tipc: Resetting bearer <eth:syzkaller0>
[  829.656955][T20458] tipc: Disabling bearer <eth:syzkaller0>
[  829.671545][T20471] veth47: entered promiscuous mode
[  829.675621][T20471] bond73: (slave veth47): Enslaving as an active interface with a down link
[  829.695328][T20476] veth49: entered promiscuous mode
[  829.698629][T20476] bond73: (slave veth49): Enslaving as an active interface with a down link
[  829.706464][ T2274] lo speed is unknown, defaulting to 1000
[  829.707103][T20468] 8021q: adding VLAN 0 to HW filter on device bond73
[  829.708791][ T2274] syz0: Port: 1 Link DOWN
[  829.713367][ T2274] lo speed is unknown, defaulting to 1000
[  829.858618][T20493] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[  829.864791][   T10] lo speed is unknown, defaulting to 1000
[  829.866826][   T10] syz0: Port: 1 Link ACTIVE
[  829.868398][   T10] lo speed is unknown, defaulting to 1000
[  829.996152][T20509] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  829.999370][T20509] syzkaller0: entered promiscuous mode
[  830.001870][T20509] syzkaller0: entered allmulticast mode
[  830.008218][T20509] nbd: must specify at least one socket
[  830.011568][T20509] tipc: Resetting bearer <eth:syzkaller0>
[  830.015204][T20508] tipc: Resetting bearer <eth:syzkaller0>
[  830.019085][T20508] tipc: Disabling bearer <eth:syzkaller0>
[  830.034945][T20512] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  830.037924][T20512] syzkaller0: entered promiscuous mode
[  830.039808][T20512] syzkaller0: entered allmulticast mode
[  830.045084][T20512] tipc: Resetting bearer <eth:syzkaller0>
[  830.049166][T20511] tipc: Resetting bearer <eth:syzkaller0>
[  830.053542][T20511] tipc: Disabling bearer <eth:syzkaller0>
[  830.184920][T20516] 8021q: adding VLAN 0 to HW filter on device bond71
[  830.212925][T20516] 8021q: adding VLAN 0 to HW filter on device bond71
[  830.220392][T20516] bond71: (slave vxcan15): The slave device specified does not support setting the MAC address
[  830.228306][T20516] bond71: (slave vxcan15): Error -95 calling set_mac_address
[  830.249835][T20524] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[  830.476858][T20536] gtp17: entered promiscuous mode
[  830.478532][T20536] gtp17: entered allmulticast mode
[  830.506776][T20540] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  830.514409][T20540] syzkaller0: entered promiscuous mode
[  830.516722][T20540] syzkaller0: entered allmulticast mode
[  831.347494][T20591] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  831.350799][T20591] syzkaller0: entered promiscuous mode
[  831.353059][T20591] syzkaller0: entered allmulticast mode
[  831.359005][T20591] tipc: Resetting bearer <eth:syzkaller0>
[  831.394096][T20593] veth33: entered promiscuous mode
[  831.424231][T20590] tipc: Resetting bearer <eth:syzkaller0>
[  831.427349][T20590] tipc: Disabling bearer <eth:syzkaller0>
[  831.728636][T20603] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  831.733639][T20603] syzkaller0: entered promiscuous mode
[  831.735646][T20603] syzkaller0: entered allmulticast mode
[  831.743837][T20603] tipc: Resetting bearer <eth:syzkaller0>
[  831.751713][T20602] tipc: Resetting bearer <eth:syzkaller0>
[  831.757571][T20602] tipc: Disabling bearer <eth:syzkaller0>
[  831.770303][T20601] lo speed is unknown, defaulting to 1000
[  831.832139][T20601] lo speed is unknown, defaulting to 1000
[  831.940661][T20620] syzkaller0: entered promiscuous mode
[  831.943798][T20620] syzkaller0: entered allmulticast mode
[  832.235375][T20637] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  832.238220][T20637] syzkaller0: entered promiscuous mode
[  832.240359][T20637] syzkaller0: entered allmulticast mode
[  832.253739][T20636] tipc: Resetting bearer <eth:syzkaller0>
[  832.259261][T20636] tipc: Disabling bearer <eth:syzkaller0>
[  832.349762][T20645] validate_nla: 10 callbacks suppressed
[  832.349778][T20645] netlink: 'syz.0.12026': attribute type 1 has an invalid length.
[  832.367543][T20647] __nla_validate_parse: 75 callbacks suppressed
[  832.367558][T20647] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12027'.
[  832.368128][T20645] netlink: 'syz.0.12026': attribute type 1 has an invalid length.
[  832.390876][T20645] netlink: 'syz.0.12026': attribute type 1 has an invalid length.
[  832.464017][T20655] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.12030'.
[  832.467888][T20655] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  832.471496][T20655] openvswitch: netlink: Message has 1 unknown bytes.
[  832.478554][T20656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12028'.
[  832.576566][T20670] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  832.603221][T20672] tipc: Disabling bearer <eth:syzkaller0>
[  832.784667][T20690] bpq0: entered promiscuous mode
[  832.805798][T20692] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  832.894760][T20698] netlink: 176 bytes leftover after parsing attributes in process `syz.0.12043'.
[  832.915469][T20700] syzkaller0: entered promiscuous mode
[  832.917467][T20700] syzkaller0: entered allmulticast mode
[  832.952807][T20702] gtp25: left promiscuous mode
[  832.954536][T20702] gtp25: left allmulticast mode
[  832.956671][T20702] mac80211_hwsim hwsim430 wlan0: left allmulticast mode
[  832.958992][T20702] mac80211_hwsim hwsim430 wlan0: left promiscuous mode
[  832.961762][T20702] macsec0: left promiscuous mode
[  832.963523][T20702] macsec0: left allmulticast mode
[  832.966717][T20702] veth45: left promiscuous mode
[  832.971640][T20702] gtp27: left promiscuous mode
[  832.973469][T20702] gtp27: left allmulticast mode
[  832.983687][T20702] veth47: left promiscuous mode
[  832.985954][T20702] veth49: left promiscuous mode
[  832.990691][T20706] bridge0: port 1(erspan0) entered blocking state
[  832.993470][T20706] bridge0: port 1(erspan0) entered disabled state
[  833.078667][T20715] netlink: 80 bytes leftover after parsing attributes in process `syz.0.12047'.
[  833.083229][T20715] bridge0: entered promiscuous mode
[  833.149672][T20720] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  833.159820][T20720] syzkaller0: entered promiscuous mode
[  833.168544][T20720] syzkaller0: entered allmulticast mode
[  833.199302][T20719] tipc: Resetting bearer <eth:syzkaller0>
[  833.206326][T20719] tipc: Disabling bearer <eth:syzkaller0>
[  833.268568][T20726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12050'.
[  833.274485][T20726] netdevsim0: entered allmulticast mode
[  833.316284][T20730] netlink: 'syz.1.12052': attribute type 12 has an invalid length.
[  833.319646][T20730] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.12052'.
[  833.455705][T20737] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12054'.
[  833.633021][T20748] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  833.764465][T20763] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  833.773862][T20763] syzkaller0: entered promiscuous mode
[  833.795600][T20763] syzkaller0: entered allmulticast mode
[  833.807142][T20768] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12063'.
[  833.812362][T20762] tipc: Resetting bearer <eth:syzkaller0>
[  833.818051][T20762] tipc: Disabling bearer <eth:syzkaller0>
[  833.864163][T20773] netlink: 'syz.2.12065': attribute type 13 has an invalid length.
[  833.907614][T20776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12066'.
[  833.913370][T20776] netlink: 'syz.1.12066': attribute type 5 has an invalid length.
[  833.944710][T20779] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  833.959790][T20779] syzkaller0: entered promiscuous mode
[  833.962110][T20779] syzkaller0: entered allmulticast mode
[  833.965951][T20779] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  833.981144][T20781] tipc: Resetting bearer <eth:syzkaller0>
[  833.991483][T20777] tipc: Resetting bearer <eth:syzkaller0>
[  833.998019][T20777] tipc: Disabling bearer <eth:syzkaller0>
[  834.014228][T20784] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  834.017266][T20785] tipc: Resetting bearer <eth:syzkaller0>
[  834.023018][T20783] tipc: Disabling bearer <eth:syzkaller0>
[  834.246025][T20808] lo speed is unknown, defaulting to 1000
[  834.289871][T20814] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  834.292537][T20814] CPU: 0 UID: 0 PID: 20814 Comm: syz.0.12077 Not tainted syzkaller #0 PREEMPT(full) 
[  834.292556][T20814] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  834.292565][T20814] Call Trace:
[  834.292571][T20814]  <TASK>
[  834.292577][T20814]  dump_stack_lvl+0x189/0x250
[  834.292598][T20814]  ? __pfx_dump_stack_lvl+0x10/0x10
[  834.292613][T20814]  ? __pfx__printk+0x10/0x10
[  834.292630][T20814]  ? kernfs_root+0x1c/0x230
[  834.292646][T20814]  ? kernfs_path_from_node+0x2f/0x290
[  834.292658][T20814]  ? kernfs_path_from_node+0x250/0x290
[  834.292671][T20814]  ? kernfs_path_from_node+0x2f/0x290
[  834.292693][T20814]  sysfs_warn_dup+0x8e/0xa0
[  834.292705][T20814]  sysfs_do_create_link_sd+0xc0/0x110
[  834.292718][T20814]  device_add_class_symlinks+0x1cf/0x240
[  834.292731][T20814]  device_add+0x475/0xb50
[  834.292744][T20814]  wiphy_register+0x1ba6/0x28d0
[  834.292764][T20814]  ? __pfx_wiphy_register+0x10/0x10
[  834.292780][T20814]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  834.292793][T20814]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  834.292813][T20814]  ieee80211_register_hw+0x3484/0x4100
[  834.292829][T20814]  ? ieee80211_register_hw+0x14a1/0x4100
[  834.292843][T20814]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  834.292855][T20814]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  834.292871][T20814]  ? __hrtimer_setup+0x187/0x210
[  834.292884][T20814]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  834.292902][T20814]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  834.292923][T20814]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  834.292937][T20814]  ? trace_kmalloc+0x1f/0xd0
[  834.292952][T20814]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  834.292968][T20814]  ? kstrndup+0xbf/0x160
[  834.292980][T20814]  hwsim_new_radio_nl+0xea4/0x1b10
[  834.292990][T20814]  ? __pfx___nla_validate_parse+0x10/0x10
[  834.293003][T20814]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  834.293014][T20814]  ? __nla_parse+0x40/0x60
[  834.293029][T20814]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  834.293044][T20814]  genl_family_rcv_msg_doit+0x215/0x300
[  834.293058][T20814]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  834.293076][T20814]  ? bpf_lsm_capable+0x9/0x20
[  834.293115][T20814]  ? security_capable+0x7e/0x2e0
[  834.293134][T20814]  genl_rcv_msg+0x60e/0x790
[  834.293148][T20814]  ? __pfx_genl_rcv_msg+0x10/0x10
[  834.293155][T20814]  ? __kasan_slab_alloc+0x6c/0x80
[  834.293164][T20814]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  834.293173][T20814]  ? __netlink_lookup+0xbd/0x810
[  834.293179][T20814]  ? rcu_is_watching+0x15/0xb0
[  834.293188][T20814]  netlink_rcv_skb+0x208/0x470
[  834.293197][T20814]  ? __pfx_genl_rcv_msg+0x10/0x10
[  834.293205][T20814]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  834.293216][T20814]  ? lock_release+0x4b/0x3e0
[  834.293228][T20814]  ? down_read+0x1ad/0x2e0
[  834.293239][T20814]  genl_rcv+0x28/0x40
[  834.293249][T20814]  netlink_unicast+0x82f/0x9e0
[  834.293265][T20814]  ? __pfx_netlink_unicast+0x10/0x10
[  834.293279][T20814]  ? netlink_sendmsg+0x642/0xb30
[  834.293293][T20814]  ? skb_put+0x11b/0x210
[  834.293303][T20814]  netlink_sendmsg+0x805/0xb30
[  834.293320][T20814]  ? __pfx_netlink_sendmsg+0x10/0x10
[  834.293336][T20814]  ? futex_unqueue+0x22/0x240
[  834.293349][T20814]  ? aa_sock_msg_perm+0xf1/0x1d0
[  834.293360][T20814]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  834.293372][T20814]  ? __pfx_netlink_sendmsg+0x10/0x10
[  834.293405][T20814]  __sock_sendmsg+0x21c/0x270
[  834.293445][T20814]  ____sys_sendmsg+0x505/0x830
[  834.293460][T20814]  ? __pfx_____sys_sendmsg+0x10/0x10
[  834.293475][T20814]  ? __import_iovec+0x5/0x7f0
[  834.293489][T20814]  ? import_iovec+0x74/0xa0
[  834.293504][T20814]  ___sys_sendmsg+0x21f/0x2a0
[  834.293517][T20814]  ? __pfx____sys_sendmsg+0x10/0x10
[  834.293530][T20814]  ? futex_wait+0x285/0x360
[  834.293552][T20814]  ? __fget_files+0x2a/0x420
[  834.293568][T20814]  ? __fget_files+0x3a0/0x420
[  834.293586][T20814]  __x64_sys_sendmsg+0x19b/0x260
[  834.293598][T20814]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  834.293612][T20814]  ? rcu_is_watching+0x15/0xb0
[  834.293625][T20814]  ? rcu_is_watching+0x15/0xb0
[  834.293637][T20814]  do_syscall_64+0xfa/0x3b0
[  834.293655][T20814]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  834.293667][T20814]  ? exc_page_fault+0x9f/0xf0
[  834.293688][T20814]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  834.293700][T20814] RIP: 0033:0x7fb05df8ebe9
[  834.293711][T20814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  834.293722][T20814] RSP: 002b:00007fb05ee0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  834.293736][T20814] RAX: ffffffffffffffda RBX: 00007fb05e1b5fa0 RCX: 00007fb05df8ebe9
[  834.293745][T20814] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  834.293753][T20814] RBP: 00007fb05e011e19 R08: 0000000000000000 R09: 0000000000000000
[  834.293762][T20814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  834.293770][T20814] R13: 00007fb05e1b6038 R14: 00007fb05e1b5fa0 R15: 00007ffcd2fe8958
[  834.293780][T20814]  </TASK>
[  834.497231][T20808] lo speed is unknown, defaulting to 1000
[  834.635898][T20819] mac80211_hwsim hwsim508 wlan1: entered allmulticast mode
[  834.701550][T20828] netlink: 'syz.0.12081': attribute type 12 has an invalid length.
[  834.731893][T20828] netlink: 'syz.0.12081': attribute type 12 has an invalid length.
[  834.793919][T20843] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  834.804923][T20844] syzkaller0: entered promiscuous mode
[  834.807326][T20844] syzkaller0: entered allmulticast mode
[  834.831610][T20843] tipc: Resetting bearer <eth:syzkaller0>
[  834.838929][T20842] tipc: Resetting bearer <eth:syzkaller0>
[  834.854945][T20842] tipc: Disabling bearer <eth:syzkaller0>
[  834.901856][T20854] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  834.904466][T20854] CPU: 1 UID: 0 PID: 20854 Comm: syz.1.12088 Not tainted syzkaller #0 PREEMPT(full) 
[  834.904482][T20854] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  834.904490][T20854] Call Trace:
[  834.904497][T20854]  <TASK>
[  834.904502][T20854]  dump_stack_lvl+0x189/0x250
[  834.904518][T20854]  ? __pfx_dump_stack_lvl+0x10/0x10
[  834.904527][T20854]  ? __pfx__printk+0x10/0x10
[  834.904536][T20854]  ? kernfs_root+0x1c/0x230
[  834.904544][T20854]  ? kernfs_path_from_node+0x2f/0x290
[  834.904552][T20854]  ? kernfs_path_from_node+0x250/0x290
[  834.904559][T20854]  ? kernfs_path_from_node+0x2f/0x290
[  834.904567][T20854]  sysfs_warn_dup+0x8e/0xa0
[  834.904574][T20854]  sysfs_do_create_link_sd+0xc0/0x110
[  834.904582][T20854]  device_add_class_symlinks+0x1cf/0x240
[  834.904591][T20854]  device_add+0x475/0xb50
[  834.904598][T20854]  wiphy_register+0x1ba6/0x28d0
[  834.904611][T20854]  ? __pfx_wiphy_register+0x10/0x10
[  834.904620][T20854]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  834.904629][T20854]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  834.904641][T20854]  ieee80211_register_hw+0x3484/0x4100
[  834.904651][T20854]  ? ieee80211_register_hw+0x14a1/0x4100
[  834.904665][T20854]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  834.904674][T20854]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  834.904685][T20854]  ? __hrtimer_setup+0x187/0x210
[  834.904692][T20854]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  834.904703][T20854]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  834.904716][T20854]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  834.904724][T20854]  ? trace_kmalloc+0x1f/0xd0
[  834.904733][T20854]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  834.904742][T20854]  ? kstrndup+0xbf/0x160
[  834.904751][T20854]  hwsim_new_radio_nl+0xea4/0x1b10
[  834.904760][T20854]  ? __pfx___nla_validate_parse+0x10/0x10
[  834.904773][T20854]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  834.904783][T20854]  ? __nla_parse+0x40/0x60
[  834.904793][T20854]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  834.904804][T20854]  genl_family_rcv_msg_doit+0x215/0x300
[  834.904813][T20854]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  834.904822][T20854]  ? bpf_lsm_capable+0x9/0x20
[  834.904832][T20854]  ? security_capable+0x7e/0x2e0
[  834.904843][T20854]  genl_rcv_msg+0x60e/0x790
[  834.904851][T20854]  ? __pfx_genl_rcv_msg+0x10/0x10
[  834.904858][T20854]  ? __kasan_slab_alloc+0x6c/0x80
[  834.904868][T20854]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  834.904876][T20854]  ? __netlink_lookup+0xbd/0x810
[  834.904882][T20854]  ? rcu_is_watching+0x15/0xb0
[  834.904890][T20854]  netlink_rcv_skb+0x208/0x470
[  834.904900][T20854]  ? __pfx_genl_rcv_msg+0x10/0x10
[  834.904908][T20854]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  834.904919][T20854]  ? lock_release+0x4b/0x3e0
[  834.904930][T20854]  ? down_read+0x1ad/0x2e0
[  834.904936][T20854]  genl_rcv+0x28/0x40
[  834.904943][T20854]  netlink_unicast+0x82f/0x9e0
[  834.904953][T20854]  ? __pfx_netlink_unicast+0x10/0x10
[  834.904962][T20854]  ? netlink_sendmsg+0x642/0xb30
[  834.904971][T20854]  ? skb_put+0x11b/0x210
[  834.904978][T20854]  netlink_sendmsg+0x805/0xb30
[  834.904989][T20854]  ? __pfx_netlink_sendmsg+0x10/0x10
[  834.904999][T20854]  ? futex_unqueue+0x22/0x240
[  834.905007][T20854]  ? aa_sock_msg_perm+0xf1/0x1d0
[  834.905014][T20854]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  834.905022][T20854]  ? __pfx_netlink_sendmsg+0x10/0x10
[  834.905031][T20854]  __sock_sendmsg+0x21c/0x270
[  834.905041][T20854]  ____sys_sendmsg+0x505/0x830
[  834.905049][T20854]  ? __pfx_____sys_sendmsg+0x10/0x10
[  834.905057][T20854]  ? import_iovec+0x74/0xa0
[  834.905065][T20854]  ___sys_sendmsg+0x21f/0x2a0
[  834.905073][T20854]  ? __pfx____sys_sendmsg+0x10/0x10
[  834.905080][T20854]  ? futex_wait+0x285/0x360
[  834.905094][T20854]  ? __fget_files+0x2a/0x420
[  834.905104][T20854]  ? __fget_files+0x3a0/0x420
[  834.905115][T20854]  __x64_sys_sendmsg+0x19b/0x260
[  834.905122][T20854]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  834.905131][T20854]  ? rcu_is_watching+0x15/0xb0
[  834.905138][T20854]  ? rcu_is_watching+0x15/0xb0
[  834.905145][T20854]  do_syscall_64+0xfa/0x3b0
[  834.905155][T20854]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  834.905162][T20854]  ? exc_page_fault+0x9f/0xf0
[  834.905172][T20854]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  834.905179][T20854] RIP: 0033:0x7fc55a78ebe9
[  834.905186][T20854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  834.905193][T20854] RSP: 002b:00007fc5589f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  834.905201][T20854] RAX: ffffffffffffffda RBX: 00007fc55a9b6090 RCX: 00007fc55a78ebe9
[  834.905207][T20854] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008
[  834.905212][T20854] RBP: 00007fc55a811e19 R08: 0000000000000000 R09: 0000000000000000
[  834.905216][T20854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  834.905221][T20854] R13: 00007fc55a9b6128 R14: 00007fc55a9b6090 R15: 00007fff0a7f0808
[  834.905228][T20854]  </TASK>
[  835.024941][T20860] bridge71: entered promiscuous mode
[  835.094302][T20867] dvmrp0: left allmulticast mode
[  835.095993][T20867] dvmrp1: left allmulticast mode
[  835.244753][T20878] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  835.271009][T20879] tipc: Disabling bearer <eth:syzkaller0>
[  835.318632][T20876] syzkaller1: entered allmulticast mode
[  835.325387][T20885] syzkaller1: left allmulticast mode
[  835.358327][T20887] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  835.362115][T20887] syzkaller0: entered promiscuous mode
[  835.364501][T20887] syzkaller0: entered allmulticast mode
[  835.368333][T20889] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  835.372356][T20890] syzkaller0: entered promiscuous mode
[  835.374762][T20890] syzkaller0: entered allmulticast mode
[  835.388359][T20890] tipc: Resetting bearer <eth:syzkaller0>
[  835.396702][T20890] tipc: Disabling bearer <eth:syzkaller0>
[  835.426093][T20887] IPVS: set_ctl: invalid protocol: 47 172.30.0.3:20003
[  835.432539][T20886] tipc: Resetting bearer <eth:syzkaller0>
[  835.437049][T20886] tipc: Disabling bearer <eth:syzkaller0>
[  835.467644][T20894] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  835.471281][T20894] syzkaller0: entered promiscuous mode
[  835.473610][T20894] syzkaller0: entered allmulticast mode
[  835.479226][T20894] tipc: Resetting bearer <eth:syzkaller0>
[  835.490858][T20893] tipc: Resetting bearer <eth:syzkaller0>
[  835.495716][T20893] tipc: Disabling bearer <eth:syzkaller0>
[  835.517484][T20896] netlink: 'syz.2.12100': attribute type 2 has an invalid length.
[  835.523047][T20896] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  835.723624][T20909] netlink: 'syz.0.12103': attribute type 10 has an invalid length.
[  835.902479][T20935] bridge78: entered allmulticast mode
[  835.907940][T20935] dvmrp1: entered allmulticast mode
[  835.913176][T20934] bridge78: left allmulticast mode
[  836.516025][T21005] IPVS: set_ctl: invalid protocol: 219 172.20.20.64:20003
[  836.531798][T21011] bridge86: entered promiscuous mode
[  836.533651][T21011] bridge86: entered allmulticast mode
[  836.583867][T21023] syzkaller0: entered promiscuous mode
[  836.585833][T21023] syzkaller0: entered allmulticast mode
[  836.629109][T21025] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  836.632100][T21025] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  836.726478][T21030] lo speed is unknown, defaulting to 1000
[  836.800645][T21029] lo speed is unknown, defaulting to 1000
[  836.804658][T21030] lo speed is unknown, defaulting to 1000
[  836.861286][T21037] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  836.864214][T21037] syzkaller0: entered promiscuous mode
[  836.866159][T21037] syzkaller0: entered allmulticast mode
[  836.877249][T21037] tipc: Resetting bearer <eth:syzkaller0>
[  836.881382][T21036] tipc: Resetting bearer <eth:syzkaller0>
[  836.885677][T21036] tipc: Disabling bearer <eth:syzkaller0>
[  836.891800][T21029] lo speed is unknown, defaulting to 1000
[  837.430666][T21067] __nla_validate_parse: 32 callbacks suppressed
[  837.430676][T21067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12151'.
[  837.437068][T21063] syzkaller0: entered allmulticast mode
[  837.441529][T21067] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  837.444462][T21067] CPU: 1 UID: 0 PID: 21067 Comm: syz.2.12151 Not tainted syzkaller #0 PREEMPT(full) 
[  837.444480][T21067] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  837.444487][T21067] Call Trace:
[  837.444493][T21067]  <TASK>
[  837.444498][T21067]  dump_stack_lvl+0x189/0x250
[  837.444518][T21067]  ? __pfx_dump_stack_lvl+0x10/0x10
[  837.444533][T21067]  ? __pfx__printk+0x10/0x10
[  837.444548][T21067]  ? kernfs_root+0x1c/0x230
[  837.444561][T21067]  ? kernfs_path_from_node+0x2f/0x290
[  837.444574][T21067]  ? kernfs_path_from_node+0x250/0x290
[  837.444587][T21067]  ? kernfs_path_from_node+0x2f/0x290
[  837.444599][T21067]  sysfs_warn_dup+0x8e/0xa0
[  837.444609][T21067]  sysfs_do_create_link_sd+0xc0/0x110
[  837.444624][T21067]  device_add_class_symlinks+0x1cf/0x240
[  837.444638][T21067]  device_add+0x475/0xb50
[  837.444650][T21067]  wiphy_register+0x1ba6/0x28d0
[  837.444670][T21067]  ? __pfx_wiphy_register+0x10/0x10
[  837.444684][T21067]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  837.444696][T21067]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  837.444709][T21067]  ieee80211_register_hw+0x3484/0x4100
[  837.444719][T21067]  ? ieee80211_register_hw+0x14a1/0x4100
[  837.444728][T21067]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  837.444736][T21067]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  837.444747][T21067]  ? __hrtimer_setup+0x187/0x210
[  837.444754][T21067]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  837.444765][T21067]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  837.444778][T21067]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  837.444786][T21067]  ? trace_kmalloc+0x1f/0xd0
[  837.444795][T21067]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  837.444805][T21067]  ? kstrndup+0xbf/0x160
[  837.444817][T21067]  hwsim_new_radio_nl+0xea4/0x1b10
[  837.444831][T21067]  ? __pfx___nla_validate_parse+0x10/0x10
[  837.444849][T21067]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  837.444864][T21067]  ? __nla_parse+0x40/0x60
[  837.444879][T21067]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  837.444895][T21067]  genl_family_rcv_msg_doit+0x215/0x300
[  837.444912][T21067]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  837.444927][T21067]  ? bpf_lsm_capable+0x9/0x20
[  837.444942][T21067]  ? security_capable+0x7e/0x2e0
[  837.444961][T21067]  genl_rcv_msg+0x60e/0x790
[  837.444975][T21067]  ? __pfx_genl_rcv_msg+0x10/0x10
[  837.444986][T21067]  ? __kasan_slab_alloc+0x6c/0x80
[  837.445000][T21067]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  837.445014][T21067]  ? __netlink_lookup+0xbd/0x810
[  837.445022][T21067]  ? rcu_is_watching+0x15/0xb0
[  837.445034][T21067]  netlink_rcv_skb+0x208/0x470
[  837.445044][T21067]  ? __pfx_genl_rcv_msg+0x10/0x10
[  837.445052][T21067]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  837.445063][T21067]  ? lock_release+0x4b/0x3e0
[  837.445074][T21067]  ? down_read+0x1ad/0x2e0
[  837.445080][T21067]  genl_rcv+0x28/0x40
[  837.445087][T21067]  netlink_unicast+0x82f/0x9e0
[  837.445097][T21067]  ? __pfx_netlink_unicast+0x10/0x10
[  837.445107][T21067]  ? netlink_sendmsg+0x642/0xb30
[  837.445118][T21067]  ? skb_put+0x11b/0x210
[  837.445130][T21067]  netlink_sendmsg+0x805/0xb30
[  837.445146][T21067]  ? __pfx_netlink_sendmsg+0x10/0x10
[  837.445161][T21067]  ? futex_unqueue+0x22/0x240
[  837.445174][T21067]  ? aa_sock_msg_perm+0xf1/0x1d0
[  837.445185][T21067]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  837.445198][T21067]  ? __pfx_netlink_sendmsg+0x10/0x10
[  837.445213][T21067]  __sock_sendmsg+0x21c/0x270
[  837.445228][T21067]  ____sys_sendmsg+0x505/0x830
[  837.445240][T21067]  ? __pfx_____sys_sendmsg+0x10/0x10
[  837.445254][T21067]  ? import_iovec+0x74/0xa0
[  837.445267][T21067]  ___sys_sendmsg+0x21f/0x2a0
[  837.445275][T21067]  ? __pfx____sys_sendmsg+0x10/0x10
[  837.445283][T21067]  ? futex_wait+0x285/0x360
[  837.445297][T21067]  ? __fget_files+0x2a/0x420
[  837.445310][T21067]  ? __fget_files+0x3a0/0x420
[  837.445328][T21067]  __x64_sys_sendmsg+0x19b/0x260
[  837.445340][T21067]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  837.445353][T21067]  ? rcu_is_watching+0x15/0xb0
[  837.445366][T21067]  ? rcu_is_watching+0x15/0xb0
[  837.445378][T21067]  do_syscall_64+0xfa/0x3b0
[  837.445396][T21067]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  837.445437][T21067]  ? exc_page_fault+0x9f/0xf0
[  837.445453][T21067]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  837.445463][T21067] RIP: 0033:0x7f0b3918ebe9
[  837.445490][T21067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  837.445502][T21067] RSP: 002b:00007f0b39f76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  837.445518][T21067] RAX: ffffffffffffffda RBX: 00007f0b393b5fa0 RCX: 00007f0b3918ebe9
[  837.445526][T21067] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000f
[  837.445534][T21067] RBP: 00007f0b39211e19 R08: 0000000000000000 R09: 0000000000000000
[  837.445542][T21067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  837.445548][T21067] R13: 00007f0b393b6038 R14: 00007f0b393b5fa0 R15: 00007fff30671178
[  837.445563][T21067]  </TASK>
[  837.654483][T21072] syzkaller0: entered promiscuous mode
[  837.656972][T21072] syzkaller0: entered allmulticast mode
[  837.770277][T21087] validate_nla: 13 callbacks suppressed
[  837.770291][T21087] netlink: 'syz.2.12154': attribute type 4 has an invalid length.
[  837.778179][T21089] lo speed is unknown, defaulting to 1000
[  837.780168][T21088] netlink: 'syz.2.12154': attribute type 4 has an invalid length.
[  837.814937][T21093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12155'.
[  837.855763][T21089] lo speed is unknown, defaulting to 1000
[  837.898206][T21098] syzkaller1: entered promiscuous mode
[  837.906380][T21098] syzkaller1: entered allmulticast mode
[  837.911171][T21098] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12157'.
[  837.940350][T21100] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12158'.
[  837.946965][T21080] lo speed is unknown, defaulting to 1000
[  837.992348][T21105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12159'.
[  838.048278][T21080] lo speed is unknown, defaulting to 1000
[  838.049263][T21112] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  838.057133][T21105] bond73: (slave veth47): Releasing active interface
[  838.061795][T21105] bond73: (slave veth49): Releasing active interface
[  838.065116][T21112] syzkaller0: entered promiscuous mode
[  838.067075][T21112] syzkaller0: entered allmulticast mode
[  838.091552][T21112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12160'.
[  838.109265][T21112] tipc: Resetting bearer <eth:syzkaller0>
[  838.115900][T21111] tipc: Resetting bearer <eth:syzkaller0>
[  838.120798][T21111] tipc: Disabling bearer <eth:syzkaller0>
[  838.296638][T21121] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12162'.
[  838.376992][T21125] macsec1: entered promiscuous mode
[  838.379303][T21125] mac80211_hwsim hwsim460 wlan0: entered promiscuous mode
[  838.382591][T21125] macsec1: entered allmulticast mode
[  838.384838][T21125] mac80211_hwsim hwsim460 wlan0: entered allmulticast mode
[  838.442772][T21132] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  838.463921][T21132] syzkaller0: entered promiscuous mode
[  838.465934][T21132] syzkaller0: entered allmulticast mode
[  838.507507][T21132] tipc: Resetting bearer <eth:syzkaller0>
[  838.511555][T21131] tipc: Resetting bearer <eth:syzkaller0>
[  838.522341][T21131] tipc: Disabling bearer <eth:syzkaller0>
[  838.561285][T21139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12167'.
[  838.842226][T21164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12174'.
[  838.925558][T21176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12177'.
[  838.929385][T21176] netlink: 'syz.0.12177': attribute type 30 has an invalid length.
[  839.067152][T21181] lo speed is unknown, defaulting to 1000
[  839.128200][T21183] netlink: 'syz.1.12180': attribute type 10 has an invalid length.
[  839.188089][T21181] lo speed is unknown, defaulting to 1000
[  839.438870][T21195] netlink: 'syz.1.12183': attribute type 9 has an invalid length.
[  839.558604][T21205] netlink: 'syz.1.12185': attribute type 1 has an invalid length.
[  839.562446][T21205] netlink: 'syz.1.12185': attribute type 1 has an invalid length.
[  840.081210][T21217] syzkaller0: entered promiscuous mode
[  840.083659][T21217] syzkaller0: entered allmulticast mode
[  840.437892][T21220] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  840.441501][T21220] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  840.467919][T21223] netlink: 'syz.2.12191': attribute type 4 has an invalid length.
[  840.472435][T21223] netlink: 'syz.2.12191': attribute type 4 has an invalid length.
[  840.480121][T21226] netlink: 'syz.2.12191': attribute type 4 has an invalid length.
[  840.623637][T21233] netdevsim0: left allmulticast mode
[  840.698340][T21233] mac80211_hwsim hwsim409 wlan1: left allmulticast mode
[  840.716810][T21233] bridge86: left promiscuous mode
[  840.719669][T21233] bridge86: left allmulticast mode
[  840.729661][   T10] lo speed is unknown, defaulting to 1000
[  840.736590][   T10] syz0: Port: 1 Link DOWN
[  840.752061][ T5912] lo speed is unknown, defaulting to 1000
[  840.844437][T21244] syzkaller0: entered promiscuous mode
[  840.846360][T21244] syzkaller0: entered allmulticast mode
[  841.002957][T21255] dvmrp0: entered allmulticast mode
[  841.085657][T21273] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  841.100571][T21269] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  841.103968][T21269] CPU: 0 UID: 0 PID: 21269 Comm: syz.0.12203 Not tainted syzkaller #0 PREEMPT(full) 
[  841.103986][T21269] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  841.103994][T21269] Call Trace:
[  841.104000][T21269]  <TASK>
[  841.104006][T21269]  dump_stack_lvl+0x189/0x250
[  841.104025][T21269]  ? __pfx_dump_stack_lvl+0x10/0x10
[  841.104039][T21269]  ? __pfx__printk+0x10/0x10
[  841.104054][T21269]  ? kernfs_root+0x1c/0x230
[  841.104068][T21269]  ? kernfs_path_from_node+0x2f/0x290
[  841.104080][T21269]  ? kernfs_path_from_node+0x250/0x290
[  841.104093][T21269]  ? kernfs_path_from_node+0x2f/0x290
[  841.104106][T21269]  sysfs_warn_dup+0x8e/0xa0
[  841.104119][T21269]  sysfs_do_create_link_sd+0xc0/0x110
[  841.104132][T21269]  device_add_class_symlinks+0x1cf/0x240
[  841.104145][T21269]  device_add+0x475/0xb50
[  841.104157][T21269]  wiphy_register+0x1ba6/0x28d0
[  841.104178][T21269]  ? __pfx_wiphy_register+0x10/0x10
[  841.104192][T21269]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  841.104207][T21269]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  841.104226][T21269]  ieee80211_register_hw+0x3484/0x4100
[  841.104243][T21269]  ? ieee80211_register_hw+0x14a1/0x4100
[  841.104258][T21269]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  841.104272][T21269]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  841.104289][T21269]  ? __hrtimer_setup+0x187/0x210
[  841.104300][T21269]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  841.104318][T21269]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  841.104341][T21269]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  841.104355][T21269]  ? trace_kmalloc+0x1f/0xd0
[  841.104369][T21269]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  841.104385][T21269]  ? kstrndup+0xbf/0x160
[  841.104433][T21269]  hwsim_new_radio_nl+0xea4/0x1b10
[  841.104449][T21269]  ? __pfx___nla_validate_parse+0x10/0x10
[  841.104471][T21269]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  841.104488][T21269]  ? __nla_parse+0x40/0x60
[  841.104506][T21269]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  841.104523][T21269]  genl_family_rcv_msg_doit+0x215/0x300
[  841.104538][T21269]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  841.104556][T21269]  ? bpf_lsm_capable+0x9/0x20
[  841.104571][T21269]  ? security_capable+0x7e/0x2e0
[  841.104587][T21269]  genl_rcv_msg+0x60e/0x790
[  841.104602][T21269]  ? __pfx_genl_rcv_msg+0x10/0x10
[  841.104614][T21269]  ? __kasan_slab_alloc+0x6c/0x80
[  841.104629][T21269]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  841.104642][T21269]  ? __netlink_lookup+0xbd/0x810
[  841.104653][T21269]  ? rcu_is_watching+0x15/0xb0
[  841.104667][T21269]  netlink_rcv_skb+0x208/0x470
[  841.104683][T21269]  ? __pfx_genl_rcv_msg+0x10/0x10
[  841.104696][T21269]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  841.104714][T21269]  ? lock_release+0x4b/0x3e0
[  841.104732][T21269]  ? down_read+0x1ad/0x2e0
[  841.104744][T21269]  genl_rcv+0x28/0x40
[  841.104756][T21269]  netlink_unicast+0x82f/0x9e0
[  841.104773][T21269]  ? __pfx_netlink_unicast+0x10/0x10
[  841.104788][T21269]  ? netlink_sendmsg+0x642/0xb30
[  841.104804][T21269]  ? skb_put+0x11b/0x210
[  841.104817][T21269]  netlink_sendmsg+0x805/0xb30
[  841.104835][T21269]  ? __pfx_netlink_sendmsg+0x10/0x10
[  841.104852][T21269]  ? futex_unqueue+0x22/0x240
[  841.104866][T21269]  ? aa_sock_msg_perm+0xf1/0x1d0
[  841.104878][T21269]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  841.104890][T21269]  ? __pfx_netlink_sendmsg+0x10/0x10
[  841.104906][T21269]  __sock_sendmsg+0x21c/0x270
[  841.104922][T21269]  ____sys_sendmsg+0x505/0x830
[  841.104935][T21269]  ? __pfx_____sys_sendmsg+0x10/0x10
[  841.104950][T21269]  ? import_iovec+0x74/0xa0
[  841.104965][T21269]  ___sys_sendmsg+0x21f/0x2a0
[  841.104978][T21269]  ? __pfx____sys_sendmsg+0x10/0x10
[  841.104991][T21269]  ? futex_wait+0x285/0x360
[  841.105011][T21269]  ? _copy_to_user+0x8a/0xb0
[  841.105033][T21269]  __x64_sys_sendmsg+0x19b/0x260
[  841.105046][T21269]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  841.105061][T21269]  ? rcu_is_watching+0x15/0xb0
[  841.105074][T21269]  ? rcu_is_watching+0x15/0xb0
[  841.105086][T21269]  do_syscall_64+0xfa/0x3b0
[  841.105104][T21269]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  841.105116][T21269]  ? exc_page_fault+0x9f/0xf0
[  841.105131][T21269]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  841.105143][T21269] RIP: 0033:0x7fb05df8ebe9
[  841.105154][T21269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  841.105166][T21269] RSP: 002b:00007fb05ee0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  841.105180][T21269] RAX: ffffffffffffffda RBX: 00007fb05e1b5fa0 RCX: 00007fb05df8ebe9
[  841.105189][T21269] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[  841.105198][T21269] RBP: 00007fb05e011e19 R08: 0000000000000000 R09: 0000000000000000
[  841.105206][T21269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  841.105213][T21269] R13: 00007fb05e1b6038 R14: 00007fb05e1b5fa0 R15: 00007ffcd2fe8958
[  841.105227][T21269]  </TASK>
[  841.377839][T21277] 8021q: adding VLAN 0 to HW filter on device bond72
[  841.417036][T21281] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  841.421485][T21281] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  841.463501][T21284] lo speed is unknown, defaulting to 1000
[  841.515967][T21284] lo speed is unknown, defaulting to 1000
[  841.779464][T21292] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  841.788643][T21292] tipc: Resetting bearer <eth:syzkaller0>
[  841.805267][T21291] tipc: Disabling bearer <eth:syzkaller0>
[  841.897948][T21294] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  841.909236][T21294] syzkaller0: entered promiscuous mode
[  841.927070][T21294] syzkaller0: entered allmulticast mode
[  841.934955][T21294] tipc: Resetting bearer <eth:syzkaller0>
[  841.941219][T21293] tipc: Resetting bearer <eth:syzkaller0>
[  841.950501][T21293] tipc: Disabling bearer <eth:syzkaller0>
[  842.015300][T21301] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  842.027619][T21301] tipc: Resetting bearer <eth:syzkaller0>
[  842.032138][T21300] tipc: Disabling bearer <eth:syzkaller0>
[  842.288166][T21321] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  842.508056][T21336] __nla_validate_parse: 23 callbacks suppressed
[  842.508066][T21336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12224'.
[  842.543425][T21338] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8
[  842.567144][T21345] dvmrp0: left allmulticast mode
[  842.569347][T21345] dvmrp1: left allmulticast mode
[  842.615932][T21348] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12228'.
[  842.619733][T21348] pim6reg1: entered allmulticast mode
[  842.768553][T21362] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12230'.
[  843.003241][T21369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12233'.
[  843.019534][T21369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12233'.
[  843.033738][T21369] bridge87: entered promiscuous mode
[  843.035594][T21369] macsec0: entered promiscuous mode
[  843.037525][T21369] macsec0: entered allmulticast mode
[  843.039376][T21369] bridge87: entered allmulticast mode
[  843.043137][T21369] bridge87: port 1(macsec0) entered blocking state
[  843.046020][T21369] bridge87: port 1(macsec0) entered disabled state
[  843.050562][T21369] bridge87: left allmulticast mode
[  843.052899][T21369] bridge87: left promiscuous mode
[  843.136143][T21374] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12234'.
[  843.158700][T21376] mac80211_hwsim hwsim409 wlan1: entered allmulticast mode
[  843.179828][T21382] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  843.197859][T21382] syzkaller0: entered promiscuous mode
[  843.199767][T21382] syzkaller0: entered allmulticast mode
[  843.205279][T21382] tipc: Resetting bearer <eth:syzkaller0>
[  843.215141][T21385] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  843.218094][T21384] validate_nla: 9 callbacks suppressed
[  843.218104][T21384] netlink: 'syz.0.12237': attribute type 10 has an invalid length.
[  843.226547][T21382] tipc: Resetting bearer <eth:syzkaller0>
[  843.229419][T21384] netlink: 'syz.0.12237': attribute type 10 has an invalid length.
[  843.235042][T21384] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12237'.
[  843.251098][T21382] tipc: Disabling bearer <eth:syzkaller0>
[  843.425862][T21394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12239'.
[  843.429019][T21397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12239'.
[  843.555044][T21406] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12241'.
[  843.616291][T21417] sctp: [Deprecated]: syz.0.12244 (pid 21417) Use of int in max_burst socket option deprecated.
[  843.616291][T21417] Use struct sctp_assoc_value instead
[  843.716599][T21424] dvmrp0: entered allmulticast mode
[  843.751642][T21431] mac80211_hwsim hwsim430 wlan0: entered promiscuous mode
[  843.754586][T21431] batadv_slave_0: entered promiscuous mode
[  843.756942][T21431] hsr0: Slave A (wlan0) is not up; please bring it up to get a fully working HSR network
[  843.760617][T21431] hsr0: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network
[  843.764185][T21431] hsr0: entered promiscuous mode
[  843.797738][T21441] mac80211_hwsim hwsim409 wlan1: left allmulticast mode
[  843.824371][T21443] netlink: 'syz.2.12252': attribute type 4 has an invalid length.
[  843.848359][T21445] netlink: 'syz.2.12253': attribute type 1 has an invalid length.
[  843.851188][T21445] netlink: 'syz.2.12253': attribute type 1 has an invalid length.
[  843.855629][T21445] netlink: 'syz.2.12253': attribute type 1 has an invalid length.
[  843.865953][T21445] 8021q: adding VLAN 0 to HW filter on device bond75
[  843.869623][T21441] netlink: 'syz.1.12251': attribute type 10 has an invalid length.
[  843.909432][T21451] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  843.921091][T21452] syzkaller0: entered promiscuous mode
[  843.923020][T21452] syzkaller0: entered allmulticast mode
[  843.942326][T21451] tipc: Resetting bearer <eth:syzkaller0>
[  843.944646][T21455] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  843.947331][T21455] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  843.956016][T21451] tipc: Disabling bearer <eth:syzkaller0>
[  843.982908][T21460] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:20003
[  844.033455][T21464] bond78: (slave vti3): Releasing backup interface
[  844.048934][T21466] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  844.052773][T21466] syzkaller0: entered promiscuous mode
[  844.055346][T21466] syzkaller0: entered allmulticast mode
[  844.059944][T21466] tipc: Resetting bearer <eth:syzkaller0>
[  844.076042][T21465] tipc: Resetting bearer <eth:syzkaller0>
[  844.081879][T21465] tipc: Disabling bearer <eth:syzkaller0>
[  844.267432][T21485] netlink: 'syz.1.12264': attribute type 1 has an invalid length.
[  844.285532][T21485] bond79: entered promiscuous mode
[  844.287603][T21485] bond79: entered allmulticast mode
[  844.289767][T21485] 8021q: adding VLAN 0 to HW filter on device bond79
[  844.360747][T21483] netlink: 'syz.2.12263': attribute type 10 has an invalid length.
[  844.388311][T21493] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  844.398567][T21494] syzkaller0: entered promiscuous mode
[  844.398712][T21497] netlink: 'syz.1.12267': attribute type 21 has an invalid length.
[  844.404075][T21494] syzkaller0: entered allmulticast mode
[  844.409613][T21495] tipc: Resetting bearer <eth:syzkaller0>
[  844.413423][T21495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  844.416046][T21495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  844.437081][T21495] tipc: Resetting bearer <eth:syzkaller0>
[  844.443878][T21495] tipc: Disabling bearer <eth:syzkaller0>
[  844.463715][T21503] syz.1.12268 uses old SIOCAX25GETINFO
[  845.239558][T21538] openvswitch: netlink: Flow actions attr not present in new flow.
[  846.698547][T21530] syz.1.12275 invoked oom-killer: gfp_mask=0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000
[  846.710859][T21530] CPU: 1 UID: 0 PID: 21530 Comm: syz.1.12275 Not tainted syzkaller #0 PREEMPT(full) 
[  846.710873][T21530] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  846.710878][T21530] Call Trace:
[  846.710881][T21530]  <TASK>
[  846.710885][T21530]  dump_stack_lvl+0x189/0x250
[  846.710898][T21530]  ? __pfx_dump_stack_lvl+0x10/0x10
[  846.710907][T21530]  ? __pfx__printk+0x10/0x10
[  846.710918][T21530]  ? rcu_is_watching+0x15/0xb0
[  846.710929][T21530]  dump_header+0xd3/0x480
[  846.710941][T21530]  oom_kill_process+0x387/0x920
[  846.710950][T21530]  out_of_memory+0xfe1/0x12a0
[  846.710959][T21530]  ? __pfx_out_of_memory+0x10/0x10
[  846.710965][T21530]  ? rcu_is_watching+0x15/0xb0
[  846.710973][T21530]  __alloc_pages_may_oom+0x1f2/0x330
[  846.710984][T21530]  ? __pfx___alloc_pages_may_oom+0x10/0x10
[  846.710996][T21530]  __alloc_pages_slowpath+0x706/0xce0
[  846.711006][T21530]  __alloc_frozen_pages_noprof+0x319/0x370
[  846.711014][T21530]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  846.711021][T21530]  ? alloc_pages_bulk_mempolicy_noprof+0x341/0x1650
[  846.711033][T21530]  ? policy_nodemask+0x27c/0x720
[  846.711043][T21530]  ? __pfx___might_resched+0x10/0x10
[  846.711051][T21530]  alloc_pages_mpol+0x232/0x4a0
[  846.711062][T21530]  alloc_pages_noprof+0xa9/0x190
[  846.711072][T21530]  __vmalloc_node_range_noprof+0x97d/0x12f0
[  846.711087][T21530]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  846.711098][T21530]  ? rcu_is_watching+0x15/0xb0
[  846.711105][T21530]  ? pfifo_fast_change_tx_queue_len+0x151/0xa30
[  846.711117][T21530]  ? pfifo_fast_change_tx_queue_len+0x151/0xa30
[  846.711127][T21530]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  846.711137][T21530]  ? pfifo_fast_change_tx_queue_len+0x151/0xa30
[  846.711147][T21530]  ? pfifo_fast_change_tx_queue_len+0xa2/0xa30
[  846.711158][T21530]  pfifo_fast_change_tx_queue_len+0x151/0xa30
[  846.711172][T21530]  ? lowpan_event+0x107/0x6a0
[  846.711182][T21530]  ? __pfx_pfifo_fast_change_tx_queue_len+0x10/0x10
[  846.711193][T21530]  dev_qdisc_change_tx_queue_len+0x3a6/0x510
[  846.711205][T21530]  ? __pfx_dev_qdisc_change_tx_queue_len+0x10/0x10
[  846.711216][T21530]  ? notifier_call_chain+0x3bf/0x3e0
[  846.711225][T21530]  netif_change_tx_queue_len+0x162/0x270
[  846.711234][T21530]  ? __pfx_netif_change_tx_queue_len+0x10/0x10
[  846.711242][T21530]  ? netif_change_flags+0xe8/0x1a0
[  846.711249][T21530]  do_setlink+0xdfb/0x41c0
[  846.711256][T21530]  ? rcu_is_watching+0x15/0xb0
[  846.711265][T21530]  ? __pfx_do_setlink+0x10/0x10
[  846.711272][T21530]  ? do_raw_spin_lock+0x121/0x290
[  846.711283][T21530]  ? rcu_is_watching+0x15/0xb0
[  846.711290][T21530]  ? rcu_is_watching+0x15/0xb0
[  846.711297][T21530]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  846.711307][T21530]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  846.711317][T21530]  ? rcu_is_watching+0x15/0xb0
[  846.711324][T21530]  ? __mutex_lock+0xd3b/0x1350
[  846.711335][T21530]  ? __mutex_lock+0x5bb/0x1350
[  846.711345][T21530]  ? rtnl_newlink+0x8db/0x1c70
[  846.711356][T21530]  ? __pfx___mutex_lock+0x10/0x10
[  846.711368][T21530]  ? ns_capable+0x8a/0xf0
[  846.711401][T21530]  ? rtnl_link_get_net_capable+0x16a/0x350
[  846.711411][T21530]  rtnl_newlink+0x149f/0x1c70
[  846.711423][T21530]  ? __pfx_rtnl_newlink+0x10/0x10
[  846.711435][T21530]  ? unwind_next_frame+0xa5/0x2390
[  846.711444][T21530]  ? rcu_is_watching+0x15/0xb0
[  846.711450][T21530]  ? unwind_next_frame+0xa5/0x2390
[  846.711459][T21530]  ? unwind_next_frame+0xa5/0x2390
[  846.711466][T21530]  ? rcu_is_watching+0x15/0xb0
[  846.711473][T21530]  ? unwind_next_frame+0xa5/0x2390
[  846.711481][T21530]  ? unwind_next_frame+0xa5/0x2390
[  846.711488][T21530]  ? rcu_is_watching+0x15/0xb0
[  846.711495][T21530]  ? is_bpf_text_address+0x26/0x2b0
[  846.711507][T21530]  ? rcu_is_watching+0x15/0xb0
[  846.711514][T21530]  ? rcu_is_watching+0x15/0xb0
[  846.711520][T21530]  ? lock_release+0x4b/0x3e0
[  846.711530][T21530]  ? lock_release+0x4b/0x3e0
[  846.711541][T21530]  ? is_bpf_text_address+0x292/0x2b0
[  846.711551][T21530]  ? is_bpf_text_address+0x26/0x2b0
[  846.711562][T21530]  ? kernel_text_address+0xa5/0xe0
[  846.711572][T21530]  ? __kernel_text_address+0xd/0x40
[  846.711582][T21530]  ? unwind_get_return_address+0x4d/0x90
[  846.711591][T21530]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  846.711601][T21530]  ? rcu_is_watching+0x15/0xb0
[  846.711608][T21530]  ? lock_release+0x4b/0x3e0
[  846.711618][T21530]  ? bpf_lsm_capable+0x9/0x20
[  846.711627][T21530]  ? security_capable+0x7e/0x2e0
[  846.711639][T21530]  ? __pfx_rtnl_newlink+0x10/0x10
[  846.711649][T21530]  rtnetlink_rcv_msg+0x7cf/0xb70
[  846.711659][T21530]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  846.711668][T21530]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  846.711679][T21530]  ? __netlink_lookup+0xbd/0x810
[  846.711685][T21530]  ? rcu_is_watching+0x15/0xb0
[  846.711693][T21530]  ? rcu_is_watching+0x15/0xb0
[  846.711700][T21530]  netlink_rcv_skb+0x208/0x470
[  846.711711][T21530]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  846.711721][T21530]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  846.711734][T21530]  netlink_unicast+0x82f/0x9e0
[  846.711744][T21530]  ? __pfx_netlink_unicast+0x10/0x10
[  846.711753][T21530]  ? netlink_sendmsg+0x642/0xb30
[  846.711763][T21530]  ? skb_put+0x11b/0x210
[  846.711770][T21530]  netlink_sendmsg+0x805/0xb30
[  846.711782][T21530]  ? __pfx_netlink_sendmsg+0x10/0x10
[  846.711793][T21530]  ? aa_sock_msg_perm+0xf1/0x1d0
[  846.711800][T21530]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  846.711808][T21530]  ? __pfx_netlink_sendmsg+0x10/0x10
[  846.711819][T21530]  __sock_sendmsg+0x21c/0x270
[  846.711829][T21530]  ____sys_sendmsg+0x505/0x830
[  846.711837][T21530]  ? __pfx_____sys_sendmsg+0x10/0x10
[  846.711845][T21530]  ? import_iovec+0x74/0xa0
[  846.711854][T21530]  ___sys_sendmsg+0x21f/0x2a0
[  846.711861][T21530]  ? __pfx____sys_sendmsg+0x10/0x10
[  846.711869][T21530]  ? futex_wake+0x4b2/0x560
[  846.711884][T21530]  ? __fget_files+0x2a/0x420
[  846.711894][T21530]  ? __fget_files+0x3a0/0x420
[  846.711906][T21530]  __x64_sys_sendmsg+0x19b/0x260
[  846.711914][T21530]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  846.711922][T21530]  ? rcu_is_watching+0x15/0xb0
[  846.711930][T21530]  ? rcu_is_watching+0x15/0xb0
[  846.711937][T21530]  do_syscall_64+0xfa/0x3b0
[  846.711948][T21530]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  846.711955][T21530]  ? exc_page_fault+0x9f/0xf0
[  846.711965][T21530]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  846.711972][T21530] RIP: 0033:0x7fc55a78ebe9
[  846.711984][T21530] Code: Unable to access opcode bytes at 0x7fc55a78ebbf.
[  846.711988][T21530] RSP: 002b:00007fc55b520038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  846.711997][T21530] RAX: ffffffffffffffda RBX: 00007fc55a9b5fa0 RCX: 00007fc55a78ebe9
[  846.712003][T21530] RDX: 0000000004000c00 RSI: 0000200000000180 RDI: 0000000000000003
[  846.712008][T21530] RBP: 00007fc55a811e19 R08: 0000000000000000 R09: 0000000000000000
[  846.712013][T21530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  846.712018][T21530] R13: 00007fc55a9b6038 R14: 00007fc55a9b5fa0 R15: 00007fff0a7f0808
[  846.712026][T21530]  </TASK>
[  846.712029][T21530] Mem-Info:
[  846.972097][T21530] active_anon:0 inactive_anon:106 isolated_anon:0
[  846.972097][T21530]  active_file:71 inactive_file:111 isolated_file:0
[  846.972097][T21530]  unevictable:1768 dirty:0 writeback:0
[  846.972097][T21530]  slab_reclaimable:16934 slab_unreclaimable:249735
[  846.972097][T21530]  mapped:16406 shmem:1768 pagetables:1236
[  846.972097][T21530]  sec_pagetables:0 bounce:0
[  846.972097][T21530]  kernel_misc_reclaimable:0
[  846.972097][T21530]  free:24292 free_pcp:55 free_cma:0
[  846.999614][T21530] Node 0 active_anon:36kB inactive_anon:148kB active_file:52kB inactive_file:200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32796kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9712kB pagetables:2108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  847.018425][T21530] Node 1 active_anon:8kB inactive_anon:188kB active_file:12kB inactive_file:136kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32828kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10992kB pagetables:2836kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  847.028869][T21530] Node 0 DMA free:3780kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:48kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  847.038313][T21530] lowmem_reserve[]: 0 811 811 811 811
[  847.049564][T21530] Node 0 DMA32 free:33792kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:64kB inactive_anon:208kB active_file:0kB inactive_file:124kB unevictable:3536kB writepending:0kB present:1556484kB managed:830948kB mlocked:0kB bounce:0kB free_pcp:684kB local_pcp:0kB free_cma:0kB
[  847.066746][T21530] lowmem_reserve[]: 0 0 0 0 0
[  847.069067][T21530] Node 1 DMA32 free:22740kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:32kB active_file:0kB inactive_file:24kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  847.129400][T21530] lowmem_reserve[]: 0 0 854 854 854
[  847.135736][T21530] Node 1 Normal free:36204kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:172kB active_file:0kB inactive_file:284kB unevictable:3536kB writepending:0kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:544kB local_pcp:544kB free_cma:0kB
[  847.194847][T21530] lowmem_reserve[]: 0 0 0 0 0
[  847.198907][T21530] Node 0 DMA: 3*4kB (UM) 4*8kB (UM) 1*16kB (M) 4*32kB (UM) 2*64kB (UM) 2*128kB (M) 3*256kB (UM) 1*512kB (U) 2*1024kB (UM) 0*2048kB 0*4096kB = 3900kB
[  847.219992][T21530] Node 0 DMA32: 67*4kB (UME) 178*8kB (UME) 116*16kB (UME) 127*32kB (UME) 63*64kB (ME) 42*128kB (UME) 20*256kB (UME) 14*512kB (UME) 4*1024kB (U) 0*2048kB 0*4096kB = 33404kB
[  847.247487][T21530] Node 1 DMA32: 2*4kB (ME) 11*8kB (UME) 28*16kB (ME) 19*32kB (UME) 14*64kB (ME) 9*128kB (UME) 6*256kB (UME) 7*512kB (ME) 14*1024kB (UME) 0*2048kB 0*4096kB = 22656kB
[  847.282725][T21530] Node 1 Normal: 13*4kB (UME) 60*8kB (ME) 70*16kB (UME) 63*32kB (UME) 46*64kB (UME) 27*128kB (UME) 21*256kB (UME) 11*512kB (UM) 15*1024kB (UM) 0*2048kB 0*4096kB = 36436kB
[  847.289214][T21530] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  847.315990][T21530] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  847.319196][T21530] 1884 total pagecache pages
[  847.339973][T21530] 98 pages in swap cache
[  847.341494][T21530] Free swap  = 108940kB
[  847.342979][T21530] Total swap = 124996kB
[  847.344522][T21530] 786301 pages RAM
[  847.345763][T21530] 0 pages HighMem/MovableOnly
[  847.347366][T21530] 241332 pages reserved
[  847.348815][T21530] 0 pages cma reserved
[  847.375554][T21530] Unreclaimable slab info:
[  847.377249][T21530] Name                      Used          Total
[  847.379352][T21530] pid_2                     49KB        110KB
[  847.383132][T21530] bio-360                    8KB          8KB
[  847.385144][T21530] bio-424                    8KB          8KB
[  847.387257][T21530] bio-440                    8KB          8KB
[  847.397781][T21530] bio-536                   15KB         15KB
[  847.399803][T21530] zspage-zswap1            118KB        118KB
[  847.402010][T21530] zs_handle-zswap1         132KB        140KB
[  847.406432][T21530] zswap_entry              355KB        379KB
[  847.417050][T21530] AF_VSOCK                 252KB        378KB
[  847.422063][T21530] sw_flow_stats             16KB         16KB
[  847.424172][T21530] sw_flow                   79KB         79KB
[  847.426233][T21530] batadv_tt_change_cache         16KB         16KB
[  847.428483][T21530] batadv_tl_cache           28KB         28KB
[  847.435538][T21530] IEEE-802.15.4-MAC         63KB         63KB
[  847.438016][T21530] IEEE-802.15.4-RAW         63KB         63KB
[  847.440168][T21530] INET6_SMC                 29KB         29KB
[  847.442176][T21530] INET_SMC                  31KB         31KB
[  847.447650][T21530] SMC6                      93KB         93KB
[  847.456529][T21530] SMC                      312KB        343KB
[  847.458508][T21530] TIPC                     166KB        414KB
[  847.480179][T21530] rds_tcp_connection         23KB         23KB
[  847.482473][T21530] RDS                      160KB        256KB
[  847.484479][T21530] rds_connection             7KB          7KB
[  847.510000][T21530] SCTPv6                   225KB        463KB
[  847.512064][T21530] SCTP                     220KB        472KB
[  847.514555][T21530] sctp_chunk                70KB        133KB
[  847.517010][T21530] sctp_bind_bucket           8KB          8KB
[  847.519059][T21530] PNPIPE                    61KB         61KB
[  847.559942][T21530] PHONET                    63KB         63KB
[  847.562338][T21530] L2TP/IPv6                159KB        255KB
[  847.564537][T21530] L2TP/IP                  189KB        189KB
[  847.566580][T21530] KCM                       95KB        191KB
[  847.568626][T21530] kcm_psock                 15KB         15KB
[  847.584610][T21530] kcm_mux                   94KB         94KB
[  847.586644][T21530] RXRPC                    196KB        352KB
[  847.588685][T21530] rxrpc_call_jar           165KB        318KB
[  847.599950][T21530] can_gw                     4KB          4KB
[  847.619940][T21530] can_receiver              27KB         63KB
[  847.622029][T21530] net_bridge_fdb_entry        138KB        172KB
[  847.633450][T21530] nf-frags                  23KB         23KB
[  847.636069][T21530] xfrm6_tunnel_spi           4KB          4KB
[  847.638667][T21530] MPTCPv6                  250KB        343KB
[  847.681146][T21530] fib6_node                 46KB         56KB
[  847.683201][T21530] ip6_dst_cache             57KB         94KB
[  847.685224][T21530] mfc6_cache                 8KB          8KB
[  847.687261][T21530] PINGv6                    96KB         96KB
[  847.689273][T21530] RAWv6                    204KB        416KB
[  847.725208][T21530] UDPLITEv6                127KB        255KB
[  847.727199][T21530] UDPv6                    172KB        286KB
[  847.729157][T21530] tw_sock_TCPv6             15KB         15KB
[  847.748124][T21530] request_sock_TCPv6          7KB          7KB
[  847.750407][T21530] TCPv6                    276KB        425KB
[  847.752399][T21530] nf_conntrack              57KB         94KB
[  847.754517][T21530] fq_flow_cache              8KB          8KB
[  847.756795][T21530] wg_peer                   59KB         59KB
[  847.758811][T21530] allowedips_node            7KB          7KB
[  847.761932][T21530] t10_alua_lu_gp_cache          3KB          3KB
[  847.820046][T21530] scsi_sense_cache          44KB         44KB
[  847.822092][T21530] virtio_scsi_cmd           16KB         16KB
[  847.824336][T21530] bio-136                   87KB        112KB
[  847.826338][T21530] bio-264                    7KB          7KB
[  847.828328][T21530] mqueue_inode_cache        157KB        157KB
[  847.866637][T21530] f2fs_bio_post_read_ctx         23KB         23KB
[  847.868905][T21530] jfs_mp                     7KB          7KB
[  847.883107][T21530] cifs_small_rq             16KB         16KB
[  847.917662][T21530] cifs_request              67KB         67KB
[  847.919698][T21530] cifs_mpx_ids               7KB          7KB
[  847.934178][T21530] cifs_io_subrequest         39KB         39KB
[  847.936206][T21530] cifs_io_request          112KB        112KB
[  847.938186][T21530] nfs_commit_data           15KB         15KB
[  847.981473][T21530] nfs_write_data            47KB         47KB
[  847.983471][T21530] jbd2_inode                 7KB          7KB
[  847.985442][T21530] ext4_system_zone           3KB          3KB
[  847.987701][T21530] ext4_io_end_vec            7KB          7KB
[  847.989827][T21530] fasync_cache               7KB          7KB
[  848.024912][T21530] pid_namespace             15KB         15KB
[  848.050730][T21530] rpc_buffers              127KB        127KB
[  848.053016][T21530] rpc_tasks                 15KB         15KB
[  848.055139][T21530] UNIX-STREAM              240KB        446KB
[  848.057301][T21530] UNIX                     246KB        510KB
[  848.059303][T21530] ip4-frags                 15KB         15KB
[  848.088171][T21530] mfc_cache                  8KB          8KB
[  848.090711][T21530] UDP-Lite                 128KB        320KB
[  848.093011][T21530] MPTCP                    270KB        270KB
[  848.095320][T21530] request_sock_subflow_v4          7KB          7KB
[  848.097442][T21530] tcp_bind2_bucket          16KB         16KB
[  848.099441][T21530] tcp_bind_bucket           12KB         12KB
[  848.149952][T21530] inet_peer                  8KB          8KB
[  848.151970][T21530] xfrm_dst                  23KB         63KB
[  848.154013][T21530] xfrm_state               110KB        110KB
[  848.155997][T21530] ip_fib_trie               16KB         16KB
[  848.157951][T21530] ip_fib_alias              31KB         51KB
[  848.170686][T21530] rtable                    49KB        108KB
[  848.172887][T21530] PING                      94KB         94KB
[  848.175118][T21530] RAW                      231KB        346KB
[  848.177269][T21530] UDP                      134KB        352KB
[  848.201801][T21530] tw_sock_TCP                7KB          7KB
[  848.204400][T21530] request_sock_TCP          15KB         15KB
[  848.207034][T21530] TCP                      230KB        468KB
[  848.209663][T21530] hugetlbfs_inode_cache         77KB        151KB
[  848.257113][T21530] netfs_subrequest          39KB         39KB
[  848.259230][T21530] netfs_request            112KB        112KB
[  848.263470][T21530] bio-280                   15KB         15KB
[  848.268600][T21530] ep_head                    8KB          8KB
[  848.274915][T21530] eventpoll_pwq             19KB         19KB
[  848.278826][T21530] eventpoll_epi             28KB         60KB
[  848.302533][T21530] inotify_inode_mark         27KB         27KB
[  848.304886][T21530] sgpool-128                29KB         29KB
[  848.306905][T21530] sgpool-64                 31KB         31KB
[  848.308956][T21530] sgpool-32                346KB        362KB
[  848.344032][T21530] sgpool-16                105KB        142KB
[  848.362432][T21530] sgpool-8                 118KB        165KB
[  848.364610][T21530] bio_crypt_ctx              7KB          7KB
[  848.401732][T21530] bio_integrity_data          4KB          4KB
[  848.404491][T21530] request_queue            191KB        191KB
[  848.407123][T21530] blkdev_ioc                 3KB          3KB
[  848.409765][T21530] bio-200                  385KB        385KB
[  848.459461][T21530] biovec-max               467KB        629KB
[  848.470009][T21530] biovec-64                504KB        519KB
[  848.471950][T21530] biovec-16                 86KB        126KB
[  848.473958][T21530] uid_cache                  7KB          7KB
[  848.475849][T21530] dmaengine-unmap-256         31KB         31KB
[  848.477766][T21530] dmaengine-unmap-128         15KB         15KB
[  848.479764][T21530] dmaengine-unmap-16          4KB          4KB
[  848.484606][T21530] dmaengine-unmap-2          4KB          4KB
[  848.530360][T21530] QIPCRTR                  159KB        346KB
[  848.532884][T21530] audit_buffer               7KB          7KB
[  848.535138][T21530] skbuff_ext_cache          40KB         80KB
[  848.555245][T21530] skbuff_small_head        417KB        708KB
[  848.557959][T21530] skbuff_fclone_cache         28KB        120KB
[  848.581662][T21530] skbuff_head_cache       8922KB       9024KB
[  848.611896][T21530] configfs_dir_cache          8KB          8KB
[  848.614633][T21530] file_lock_cache           27KB         47KB
[  848.617249][T21530] file_lock_ctx             19KB         19KB
[  848.650074][T21530] fsnotify_mark_connector         15KB         15KB
[  848.652860][T21530] taskstats                 63KB        169KB
[  848.655083][T21530] mem_cgroup_per_node         85KB         95KB
[  848.657728][T21530] mem_cgroup                58KB         58KB
[  848.702460][T21530] proc_dir_entry           998KB       1132KB
[  848.704489][T21530] pde_opener                 7KB          7KB
[  848.706505][T21530] seq_file                  37KB         52KB
[  848.708515][T21530] sigqueue                  27KB         63KB
[  848.720668][T21530] shmem_inode_cache       7300KB       7755KB
[  848.742573][T21530] kernfs_iattrs_cache          7KB          7KB
[  848.744738][T21530] kernfs_node_cache      68000KB      68196KB
[  848.747135][T21530] mnt_cache                123KB        152KB
[  848.749399][T21530] filp                     234KB        672KB
[  848.778928][T21530] names_cache              650KB       1160KB
[  848.794502][T21530] net_namespace            163KB        190KB
[  848.796756][T21530] ima_iint_cache            39KB         39KB
[  848.798848][T21530] lsm_inode_cache         3754KB       4358KB
[  848.834340][T21530] lsm_file_cache            51KB        204KB
[  848.836418][T21530] key_jar                   16KB         16KB
[  848.838438][T21530] uts_namespace             23KB         23KB
[  848.860596][T21530] nsproxy                   43KB         63KB
[  848.877105][T21530] vm_area_struct           504KB        866KB
[  848.879143][T21530] fs_cache                  36KB         52KB
[  848.892090][T21530] files_cache               92KB        192KB
[  848.898448][T21530] signal_cache            1183KB       1386KB
[  848.912163][T21530] sighand_cache           1586KB       1821KB
[  848.914169][T21530] task_struct             4873KB       6123KB
[  848.916203][T21530] cred                     190KB        296KB
[  848.918234][T21530] anon_vma_chain            90KB        177KB
[  848.949955][T21530] anon_vma                 149KB        255KB
[  848.952015][T21530] pid                      251KB        330KB
[  848.954033][T21530] Acpi-Operand             171KB        233KB
[  848.955979][T21530] Acpi-ParseExt             27KB         27KB
[  848.958455][T21530] Acpi-Parse                23KB         59KB
[  848.970626][T21530] Acpi-State                27KB         59KB
[  848.972678][T21530] Acpi-Namespace            24KB         24KB
[  848.974735][T21530] numa_policy                3KB          3KB
[  848.976805][T21530] perf_event                31KB         31KB
[  848.978864][T21530] trace_event_file         540KB        540KB
[  849.003015][T21530] ftrace_event_field       1008KB       1008KB
[  849.005286][T21530] pool_workqueue          1171KB       1184KB
[  849.038737][T21530] maple_node               452KB       1416KB
[  849.040977][T21530] task_group                30KB         30KB
[  849.043235][T21530] mm_struct                155KB        413KB
[  849.045427][T21530] vmap_area                539KB        594KB
[  849.047707][T21530] debug_objects_cache       5964KB       6339KB
[  849.058694][T21530] page->ptl                 60KB        129KB
[  849.061114][T21530] kmalloc-cg-8k          14400KB      14560KB
[  849.063525][T21530] kmalloc-cg-4k          48536KB      49856KB
[  849.065840][T21530] kmalloc-cg-2k          34316KB      35680KB
[  849.068315][T21530] kmalloc-cg-1k           7794KB       7968KB
[  849.078753][T21530] kmalloc-cg-512          1692KB       2064KB
[  849.090248][T21530] kmalloc-cg-256          1616KB       1736KB
[  849.092874][T21530] kmalloc-cg-128           502KB        532KB
[  849.095494][T21530] kmalloc-cg-64            212KB        344KB
[  849.098838][T21530] kmalloc-cg-32             60KB        144KB
[  849.110346][T21530] kmalloc-cg-16             21KB         44KB
[  849.112602][T21530] kmalloc-cg-8              64KB         76KB
[  849.116265][T21530] kmalloc-cg-192            64KB        144KB
[  849.121858][T21530] kmalloc-cg-96             89KB        152KB
[  849.128962][T21530] kmalloc-8k             15920KB      16352KB
[  849.133977][T21530] kmalloc-4k              6792KB       9280KB
[  849.136673][T21530] kmalloc-2k             64576KB      65568KB
[  849.139310][T21530] kmalloc-1k             17826KB      18624KB
[  849.147897][T21530] kmalloc-512            14888KB      15648KB
[  849.154953][T21530] kmalloc-256             6980KB       6980KB
[  849.165463][T21530] kmalloc-128             1534KB       1700KB
[  849.170181][T21530] kmalloc-64              3797KB       4636KB
[  849.176983][T21530] kmalloc-32              4160KB       4912KB
[  849.187304][T21530] kmalloc-16               806KB        820KB
[  849.189459][T21530] kmalloc-8               1463KB       1704KB
[  849.196163][T21530] kmalloc-192             4590KB       4660KB
[  849.198709][T21530] kmalloc-96              2001KB       2084KB
[  849.207280][T21530] kmem_cache_node          215KB        216KB
[  849.213416][T21530] kmem_cache               180KB        180KB
[  849.215891][T21530] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz1/syz0,task=syz.1.12275,pid=21530,uid=0
[  849.235611][T21530] Out of memory (oom_kill_allocating_task): Killed process 21529 (syz.1.12275) total-vm:101960kB, anon-rss:0kB, file-rss:20480kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000
[  849.255510][T21530] pimreg0: refused to change device tx_queue_len
[  849.258239][T21530] A link change request failed with some changes committed already. Interface pimreg0 may have been left with an inconsistent configuration, please check.
[  849.465998][T21546] __nla_validate_parse: 19 callbacks suppressed
[  849.466009][T21546] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.12279'.
[  850.136823][T21544] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12278'.
[  850.151944][T21544] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12278'.
[  850.296175][T21553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12280'.
[  850.525693][T21555] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12281'.
[  850.537567][T21544] validate_nla: 2 callbacks suppressed
[  850.537577][T21544] netlink: 'syz.0.12278': attribute type 29 has an invalid length.
[  850.554811][T21544] netlink: 'syz.0.12278': attribute type 29 has an invalid length.
[  850.628558][T21558] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12280'.
[  850.680437][T21560] netlink: 500 bytes leftover after parsing attributes in process `syz.0.12278'.
[  850.687304][T21560] unsupported nla_type 58
[  850.836114][T21559] netlink: 332 bytes leftover after parsing attributes in process `syz.1.12282'.
[  850.848311][T21559] netlink: 104 bytes leftover after parsing attributes in process `syz.1.12282'.
[  850.860241][T21559] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12282'.
[  851.076656][T21559] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  851.187702][T21566] vlan4: entered promiscuous mode
[  851.193759][T21566] bridge0: entered promiscuous mode
[  851.613099][T21578] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  851.763231][T21579] netlink: 'syz.2.12285': attribute type 10 has an invalid length.
[  851.856099][T21579] netlink: 'syz.2.12285': attribute type 10 has an invalid length.
[  852.401058][T21615] netlink: 'syz.1.12296': attribute type 13 has an invalid length.
[  853.158297][T21622] openvswitch: netlink: Missing key (keys=40, expected=100)
[  854.181445][T21615] syz.1.12296: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  854.187643][T21615] CPU: 0 UID: 0 PID: 21615 Comm: syz.1.12296 Not tainted syzkaller #0 PREEMPT(full) 
[  854.187656][T21615] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  854.187661][T21615] Call Trace:
[  854.187665][T21615]  <TASK>
[  854.187669][T21615]  dump_stack_lvl+0x189/0x250
[  854.187682][T21615]  ? __pfx_dump_stack_lvl+0x10/0x10
[  854.187691][T21615]  ? __pfx__printk+0x10/0x10
[  854.187701][T21615]  ? lock_release+0x4b/0x3e0
[  854.187712][T21615]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  854.187722][T21615]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  854.187730][T21615]  warn_alloc+0x214/0x310
[  854.187742][T21615]  ? __pfx_warn_alloc+0x10/0x10
[  854.187754][T21615]  ? __get_vm_area_node+0x28f/0x300
[  854.187764][T21615]  ? pfifo_fast_change_tx_queue_len+0x110/0xa30
[  854.187776][T21615]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  854.187791][T21615]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  854.187803][T21615]  ? rcu_is_watching+0x15/0xb0
[  854.187810][T21615]  ? pfifo_fast_change_tx_queue_len+0x110/0xa30
[  854.187820][T21615]  ? pfifo_fast_change_tx_queue_len+0x110/0xa30
[  854.187830][T21615]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  854.187840][T21615]  ? pfifo_fast_change_tx_queue_len+0x110/0xa30
[  854.187850][T21615]  ? pfifo_fast_change_tx_queue_len+0xa2/0xa30
[  854.187861][T21615]  pfifo_fast_change_tx_queue_len+0x110/0xa30
[  854.187874][T21615]  ? lowpan_event+0x107/0x6a0
[  854.187884][T21615]  ? __pfx_pfifo_fast_change_tx_queue_len+0x10/0x10
[  854.187894][T21615]  dev_qdisc_change_tx_queue_len+0x3a6/0x510
[  854.187907][T21615]  ? __pfx_dev_qdisc_change_tx_queue_len+0x10/0x10
[  854.187918][T21615]  ? notifier_call_chain+0x3bf/0x3e0
[  854.187927][T21615]  netif_change_tx_queue_len+0x162/0x270
[  854.187935][T21615]  ? __pfx_netif_change_tx_queue_len+0x10/0x10
[  854.187943][T21615]  ? netif_change_flags+0xe8/0x1a0
[  854.187951][T21615]  do_setlink+0xdfb/0x41c0
[  854.187958][T21615]  ? __kernel_text_address+0xd/0x40
[  854.187970][T21615]  ? __pfx_do_setlink+0x10/0x10
[  854.187976][T21615]  ? _printk+0xcf/0x120
[  854.187985][T21615]  ? __pfx____ratelimit+0x10/0x10
[  854.187998][T21615]  ? __mutex_trylock_common+0x153/0x260
[  854.188006][T21615]  ? __pfx___mutex_trylock_common+0x10/0x10
[  854.188014][T21615]  ? rcu_is_watching+0x15/0xb0
[  854.188021][T21615]  ? trace_contention_end+0x39/0x120
[  854.188029][T21615]  ? __mutex_lock+0x335/0x1350
[  854.188041][T21615]  ? rtnl_newlink+0x8db/0x1c70
[  854.188052][T21615]  ? __pfx___mutex_lock+0x10/0x10
[  854.188063][T21615]  ? ns_capable+0x8a/0xf0
[  854.188070][T21615]  ? rtnl_link_get_net_capable+0x16a/0x350
[  854.188078][T21615]  rtnl_newlink+0x149f/0x1c70
[  854.188090][T21615]  ? __pfx_rtnl_newlink+0x10/0x10
[  854.188099][T21615]  ? unwind_next_frame+0xa5/0x2390
[  854.188108][T21615]  ? unwind_next_frame+0xa5/0x2390
[  854.188116][T21615]  ? rcu_is_watching+0x15/0xb0
[  854.188123][T21615]  ? is_bpf_text_address+0x26/0x2b0
[  854.188133][T21615]  ? rcu_is_watching+0x15/0xb0
[  854.188141][T21615]  ? unwind_next_frame+0xa5/0x2390
[  854.188148][T21615]  ? rcu_is_watching+0x15/0xb0
[  854.188155][T21615]  ? unwind_next_frame+0xa5/0x2390
[  854.188163][T21615]  ? unwind_next_frame+0xa5/0x2390
[  854.188170][T21615]  ? rcu_is_watching+0x15/0xb0
[  854.188177][T21615]  ? unwind_next_frame+0xa5/0x2390
[  854.188185][T21615]  ? unwind_next_frame+0xa5/0x2390
[  854.188192][T21615]  ? rcu_is_watching+0x15/0xb0
[  854.188199][T21615]  ? is_bpf_text_address+0x26/0x2b0
[  854.188209][T21615]  ? rcu_is_watching+0x15/0xb0
[  854.188216][T21615]  ? rcu_is_watching+0x15/0xb0
[  854.188223][T21615]  ? lock_release+0x4b/0x3e0
[  854.188233][T21615]  ? lock_release+0x4b/0x3e0
[  854.188244][T21615]  ? is_bpf_text_address+0x292/0x2b0
[  854.188254][T21615]  ? is_bpf_text_address+0x26/0x2b0
[  854.188264][T21615]  ? kernel_text_address+0xa5/0xe0
[  854.188274][T21615]  ? __kernel_text_address+0xd/0x40
[  854.188283][T21615]  ? unwind_get_return_address+0x4d/0x90
[  854.188293][T21615]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  854.188303][T21615]  ? rcu_is_watching+0x15/0xb0
[  854.188309][T21615]  ? lock_release+0x4b/0x3e0
[  854.188319][T21615]  ? bpf_lsm_capable+0x9/0x20
[  854.188329][T21615]  ? security_capable+0x7e/0x2e0
[  854.188339][T21615]  ? __pfx_rtnl_newlink+0x10/0x10
[  854.188351][T21615]  rtnetlink_rcv_msg+0x7cf/0xb70
[  854.188388][T21615]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  854.188398][T21615]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  854.188408][T21615]  ? __netlink_lookup+0xbd/0x810
[  854.188415][T21615]  ? rcu_is_watching+0x15/0xb0
[  854.188422][T21615]  ? rcu_is_watching+0x15/0xb0
[  854.188429][T21615]  netlink_rcv_skb+0x208/0x470
[  854.188440][T21615]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  854.188450][T21615]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  854.188463][T21615]  netlink_unicast+0x82f/0x9e0
[  854.188474][T21615]  ? __pfx_netlink_unicast+0x10/0x10
[  854.188483][T21615]  ? netlink_sendmsg+0x642/0xb30
[  854.188493][T21615]  ? skb_put+0x11b/0x210
[  854.188500][T21615]  netlink_sendmsg+0x805/0xb30
[  854.188512][T21615]  ? __pfx_netlink_sendmsg+0x10/0x10
[  854.188522][T21615]  ? futex_unqueue+0x22/0x240
[  854.188531][T21615]  ? aa_sock_msg_perm+0xf1/0x1d0
[  854.188537][T21615]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  854.188546][T21615]  ? __pfx_netlink_sendmsg+0x10/0x10
[  854.188556][T21615]  __sock_sendmsg+0x21c/0x270
[  854.188566][T21615]  ____sys_sendmsg+0x505/0x830
[  854.188574][T21615]  ? __pfx_____sys_sendmsg+0x10/0x10
[  854.188583][T21615]  ? import_iovec+0x74/0xa0
[  854.188592][T21615]  ___sys_sendmsg+0x21f/0x2a0
[  854.188603][T21615]  ? __pfx____sys_sendmsg+0x10/0x10
[  854.188612][T21615]  ? futex_wait+0x285/0x360
[  854.188626][T21615]  ? __fget_files+0x2a/0x420
[  854.188637][T21615]  ? __fget_files+0x3a0/0x420
[  854.188648][T21615]  __x64_sys_sendmsg+0x19b/0x260
[  854.188656][T21615]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  854.188665][T21615]  ? rcu_is_watching+0x15/0xb0
[  854.188672][T21615]  ? rcu_is_watching+0x15/0xb0
[  854.188680][T21615]  do_syscall_64+0xfa/0x3b0
[  854.188691][T21615]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  854.188698][T21615]  ? exc_page_fault+0x9f/0xf0
[  854.188707][T21615]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  854.188714][T21615] RIP: 0033:0x7fc55a78ebe9
[  854.188723][T21615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  854.188730][T21615] RSP: 002b:00007fc55b520038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  854.188739][T21615] RAX: ffffffffffffffda RBX: 00007fc55a9b5fa0 RCX: 00007fc55a78ebe9
[  854.188744][T21615] RDX: 0000000004000c00 RSI: 0000200000000180 RDI: 0000000000000003
[  854.188750][T21615] RBP: 00007fc55a811e19 R08: 0000000000000000 R09: 0000000000000000
[  854.188755][T21615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  854.188759][T21615] R13: 00007fc55a9b6038 R14: 00007fc55a9b5fa0 R15: 00007fff0a7f0808
[  854.188768][T21615]  </TASK>
[  854.188771][T21615] Mem-Info:
[  854.424033][T21615] active_anon:55 inactive_anon:92 isolated_anon:0
[  854.424033][T21615]  active_file:249 inactive_file:83 isolated_file:0
[  854.424033][T21615]  unevictable:1768 dirty:0 writeback:0
[  854.424033][T21615]  slab_reclaimable:17093 slab_unreclaimable:245249
[  854.424033][T21615]  mapped:16585 shmem:1768 pagetables:1248
[  854.424033][T21615]  sec_pagetables:0 bounce:0
[  854.424033][T21615]  kernel_misc_reclaimable:0
[  854.424033][T21615]  free:31800 free_pcp:1221 free_cma:0
[  854.443441][T21615] Node 0 active_anon:68kB inactive_anon:188kB active_file:688kB inactive_file:68kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33224kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9588kB pagetables:2036kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB
[  854.455762][T21615] Node 1 active_anon:104kB inactive_anon:228kB active_file:308kB inactive_file:264kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:33116kB dirty:8kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9424kB pagetables:2956kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  854.468462][T21615] Node 0 DMA free:3948kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  854.480214][T21615] lowmem_reserve[]: 0 811 811 811 811
[  854.482131][T21615] Node 0 DMA32 free:40840kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:2048KB free_highatomic:80KB active_anon:8kB inactive_anon:252kB active_file:708kB inactive_file:32kB unevictable:3536kB writepending:0kB present:1556484kB managed:830948kB mlocked:0kB bounce:0kB free_pcp:2080kB local_pcp:2016kB free_cma:0kB
[  854.494579][T21615] lowmem_reserve[]: 0 0 0 0 0
[  854.496563][T21615] Node 1 DMA32 free:24440kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:4096KB free_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:932kB local_pcp:0kB free_cma:0kB
[  854.508714][T21615] lowmem_reserve[]: 0 0 854 854 854
[  854.511323][T21615] Node 1 Normal free:57852kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:2048KB free_highatomic:288KB active_anon:40kB inactive_anon:256kB active_file:316kB inactive_file:224kB unevictable:3536kB writepending:8kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:1872kB local_pcp:904kB free_cma:0kB
[  854.523488][T21615] lowmem_reserve[]: 0 0 0 0 0
[  854.525575][T21615] Node 0 DMA: 6*4kB (UME) 4*8kB (UME) 4*16kB (UME) 3*32kB (ME) 3*64kB (ME) 4*128kB (UME) 4*256kB (UME) 2*512kB (UE) 1*1024kB (M) 0*2048kB 0*4096kB = 3992kB
[  854.532404][T21615] Node 0 DMA32: 0*4kB 141*8kB (UMEH) 101*16kB (UME) 108*32kB (UMEH) 63*64kB (UME) 41*128kB (UME) 25*256kB (UME) 23*512kB (UME) 7*1024kB (UM) 0*2048kB 0*4096kB = 40824kB
[  854.539082][T21615] Node 1 DMA32: 34*4kB (UME) 24*8kB (UM) 33*16kB (UME) 31*32kB (UME) 27*64kB (UME) 13*128kB (UME) 7*256kB (UME) 10*512kB (UME) 12*1024kB (UME) 0*2048kB 0*4096kB = 24440kB
[  854.546114][T21615] Node 1 Normal: 29*4kB (UMEH) 97*8kB (UMEH) 58*16kB (UMEH) 39*32kB (UMEH) 50*64kB (UMEH) 37*128kB (UME) 69*256kB (UME) 29*512kB (UME) 14*1024kB (UME) 0*2048kB 0*4096kB = 57852kB
[  854.553288][T21615] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  854.557021][T21615] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  854.561183][T21615] 2240 total pagecache pages
[  854.563156][T21615] 154 pages in swap cache
[  854.565009][T21615] Free swap  = 92676kB
[  854.566705][T21615] Total swap = 124996kB
[  854.568490][T21615] 786301 pages RAM
[  854.570139][T21615] 0 pages HighMem/MovableOnly
[  854.572173][T21615] 241332 pages reserved
[  854.573992][T21615] 0 pages cma reserved
[  854.578177][T21615] pimreg0: refused to change device tx_queue_len
[  854.580971][T21615] A link change request failed with some changes committed already. Interface pimreg0 may have been left with an inconsistent configuration, please check.
[  854.685334][T21629] __nla_validate_parse: 8 callbacks suppressed
[  854.685378][T21629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12299'.
[  854.787100][T21634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12298'.
[  854.803138][T21639] netlink: 'syz.2.12301': attribute type 4 has an invalid length.
[  854.921106][T21628] dvmrp8: entered allmulticast mode
[  854.929782][T21625] dvmrp8: left allmulticast mode
[  854.947017][T21641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12302'.
[  855.029507][T21651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12304'.
[  855.172231][T21656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12306'.
[  855.247550][T21675] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  855.250846][T21675] syzkaller0: entered promiscuous mode
[  855.252704][T21675] syzkaller0: entered allmulticast mode
[  855.282066][T21675] tipc: Resetting bearer <eth:syzkaller0>
[  855.291140][T21674] tipc: Resetting bearer <eth:syzkaller0>
[  855.322237][T21674] tipc: Disabling bearer <eth:syzkaller0>
[  855.405192][T21683] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12312'.
[  855.412295][T21683] syzkaller0: entered promiscuous mode
[  855.418347][T21683] syzkaller0: entered allmulticast mode
[  855.435012][T21684] macsec2: entered allmulticast mode
[  855.437493][T21684] ip6gretap0: entered allmulticast mode
[  855.461119][T21684] ip6gretap0: left allmulticast mode
[  855.473644][T21683] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  855.953794][T21695] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  855.983724][T21679] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  856.015843][T21679] syzkaller0: entered promiscuous mode
[  856.019872][T21679] syzkaller0: entered allmulticast mode
[  856.052730][T21697] syzkaller0: entered promiscuous mode
[  856.055723][T21697] syzkaller0: entered allmulticast mode
[  856.179515][T21676] tipc: Resetting bearer <eth:syzkaller0>
[  856.293850][T21676] tipc: Disabling bearer <eth:syzkaller0>
[  856.509005][T21712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12319'.
[  856.531898][T21711] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12318'.
[  856.786871][T21729] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  856.789807][T21729] syzkaller0: entered promiscuous mode
[  856.791765][T21729] syzkaller0: entered allmulticast mode
[  856.800053][T21728] tipc: Resetting bearer <eth:syzkaller0>
[  856.821728][T21728] tipc: Disabling bearer <eth:syzkaller0>
[  856.849862][T21736] syzkaller0: entered promiscuous mode
[  856.859283][T21736] syzkaller0: entered allmulticast mode
[  856.994968][T21738] netlink: 'syz.1.12324': attribute type 1 has an invalid length.
[  857.014461][T21738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12324'.
[  857.072157][T21743] bridge91: port 1(veth33) entered blocking state
[  857.090860][T21743] bridge91: port 1(veth33) entered disabled state
[  857.093795][T21743] veth33: entered allmulticast mode
[  857.096729][T21743] veth33: entered promiscuous mode
[  857.122654][T21739] bridge91: port 2(veth35) entered blocking state
[  857.133922][T21739] bridge91: port 2(veth35) entered disabled state
[  857.144948][T21739] veth35: entered allmulticast mode
[  857.158799][T21739] veth35: entered promiscuous mode
[  857.162668][T21738] bridge91: port 3(veth0_to_bond) entered blocking state
[  857.168678][T21738] bridge91: port 3(veth0_to_bond) entered disabled state
[  857.171222][T21738] veth0_to_bond: entered allmulticast mode
[  857.174020][T21738] veth0_to_bond: entered promiscuous mode
[  857.240419][T21746] syzkaller0: entered promiscuous mode
[  857.242220][T21746] syzkaller0: entered allmulticast mode
[  857.378983][T21750] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  857.389615][T21750] syzkaller0: entered promiscuous mode
[  857.395492][T21750] syzkaller0: entered allmulticast mode
[  857.477173][T21749] tipc: Resetting bearer <eth:syzkaller0>
[  857.486739][T21749] tipc: Disabling bearer <eth:syzkaller0>
[  857.595283][T21762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12330'.
[  857.736637][T21783] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  857.741583][T21783] syzkaller0: entered promiscuous mode
[  857.747150][T21783] syzkaller0: entered allmulticast mode
[  857.790278][T21783] tipc: Resetting bearer <eth:syzkaller0>
[  857.809815][T21783] tipc: Disabling bearer <eth:syzkaller0>
[  857.961175][T21799] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  857.964709][T21799] syzkaller0: entered promiscuous mode
[  857.967055][T21799] syzkaller0: entered allmulticast mode
[  857.990756][T21799] tipc: Resetting bearer <eth:syzkaller0>
[  857.995244][T21797] tipc: Resetting bearer <eth:syzkaller0>
[  857.998965][T21797] tipc: Disabling bearer <eth:syzkaller0>
[  858.082177][T21796] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  858.424533][T21812] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  858.442698][T21812] syzkaller0: entered promiscuous mode
[  858.444802][T21812] syzkaller0: entered allmulticast mode
[  858.782813][T21812] tipc: Resetting bearer <eth:syzkaller0>
[  858.803483][T21811] tipc: Resetting bearer <eth:syzkaller0>
[  859.052061][T21811] tipc: Disabling bearer <eth:syzkaller0>
[  859.064225][T21819] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  859.066709][T21819] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  859.335251][T21834] IPv6: sit17: Disabled Multicast RS
[  859.350695][T21834] sit17: entered allmulticast mode
[  859.730458][T21839] lo speed is unknown, defaulting to 1000
[  859.861269][T21835] __nla_validate_parse: 18 callbacks suppressed
[  859.861285][T21835] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12345'.
[  859.867255][T21835] openvswitch: netlink: Flow actions attr not present in new flow.
[  859.892871][T21839] lo speed is unknown, defaulting to 1000
[  860.236743][T21854] netlink: 52 bytes leftover after parsing attributes in process `syz.1.12350'.
[  860.442861][T21861] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  860.469332][T21861] syzkaller0: entered promiscuous mode
[  860.471808][T21861] syzkaller0: entered allmulticast mode
[  860.477096][T21861] tipc: Resetting bearer <eth:syzkaller0>
[  860.525289][T21859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12351'.
[  860.550621][T21860] tipc: Resetting bearer <eth:syzkaller0>
[  860.572101][T21860] tipc: Disabling bearer <eth:syzkaller0>
[  860.756099][T21872] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  860.758885][T21872] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  860.804279][T21859] vlan0: entered allmulticast mode
[  860.824957][T21859] bridge0: entered allmulticast mode
[  860.839580][T21859] bridge0: port 1(vlan0) entered blocking state
[  860.853389][T21859] bridge0: port 1(vlan0) entered disabled state
[  861.150232][T21882] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12358'.
[  861.233972][T21884] syzkaller0: entered promiscuous mode
[  861.245678][T21884] syzkaller0: entered allmulticast mode
[  861.309044][T21891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12357'.
[  861.513318][T21888] lo speed is unknown, defaulting to 1000
[  861.629679][T21888] lo speed is unknown, defaulting to 1000
[  861.989375][T21903] veth0_to_bond: left allmulticast mode
[  861.992118][T21903] veth0_to_bond: left promiscuous mode
[  861.994752][T21903] bridge91: port 3(veth0_to_bond) entered disabled state
[  862.022267][T21903] veth33: left allmulticast mode
[  862.033188][T21903] veth33: left promiscuous mode
[  862.042715][T21903] bridge91: port 1(veth33) entered disabled state
[  862.076888][T21903] veth35: left allmulticast mode
[  862.079385][T21903] veth35: left promiscuous mode
[  862.081667][T21903] bridge91: port 2(veth35) entered disabled state
[  862.247126][T21918] netlink: 'syz.2.12364': attribute type 21 has an invalid length.
[  862.249558][T21910] syzkaller1: entered allmulticast mode
[  862.282125][T21919] gretap0: Device is already in use.
[  862.717049][T21928] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12367'.
[  862.853268][T21931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12369'.
[  862.894127][T21929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12368'.
[  862.899778][T21931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12369'.
[  863.305248][T21935] netlink: 146780 bytes leftover after parsing attributes in process `syz.1.12370'.
[  863.311122][T21936] netlink: 'syz.0.12371': attribute type 12 has an invalid length.
[  863.574265][T21947] netlink: 'syz.1.12374': attribute type 1 has an invalid length.
[  863.619408][T21947] veth37: entered promiscuous mode
[  863.622981][T21947] bond80: (slave veth37): Enslaving as a backup interface with a down link
[  863.635697][T21947] 8021q: adding VLAN 0 to HW filter on device bond80
[  863.688145][T21954] netlink: 'syz.0.12377': attribute type 10 has an invalid length.
[  863.762987][T21960] bond80: (slave veth37): Releasing backup interface
[  863.883936][T21963] netlink: 'syz.1.12380': attribute type 1 has an invalid length.
[  864.283698][T21971] IPv6: sit17: Disabled Multicast RS
[  864.345932][T21981] netlink: 'syz.2.12384': attribute type 21 has an invalid length.
[  864.348987][T21981] gretap0: Device is already in use.
[  864.452755][T21992] netlink: 'syz.0.12387': attribute type 1 has an invalid length.
[  864.455990][T21992] netlink: 'syz.0.12387': attribute type 1 has an invalid length.
[  864.503421][T21992] netlink: 'syz.0.12387': attribute type 1 has an invalid length.
[  864.508009][T21994] netlink: 'syz.1.12385': attribute type 23 has an invalid length.
[  864.512972][T21992] workqueue: Failed to create a rescuer kthread for wq "bond73": -EINTR
[  864.870548][T22015] 8021q: adding VLAN 0 to HW filter on device bond73
[  864.879289][T22017] __nla_validate_parse: 14 callbacks suppressed
[  864.879299][T22017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12391'.
[  865.244920][T22029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12395'.
[  865.360914][T22042] lo speed is unknown, defaulting to 1000
[  865.400313][T22041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12398'.
[  865.439043][T22041] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12398'.
[  865.482442][T22042] lo speed is unknown, defaulting to 1000
[  865.631118][T22048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12400'.
[  865.634636][T22048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12400'.
[  865.645672][T22050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12400'.
[  865.684513][T22048] bond0: default FDB implementation only supports local addresses
[  865.689217][T22050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12400'.
[  865.699677][T22050] macvlan0: entered promiscuous mode
[  865.705106][T22050] macvlan0: entered allmulticast mode
[  865.719011][T22050] hsr0: entered allmulticast mode
[  865.721174][T22050] mac80211_hwsim hwsim430 wlan0: entered allmulticast mode
[  865.728137][T22050] batadv_slave_0: entered allmulticast mode
[  865.849372][T22048] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:64
[  865.852593][T22048] IPVS: set_ctl: invalid protocol: 65535 5.255.255.50:1536
[  865.856243][T22048] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  865.920764][T22061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12403'.
[  865.925110][T22061] hsr0: left allmulticast mode
[  865.926833][T22061] mac80211_hwsim hwsim430 wlan0: left allmulticast mode
[  865.934046][T22061] batadv_slave_0: left allmulticast mode
[  865.938880][T22061] macvlan0: left promiscuous mode
[  865.942292][T22061] macvlan0: left allmulticast mode
[  865.952123][T22061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12403'.
[  866.174718][T22075] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  866.177705][T22075] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  866.598031][T22088] ------------[ cut here ]------------
[  866.599865][T22088] WARNING: CPU: 0 PID: 22088 at mm/page_alloc.c:5124 __alloc_frozen_pages_noprof+0x2c8/0x370
[  866.603748][T22088] Modules linked in:
[  866.605435][T22088] CPU: 0 UID: 0 PID: 22088 Comm: syz.0.12408 Not tainted syzkaller #0 PREEMPT(full) 
[  866.610244][T22088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  866.614477][T22088] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370
[  866.617158][T22088] Code: 74 10 4c 89 e7 89 54 24 0c e8 c4 1d 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 6f 74 77 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24
[  866.625254][T22088] RSP: 0018:ffffc900037c6940 EFLAGS: 00010246
[  866.627466][T22088] RAX: ffffc900037c6900 RBX: 0000000000000017 RCX: 0000000000000000
[  866.630105][T22088] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900037c69a8
[  866.632860][T22088] RBP: ffffc900037c6a28 R08: ffffc900037c69a7 R09: 0000000000000000
[  866.635649][T22088] R10: ffffc900037c6980 R11: fffff520006f8d35 R12: 0000000000000000
[  866.638779][T22088] R13: 1ffff920006f8d2c R14: 0000000000040920 R15: dffffc0000000000
[  866.641992][T22088] FS:  00007fb05ee0b6c0(0000) GS:ffff8880b861b000(0000) knlGS:0000000000000000
[  866.644948][T22088] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  866.647295][T22088] CR2: 00007fc55a8d5040 CR3: 0000000039818000 CR4: 00000000000006f0
[  866.650848][T22088] Call Trace:
[  866.652373][T22088]  <TASK>
[  866.653725][T22088]  ? __sock_sendmsg+0x21c/0x270
[  866.655783][T22088]  ? ___sys_sendmsg+0x21f/0x2a0
[  866.657475][T22088]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  866.659572][T22088]  ? policy_nodemask+0x28b/0x720
[  866.661341][T22088]  alloc_pages_mpol+0x232/0x4a0
[  866.662969][T22088]  ___kmalloc_large_node+0x5f/0x1b0
[  866.664885][T22088]  __kmalloc_large_node_noprof+0x18/0x90
[  866.666792][T22088]  __kmalloc_noprof+0x36f/0x4f0
[  866.668433][T22088]  ? nsim_fib_event_nb+0x295/0x1080
[  866.670214][T22088]  nsim_fib_event_nb+0x295/0x1080
[  866.671858][T22088]  ? netlink_rcv_skb+0x208/0x470
[  866.673538][T22088]  call_fib_notifier+0x45/0x80
[  866.675146][T22088]  fib6_node_dump+0x21d/0x2b0
[  866.677096][T22088]  ? __pfx_fib6_node_dump+0x10/0x10
[  866.679028][T22088]  ? rcu_is_watching+0x15/0xb0
[  866.680760][T22088]  fib6_walk_continue+0x67b/0x910
[  866.682484][T22088]  fib6_walk+0x149/0x290
[  866.683919][T22088]  fib6_tables_dump+0x1c9/0x2b0
[  866.685559][T22088]  ? __pfx_fib6_tables_dump+0x10/0x10
[  866.687375][T22088]  ? net_generic+0x1e/0x240
[  866.689045][T22088]  register_fib_notifier+0x184/0x360
[  866.691161][T22088]  ? __pfx_nsim_fib_dump_inconsistent+0x10/0x10
[  866.693425][T22088]  ? register_fib_notifier+0x6a/0x360
[  866.695401][T22088]  nsim_fib_create+0x847/0x9d0
[  866.696988][T22088]  ? __pfx_nsim_fib_create+0x10/0x10
[  866.698729][T22088]  nsim_dev_reload_up+0x36b/0x780
[  866.700587][T22088]  ? __pfx_nsim_dev_reload_up+0x10/0x10
[  866.702816][T22088]  devlink_reload+0x4ec/0x8d0
[  866.704464][T22088]  ? rcu_is_watching+0x15/0xb0
[  866.706110][T22088]  ? __pfx_devlink_reload+0x10/0x10
[  866.707898][T22088]  ? devlink_resources_validate+0xa7/0xd0
[  866.709854][T22088]  ? devlink_resources_validate+0xa7/0xd0
[  866.712020][T22088]  devlink_nl_reload_doit+0xb35/0xd50
[  866.714416][T22088]  ? __pfx_devlink_nl_reload_doit+0x10/0x10
[  866.716788][T22088]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  866.718930][T22088]  genl_family_rcv_msg_doit+0x215/0x300
[  866.721142][T22088]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  866.723727][T22088]  ? bpf_lsm_capable+0x9/0x20
[  866.725779][T22088]  ? security_capable+0x7e/0x2e0
[  866.727835][T22088]  genl_rcv_msg+0x60e/0x790
[  866.729462][T22088]  ? __pfx_genl_rcv_msg+0x10/0x10
[  866.731372][T22088]  ? __kasan_slab_alloc+0x6c/0x80
[  866.733488][T22088]  ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10
[  866.736245][T22088]  ? __pfx_devlink_nl_reload_doit+0x10/0x10
[  866.738739][T22088]  ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10
[  866.741627][T22088]  ? __netlink_lookup+0xbd/0x810
[  866.743726][T22088]  ? rcu_is_watching+0x15/0xb0
[  866.745742][T22088]  netlink_rcv_skb+0x208/0x470
[  866.747818][T22088]  ? __pfx_genl_rcv_msg+0x10/0x10
[  866.749858][T22088]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  866.751715][T22088]  ? lock_release+0x4b/0x3e0
[  866.753455][T22088]  ? down_read+0x1ad/0x2e0
[  866.755404][T22088]  genl_rcv+0x28/0x40
[  866.757027][T22088]  netlink_unicast+0x82f/0x9e0
[  866.758856][T22088]  ? __pfx_netlink_unicast+0x10/0x10
[  866.760747][T22088]  ? netlink_sendmsg+0x642/0xb30
[  866.762425][T22088]  ? skb_put+0x11b/0x210
[  866.763874][T22088]  netlink_sendmsg+0x805/0xb30
[  866.765442][T22088]  ? __pfx_netlink_sendmsg+0x10/0x10
[  866.767383][T22088]  ? futex_unqueue+0x22/0x240
[  866.769061][T22088]  ? aa_sock_msg_perm+0xf1/0x1d0
[  866.770757][T22088]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  866.772532][T22088]  ? __pfx_netlink_sendmsg+0x10/0x10
[  866.774237][T22088]  __sock_sendmsg+0x21c/0x270
[  866.775800][T22088]  ____sys_sendmsg+0x505/0x830
[  866.777758][T22088]  ? __pfx_____sys_sendmsg+0x10/0x10
[  866.779494][T22088]  ? import_iovec+0x74/0xa0
[  866.781030][T22088]  ___sys_sendmsg+0x21f/0x2a0
[  866.782572][T22088]  ? __pfx____sys_sendmsg+0x10/0x10
[  866.784287][T22088]  ? futex_wait+0x285/0x360
[  866.785850][T22088]  ? __fget_files+0x2a/0x420
[  866.787467][T22088]  ? __fget_files+0x3a0/0x420
[  866.789124][T22088]  __x64_sys_sendmsg+0x19b/0x260
[  866.791118][T22088]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  866.793076][T22088]  ? rcu_is_watching+0x15/0xb0
[  866.794990][T22088]  ? rcu_is_watching+0x15/0xb0
[  866.796633][T22088]  do_syscall_64+0xfa/0x3b0
[  866.798250][T22088]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  866.800462][T22088]  ? exc_page_fault+0x9f/0xf0
[  866.802091][T22088]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  866.804158][T22088] RIP: 0033:0x7fb05df8ebe9
[  866.805737][T22088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  866.813052][T22088] RSP: 002b:00007fb05ee0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  866.815895][T22088] RAX: ffffffffffffffda RBX: 00007fb05e1b5fa0 RCX: 00007fb05df8ebe9
[  866.818524][T22088] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004
[  866.821089][T22088] RBP: 00007fb05e011e19 R08: 0000000000000000 R09: 0000000000000000
[  866.823586][T22088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  866.826184][T22088] R13: 00007fb05e1b6038 R14: 00007fb05e1b5fa0 R15: 00007ffcd2fe8958
[  866.828733][T22088]  </TASK>
[  866.829749][T22088] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  866.832138][T22088] CPU: 0 UID: 0 PID: 22088 Comm: syz.0.12408 Not tainted syzkaller #0 PREEMPT(full) 
[  866.835092][T22088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  866.838500][T22088] Call Trace:
[  866.839767][T22088]  <TASK>
[  866.840783][T22088]  dump_stack_lvl+0x99/0x250
[  866.842285][T22088]  ? __asan_memcpy+0x40/0x70
[  866.843773][T22088]  ? __pfx_dump_stack_lvl+0x10/0x10
[  866.845457][T22088]  ? __pfx__printk+0x10/0x10
[  866.847071][T22088]  vpanic+0x281/0x750
[  866.848382][T22088]  ? __pfx__printk+0x10/0x10
[  866.849865][T22088]  ? __pfx_vpanic+0x10/0x10
[  866.851388][T22088]  ? is_bpf_text_address+0x26/0x2b0
[  866.853144][T22088]  panic+0xb9/0xc0
[  866.854431][T22088]  ? __pfx_panic+0x10/0x10
[  866.855913][T22088]  __warn+0x31b/0x4b0
[  866.857598][T22088]  ? __alloc_frozen_pages_noprof+0x2c8/0x370
[  866.860070][T22088]  ? __alloc_frozen_pages_noprof+0x2c8/0x370
[  866.862502][T22088]  report_bug+0x2be/0x4f0
[  866.864373][T22088]  ? __alloc_frozen_pages_noprof+0x2c8/0x370
[  866.866762][T22088]  ? __alloc_frozen_pages_noprof+0x2c8/0x370
[  866.869209][T22088]  ? __alloc_frozen_pages_noprof+0x2ca/0x370
[  866.871738][T22088]  handle_bug+0x84/0x160
[  866.873570][T22088]  exc_invalid_op+0x1a/0x50
[  866.875132][T22088]  asm_exc_invalid_op+0x1a/0x20
[  866.877007][T22088] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370
[  866.879570][T22088] Code: 74 10 4c 89 e7 89 54 24 0c e8 c4 1d 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 6f 74 77 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24
[  866.886345][T22088] RSP: 0018:ffffc900037c6940 EFLAGS: 00010246
[  866.888868][T22088] RAX: ffffc900037c6900 RBX: 0000000000000017 RCX: 0000000000000000
[  866.892191][T22088] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900037c69a8
[  866.895219][T22088] RBP: ffffc900037c6a28 R08: ffffc900037c69a7 R09: 0000000000000000
[  866.898536][T22088] R10: ffffc900037c6980 R11: fffff520006f8d35 R12: 0000000000000000
[  866.901801][T22088] R13: 1ffff920006f8d2c R14: 0000000000040920 R15: dffffc0000000000
[  866.905001][T22088]  ? __sock_sendmsg+0x21c/0x270
[  866.906983][T22088]  ? ___sys_sendmsg+0x21f/0x2a0
[  866.909022][T22088]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  866.911556][T22088]  ? policy_nodemask+0x28b/0x720
[  866.913585][T22088]  alloc_pages_mpol+0x232/0x4a0
[  866.915614][T22088]  ___kmalloc_large_node+0x5f/0x1b0
[  866.917711][T22088]  __kmalloc_large_node_noprof+0x18/0x90
[  866.920088][T22088]  __kmalloc_noprof+0x36f/0x4f0
[  866.922139][T22088]  ? nsim_fib_event_nb+0x295/0x1080
[  866.924276][T22088]  nsim_fib_event_nb+0x295/0x1080
[  866.926353][T22088]  ? netlink_rcv_skb+0x208/0x470
[  866.928405][T22088]  call_fib_notifier+0x45/0x80
[  866.930371][T22088]  fib6_node_dump+0x21d/0x2b0
[  866.932262][T22088]  ? __pfx_fib6_node_dump+0x10/0x10
[  866.934442][T22088]  ? rcu_is_watching+0x15/0xb0
[  866.936443][T22088]  fib6_walk_continue+0x67b/0x910
[  866.938552][T22088]  fib6_walk+0x149/0x290
[  866.940263][T22088]  fib6_tables_dump+0x1c9/0x2b0
[  866.942251][T22088]  ? __pfx_fib6_tables_dump+0x10/0x10
[  866.944500][T22088]  ? net_generic+0x1e/0x240
[  866.946429][T22088]  register_fib_notifier+0x184/0x360
[  866.948651][T22088]  ? __pfx_nsim_fib_dump_inconsistent+0x10/0x10
[  866.951270][T22088]  ? register_fib_notifier+0x6a/0x360
[  866.953532][T22088]  nsim_fib_create+0x847/0x9d0
[  866.955492][T22088]  ? __pfx_nsim_fib_create+0x10/0x10
[  866.957702][T22088]  nsim_dev_reload_up+0x36b/0x780
[  866.959812][T22088]  ? __pfx_nsim_dev_reload_up+0x10/0x10
[  866.962147][T22088]  devlink_reload+0x4ec/0x8d0
[  866.964186][T22088]  ? rcu_is_watching+0x15/0xb0
[  866.966262][T22088]  ? __pfx_devlink_reload+0x10/0x10
[  866.968510][T22088]  ? devlink_resources_validate+0xa7/0xd0
[  866.970936][T22088]  ? devlink_resources_validate+0xa7/0xd0
[  866.973312][T22088]  devlink_nl_reload_doit+0xb35/0xd50
[  866.975543][T22088]  ? __pfx_devlink_nl_reload_doit+0x10/0x10
[  866.978026][T22088]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  866.980653][T22088]  genl_family_rcv_msg_doit+0x215/0x300
[  866.982964][T22088]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  866.985528][T22088]  ? bpf_lsm_capable+0x9/0x20
[  866.987482][T22088]  ? security_capable+0x7e/0x2e0
[  866.989465][T22088]  genl_rcv_msg+0x60e/0x790
[  866.991339][T22088]  ? __pfx_genl_rcv_msg+0x10/0x10
[  866.993399][T22088]  ? __kasan_slab_alloc+0x6c/0x80
[  866.995246][T22088]  ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10
[  866.997809][T22088]  ? __pfx_devlink_nl_reload_doit+0x10/0x10
[  866.999820][T22088]  ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10
[  867.002065][T22088]  ? __netlink_lookup+0xbd/0x810
[  867.004127][T22088]  ? rcu_is_watching+0x15/0xb0
[  867.006087][T22088]  netlink_rcv_skb+0x208/0x470
[  867.008026][T22088]  ? __pfx_genl_rcv_msg+0x10/0x10
[  867.010161][T22088]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  867.012283][T22088]  ? lock_release+0x4b/0x3e0
[  867.014227][T22088]  ? down_read+0x1ad/0x2e0
[  867.016035][T22088]  genl_rcv+0x28/0x40
[  867.017707][T22088]  netlink_unicast+0x82f/0x9e0
[  867.019273][T22088]  ? __pfx_netlink_unicast+0x10/0x10
[  867.021021][T22088]  ? netlink_sendmsg+0x642/0xb30
[  867.023055][T22088]  ? skb_put+0x11b/0x210
[  867.024804][T22088]  netlink_sendmsg+0x805/0xb30
[  867.027360][T22088]  ? __pfx_netlink_sendmsg+0x10/0x10
[  867.029647][T22088]  ? futex_unqueue+0x22/0x240
[  867.031715][T22088]  ? aa_sock_msg_perm+0xf1/0x1d0
[  867.033816][T22088]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  867.035988][T22088]  ? __pfx_netlink_sendmsg+0x10/0x10
[  867.038248][T22088]  __sock_sendmsg+0x21c/0x270
[  867.039952][T22088]  ____sys_sendmsg+0x505/0x830
[  867.041620][T22088]  ? __pfx_____sys_sendmsg+0x10/0x10
[  867.043466][T22088]  ? import_iovec+0x74/0xa0
[  867.045145][T22088]  ___sys_sendmsg+0x21f/0x2a0
[  867.046775][T22088]  ? __pfx____sys_sendmsg+0x10/0x10
[  867.048435][T22088]  ? futex_wait+0x285/0x360
[  867.049958][T22088]  ? __fget_files+0x2a/0x420
[  867.051462][T22088]  ? __fget_files+0x3a0/0x420
[  867.053088][T22088]  __x64_sys_sendmsg+0x19b/0x260
[  867.054986][T22088]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  867.056943][T22088]  ? rcu_is_watching+0x15/0xb0
[  867.058608][T22088]  ? rcu_is_watching+0x15/0xb0
[  867.060175][T22088]  do_syscall_64+0xfa/0x3b0
[  867.061664][T22088]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  867.063574][T22088]  ? exc_page_fault+0x9f/0xf0
[  867.065294][T22088]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  867.067249][T22088] RIP: 0033:0x7fb05df8ebe9
[  867.068691][T22088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  867.075362][T22088] RSP: 002b:00007fb05ee0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  867.078262][T22088] RAX: ffffffffffffffda RBX: 00007fb05e1b5fa0 RCX: 00007fb05df8ebe9
[  867.080817][T22088] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004
[  867.083304][T22088] RBP: 00007fb05e011e19 R08: 0000000000000000 R09: 0000000000000000
[  867.085834][T22088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  867.088438][T22088] R13: 00007fb05e1b6038 R14: 00007fb05e1b5fa0 R15: 00007ffcd2fe8958
[  867.090933][T22088]  </TASK>
[  867.092654][T22088] Kernel Offset: disabled
[  867.094056][T22088] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:12:49  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000003a RBX=000000000000003a RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000341ab RDI=00000000000341ac RBP=00000000000003f8 RSP=ffffc900037c60f0
R8 =ffff8880216c8237 R9 =1ffff110042d9046 R10=dffffc0000000000 R11=ffffffff854f1c80
R12=dffffc0000000000 R13=ffffffff99afa8e9 R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f1cfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb05ee0b6c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc55a8d5040 CR3=0000000039818000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=007272655f74726f 68735f65646f6365
XMM02=42969fa651244d0a d21386328c7664b3 XMM03=b1ab207200000000 0000009500000000
XMM04=00007fb05eced100 00007fb05e187460 XMM05=00007fb05e187478 00007fb05e1874c0
XMM06=00007fb05e1874b8 00007fb05e1874b0 XMM07=00007fb05e1874a8 00007fb05e1874a0
XMM08=0000000000000000 00007fb05e012ee7 XMM09=0000000000000000 00007fb05e012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff11020e48386 RBX=ffff888107242000 RCX=ffff888107ee9cc0 RDX=0000000000010000
RSI=ffff888107242000 RDI=0000000000000018 RBP=0000000000000001 RSP=ffffc900001e0db0
R8 =ffffffff8fa38337 R9 =1ffffffff1f47066 R10=dffffc0000000000 R11=ffffffff8653d980
R12=dffffc0000000000 R13=1ffff110044b7e80 R14=ffff888107241c28 R15=ffffc900000bb000
RIP=ffffffff8653d9dc RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055d0c1a67c08 CR3=000000010f990000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fb05e012e53
XMM06=0000000000000000 00007fb05e012e4d XMM07=0000000000000000 00007fb05e012e61
XMM08=0000000000000000 00007fb05e012ee7 XMM09=0000000000000000 00007fb05e012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
