last executing test programs:

1.240694885s ago: executing program 0 (id=1223):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)={0x3, 'pimreg1\x00', {0x12}, 0x2})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002040)=@newtaction={0x1fc4, 0x30, 0x25, 0x0, 0x0, {}, [{0x1fb0, 0x1, [@m_pedit={0xe64, 0x1, 0x0, 0x0, {{0xa}, {0xe38, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x14, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {0x800000}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0xfffffffc}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x1, 0x0, 0x0, 0xa1e}, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe498}, {}, {}, {0x0, 0x0, 0x0, 0x80}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfb}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x80000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x624}, {0x0, 0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x8}, {0x800000, 0x0, 0x0, 0x0, 0x223f430b}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x8}, {0xfffffffd}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x200000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x100}, {0x0, 0x0, 0xf}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9, 0x5}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8000000}], [{}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {0x4}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x5}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {0x1}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_mpls={0x1040, 0x1, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x7}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_vlan={0x108, 0x1d, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfffff36a, 0x4, 0x8, 0x80000000}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x8001, 0x20000000, 0x3, 0x7}, 0x1}}]}, {0xa1, 0x6, "3ae82f35e8fb1bbc6a38502e31539b6f51721d0d3a3b0a3ab74f0e6a8e58a5a46f638dfe50846ced3a3c234c89785567b5678848c35178b57eeab766e9ebcc10accad3688d72630bdffc11cdd72f7c1ad1151e9ae17315c1c5792ebb3c8d5bac9557dc5b8796fa9262f7cae885a5589f4496b6fbe6c56eaf6c2c01b1b36212f1931138960d059454fa30344a43e128bc384e6e54480ed9d46fc1aa56cd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x1fc4}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x9, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x80009, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000240)={[0xc6]}, 0x8})
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000b9987828a75abe76001000010800"/28, @ANYRES32=0x0, @ANYBLOB="0080000020000200"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000e1ffffe91c34c500000000", @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)
sendmsg$can_bcm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x48}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.219370768s ago: executing program 0 (id=1226):
r0 = socket$inet6(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
sendmmsg$inet(r0, &(0x7f0000002b00)=[{{&(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private=0xa010100}}}], 0x20}}], 0x1, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x4008af03, &(0x7f0000000000)={0x0, @aes128, 0x0, @desc2})

1.150816034s ago: executing program 0 (id=1228):
r0 = socket$inet6(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmmsg$inet(r0, &(0x7f0000002b00)=[{{&(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @private=0xa010100}}}], 0x20}}], 0x1, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x4008af03, &(0x7f0000000000)={0x0, @aes128, 0x0, @desc2})

1.081084161s ago: executing program 0 (id=1230):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0x3d, 0x10, 0x70bd26, 0x25dfdbff, {}, [@generic="58d665453f82551345085844b8d00d8db826039cf5dbeb42690f2f836e09d801f464bebaa3f34689f831de2a1187d9d5058c95d06b44e8446a9e73273e27bd4a3bc1623167"]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x4008af22, &(0x7f0000000000)={0x0, @aes128, 0x0, @desc2})

1.080666949s ago: executing program 0 (id=1231):
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt(0xffffffffffffffff, 0x1c0000, 0x4, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x6d5)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bond0\x00'})
bind$bt_l2cap(r2, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)

790.219314ms ago: executing program 0 (id=1236):
socket(0x10, 0x803, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44)
setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44)
socket(0x400000000010, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r2, 0x8)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10)
sendto$inet6(r3, &(0x7f0000000200)='x', 0x1, 0x4000000, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x2}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000007c0)={0x0, 0x1}, 0x8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000004000000e27f000001000000000000006d2bbf63bbfad7bb73a81310f636", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
r6 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000006000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00:\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
close(0x3)
unshare(0x6a040000)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r8}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{r7}, 0x0, &(0x7f0000001040)}, 0x20)

504.746485ms ago: executing program 2 (id=1244):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmmsg$inet(r0, &(0x7f0000002b00)=[{{&(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @private=0xa010100}}}], 0x20}}], 0x1, 0x0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x4008af03, &(0x7f0000000000)={0x0, @aes128, 0x0, @desc2})

391.306044ms ago: executing program 2 (id=1245):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000010a0102"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0xc000)
r3 = socket(0x11, 0x3, 0x0)
r4 = socket(0x200000000000011, 0x2, 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', <r6=>0x0})
bind$packet(r3, &(0x7f00000001c0)={0x11, 0x0, r6, 0x1, 0x2, 0x6, @broadcast}, 0x14)
r7 = socket$kcm(0x10, 0x2, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r10=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x27}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
sendmsg$NL80211_CMD_SET_MPATH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r9, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0x4008040)
setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f00000000c0)=0x5882, 0x4)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5}, 0x50)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r12}, 0x10)
setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000300)="cd", 0x1)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x100, 0xbf22, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r13, 0x0, 0xa002a0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000001540), 0xfffffffe, r13, 0x0, 0x1500}, 0x38)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x2)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080401000000000000000080000000000000000000000000000000044000500fc000000000000000000000000000001000000003c00000000000000ffffffff00000000000000000000000000000000000300"/180], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

321.406362ms ago: executing program 2 (id=1246):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0x13, 0x1, 0x2, [{0x2, 0x1, 0x5}]}]}, {0x0, [0x0, 0x2e, 0x5f, 0x0, 0x2e]}}, &(0x7f00000001c0)=""/233, 0x37, 0xe9, 0x1}, 0x28)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000009080003400000000a0900010073797a30200000000c0006"], 0x70}}, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)={0x0, @aes128, 0x0, @desc2})

320.725658ms ago: executing program 1 (id=1248):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)={0x2c, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x6, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f00000039c0)=0xd, 0x4)
listen(r1, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4, 0xf}, {0xe, 0xfff3}, {0x9, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x4}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180))
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r6=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006b112200000000009f000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c68b8b51b8e26db77b680ada2130864", @ANYRES16=r5, @ANYBLOB="110c2dbd7000fedbdf256800000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840)

261.46032ms ago: executing program 2 (id=1249):
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000100)={@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x63, 0x1, 0x8, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]})
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg(r1, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x40, 0x2}, 0x3}}, 0x10)
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4)
listen(r3, 0x8)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000800c00028008000001000014bb0a0001"], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f00000015c0)=ANY=[@ANYRES32=r5], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x3f)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f000000a800)={0x0, 0x0, &(0x7f000000a7c0)={&(0x7f000000a700)={0x34, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c810}, 0x804)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000480)=0x40)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8600d85ff9782762f86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
pipe(0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x2, 0x4)
bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r4, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000080)}, {&(0x7f0000000040)="d56aebdf76303646db", 0x9}], 0x2}}], 0x1, 0x2000c000)
setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000001940)=@rose={'rose', 0x0}, 0x10)
ioctl$FITHAW(r2, 0xc0045878)
epoll_create1(0x0)

201.829109ms ago: executing program 1 (id=1250):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
syz_emit_ethernet(0xe6, &(0x7f0000000180)={@empty, @random="c6d21e0fc1d3", @val={@val={0x88a8, 0x5, 0x1, 0x3}, {0x8100, 0x5, 0x0, 0x3}}, {@mpls_uc={0x8847, {[{0x7, 0x0, 0x1}, {0x200}, {0x101}, {0x9}], @ipv4=@generic={{0x5, 0x4, 0x0, 0x0, 0xc0, 0x67, 0x0, 0x8, 0x33, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}, "d527ca79431c8c28cf36e0a2380e99f0010a664fe3a92e995c32d20cd3ab564277f6b1a950389ae53c44943d6e20f02be60d9b8bafc69cd25d2ec028a8569babea40c4f28f186ed0b99a68bfc69467186fd851f7039d7fd906321204040ebe8091074554c75bb4266c63dcbd1508d3211e42e43119a68b1b8217c71d8bfd471606b5a329e6a2c6ad4b9376d61351ab92933f18cdb12bb410ca266abd51576a3ac3a2e661feff18dd55158a62"}}}}}, &(0x7f0000000000)={0x1, 0x3, [0x752, 0xf34, 0x929, 0x6c0]})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000140)={0x0, 0x1, [@random="512c626c1527"]})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
socket(0x400000000010, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

80.975524ms ago: executing program 2 (id=1251):
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000160a01080000000000000000020000000900020073797a30000000110900010073797a30000000001c000380180003800d0001006261746164765f736c"], 0x70}}, 0x24040880)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg$unix(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000480)}}], 0x1, 0x40000100, 0x0)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
r4 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000280)=@assoc_value, 0x0)
sendmmsg(r4, &(0x7f0000000480), 0x21, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r8 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r7}, 0x8)
close(r8)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x35e6}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r8, r7, 0x4, r9}, 0x10)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000015000100fdfffffffedbdf2502400000", @ANYBLOB="140003"], 0x34}}, 0x0)
ioctl$VHOST_VDPA_SET_CONFIG_CALL(r2, 0x4008af60, &(0x7f00000001c0)=0x100)

80.613174ms ago: executing program 1 (id=1252):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000100000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x3c, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4001)

80.124749ms ago: executing program 2 (id=1253):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRES8=r0, @ANYRES8=r0, @ANYRES32=<r1=>r0, @ANYRESHEX=r0], 0x7c}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=r1, @ANYRESDEC=r3, @ANYRES64=r2], 0x44}, 0x1, 0x0, 0x0, 0x40880}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r5=>0x0})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES16=r5, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000cc0)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r6}, 0x38)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x29, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="210f23bd7000fcdbdf251c000000e70c86b75e89bb9ffe852e42fa6e35a716e21bcb4273110f5a704efb4917ab0c0f216ac62c761c27070c84176473896c023c30fe67cc0763fe36251ab3f9897b78d7d2adf0cc17a63e16a35f8c50c40e87e9da0f1b562c3bcdb73ec57bf51c7be21cf1ca675529a9e5e2aaaa705887b87011cf9026db89798c6ee70cab7f31ad1a62d0b64a8caa904c66e1b07e168c76d7401912183dc3e80564f061e7a809026ea259b17a49aebdec1ac69586bed1b6f4cbb209db884628bc20151520e316993502e2900add0ef6dd7e5d50af909f63d26a93"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
sendto$inet6(r6, &(0x7f0000000100)="40ce3d397d6445e122990ef19bf57d6cabbf23924a765d6139bd2a2b573e6c8dd1804d3d2b368748a409fde821c824ca3012bcfa0a94dded44c80085734f95dccf49e2e4a304b7d063345cd38e49", 0x4e, 0x20008080, 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r9 = socket$kcm(0x2, 0xa, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
clock_gettime(0x0, 0x0)
sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x14, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [""]}, 0x14}}, 0xc0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, <r10=>0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r7}, 0x20)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r8, &(0x7f0000000900)=ANY=[@ANYRESOCT=r10, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b40000009078001c0e343cb2d884150e62cefb11f011030005020000c2853d1f76201e55b14f0bb8f53a9e4b4008000000"], 0x4e)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000600))
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000680))
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000006c0))
r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)=ANY=[@ANYRES16=r11, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32], 0x1c}}, 0x0)
sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8804}, 0x4000800)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40800, 0x0, 0x0)

79.994839ms ago: executing program 1 (id=1254):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async, rerun: 32)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) (async, rerun: 32)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}})

990.892µs ago: executing program 1 (id=1255):
r0 = socket$inet6(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x2, 0x0)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
sendmmsg$inet(r0, &(0x7f0000002b00)=[{{&(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private=0xa010100}}}], 0x20}}], 0x1, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x4008af03, &(0x7f0000000000)={0x0, @aes128, 0x0, @desc2})

0s ago: executing program 1 (id=1256):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x0, 0x2000000, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0xc}]}]}]}, 0x3c}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:17689' (ED25519) to the list of known hosts.
syzkaller login: [   41.470202][ T5769] cgroup: Unknown subsys name 'net'
[   41.556316][ T5769] cgroup: Unknown subsys name 'cpuset'
[   41.565609][ T5769] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   43.328639][ T5769] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   47.050138][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   47.062062][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   47.065191][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   47.070500][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   47.073447][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   47.079053][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   47.082511][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   47.085732][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   47.090331][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   47.093966][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   47.111628][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   47.118299][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   47.121885][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   47.126410][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   47.130606][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   47.275471][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   47.390459][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   47.408642][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.412437][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.415490][ T5840] bridge_slave_0: entered allmulticast mode
[   47.419112][ T5840] bridge_slave_0: entered promiscuous mode
[   47.445131][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.448172][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.450984][ T5840] bridge_slave_1: entered allmulticast mode
[   47.454457][ T5840] bridge_slave_1: entered promiscuous mode
[   47.517985][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.526144][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.550756][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   47.585872][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.589340][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.592993][ T5844] bridge_slave_0: entered allmulticast mode
[   47.596103][ T5844] bridge_slave_0: entered promiscuous mode
[   47.599161][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.602036][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.605313][ T5844] bridge_slave_1: entered allmulticast mode
[   47.608379][ T5844] bridge_slave_1: entered promiscuous mode
[   47.612042][ T5840] team0: Port device team_slave_0 added
[   47.633105][ T5840] team0: Port device team_slave_1 added
[   47.673147][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.700882][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.705028][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.707459][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.709866][ T5847] bridge_slave_0: entered allmulticast mode
[   47.713606][ T5847] bridge_slave_0: entered promiscuous mode
[   47.717988][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.720948][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.724465][ T5847] bridge_slave_1: entered allmulticast mode
[   47.727568][ T5847] bridge_slave_1: entered promiscuous mode
[   47.730406][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.732987][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.741572][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.793249][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.796245][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.809069][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.815351][ T5844] team0: Port device team_slave_0 added
[   47.818923][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.829440][ T5844] team0: Port device team_slave_1 added
[   47.840007][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.896833][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.899150][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.909941][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.916497][ T5847] team0: Port device team_slave_0 added
[   47.919152][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.922653][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.933193][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.943182][ T5840] hsr_slave_0: entered promiscuous mode
[   47.946333][ T5840] hsr_slave_1: entered promiscuous mode
[   47.954221][ T5847] team0: Port device team_slave_1 added
[   47.979528][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.982067][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.990561][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.020250][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.024111][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.035457][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.058121][ T5844] hsr_slave_0: entered promiscuous mode
[   48.061826][ T5844] hsr_slave_1: entered promiscuous mode
[   48.064855][ T5844] debugfs: 'hsr0' already exists in 'hsr'
[   48.067389][ T5844] Cannot create hsr debugfs directory
[   48.123079][ T5847] hsr_slave_0: entered promiscuous mode
[   48.126313][ T5847] hsr_slave_1: entered promiscuous mode
[   48.129247][ T5847] debugfs: 'hsr0' already exists in 'hsr'
[   48.133106][ T5847] Cannot create hsr debugfs directory
[   48.357873][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   48.366942][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   48.377150][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   48.387637][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   48.420745][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   48.442645][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   48.454939][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   48.462471][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   48.490275][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   48.507457][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   48.512148][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   48.520271][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   48.561735][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.588204][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   48.602666][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.616513][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.619840][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.626602][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.629651][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.663277][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   48.679385][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.681804][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.688670][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.717317][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.719676][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.739333][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   48.756819][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.759082][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.765493][ T5847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   48.784008][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.786575][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.806947][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   48.845882][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.906441][ T5840] veth0_vlan: entered promiscuous mode
[   48.915834][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.924949][ T5840] veth1_vlan: entered promiscuous mode
[   48.935446][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.972860][ T5840] veth0_macvtap: entered promiscuous mode
[   48.976825][ T5847] veth0_vlan: entered promiscuous mode
[   48.985282][ T5840] veth1_macvtap: entered promiscuous mode
[   48.996580][ T5844] veth0_vlan: entered promiscuous mode
[   49.000444][ T5847] veth1_vlan: entered promiscuous mode
[   49.010447][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.013589][ T5844] veth1_vlan: entered promiscuous mode
[   49.022741][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.033531][ T5872] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.040983][ T5872] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.048648][ T5872] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.053740][ T5872] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.060454][ T5847] veth0_macvtap: entered promiscuous mode
[   49.075983][ T5847] veth1_macvtap: entered promiscuous mode
[   49.110893][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.111597][ T5849] Bluetooth: hci0: command tx timeout
[   49.116225][ T5844] veth0_macvtap: entered promiscuous mode
[   49.119574][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.136410][ T5844] veth1_macvtap: entered promiscuous mode
[   49.147660][ T5872] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.154251][ T5872] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.154853][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.157922][ T5872] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.160508][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.175635][ T5872] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.191524][ T5849] Bluetooth: hci2: command tx timeout
[   49.194181][ T5849] Bluetooth: hci1: command tx timeout
[   49.213762][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.220065][  T743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.222407][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.227151][  T743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.259471][ T5906] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.266359][ T5906] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.286095][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   49.292317][ T5906] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.299554][ T5872] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.334979][  T743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.339141][  T743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.372107][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.374749][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.406206][ T5912] Bluetooth: MGMT ver 1.23
[   49.414317][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.417267][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.454147][  T743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.457409][  T743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.810772][ T5949] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12'.
[   49.852584][ T5949] Zero length message leads to an empty skb
[   49.902699][ T5951] ip6_vti0: entered allmulticast mode
[   49.912932][ T5952] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.940377][ T5951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'.
[   49.980601][ T5951] bond0: (slave bond_slave_1): Releasing backup interface
[   50.075762][ T5952] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   50.136796][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16'.
[   50.504123][ T5963] tipc: Started in network mode
[   50.506264][ T5963] tipc: Node identity ead5a708bf6f, cluster identity 4711
[   50.508925][ T5963] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   50.512883][ T5963] syzkaller0: entered promiscuous mode
[   50.514762][ T5963] syzkaller0: entered allmulticast mode
[   50.558482][ T5892] IPVS: starting estimator thread 0...
[   50.565194][ T5962] tipc: Resetting bearer <eth:syzkaller0>
[   50.573352][ T5962] tipc: Disabling bearer <eth:syzkaller0>
[   50.644239][ T5968] netlink: 666 bytes leftover after parsing attributes in process `syz.2.18'.
[   50.649955][ T5968] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18'.
[   50.653158][ T5968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18'.
[   50.664392][ T5966] IPVS: using max 81 ests per chain, 194400 per kthread
[   50.744736][ T5974] netlink: 28 bytes leftover after parsing attributes in process `syz.2.20'.
[   50.756143][ T5950] ip6_vti0: left allmulticast mode
[   50.860133][ T5980] netlink: 'syz.0.23': attribute type 1 has an invalid length.
[   50.863869][ T5980] ip6gretap0: entered promiscuous mode
[   50.865811][ T5980] ip6gretap0: entered allmulticast mode
[   50.918792][ T5985] netlink: 'syz.2.24': attribute type 2 has an invalid length.
[   50.955706][ T5989] netlink: 44 bytes leftover after parsing attributes in process `syz.0.25'.
[   50.989550][ T5989] team0: Port device team_slave_0 removed
[   51.152475][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'.
[   51.157360][ T5993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   51.191255][ T5849] Bluetooth: hci0: command tx timeout
[   51.212910][ T5993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   51.267481][ T5993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   51.271713][ T5849] Bluetooth: hci1: command tx timeout
[   51.271761][ T5843] Bluetooth: hci2: command tx timeout
[   51.277154][ T5993] netlink: 32 bytes leftover after parsing attributes in process `syz.1.26'.
[   51.431309][ T5848] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   51.879623][ T6006] veth1_macvtap: left promiscuous mode
[   52.069478][ T6023] bond1: entered promiscuous mode
[   52.126496][ T6027] syz.0.38 uses old SIOCAX25GETINFO
[   52.183302][ T6034] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   52.320079][ T6048] sctp: [Deprecated]: syz.1.45 (pid 6048) Use of int in maxseg socket option.
[   52.320079][ T6048] Use struct sctp_assoc_value instead
[   52.387328][ T6050] syzkaller0: create flow: hash 1085235491 index 1
[   52.388091][ T5872] syzkaller0: tun_net_xmit 76
[   52.396157][ T5872] syzkaller0: tun_net_xmit 48
[   52.411252][ T6050] syzkaller0: delete flow: hash 1085235491 index 1
[   53.209516][ T6078] netlink: 'syz.1.53': attribute type 1 has an invalid length.
[   53.209745][ T6065] (unnamed net_device) (uninitialized): option ad_select: invalid value (60)
[   53.224896][ T6079] warning: `syz.1.53' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   53.234305][ T6077] ipvlan2: entered allmulticast mode
[   53.236110][ T6077] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   53.272401][ T5848] Bluetooth: hci0: command 0x040f tx timeout
[   53.351341][ T5848] Bluetooth: hci2: command tx timeout
[   53.354305][ T6092] bridge_slave_1: left allmulticast mode
[   53.356998][ T6092] bridge_slave_1: left promiscuous mode
[   53.359496][ T6092] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.364870][ T5848] Bluetooth: hci1: command tx timeout
[   53.380072][ T6092] bridge_slave_0: left allmulticast mode
[   53.383368][ T6092] bridge_slave_0: left promiscuous mode
[   53.385329][ T6092] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.414143][ T6090] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   53.463292][ T6090] veth3: entered promiscuous mode
[   53.544165][ T6102] IPv6: syztnl1: Disabled Multicast RS
[   53.824128][ T6127] pim6reg1: entered promiscuous mode
[   53.826581][ T6127] pim6reg1: entered allmulticast mode
[   54.014281][ T6142] syz.2.71 uses obsolete (PF_INET,SOCK_PACKET)
[   54.097268][ T6137] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   54.204403][ T6148] tipc: Started in network mode
[   54.211311][ T6148] tipc: Node identity 72d1fb3458ce, cluster identity 4711
[   54.215388][ T6148] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   54.219191][ T6152] syzkaller0: entered promiscuous mode
[   54.225671][ T6152] syzkaller0: entered allmulticast mode
[   54.273266][ T6147] tipc: Resetting bearer <eth:syzkaller0>
[   54.297896][ T6147] tipc: Disabling bearer <eth:syzkaller0>
[   54.720479][ T6194] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[   54.888310][ T6208] netlink: 'syz.0.85': attribute type 1 has an invalid length.
[   54.963439][ T6220] __nla_validate_parse: 21 callbacks suppressed
[   54.963450][ T6220] netlink: 9 bytes leftover after parsing attributes in process `syz.2.88'.
[   54.977307][ T6220] gretap0: entered promiscuous mode
[   54.991133][ T6220] netlink: 5 bytes leftover after parsing attributes in process `syz.2.88'.
[   54.997673][ T6220] 0{X: renamed from gretap0
[   55.010543][ T6220] 0{X: left promiscuous mode
[   55.015984][ T6220] 0{X: entered allmulticast mode
[   55.019169][ T6220] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[   55.028944][ T6226] macvtap0: refused to change device tx_queue_len
[   55.032042][ T6226] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check.
[   55.133526][ T6234] netlink: 277 bytes leftover after parsing attributes in process `syz.0.94'.
[   55.140268][ T6236] netlink: 'syz.2.95': attribute type 1 has an invalid length.
[   55.148049][ T6236] netlink: 44 bytes leftover after parsing attributes in process `syz.2.95'.
[   55.353181][ T5843] Bluetooth: hci0: command 0x040f tx timeout
[   55.355563][ T5848] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   55.431839][ T5848] Bluetooth: hci1: command tx timeout
[   55.433591][ T5848] Bluetooth: hci2: command tx timeout
[   55.713248][ T6263] ip6gretap0: left promiscuous mode
[   55.716762][ T6263] ip6gretap0: left allmulticast mode
[   55.797256][ T6263] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   55.807079][ T6263] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   55.945857][ T6263] bond1: left promiscuous mode
[   55.948039][ T5906] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.952115][ T5906] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.954933][ T5906] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.963829][ T5906] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   56.039053][ T6275] netlink: 24 bytes leftover after parsing attributes in process `syz.0.107'.
[   56.734422][ T6320] netlink: 'syz.0.116': attribute type 3 has an invalid length.
[   57.142808][ T6350] netlink: 16 bytes leftover after parsing attributes in process `syz.1.123'.
[   57.146678][ T6350] netlink: 44 bytes leftover after parsing attributes in process `syz.1.123'.
[   57.155944][ T6350] bridge1: the hash_elasticity option has been deprecated and is always 16
[   57.201838][ T6355] netlink: 312 bytes leftover after parsing attributes in process `syz.0.125'.
[   57.262534][ T6361] netlink: 60 bytes leftover after parsing attributes in process `syz.2.127'.
[   57.272194][ T6361] netlink: 56 bytes leftover after parsing attributes in process `syz.2.127'.
[   57.280310][ T6361] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0
[   57.291524][ T6361] gretap0: entered promiscuous mode
[   57.293367][ T6361] gretap0: entered allmulticast mode
[   57.431227][ T5843] Bluetooth: hci0: command 0x040f tx timeout
[   57.502941][ T6387] 8021q: adding VLAN 0 to HW filter on device bond1
[   57.530791][ T6387] bridge_slave_0: left allmulticast mode
[   57.534830][ T6387] bridge_slave_0: left promiscuous mode
[   57.537800][ T6387] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.550457][ T6387] bridge_slave_1: left allmulticast mode
[   57.555427][ T6387] bridge_slave_1: left promiscuous mode
[   57.560496][ T6387] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.575659][ T6387] bond0: (slave bond_slave_0): Releasing backup interface
[   57.585225][ T6387] bond0: (slave bond_slave_1): Releasing backup interface
[   57.599144][ T6387] team0: Port device team_slave_0 removed
[   57.616062][ T6387] team0: Port device team_slave_1 removed
[   57.626239][ T6387] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   57.640738][ T6387] batman_adv: batadv0: Removing interface: batadv_slave_0
[   57.657166][ T6387] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   57.660002][ T6387] batman_adv: batadv0: Removing interface: batadv_slave_1
[   57.685978][ T6387] syz.1.134 (6387) used greatest stack depth: 19864 bytes left
[   57.758506][ T6406] @: renamed from veth0_vlan (while UP)
[   57.839723][ T6408] syzkaller0: entered promiscuous mode
[   57.842790][ T6408] syzkaller0: entered allmulticast mode
[   57.847966][ T6408] netlink: 'syz.2.140': attribute type 7 has an invalid length.
[   57.858538][ T6408] : entered promiscuous mode
[   58.659787][ T6418] vlan2: entered allmulticast mode
[   58.674237][ T6422] netlink: 'syz.0.143': attribute type 13 has an invalid length.
[   58.676749][ T6422] netlink: 'syz.0.143': attribute type 17 has an invalid length.
[   58.815338][ T6422] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.819804][ T6422] 8021q: adding VLAN 0 to HW filter on device team0
[   58.830397][ T6422] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   58.954384][ T6441] ieee802154 phy0 wpan0: encryption failed: -22
[   58.958346][ T6442] ieee802154 phy0 wpan0: encryption failed: -22
[   59.162613][ T6449] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.168935][ T6449] bond0: (slave rose0): Enslaving as an active interface with an up link
[   59.512030][ T5843] Bluetooth: hci0: command 0x040f tx timeout
[   59.846866][ T6498] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   59.884905][ T6505] netlink: 'syz.2.163': attribute type 5 has an invalid length.
[   59.924382][ T6507] bond2: entered promiscuous mode
[   60.109662][ T6521] __nla_validate_parse: 14 callbacks suppressed
[   60.109673][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.166'.
[   60.115441][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.166'.
[   60.219975][ T6525] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[   60.239602][ T6525] netlink: 20 bytes leftover after parsing attributes in process `syz.2.171'.
[   60.297529][ T6536] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20000
[   60.305027][ T6538] netlink: 'syz.0.175': attribute type 6 has an invalid length.
[   60.374352][ T6543] syzkaller0: entered promiscuous mode
[   60.378117][ T6543] syzkaller0: entered allmulticast mode
[   60.394916][ T6542] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.419920][ T6543] tipc: Resetting bearer <eth:syzkaller0>
[   60.435073][ T6543] tipc: Disabling bearer <eth:syzkaller0>
[   60.836997][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.185'.
[   60.840035][ T6568] netlink: 20 bytes leftover after parsing attributes in process `syz.0.185'.
[   60.844345][ T6568] tipc: Invalid UDP bearer configuration
[   60.844370][ T6568] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   60.915403][ T6572] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[   61.060685][ T6588] netlink: 36 bytes leftover after parsing attributes in process `syz.1.193'.
[   61.098038][ T6586] netlink: 'syz.2.192': attribute type 21 has an invalid length.
[   61.118189][ T6586] ipvlan2: entered promiscuous mode
[   61.124749][ T6586] bridge0: port 3(ipvlan2) entered blocking state
[   61.127616][ T6586] bridge0: port 3(ipvlan2) entered disabled state
[   61.129797][ T6586] ipvlan2: entered allmulticast mode
[   61.139938][ T6586] ipvlan2: left allmulticast mode
[   61.181136][ T6596] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.184430][ T6597] netlink: 'syz.1.193': attribute type 11 has an invalid length.
[   61.184643][ T6594] syzkaller0: entered promiscuous mode
[   61.186994][ T6597] netlink: 'syz.1.193': attribute type 4 has an invalid length.
[   61.187015][ T6597] netlink: 224 bytes leftover after parsing attributes in process `syz.1.193'.
[   61.189894][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.193'.
[   61.194231][ T6594] syzkaller0: entered allmulticast mode
[   61.225879][ T6596] tipc: Resetting bearer <eth:syzkaller0>
[   61.255806][ T6596] tipc: Disabling bearer <eth:syzkaller0>
[   61.277183][ T6600] netlink: 24 bytes leftover after parsing attributes in process `syz.1.195'.
[   61.288120][ T6602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.196'.
[   61.293977][ T6602] bridge_slave_1: left allmulticast mode
[   61.297050][ T6602] bridge_slave_1: left promiscuous mode
[   61.312414][ T6602] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.325446][ T6602] bridge_slave_0: left promiscuous mode
[   61.328056][ T6602] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.542242][ T6626] vlan2: entered promiscuous mode
[   61.544077][ T6626] vlan2: entered allmulticast mode
[   61.546002][ T6626] hsr_slave_1: entered allmulticast mode
[   61.572401][ T5892] IPVS: starting estimator thread 0...
[   61.584574][ T6630] veth5: entered promiscuous mode
[   61.671098][ T6632] IPVS: using max 80 ests per chain, 192000 per kthread
[   62.343706][ T6640] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[   62.643350][ T6658] syzkaller1: entered promiscuous mode
[   62.645603][ T6658] syzkaller1: entered allmulticast mode
[   62.731837][ T6656] netlink: 'syz.2.211': attribute type 4 has an invalid length.
[   62.906305][ T6669] v: renamed from ip6_vti0 (while UP)
[   63.632618][ T6706] tipc: Started in network mode
[   63.634335][ T6706] tipc: Node identity ea84a0a05021, cluster identity 4711
[   63.636930][ T6706] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.644085][ T6706] syzkaller0: entered promiscuous mode
[   63.646079][ T6706] syzkaller0: entered allmulticast mode
[   63.663126][ T6706] tipc: Resetting bearer <eth:syzkaller0>
[   63.666591][ T6705] tipc: Resetting bearer <eth:syzkaller0>
[   63.676899][ T6705] tipc: Disabling bearer <eth:syzkaller0>
[   63.833731][ T5848] Bluetooth: hci0: command 0x040f tx timeout
[   63.835819][ T5843] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   64.007153][ T6730] bond2: entered promiscuous mode
[   64.204328][ T6745] syzkaller0: entered promiscuous mode
[   64.206622][ T6745] syzkaller0: entered allmulticast mode
[   64.213170][ T6745] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   64.223338][ T6745] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   64.277644][ T6754] smc: net device bond0 applied user defined pnetid SYZ2
[   64.327392][ T6758] syzkaller0: entered promiscuous mode
[   64.329691][ T6758] syzkaller0: entered allmulticast mode
[   65.074541][ T6786] netlink: 'syz.2.252': attribute type 3 has an invalid length.
[   65.090531][ T6786] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.204980][ T6786] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.291625][ T6786] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.359837][ T6786] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.461710][ T5906] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.470523][ T5906] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.495547][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.499511][ T6805] netlink: 'syz.1.259': attribute type 1 has an invalid length.
[   65.525634][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.547308][ T6805] bond3: (slave geneve3): making interface the new active one
[   65.558540][ T6805] bond3: (slave geneve3): Enslaving as an active interface with an up link
[   65.569114][   T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   65.572898][ T6805] __nla_validate_parse: 10 callbacks suppressed
[   65.572912][ T6805] netlink: 28 bytes leftover after parsing attributes in process `syz.1.259'.
[   65.579622][   T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   65.586958][ T6805] 8021q: adding VLAN 0 to HW filter on device bond3
[   65.593509][   T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   65.597808][   T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   65.617152][ T6808] netlink: 'syz.2.260': attribute type 4 has an invalid length.
[   65.714064][ T6814] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.716807][ T6814] syzkaller0: entered promiscuous mode
[   65.718700][ T6814] syzkaller0: entered allmulticast mode
[   65.752176][ T6817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.263'.
[   65.766791][ T6817] bond4: entered promiscuous mode
[   65.844967][ T6825] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   65.853673][ T6825] netlink: 312 bytes leftover after parsing attributes in process `syz.1.266'.
[   66.149134][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.154055][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[   66.158349][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.161920][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[   66.165630][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.170166][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[   66.176058][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.179777][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[   66.328940][ T6839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.270'.
[   66.334800][ T6839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.270'.
[   66.337961][ T6839] netlink: 60 bytes leftover after parsing attributes in process `syz.0.270'.
[   66.485042][ T6810] tipc: Resetting bearer <eth:syzkaller0>
[   66.493611][ T6810] tipc: Disabling bearer <eth:syzkaller0>
[   67.407781][ T6856] netlink: 'syz.1.278': attribute type 1 has an invalid length.
[   67.411123][ T6856] netlink: 36 bytes leftover after parsing attributes in process `syz.1.278'.
[   67.510912][ T6864] bond2: left promiscuous mode
[   67.517968][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.281'.
[   67.522365][ T6864] ip6gre0: Master is either lo or non-ether device
[   67.533949][ T6864] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   67.709704][ T6878] netlink: 'syz.0.284': attribute type 1 has an invalid length.
[   67.713302][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.284'.
[   67.717071][ T6878] netlink: 16 bytes leftover after parsing attributes in process `syz.0.284'.
[   68.801746][ T6896] bridge0: entered promiscuous mode
[   69.536953][ T6923] bond2: entered promiscuous mode
[   69.768847][ T6950] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.772850][ T6950] syzkaller0: entered promiscuous mode
[   69.774654][ T6950] syzkaller0: entered allmulticast mode
[   69.783151][ T6950] tipc: Resetting bearer <eth:syzkaller0>
[   69.796799][ T6951] tipc: Resetting bearer <eth:syzkaller0>
[   69.805685][ T6951] tipc: Disabling bearer <eth:syzkaller0>
[   69.880322][ T6961] netlink: 'syz.1.309': attribute type 10 has an invalid length.
[   69.887557][ T6961] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up
[   70.035519][ T6973] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.038175][ T6973] syzkaller0: entered promiscuous mode
[   70.040115][ T6973] syzkaller0: entered allmulticast mode
[   70.059230][ T6973] tipc: Resetting bearer <eth:syzkaller0>
[   70.064011][ T6971] tipc: Resetting bearer <eth:syzkaller0>
[   70.070882][ T6971] tipc: Disabling bearer <eth:syzkaller0>
[   70.232098][ T6987] netlink: 'syz.0.318': attribute type 4 has an invalid length.
[   70.476884][    T9] cfg80211: failed to load regulatory.db
[   70.481785][ T7010] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[   70.548317][ T7013] netlink: 'syz.2.325': attribute type 2 has an invalid length.
[   70.790006][ T7025] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.798579][ T7025] netlink: 'syz.1.331': attribute type 10 has an invalid length.
[   70.809726][ T7025] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up
[   70.814143][ T7025] syzkaller0: entered promiscuous mode
[   70.816551][ T7025] syzkaller0: entered allmulticast mode
[   70.823293][ T7025] __nla_validate_parse: 6 callbacks suppressed
[   70.823305][ T7025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.331'.
[   70.830205][ T7025] tipc: Resetting bearer <eth:syzkaller0>
[   70.844338][ T7025] tipc: Resetting bearer <eth:syzkaller0>
[   70.853361][ T7025] tipc: Disabling bearer <eth:syzkaller0>
[   70.953313][ T1363] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[   70.958419][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.134093][ T7031] veth7: entered promiscuous mode
[   71.143234][ T7031] netlink: 120 bytes leftover after parsing attributes in process `syz.1.334'.
[   71.263856][ T7044] Illegal XDP return value 4294967274 on prog  (id 127) dev N/A, expect packet loss!
[   71.270275][ T7043] netlink: 20 bytes leftover after parsing attributes in process `syz.0.337'.
[   71.294968][ T7046] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   71.301228][ T7046] bond0: (slave bond_slave_0): Releasing backup interface
[   71.305878][ T7046] team0: Port device team_slave_1 removed
[   71.308049][ T7046] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.311736][ T7046] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.316471][ T7046] netlink: 'syz.0.338': attribute type 10 has an invalid length.
[   71.319082][ T7046] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   71.323438][ T7046] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   71.406638][ T7050] veth3: entered allmulticast mode
[   71.466944][ T7052] netlink: 'syz.2.341': attribute type 10 has an invalid length.
[   71.472811][ T7052] team0: Device ipvlan1 failed to register rx_handler
[   71.485517][ T7052] netlink: 17 bytes leftover after parsing attributes in process `syz.2.341'.
[   71.519670][ T7058] netlink: 32 bytes leftover after parsing attributes in process `syz.0.342'.
[   71.613004][ T7064] netlink: 'syz.2.344': attribute type 2 has an invalid length.
[   71.616539][ T7064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.344'.
[   71.656009][ T7064] bond3: entered promiscuous mode
[   71.718671][ T7078] netlink: 'syz.0.351': attribute type 10 has an invalid length.
[   71.740334][ T7078] team0: Device ipvlan1 failed to register rx_handler
[   71.754104][ T7078] netlink: 17 bytes leftover after parsing attributes in process `syz.0.351'.
[   71.789141][ T7085] netlink: 24 bytes leftover after parsing attributes in process `syz.1.352'.
[   71.864157][ T7088] 0{X: left allmulticast mode
[   71.915926][ T7088] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.923808][ T7088] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.974792][ T7088] gretap0: left promiscuous mode
[   71.976509][ T7088] gretap0: left allmulticast mode
[   71.978707][ T7088] vlan2: left promiscuous mode
[   71.980399][ T7088] vlan2: left allmulticast mode
[   71.986071][ T7088] hsr_slave_1: left allmulticast mode
[   71.988875][ T7088] bond2: left promiscuous mode
[   71.991977][ T7088] bond3: left promiscuous mode
[   71.993848][ T7095] netlink: 148 bytes leftover after parsing attributes in process `syz.1.355'.
[   71.996783][ T7095] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[   72.005432][ T5906] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.008903][ T5906] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.012490][ T5906] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.015624][ T5906] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.188089][ T7110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.360'.
[   72.973985][ T7158] netlink: 'syz.0.376': attribute type 1 has an invalid length.
[   72.987797][ T7158] 8021q: adding VLAN 0 to HW filter on device bond3
[   73.047676][ T7158] RDS: rds_bind could not find a transport for ::ffff:172.20.20.44, load rds_tcp or rds_rdma?
[   73.603034][ T7204] netlink: 'syz.0.391': attribute type 12 has an invalid length.
[   74.109978][ T7249] bond4: entered promiscuous mode
[   74.149394][ T7257] pimreg: entered allmulticast mode
[   74.177344][ T7257] pimreg: left allmulticast mode
[   74.206954][ T7265] syzkaller1: entered promiscuous mode
[   74.209308][ T7265] syzkaller1: entered allmulticast mode
[   74.402738][ T7280] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   74.550876][ T7289] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   74.849372][ T7314] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.852629][ T7314] syzkaller0: entered promiscuous mode
[   74.854523][ T7314] syzkaller0: entered allmulticast mode
[   74.863024][ T7314] tipc: Resetting bearer <eth:syzkaller0>
[   74.866438][ T7313] tipc: Resetting bearer <eth:syzkaller0>
[   74.873827][ T7313] tipc: Disabling bearer <eth:syzkaller0>
[   75.040577][ T7321] ip6tnl1: entered promiscuous mode
[   75.043532][ T7321] ip6tnl1: entered allmulticast mode
[   75.046527][ T7321] team0: Device ip6tnl1 is of different type
[   75.189865][ T7336] hsr_slave_0: left promiscuous mode
[   75.193228][ T7336] hsr_slave_1: left promiscuous mode
[   75.318744][ T7348] validate_nla: 1 callbacks suppressed
[   75.318753][ T7348] netlink: 'syz.1.437': attribute type 1 has an invalid length.
[   75.324614][ T7348] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   75.745328][ T7391] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   76.209670][ T7402] __nla_validate_parse: 19 callbacks suppressed
[   76.209680][ T7402] netlink: 40 bytes leftover after parsing attributes in process `syz.0.455'.
[   76.466451][ T7409] netlink: ct family unspecified
[   76.468165][ T7409] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.479717][ T7412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.458'.
[   76.489741][ T5906] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   76.489783][ T7412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.458'.
[   76.499049][ T5906] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   76.505022][ T5906] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   76.509359][ T5906] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   76.523666][ T7414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.459'.
[   76.555725][ T7414] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[   76.561591][ T7414] bond6: (slave vxcan3): Error -95 calling set_mac_address
[   76.714872][ T7428] netlink: 'syz.2.461': attribute type 29 has an invalid length.
[   76.718137][ T7428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.461'.
[   76.916148][ T7430] netlink: 'syz.1.465': attribute type 1 has an invalid length.
[   76.919244][ T7430] netlink: 204 bytes leftover after parsing attributes in process `syz.1.465'.
[   77.017383][ T7445] netlink: 40 bytes leftover after parsing attributes in process `syz.1.470'.
[   77.022036][ T7445] netlink: 40 bytes leftover after parsing attributes in process `syz.1.470'.
[   77.026832][ T7445] A link change request failed with some changes committed already. Interface v may have been left with an inconsistent configuration, please check.
[   77.060751][ T7451] netlink: 'syz.2.472': attribute type 1 has an invalid length.
[   77.087630][ T7451] 8021q: adding VLAN 0 to HW filter on device bond7
[   77.136833][ T7451] gretap1: entered promiscuous mode
[   77.293217][ T7471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.480'.
[   77.296195][ T7471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.480'.
[   77.532931][ T7494] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   77.680762][ T7494] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   77.738296][ T7516] netlink: 'syz.2.494': attribute type 6 has an invalid length.
[   77.785994][ T7520] gtp0: entered promiscuous mode
[   77.787627][ T7520] gtp0: entered allmulticast mode
[   77.803542][ T7520] netdevsim netdevsim0 : renamed from netdevsim0
[   77.847240][ T7529] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   78.045345][ T7548] netlink: 'syz.1.503': attribute type 1 has an invalid length.
[   78.207899][ T7562] syzkaller0: entered promiscuous mode
[   78.209951][ T7562] syzkaller0: entered allmulticast mode
[   78.599278][ T7596] bond4: entered promiscuous mode
[   79.716242][ T7659] syzkaller0: entered promiscuous mode
[   79.718137][ T7659] syzkaller0: entered allmulticast mode
[   79.916543][ T7679] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.919650][ T7679] syzkaller0: entered promiscuous mode
[   79.933613][ T7679] syzkaller0: entered allmulticast mode
[   79.947994][ T7685] netlink: 'syz.2.551': attribute type 13 has an invalid length.
[   79.952366][ T7685] netlink: 'syz.2.551': attribute type 17 has an invalid length.
[   79.953252][ T7679] tipc: Resetting bearer <eth:syzkaller0>
[   80.003944][ T7685] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.008381][ T7685] 8021q: adding VLAN 0 to HW filter on device team0
[   80.014197][ T7685] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   80.025397][ T7678] tipc: Resetting bearer <eth:syzkaller0>
[   80.036856][ T7678] tipc: Disabling bearer <eth:syzkaller0>
[   80.053539][ T7687] syzkaller0: entered promiscuous mode
[   80.055497][ T7687] syzkaller0: entered allmulticast mode
[   80.337752][ T7715] syzkaller0: entered promiscuous mode
[   80.339766][ T7715] syzkaller0: entered allmulticast mode
[   80.702597][ T7750] netlink: 'syz.1.570': attribute type 16 has an invalid length.
[   80.705901][ T7750] netlink: 'syz.1.570': attribute type 17 has an invalid length.
[   81.028295][ T7768] tap0: tun_chr_ioctl cmd 1074025677
[   81.030699][ T7768] tap0: linktype set to 270
[   81.565643][ T7775] netlink: 'syz.0.576': attribute type 1 has an invalid length.
[   81.613111][ T7775] 8021q: adding VLAN 0 to HW filter on device bond5
[   81.643651][ T7775] bond5: (slave gretap2): making interface the new active one
[   81.652581][ T7775] bond5: (slave gretap2): Enslaving as an active interface with an up link
[   81.869591][ T7786] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   81.893746][ T7788] __nla_validate_parse: 14 callbacks suppressed
[   81.893755][ T7788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.580'.
[   81.934562][ T7792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.583'.
[   81.942111][ T7786] batadv_slave_0: entered promiscuous mode
[   81.947180][ T7786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.581'.
[   81.955200][ T7786] netlink: 428 bytes leftover after parsing attributes in process `syz.2.581'.
[   81.958037][ T7786] netlink: 32 bytes leftover after parsing attributes in process `syz.2.581'.
[   82.198582][ T7801] netlink: 'syz.2.586': attribute type 6 has an invalid length.
[   82.206186][ T7801] netlink: 24 bytes leftover after parsing attributes in process `syz.2.586'.
[   82.466905][ T7811] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   82.469468][ T7811] IPv6: NLM_F_CREATE should be set when creating new route
[   82.472080][ T7811] IPv6: NLM_F_CREATE should be set when creating new route
[   82.474913][ T7811] IPv6: NLM_F_CREATE should be set when creating new route
[   82.507343][ T7811] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   82.765614][ T7822] netlink: 28 bytes leftover after parsing attributes in process `syz.2.591'.
[   82.888224][ T7845] netlink: 28 bytes leftover after parsing attributes in process `syz.2.599'.
[   82.891868][ T7844] netlink: 28 bytes leftover after parsing attributes in process `syz.2.599'.
[   82.941961][ T7849] netlink: 28 bytes leftover after parsing attributes in process `syz.0.601'.
[   83.324928][ T7877] syzkaller0: entered promiscuous mode
[   83.327137][ T7877] syzkaller0: entered allmulticast mode
[   83.833522][ T7909] syzkaller0: entered promiscuous mode
[   83.835298][ T7909] syzkaller0: entered allmulticast mode
[   84.048359][ T7921] syzkaller0: entered promiscuous mode
[   84.050868][ T7921] syzkaller0: entered allmulticast mode
[   84.814948][ T7930] bridge0: port 1(erspan0) entered blocking state
[   84.817113][ T7930] bridge0: port 1(erspan0) entered disabled state
[   84.819862][ T7930] erspan0: entered allmulticast mode
[   84.822744][ T7930] erspan0: entered promiscuous mode
[   84.826389][ T7933] erspan0: left allmulticast mode
[   84.829429][ T7933] erspan0: left promiscuous mode
[   84.832525][ T7933] bridge0: port 1(erspan0) entered disabled state
[   84.924576][ T7939] syzkaller0: entered promiscuous mode
[   84.926968][ T7939] syzkaller0: entered allmulticast mode
[   85.235716][ T7964] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.246034][ T7964] syzkaller0: entered promiscuous mode
[   85.247931][ T7964] syzkaller0: entered allmulticast mode
[   85.257900][ T7964] tipc: Resetting bearer <eth:syzkaller0>
[   85.621692][ T7991] 8021q: VLANs not supported on nr0
[   85.761463][ T8004] hsr_slave_1 (unregistering): left promiscuous mode
[   85.912863][ T8020] bond9: entered promiscuous mode
[   85.952699][ T8024] netlink: 'syz.2.657': attribute type 1 has an invalid length.
[   85.969460][ T8024] 8021q: adding VLAN 0 to HW filter on device bond10
[   86.069328][ T7956] tipc: Resetting bearer <eth:syzkaller0>
[   86.352275][ T5892] tipc: Node number set to 3131416736
[   86.794838][ T7956] tipc: Disabling bearer <eth:syzkaller0>
[   86.824296][ T8027] bond10: (slave batadv1): Opening slave failed
[   87.247992][ T8056] pimreg3: entered allmulticast mode
[   87.346324][ T8062] __nla_validate_parse: 19 callbacks suppressed
[   87.346334][ T8062] netlink: 28 bytes leftover after parsing attributes in process `syz.0.668'.
[   87.821205][ T8088] netlink: 28 bytes leftover after parsing attributes in process `syz.0.675'.
[   87.953644][ T8098] netlink: 28 bytes leftover after parsing attributes in process `syz.0.680'.
[   87.960246][ T8098] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   87.979517][ T8098] netlink: 20 bytes leftover after parsing attributes in process `syz.0.680'.
[   88.032319][ T8116] netlink: 19 bytes leftover after parsing attributes in process `syz.0.685'.
[   88.051316][ T8115] netlink: 28 bytes leftover after parsing attributes in process `syz.1.684'.
[   88.111751][ T8124] netlink: 36 bytes leftover after parsing attributes in process `syz.0.688'.
[   88.336113][ T8133] syzkaller0: entered promiscuous mode
[   88.345069][ T8133] syzkaller0: entered allmulticast mode
[   88.416707][ T8137] netlink: 56 bytes leftover after parsing attributes in process `syz.1.692'.
[   88.430798][ T8137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.692'.
[   88.552352][ T8140] netlink: 28 bytes leftover after parsing attributes in process `syz.0.693'.
[   88.893341][ T8160] syzkaller0: entered promiscuous mode
[   88.895327][ T8160] syzkaller0: entered allmulticast mode
[   89.030737][ T8173] netlink: 'syz.2.703': attribute type 1 has an invalid length.
[   89.067688][ T8173] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   89.129632][ T8179] netlink: 'syz.2.705': attribute type 15 has an invalid length.
[   89.336244][ T8191] syzkaller0: entered promiscuous mode
[   89.338784][ T8191] syzkaller0: entered allmulticast mode
[   89.682513][ T8212] syzkaller0: entered promiscuous mode
[   89.684362][ T8212] syzkaller0: entered allmulticast mode
[   89.776732][ T8216] veth0_to_bridge: entered promiscuous mode
[   89.779007][ T8216] veth0_to_bridge: left promiscuous mode
[   89.789135][ T8216] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.799858][ T8216] syzkaller0: entered promiscuous mode
[   89.805510][ T8216] syzkaller0: entered allmulticast mode
[   89.855413][ T8216] tipc: Resetting bearer <eth:syzkaller0>
[   89.864773][ T8215] tipc: Resetting bearer <eth:syzkaller0>
[   89.884951][ T8215] tipc: Disabling bearer <eth:syzkaller0>
[   90.187093][ T8247] syzkaller0: entered promiscuous mode
[   90.189273][ T8247] syzkaller0: entered allmulticast mode
[   90.521647][ T8256] netlink: 'syz.0.730': attribute type 6 has an invalid length.
[   90.992578][ T8253] 8021q: adding VLAN 0 to HW filter on device bond6
[   91.081192][ T8272] netlink: 'syz.0.734': attribute type 27 has an invalid length.
[   91.094251][ T8274] vlan2: entered allmulticast mode
[   91.170630][ T8275] netlink: 'syz.0.734': attribute type 17 has an invalid length.
[   91.816545][ T8324] bond0: option primary_reselect: invalid value (17)
[   91.831944][ T8322] tipc: New replicast peer: 255.255.255.255
[   91.839173][ T8322] tipc: Enabled bearer <udp:syz2>, priority 10
[   91.846543][ T8322] netlink: 'syz.1.751': attribute type 4 has an invalid length.
[   91.863196][ T8327] netlink: 'syz.0.753': attribute type 1 has an invalid length.
[   91.981905][ T8337] netlink: 'syz.1.758': attribute type 22 has an invalid length.
[   92.070863][ T8344] bond0: (slave wlan1): Releasing backup interface
[   92.080396][ T8344] bond5: (slave gretap2): Releasing active interface
[   92.560235][ T8379] geneve3: entered allmulticast mode
[   92.567319][ T5854] netdevsim netdevsim0 : set [1, 0] type 2 family 0 port 6081 - 0
[   92.571406][ T7903] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.574291][ T7903] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.577225][ T5854] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.625494][ T8382] __nla_validate_parse: 27 callbacks suppressed
[   92.625504][ T8382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.773'.
[   92.630541][ T8382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.773'.
[   92.645484][ T8382] netlink: 28 bytes leftover after parsing attributes in process `syz.0.773'.
[   92.648372][ T8382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.773'.
[   93.004879][ T8399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.779'.
[   93.271930][ T8414] netlink: 36 bytes leftover after parsing attributes in process `syz.0.784'.
[   93.495484][ T8430] netlink: 786 bytes leftover after parsing attributes in process `syz.0.790'.
[   93.499637][ T8432] netlink: 148 bytes leftover after parsing attributes in process `syz.2.791'.
[   93.504562][ T8432] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[   93.545499][ T8435] bridge0: left promiscuous mode
[   93.552707][ T8435] gtp0: left promiscuous mode
[   93.554636][ T8435] bond4: left promiscuous mode
[   93.572086][ T8432] bond0: (slave bond_slave_0): Releasing backup interface
[   93.577340][ T8435] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   93.577620][ T8432] bond0: (slave bond_slave_1): Releasing backup interface
[   93.584469][ T8432] team0: Port device team_slave_0 removed
[   93.587503][ T8432] team0: Port device team_slave_1 removed
[   93.589685][ T8432] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.593505][ T8432] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.607180][ T8435] netlink: 68 bytes leftover after parsing attributes in process `syz.0.792'.
[   93.656502][ T8448] smc: net device bond0 erased user defined pnetid SYZ2
[   93.724177][ T8449] bond0 (unregistering): Released all slaves
[   93.829663][ T8461] unknown channel width for channel at 909000KHz?
[   93.836181][ T8461] unknown channel width for channel at 909000KHz?
[   93.838613][ T8461] unknown channel width for channel at 909000KHz?
[   93.841844][ T8461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.845220][ T8456] netlink: 20 bytes leftover after parsing attributes in process `syz.1.798'.
[   94.376300][ T8468] netlink: 'syz.0.801': attribute type 3 has an invalid length.
[   94.379651][ T8468] netlink: 'syz.0.801': attribute type 3 has an invalid length.
[   94.389803][ T8468] vlan2: entered promiscuous mode
[   94.393125][ T8468] bridge0: entered promiscuous mode
[   94.812197][ T8483] A link change request failed with some changes committed already. Interface v may have been left with an inconsistent configuration, please check.
[   94.878332][ T8485] pim6reg1: entered promiscuous mode
[   94.880743][ T8485] pim6reg1: entered allmulticast mode
[   94.889367][ T8483] bond3: (slave geneve3): Releasing active interface
[   95.626709][ T8527] netlink: 'syz.2.820': attribute type 3 has an invalid length.
[   95.630215][ T8527] netlink: 'syz.2.820': attribute type 3 has an invalid length.
[   95.639214][ T8527] vlan3: entered promiscuous mode
[   95.641149][ T8527] bridge0: entered promiscuous mode
[   95.707521][ T8531] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   95.710325][ T8531] IPv6: NLM_F_CREATE should be set when creating new route
[   95.713549][ T8531] IPv6: NLM_F_CREATE should be set when creating new route
[   95.717198][ T8531] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   95.889665][ T8541] netlink: 'syz.2.824': attribute type 32 has an invalid length.
[   95.897572][ T8541] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[   96.169694][ T8566] netlink: 'syz.2.835': attribute type 21 has an invalid length.
[   97.124091][ T8610] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[   97.127726][ T8610] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   97.134860][ T8610] ipvlan2: left allmulticast mode
[   97.137317][ T8610] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[   97.140601][ T8610] veth3: left promiscuous mode
[   97.144144][ T8610] bond2: left promiscuous mode
[   97.146635][ T8610] veth5: left promiscuous mode
[   97.149462][ T8610] bond4: left promiscuous mode
[   97.152667][ T8610] veth7: left promiscuous mode
[   97.169186][ T5872] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   97.177353][ T5872] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   97.180314][ T5872] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   97.184478][ T5872] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   97.346477][ T8634] openvswitch: netlink: Unknown key attributes 2
[   97.398700][ T8639] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.405248][ T8639] syzkaller0: entered promiscuous mode
[   97.407110][ T8639] syzkaller0: entered allmulticast mode
[   97.430461][ T8639] tipc: Resetting bearer <eth:syzkaller0>
[   97.436039][ T8638] tipc: Resetting bearer <eth:syzkaller0>
[   97.452541][ T8638] tipc: Disabling bearer <eth:syzkaller0>
[   97.560204][ T8662] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   97.677162][ T8685] __nla_validate_parse: 24 callbacks suppressed
[   97.677172][ T8685] netlink: 36 bytes leftover after parsing attributes in process `syz.2.866'.
[   97.732755][ T8690] netlink: 24 bytes leftover after parsing attributes in process `syz.2.867'.
[   97.742773][ T8690] vlan3: entered promiscuous mode
[   97.753269][ T8670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.862'.
[   97.777198][ T8670] bond6: entered promiscuous mode
[   97.812617][ T8695] tipc: Enabled bearer <udp:syz0>, priority 10
[   98.008964][ T8712] netlink: 28 bytes leftover after parsing attributes in process `syz.1.874'.
[   98.038350][ T8714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.875'.
[   98.043654][ T8714] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[   98.078246][ T8716] netlink: 16 bytes leftover after parsing attributes in process `syz.1.876'.
[   98.111632][ T8719] netlink: 'syz.1.877': attribute type 3 has an invalid length.
[   98.114470][ T8719] netlink: 'syz.1.877': attribute type 3 has an invalid length.
[   98.543755][ T8728] syzkaller0: entered promiscuous mode
[   98.545839][ T8728] syzkaller0: entered allmulticast mode
[   98.787658][ T8748] netlink: 'syz.2.887': attribute type 3 has an invalid length.
[   98.790296][ T8748] netlink: 'syz.2.887': attribute type 3 has an invalid length.
[   98.817641][ T8750] netlink: 28 bytes leftover after parsing attributes in process `syz.0.888'.
[   98.920614][ T8761] syzkaller1: entered promiscuous mode
[   98.924847][ T8761] syzkaller1: entered allmulticast mode
[   98.942195][ T8768] netlink: 'syz.0.894': attribute type 29 has an invalid length.
[   98.945252][ T8768] netlink: 'syz.0.894': attribute type 29 has an invalid length.
[   99.047256][ T8770] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.050675][ T8770] syzkaller0: entered promiscuous mode
[   99.054831][ T8770] syzkaller0: entered allmulticast mode
[   99.067875][ T8770] tipc: Resetting bearer <eth:syzkaller0>
[   99.089545][ T8769] tipc: Resetting bearer <eth:syzkaller0>
[   99.102789][ T8769] tipc: Disabling bearer <eth:syzkaller0>
[   99.112703][ T8774] netlink: 'syz.0.897': attribute type 3 has an invalid length.
[   99.115332][ T8774] netlink: 'syz.0.897': attribute type 3 has an invalid length.
[   99.288658][ T8790] netlink: 'syz.0.903': attribute type 1 has an invalid length.
[   99.296774][ T8790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.903'.
[   99.357964][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.903'.
[   99.367894][ T8790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.903'.
[   99.424339][ T8800] ieee802154 phy0 wpan0: encryption failed: -22
[   99.505562][ T8808] sctp: [Deprecated]: syz.0.913 (pid 8808) Use of int in max_burst socket option deprecated.
[   99.505562][ T8808] Use struct sctp_assoc_value instead
[   99.694321][ T8819] 8021q: adding VLAN 0 to HW filter on device team0
[   99.702755][ T8819] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  100.284984][ T8860] 8021q: adding VLAN 0 to HW filter on device bond11
[  100.293009][ T8860] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  100.297086][ T8860] bond11: (slave macvlan3): Enslaving as a backup interface with a down link
[  100.303574][ T8860] bond11: (slave macvlan3): Releasing backup interface
[  100.442498][ T8880] GUP no longer grows the stack in syz.0.931 (8880): 200000006000-20000000a000 (200000005000)
[  100.446554][ T8880] CPU: 1 UID: 0 PID: 8880 Comm: syz.0.931 Not tainted 6.16.0-syzkaller-12084-g33caa208dba6-dirty #0 PREEMPT(full) 
[  100.446567][ T8880] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  100.446572][ T8880] Call Trace:
[  100.446576][ T8880]  <TASK>
[  100.446580][ T8880]  dump_stack_lvl+0x189/0x250
[  100.446593][ T8880]  ? __pfx_dump_stack_lvl+0x10/0x10
[  100.446602][ T8880]  ? __pfx__printk+0x10/0x10
[  100.446612][ T8880]  ? find_vma+0xe7/0x160
[  100.446628][ T8880]  __get_user_pages+0x24d0/0x2ce0
[  100.446636][ T8880]  ? __lock_acquire+0xab9/0xd20
[  100.446658][ T8880]  ? __gup_longterm_locked+0xc68/0x1660
[  100.446671][ T8880]  __gup_longterm_locked+0xde9/0x1660
[  100.446683][ T8880]  ? try_grab_folio_fast+0x1be/0x4f0
[  100.446697][ T8880]  ? gup_fast_fallback+0x195f/0x2010
[  100.446707][ T8880]  gup_fast_fallback+0x1e6a/0x2010
[  100.446728][ T8880]  ? __pfx_gup_fast_fallback+0x10/0x10
[  100.446754][ T8880]  ? __mutex_lock+0x335/0x1360
[  100.446766][ T8880]  ? rcu_is_watching+0x15/0xb0
[  100.446777][ T8880]  ? is_valid_gup_args+0x11f/0x200
[  100.446787][ T8880]  ? get_user_pages_fast+0x4d/0xb0
[  100.446798][ T8880]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  100.446813][ T8880]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  100.446824][ T8880]  ? wait_for_space+0x24d/0x2d0
[  100.446835][ T8880]  iov_iter_get_pages2+0x5e/0xa0
[  100.446846][ T8880]  __se_sys_vmsplice+0x548/0x10d0
[  100.446861][ T8880]  ? futex_private_hash_put+0x4b/0x280
[  100.446872][ T8880]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  100.446884][ T8880]  ? __pfx_futex_wake+0x10/0x10
[  100.446898][ T8880]  ? __lock_acquire+0xab9/0xd20
[  100.446924][ T8880]  ? do_pipe2+0xf7/0x170
[  100.446936][ T8880]  ? rcu_is_watching+0x15/0xb0
[  100.446945][ T8880]  ? do_syscall_64+0xbe/0x3b0
[  100.446956][ T8880]  do_syscall_64+0xfa/0x3b0
[  100.446964][ T8880]  ? lockdep_hardirqs_on+0x9c/0x150
[  100.446972][ T8880]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.446979][ T8880]  ? exc_page_fault+0x9f/0xf0
[  100.446988][ T8880]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.446995][ T8880] RIP: 0033:0x7f9e0878ebe9
[  100.447002][ T8880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  100.447030][ T8880] RSP: 002b:00007f9e09614038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  100.447041][ T8880] RAX: ffffffffffffffda RBX: 00007f9e089b5fa0 RCX: 00007f9e0878ebe9
[  100.447047][ T8880] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000f
[  100.447052][ T8880] RBP: 00007f9e08811e19 R08: 0000000000000000 R09: 0000000000000000
[  100.447056][ T8880] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  100.447061][ T8880] R13: 00007f9e089b6038 R14: 00007f9e089b5fa0 R15: 00007ffc2bb8d878
[  100.447074][ T8880]  </TASK>
[  100.869432][ T8906] sctp: [Deprecated]: syz.1.939 (pid 8906) Use of int in max_burst socket option deprecated.
[  100.869432][ T8906] Use struct sctp_assoc_value instead
[  100.891248][ T8914] bond0: entered promiscuous mode
[  100.988345][ T8919] ipvlan3: entered promiscuous mode
[  100.990976][ T8919] bridge0: port 1(ipvlan3) entered blocking state
[  100.993959][ T8919] bridge0: port 1(ipvlan3) entered disabled state
[  100.996706][ T8919] ipvlan3: entered allmulticast mode
[  100.999112][ T8919] gretap0: entered allmulticast mode
[  101.002378][ T8919] ipvlan3: left allmulticast mode
[  101.004491][ T8919] gretap0: left allmulticast mode
[  101.237531][ T8931] syzkaller1: entered promiscuous mode
[  101.241370][ T8931] syzkaller1: entered allmulticast mode
[  101.351338][ T5843] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  101.353584][ T5843] Bluetooth: hci0: command 0x040f tx timeout
[  101.725534][ T8977] batadv_slave_0: left promiscuous mode
[  101.729671][ T8977] bond4: left promiscuous mode
[  101.733478][ T8977] gretap1: left promiscuous mode
[  101.736149][ T8977] bond9: left promiscuous mode
[  101.889637][    T9] IPVS: starting estimator thread 0...
[  101.909251][ T8994] dvmrp0: entered allmulticast mode
[  101.982155][ T8995] IPVS: using max 80 ests per chain, 192000 per kthread
[  102.306282][ T9031] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  103.019689][ T9054] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  103.058474][ T9054] __nla_validate_parse: 87 callbacks suppressed
[  103.058484][ T9054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.975'.
[  103.095933][ T9054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.975'.
[  103.099125][ T9054] netlink: 312 bytes leftover after parsing attributes in process `syz.1.975'.
[  103.103927][ T9054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.975'.
[  103.187096][ T9069] netlink: 28 bytes leftover after parsing attributes in process `syz.1.979'.
[  103.262082][ T9073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.982'.
[  103.267916][ T9074] validate_nla: 4 callbacks suppressed
[  103.267929][ T9074] netlink: 'syz.2.981': attribute type 10 has an invalid length.
[  103.271185][ T9073] netlink: 24 bytes leftover after parsing attributes in process `syz.1.982'.
[  103.310397][ T9081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.984'.
[  103.528415][ T9103] netlink: 'syz.1.988': attribute type 1 has an invalid length.
[  103.553240][ T9103] netlink: 'syz.1.988': attribute type 30 has an invalid length.
[  103.776201][ T9121] netlink: 14 bytes leftover after parsing attributes in process `syz.0.993'.
[  103.836862][ T9121] bond0 (unregistering): Released all slaves
[  104.053583][ T9125] vlan0: entered promiscuous mode
[  104.083960][ T9132] netlink: 16 bytes leftover after parsing attributes in process `syz.0.997'.
[  104.307535][ T9155] netlink: 'syz.2.1005': attribute type 1 has an invalid length.
[  104.329864][ T9155] 8021q: adding VLAN 0 to HW filter on device bond12
[  104.341406][ T9155] 8021q: adding VLAN 0 to HW filter on device bond12
[  104.344310][ T9155] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address
[  104.349761][ T9155] bond12: (slave vxcan3): Error -95 calling set_mac_address
[  104.388422][ T9158] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  104.522357][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.525568][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.650512][ T9187] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  104.682460][ T9175] bond6: left promiscuous mode
[  104.687138][ T9175] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  104.747450][ T9187] batadv_slave_0: entered promiscuous mode
[  104.907710][ T9198] veth1_to_bond: entered allmulticast mode
[  104.932781][ T9198] veth1_to_bond (unregistering): left allmulticast mode
[  105.072169][ T9206] vlan3: entered allmulticast mode
[  105.074160][ T9206] bond13: entered allmulticast mode
[  105.165791][ T9212] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.169455][ T9212] syzkaller0: entered promiscuous mode
[  105.172284][ T9212] syzkaller0: entered allmulticast mode
[  105.184890][ T9212] tipc: Resetting bearer <eth:syzkaller0>
[  105.198074][ T9211] tipc: Resetting bearer <eth:syzkaller0>
[  105.206231][ T9211] tipc: Disabling bearer <eth:syzkaller0>
[  105.678886][ T9254] vxcan3: entered allmulticast mode
[  105.716564][ T9258] veth1_to_bond: entered allmulticast mode
[  105.738677][ T9258] veth1_to_bond (unregistering): left allmulticast mode
[  105.982085][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.985137][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.194072][ T9276] netlink: 'syz.1.1043': attribute type 1 has an invalid length.
[  106.218130][ T9276] 8021q: adding VLAN 0 to HW filter on device bond9
[  106.228411][ T9276] netlink: 'syz.1.1043': attribute type 12 has an invalid length.
[  106.255906][ T9276] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.259821][ T9276] 8021q: adding VLAN 0 to HW filter on device team0
[  106.268041][ T9276] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  106.382959][ T9279] syz_tun: entered allmulticast mode
[  106.385171][ T9279] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  106.479705][ T9283] macvlan0: entered allmulticast mode
[  107.092279][ T9300] netlink: 'syz.1.1049': attribute type 8 has an invalid length.
[  108.107961][ T9342] syz_tun: left allmulticast mode
[  108.115312][ T9342] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  108.185947][ T9347] __nla_validate_parse: 19 callbacks suppressed
[  108.185957][ T9347] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1064'.
[  108.313850][ T9352] netlink: 'syz.0.1066': attribute type 10 has an invalid length.
[  108.317563][ T9352] netlink: 'syz.0.1066': attribute type 10 has an invalid length.
[  108.395296][ T9358] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1068'.
[  108.653427][ T9378] lo: entered promiscuous mode
[  108.686785][ T9380] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1076'.
[  108.731694][ T9386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1078'.
[  108.903885][ T9397] sctp: [Deprecated]: syz.2.1081 (pid 9397) Use of struct sctp_assoc_value in delayed_ack socket option.
[  108.903885][ T9397] Use struct sctp_sack_info instead
[  109.037780][ T9412] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1086'.
[  109.040937][ T9412] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1086'.
[  109.044687][ T9412] netlink: 'syz.1.1086': attribute type 5 has an invalid length.
[  109.045721][ T9410] netlink: 'syz.2.1085': attribute type 4 has an invalid length.
[  109.047470][ T9412] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1086'.
[  109.138079][ T9420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1087'.
[  109.389063][ T9439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1094'.
[  109.440886][ T9461] macvlan4: entered allmulticast mode
[  109.444750][ T9461] veth1_vlan: entered allmulticast mode
[  109.449240][ T9461] veth1_vlan: left allmulticast mode
[  109.464126][ T9464] geneve4: entered promiscuous mode
[  109.466789][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.469956][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.473660][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.476461][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.574458][ T9479] Bluetooth: MGMT ver 1.23
[  109.599927][ T9475] syzkaller1: entered promiscuous mode
[  109.602354][ T9475] syzkaller1: entered allmulticast mode
[  109.742799][ T9495] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1108'.
[  109.939766][ T9508] netlink: 'syz.1.1115': attribute type 1 has an invalid length.
[  110.035416][ T9520] netlink: 'syz.0.1118': attribute type 1 has an invalid length.
[  110.289269][ T9557] netlink: 'syz.0.1132': attribute type 1 has an invalid length.
[  110.415248][ T9574] netlink: 'syz.2.1136': attribute type 1 has an invalid length.
[  110.458671][ T9574] 8021q: adding VLAN 0 to HW filter on device bond14
[  110.712740][ T9600] syzkaller0: entered promiscuous mode
[  110.714999][ T9600] syzkaller0: entered allmulticast mode
[  110.885860][ T9610] netlink: 'syz.0.1143': attribute type 10 has an invalid length.
[  111.398418][ T9646] netlink: 'syz.0.1153': attribute type 10 has an invalid length.
[  111.593053][ T5843] Bluetooth: hci2: command 0x0405 tx timeout
[  111.601091][ T5848] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  111.626203][ T9668] veth13: entered promiscuous mode
[  111.683682][ T9677] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  112.141495][ T9733] vlan3: entered allmulticast mode
[  112.143249][ T9733] bond0: entered allmulticast mode
[  112.190162][ T9722] veth15: entered promiscuous mode
[  112.361229][ T9748] openvswitch: netlink: Message has 4 unknown bytes.
[  112.366767][ T9748] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.976727][ T9763] bond7: entered promiscuous mode
[  112.993761][ T9767] vlan2: entered promiscuous mode
[  112.995944][ T9767] vlan2: entered allmulticast mode
[  112.998611][ T9767] hsr_slave_1: entered allmulticast mode
[  113.097648][ T9774] lo: left promiscuous mode
[  113.099931][ T9774] batadv_slave_0: left promiscuous mode
[  113.218647][ T9790] __nla_validate_parse: 95 callbacks suppressed
[  113.218657][ T9790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1201'.
[  113.223735][ T9790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1201'.
[  113.240497][ T9792] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1199'.
[  113.343898][ T9805] validate_nla: 4 callbacks suppressed
[  113.343911][ T9805] netlink: 'syz.1.1206': attribute type 1 has an invalid length.
[  113.369663][ T9805] 8021q: adding VLAN 0 to HW filter on device bond10
[  113.388114][ T9805] 8021q: adding VLAN 0 to HW filter on device bond10
[  113.394434][ T9805] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address
[  113.401350][ T9805] bond10: (slave vxcan1): Error -95 calling set_mac_address
[  113.414453][ T9808] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1207'.
[  113.427391][ T9806] netlink: 'syz.1.1206': attribute type 11 has an invalid length.
[  113.435355][ T9806] netlink: 'syz.1.1206': attribute type 11 has an invalid length.
[  113.438484][ T9806] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1206'.
[  113.444055][ T9813] netlink: 'syz.1.1206': attribute type 11 has an invalid length.
[  113.447366][ T9813] netlink: 'syz.1.1206': attribute type 11 has an invalid length.
[  113.450725][ T9813] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1206'.
[  113.463776][ T9806] gretap2: entered promiscuous mode
[  113.468032][ T9806] bond10: (slave gretap2): making interface the new active one
[  113.470804][ T9806] bond10: (slave gretap2): Enslaving as an active interface with an up link
[  113.475351][ T9805] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1206'.
[  113.478389][ T9806] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1206'.
[  113.552785][ T9819] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  113.587091][ T9828] syzkaller0: entered promiscuous mode
[  113.589503][ T9828] syzkaller0: entered allmulticast mode
[  113.695370][ T9835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1216'.
[  113.806643][ T9854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1222'.
[  113.811277][ T9854] bond0: Device is already in use.
[  114.032013][ T9877] netlink: 'syz.2.1232': attribute type 1 has an invalid length.
[  114.207522][ T9885] netlink: 'syz.2.1235': attribute type 10 has an invalid length.
[  114.311134][ T5843] Bluetooth: hci0: command 0x040f tx timeout
[  114.313343][ T5848] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  114.514328][ T9906] openvswitch: netlink: Flow actions attr not present in new flow.
[  114.545098][ T9906] netlink: 'syz.1.1241': attribute type 10 has an invalid length.
[  114.550725][ T9906] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.697392][ T9915] netlink: 'syz.2.1245': attribute type 10 has an invalid length.
[  114.783777][ T9923] netlink: 'syz.1.1248': attribute type 4 has an invalid length.
[  114.817614][ T9923] netlink: 'syz.1.1248': attribute type 12 has an invalid length.
[  114.820489][ T9923] netlink: 'syz.1.1248': attribute type 11 has an invalid length.
[  114.857562][ T9929] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.861601][ T9929] syzkaller0: entered promiscuous mode
[  114.863494][ T9929] syzkaller0: entered allmulticast mode
[  114.868726][ T9929] tipc: Resetting bearer <eth:syzkaller0>
[  114.873799][ T9928] tipc: Resetting bearer <eth:syzkaller0>
[  114.901421][ T9928] tipc: Disabling bearer <eth:syzkaller0>
[  115.103740][    C1] ------------[ cut here ]------------
[  115.106545][    C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  115.111121][    C1] WARNING: CPU: 1 PID: 9945 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
[  115.115359][    C1] Modules linked in:
[  115.117477][    C1] CPU: 1 UID: 0 PID: 9945 Comm: syz.1.1256 Not tainted 6.16.0-syzkaller-12084-g33caa208dba6-dirty #0 PREEMPT(full) 
[  115.123275][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  115.127438][    C1] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  115.130220][    C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 60 60 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 72 0e 94 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  115.137466][    C1] RSP: 0018:ffffc900001e0538 EFLAGS: 00010246
[  115.139485][    C1] RAX: 839a637c8f571c00 RBX: 000000000000000c RCX: ffff8881077a1cc0
[  115.142241][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  115.144882][    C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  115.147566][    C1] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff88810b1f59a8
[  115.150792][    C1] R13: 0000000000000000 R14: ffff8881235b0e40 R15: ffff8881235b30d8
[  115.154146][    C1] FS:  000055556e425500(0000) GS:ffff8881a3c21000(0000) knlGS:0000000000000000
[  115.157676][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  115.160425][    C1] CR2: 0000200000000bc0 CR3: 000000011e16c000 CR4: 00000000000006f0
[  115.163895][    C1] Call Trace:
[  115.165331][    C1]  <IRQ>
[  115.166555][    C1]  rate_control_send_low+0x194/0x7a0
[  115.168877][    C1]  rate_control_get_rate+0x20b/0x5d0
[  115.171098][    C1]  ieee80211_beacon_get_finish+0x39a/0x6c0
[  115.173155][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  115.175339][    C1]  ? __local_bh_enable_ip+0x12d/0x1c0
[  115.177217][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  115.179263][    C1]  ieee80211_beacon_get_ap+0x1868/0x1f30
[  115.181230][    C1]  ? __pfx_ieee80211_beacon_get_ap+0x10/0x10
[  115.183271][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  115.185227][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  115.187150][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  115.189528][    C1]  __ieee80211_beacon_get+0x118e/0x1880
[  115.192000][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  115.194388][    C1]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  115.196375][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  115.198369][    C1]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  115.200163][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  115.202578][    C1]  __iterate_interfaces+0x2ab/0x590
[  115.204333][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  115.206380][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  115.209124][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  115.211122][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  115.213346][    C1]  mac80211_hwsim_beacon+0xbb/0x1c0
[  115.215093][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  115.217086][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  115.218924][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  115.220978][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  115.223016][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  115.224800][    C1]  handle_softirqs+0x286/0x870
[  115.226471][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  115.228305][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  115.230177][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  115.231987][    C1]  __irq_exit_rcu+0xca/0x1f0
[  115.233501][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  115.235331][    C1]  irq_exit_rcu+0x9/0x30
[  115.236807][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  115.238709][    C1]  </IRQ>
[  115.239700][    C1]  <TASK>
[  115.240871][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  115.243248][    C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x18/0x90
[  115.245790][    C1] Code: 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 f0 9f 92 65 8b 15 88 3f e0 10 <81> e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 3c 16 00 00
[  115.252956][    C1] RSP: 0018:ffffc90008667550 EFLAGS: 00000246
[  115.254986][    C1] RAX: ffffffff822e31b4 RBX: ffff8880fc480000 RCX: ffff8881077a1cc0
[  115.257622][    C1] RDX: 0000000080000001 RSI: 0000000000000000 RDI: 0000000000000000
[  115.260246][    C1] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff822e4207
[  115.262940][    C1] R10: dffffc0000000000 R11: fffff940008e90e1 R12: 000000000011d21c
[  115.265698][    C1] R13: dffffc0000000000 R14: ffff88805fffa801 R15: 0000000000001000
[  115.268303][    C1]  ? page_table_check_clear+0x187/0x700
[  115.270239][    C1]  ? page_ext_lookup+0x114/0x180
[  115.271933][    C1]  page_ext_lookup+0x114/0x180
[  115.273554][    C1]  ? page_table_check_clear+0x187/0x700
[  115.275396][    C1]  page_table_check_clear+0x278/0x700
[  115.277184][    C1]  ? vm_normal_page+0xb7/0x210
[  115.278773][    C1]  unmap_page_range+0x3445/0x4370
[  115.280472][    C1]  ? __pfx_unmap_page_range+0x10/0x10
[  115.282362][    C1]  ? mas_find+0xb0e/0xd30
[  115.283703][ T9952] netlink: 'syz.0.1257': attribute type 10 has an invalid length.
[  115.283839][    C1]  ? unmap_vmas+0x144/0x580
[  115.283853][    C1]  unmap_vmas+0x399/0x580
[  115.290230][    C1]  ? __pfx_unmap_vmas+0x10/0x10
[  115.291930][    C1]  exit_mmap+0x248/0xb50
[  115.293355][    C1]  ? uprobe_clear_state+0x20f/0x290
[  115.295051][    C1]  ? __pfx_exit_mmap+0x10/0x10
[  115.296591][    C1]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  115.298461][    C1]  ? __pfx_exit_aio+0x10/0x10
[  115.300041][    C1]  ? uprobe_clear_state+0x274/0x290
[  115.301784][    C1]  __mmput+0x118/0x430
[  115.303133][    C1]  exit_mm+0x1da/0x2c0
[  115.304514][    C1]  ? __pfx_exit_mm+0x10/0x10
[  115.306085][    C1]  ? rcu_is_watching+0x15/0xb0
[  115.307855][    C1]  do_exit+0x648/0x2300
[  115.309414][    C1]  ? __pfx_do_exit+0x10/0x10
[  115.310881][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  115.312633][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  115.314370][    C1]  do_group_exit+0x21c/0x2d0
[  115.315882][    C1]  __x64_sys_exit_group+0x3f/0x40
[  115.317543][    C1]  x64_sys_call+0x21f7/0x2200
[  115.319146][    C1]  do_syscall_64+0xfa/0x3b0
[  115.320617][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  115.322419][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.324457][    C1]  ? exc_page_fault+0x9f/0xf0
[  115.326056][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.328086][    C1] RIP: 0033:0x7f81bfd8ebe9
[  115.329554][    C1] Code: Unable to access opcode bytes at 0x7f81bfd8ebbf.
[  115.332648][    C1] RSP: 002b:00007ffc2bda84d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  115.336122][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f81bfd8ebe9
[  115.339447][    C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
[  115.342879][    C1] RBP: 00007ffc2bda853c R08: 000000032bda85cf R09: 00000000000927c0
[  115.345648][    C1] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000185
[  115.348683][    C1] R13: 00000000000927c0 R14: 000000000001c103 R15: 00007ffc2bda8590
[  115.351548][    C1]  </TASK>
[  115.352645][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  115.355121][    C1] CPU: 1 UID: 0 PID: 9945 Comm: syz.1.1256 Not tainted 6.16.0-syzkaller-12084-g33caa208dba6-dirty #0 PREEMPT(full) 
[  115.359343][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  115.362970][    C1] Call Trace:
[  115.364225][    C1]  <IRQ>
[  115.365485][    C1]  dump_stack_lvl+0x99/0x250
[  115.367262][    C1]  ? __asan_memcpy+0x40/0x70
[  115.369194][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  115.371224][    C1]  ? __pfx__printk+0x10/0x10
[  115.373177][    C1]  vpanic+0x281/0x750
[  115.374901][    C1]  ? __pfx__printk+0x10/0x10
[  115.376898][    C1]  ? __pfx_vpanic+0x10/0x10
[  115.378875][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  115.381210][    C1]  panic+0xb9/0xc0
[  115.382843][    C1]  ? __pfx_panic+0x10/0x10
[  115.384756][    C1]  __warn+0x31b/0x4b0
[  115.386465][    C1]  ? __rate_control_send_low+0x5df/0x820
[  115.388881][    C1]  ? __rate_control_send_low+0x5df/0x820
[  115.391115][    C1]  report_bug+0x2be/0x4f0
[  115.392589][    C1]  ? __rate_control_send_low+0x5df/0x820
[  115.394445][    C1]  ? __rate_control_send_low+0x5df/0x820
[  115.396392][    C1]  ? __rate_control_send_low+0x5e1/0x820
[  115.398471][    C1]  handle_bug+0x84/0x160
[  115.399975][    C1]  exc_invalid_op+0x1a/0x50
[  115.401651][    C1]  asm_exc_invalid_op+0x1a/0x20
[  115.403354][    C1] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  115.405410][    C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 60 60 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 72 0e 94 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  115.412896][    C1] RSP: 0018:ffffc900001e0538 EFLAGS: 00010246
[  115.415363][    C1] RAX: 839a637c8f571c00 RBX: 000000000000000c RCX: ffff8881077a1cc0
[  115.418510][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  115.421760][    C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  115.425021][    C1] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff88810b1f59a8
[  115.428247][    C1] R13: 0000000000000000 R14: ffff8881235b0e40 R15: ffff8881235b30d8
[  115.431455][    C1]  ? __rate_control_send_low+0x5de/0x820
[  115.433753][    C1]  rate_control_send_low+0x194/0x7a0
[  115.435877][    C1]  rate_control_get_rate+0x20b/0x5d0
[  115.438028][    C1]  ieee80211_beacon_get_finish+0x39a/0x6c0
[  115.440271][    C1]  ? __pfx_ieee80211_beacon_get_finish+0x10/0x10
[  115.442738][    C1]  ? __local_bh_enable_ip+0x12d/0x1c0
[  115.444695][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  115.446949][    C1]  ieee80211_beacon_get_ap+0x1868/0x1f30
[  115.449257][    C1]  ? __pfx_ieee80211_beacon_get_ap+0x10/0x10
[  115.451732][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  115.453956][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  115.456158][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  115.458413][    C1]  __ieee80211_beacon_get+0x118e/0x1880
[  115.460657][    C1]  ? __ieee80211_beacon_get+0x36/0x1880
[  115.462902][    C1]  ieee80211_beacon_get_tim+0xb4/0x2b0
[  115.465096][    C1]  ? __pfx_ieee80211_beacon_get_tim+0x10/0x10
[  115.467526][    C1]  mac80211_hwsim_beacon_tx+0x3ce/0x860
[  115.469771][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  115.472703][    C1]  __iterate_interfaces+0x2ab/0x590
[  115.474843][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  115.477310][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  115.480233][    C1]  ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10
[  115.482577][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  115.485404][    C1]  mac80211_hwsim_beacon+0xbb/0x1c0
[  115.487515][    C1]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  115.489914][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  115.492058][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  115.494301][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  115.496418][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  115.498404][    C1]  handle_softirqs+0x286/0x870
[  115.500256][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  115.502159][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  115.504338][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  115.506446][    C1]  __irq_exit_rcu+0xca/0x1f0
[  115.508331][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  115.510452][    C1]  irq_exit_rcu+0x9/0x30
[  115.512146][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  115.514322][    C1]  </IRQ>
[  115.515543][    C1]  <TASK>
[  115.516766][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  115.518933][    C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x18/0x90
[  115.521194][    C1] Code: 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 f0 9f 92 65 8b 15 88 3f e0 10 <81> e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 3c 16 00 00
[  115.527421][    C1] RSP: 0018:ffffc90008667550 EFLAGS: 00000246
[  115.529437][    C1] RAX: ffffffff822e31b4 RBX: ffff8880fc480000 RCX: ffff8881077a1cc0
[  115.532233][    C1] RDX: 0000000080000001 RSI: 0000000000000000 RDI: 0000000000000000
[  115.534963][    C1] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff822e4207
[  115.537645][    C1] R10: dffffc0000000000 R11: fffff940008e90e1 R12: 000000000011d21c
[  115.540849][    C1] R13: dffffc0000000000 R14: ffff88805fffa801 R15: 0000000000001000
[  115.544203][    C1]  ? page_table_check_clear+0x187/0x700
[  115.546566][    C1]  ? page_ext_lookup+0x114/0x180
[  115.548716][    C1]  page_ext_lookup+0x114/0x180
[  115.550796][    C1]  ? page_table_check_clear+0x187/0x700
[  115.553146][    C1]  page_table_check_clear+0x278/0x700
[  115.555360][    C1]  ? vm_normal_page+0xb7/0x210
[  115.557341][    C1]  unmap_page_range+0x3445/0x4370
[  115.559382][    C1]  ? __pfx_unmap_page_range+0x10/0x10
[  115.561552][    C1]  ? mas_find+0xb0e/0xd30
[  115.563388][    C1]  ? unmap_vmas+0x144/0x580
[  115.565350][    C1]  unmap_vmas+0x399/0x580
[  115.567217][    C1]  ? __pfx_unmap_vmas+0x10/0x10
[  115.569259][    C1]  exit_mmap+0x248/0xb50
[  115.571028][    C1]  ? uprobe_clear_state+0x20f/0x290
[  115.573252][    C1]  ? __pfx_exit_mmap+0x10/0x10
[  115.575329][    C1]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  115.577704][    C1]  ? __pfx_exit_aio+0x10/0x10
[  115.579652][    C1]  ? uprobe_clear_state+0x274/0x290
[  115.581896][    C1]  __mmput+0x118/0x430
[  115.583659][    C1]  exit_mm+0x1da/0x2c0
[  115.585268][    C1]  ? __pfx_exit_mm+0x10/0x10
[  115.587008][    C1]  ? rcu_is_watching+0x15/0xb0
[  115.589062][    C1]  do_exit+0x648/0x2300
[  115.590879][    C1]  ? __pfx_do_exit+0x10/0x10
[  115.592889][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  115.595130][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  115.597325][    C1]  do_group_exit+0x21c/0x2d0
[  115.599400][    C1]  __x64_sys_exit_group+0x3f/0x40
[  115.601579][    C1]  x64_sys_call+0x21f7/0x2200
[  115.603519][    C1]  do_syscall_64+0xfa/0x3b0
[  115.605263][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  115.607075][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.609636][    C1]  ? exc_page_fault+0x9f/0xf0
[  115.611691][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.614239][    C1] RIP: 0033:0x7f81bfd8ebe9
[  115.616153][    C1] Code: Unable to access opcode bytes at 0x7f81bfd8ebbf.
[  115.619113][    C1] RSP: 002b:00007ffc2bda84d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  115.622618][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f81bfd8ebe9
[  115.625879][    C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
[  115.629170][    C1] RBP: 00007ffc2bda853c R08: 000000032bda85cf R09: 00000000000927c0
[  115.632593][    C1] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000185
[  115.635936][    C1] R13: 00000000000927c0 R14: 000000000001c103 R15: 00007ffc2bda8590
[  115.639091][    C1]  </TASK>
[  115.640899][    C1] Kernel Offset: disabled
[  115.642361][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:11:48  Registers:
info registers vcpu 0

CPU#0
RAX=c875d0f64b44be00 RBX=ffffffff822e5b0a RCX=c875d0f64b44be00 RDX=0000000000000000
RSI=ffffffff8dba39af RDI=ffffffff8be32680 RBP=ffffc9000328f630 RSP=ffffc9000328f308
R8 =0000000000000000 R9 =ffffffff822e5b0a R10=dffffc0000000000 R11=fffff9400017ae41
R12=dffffc0000000000 R13=ffff88810e705c90 R14=000000000002f5c8 R15=ffff88805fffa4a0
RIP=ffffffff822e5b26 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557fec3500 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9e094e56c0 CR3=0000000026c18000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f9e08812e53
XMM06=0000000000000000 00007f9e08812e4d XMM07=0000000000000000 00007f9e08812e61
XMM08=0000000000000000 00007f9e08812ee7 XMM09=0000000000000000 00007f9e08812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000037 RBX=0000000000000037 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001dfcd0
R8 =ffff8881079b0237 R9 =1ffff11020f36046 R10=dffffc0000000000 R11=ffffffff854e71d0
R12=dffffc0000000000 R13=ffffffff99af48cc R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e724c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556e425500 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000bc0 CR3=000000011e16c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f81bfe12e53
XMM06=0000000000000000 00007f81bfe12e4d XMM07=0000000000000000 00007f81bfe12e61
XMM08=0000000000000000 00007f81bfe12ee7 XMM09=0000000000000000 00007f81bfe12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
