last executing test programs:

1m4.488859599s ago: executing program 1 (id=168):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000000180)={'syztnl2\x00', <r1=>0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0xffffffffffffff81, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}})
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000c8928fc6000062012200000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128008000100736974000c00028008000300ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', r1, 0x40, 0x700, 0x8, 0x6, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0xea, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})

1m4.399322163s ago: executing program 1 (id=169):
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f1ea3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b2213fdc2881e1a6ec9d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232f0485a2ca9f37fc9c3d2688efcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdcdeb2af1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f925f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308c"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000007700094729bd700000000000070000ff3f568510dd22bf156957fb20a37227941b1e96e4ce2e6e9efe97dc3d04338b0a374ed8ec02dc36884e6ded131f900013224e0bda6647a4499831656439d3ae91d0f700df44a07e8c84230ab8fbb5e4d1b6708302e979eb6af3", @ANYRES32=0x0, @ANYBLOB="0c000d800500030003000000"], 0x24}, 0x1, 0x5502000000000000}, 0x4000)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c)
setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c)
setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request={0x11, 0x0, 0x0, 0x4}}}}}, 0x0)

1m4.398632487s ago: executing program 1 (id=170):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071184a000000100095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m4.317693679s ago: executing program 1 (id=171):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r0, 0x4) (async)
ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6f, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={'rose', 0x0}, 0xff, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @null, @default]})
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500000008000a"], 0x1c}}, 0x20000086)

1m4.200627297s ago: executing program 1 (id=175):
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000007700094729bd700000000000070000ff3f568510dd22bf156957fb20a37227941b1e96e4ce2e6e9efe97dc3d04338b0a374ed8ec02dc36884e6ded131f900013224e0bda6647a4499831656439d3ae91d0f700df44a07e8c84230ab8fbb5e4d1b6708302e979eb6af3", @ANYRES32=0x0, @ANYBLOB="0c000d800500030003000000"], 0x24}, 0x1, 0x5502000000000000}, 0x4000)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c)
setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c)
setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request={0x11, 0x0, 0x0, 0x4}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x10, "ff00000058b274e6d84516edefe42897054804577b00000000000000fcffeb00", 0xb2, 0xb, 0x6, 0x6}, 0x3c)

1m3.809270793s ago: executing program 1 (id=181):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206010100000000000000000a00000005000400020000000900020073797a3200000000e90b078008001340ffffffff0800060000000000050005000200000005000100060000000d000300686173683a6e657400", @ANYRES8=r0, @ANYRES8=r2], 0x5c}}, 0x80)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"})
getsockopt$inet6_opts(r3, 0x29, 0x3b, 0x0, &(0x7f0000000280))
socket$netlink(0x10, 0x3, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES8=r1], 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x20000800)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3, 0x63}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x88}, 0x4000004)
ioctl$sock_netrom_SIOCDELRT(r0, 0x8918, 0x0) (async)
ioctl$sock_netrom_SIOCDELRT(r0, 0x8918, 0x0)

1m3.715951042s ago: executing program 32 (id=181):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206010100000000000000000a00000005000400020000000900020073797a3200000000e90b078008001340ffffffff0800060000000000050005000200000005000100060000000d000300686173683a6e657400", @ANYRES8=r0, @ANYRES8=r2], 0x5c}}, 0x80)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"})
getsockopt$inet6_opts(r3, 0x29, 0x3b, 0x0, &(0x7f0000000280))
socket$netlink(0x10, 0x3, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES8=r1], 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x20000800)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3, 0x63}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x88}, 0x4000004)
ioctl$sock_netrom_SIOCDELRT(r0, 0x8918, 0x0) (async)
ioctl$sock_netrom_SIOCDELRT(r0, 0x8918, 0x0)

3.163606286s ago: executing program 0 (id=1066):
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)={0x138, 0x23, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x11, 0x0, 0x1, [@typed={0x49, 0x121, 0x0, 0x0, @binary="c9a7befe6f6d645a1a11b81b2c4b101c7510e19fee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed3103bc77d35b296674f1fe35663c0d236fd88d7ba"}]}, @nested={0xd4, 0x6, 0x0, 0x1, [@nested={0xd0, 0x75, 0x0, 0x1, [@nested={0xcc, 0x105, 0x0, 0x1, [@nested={0xc5, 0xce, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @fd=r1}, @generic="9db6859cccae2434ff2e8f93db2df78257b0170f04b50b3be1e4c913ca056fe917b18f5222ac3d3541f98865f03144d0b08bebc32edca5884fdd79091323071734155332e8388f50ece0c5f03a29b281c639e10effac78129089df5ef6cfc31b315f5d873171723ff22203aab3e5053649597853a74ba2af1ee6beec35caed1a3ac803501167580d1c3d3c71cbe7b7d46bf41688a56358a6e631a860ce019d10f0b3d70c28acb57ccb7b8f82b6", @nested={0x4, 0x96}, @typed={0x8, 0x106, 0x0, 0x0, @fd=r1}]}, @generic]}]}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x5}, 0x4000000)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8)
r4 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000440)=[@iv={0xb8, 0x117, 0x2, 0xe1, "16df8be643bbcfcd0c0361b95515ef696ce512dcea03d541e31291965aff4a88d0f956d9a360505ccaa44215c256008b46ddd92587cc0f9e2c5c6f13d42919901a21db4fa7ce0bb3f01191d2eee8e0037633f6fa1a31bb23d7e05c906b7d83882aa669dda032ac35aa7e98a9180a225a1176cfc80644ba4dc8c99ffcfb8e9bbe9873c839f39e5f909a6dbbeac557a7c438a2f7db44a40997592298160f01f2e86f7bf81b"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x13, 0x117, 0x4, 0x40}], 0xe8}], 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='~\x00\x00\x00', @ANYBLOB="0700020000000000000005000000180001"], 0x40}}, 0x0)
sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1800000078000106000000000000000007"], 0x18}], 0x1}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'\x00', 0x2})
ioctl$TUNSETOFFLOAD(r6, 0x400454c9, 0xad356f19b320d40b)
ioctl$TUNSETLINK(r6, 0x400454cd, 0x0)
socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$FS_IOC_SETFSLABEL(r7, 0x41009432, &(0x7f0000000c40)="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")
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', <r9=>0x0})
r10 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xffeff010}, {0x6, 0x7, 0xfe, 0x6}]}, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[], 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)

2.849562765s ago: executing program 0 (id=1071):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket(0x29, 0x2, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4844}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140), 0x4)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0xffff, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]})
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000030000000900010073797a310000000014000000020a010400000000000000080000000034000000140a03000000000000000000030000000800e19b2ef000090000000000000031000000000900020073797a3000000000140000001100010000000000000000000000000a338c03f24f0f9cff363289f93c8eb93ab6170ca8f621224e96b662da9f8a9fe4629d7357009fa4a8c91ba61a53d5e834c448931d18ff3d5ddf207f47e91be8deaada6aa92f36a2b18ea4056453580fdb6f253d69deaa7ae7358e9d3af444"], 0x90}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r6, 0x20, 0x2000, 0x2, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x3}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000)
sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000980)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x0, 0x300, 0x896, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x4004885)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000600), &(0x7f0000000640)=0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e006f9721acbd0848ab8b27000000f32700000505f600040b00000020400000ceb51321b283eceded2694787ce15243e5210056ca4454e727ca8c2da9e6a773902036442e85dc21b1793d3ad5f11de42e1cd3e6a2603a06ebf1b0255bf9d2469adf", @ANYRES32=r3, @ANYBLOB="1000"/20, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0100000000000000020000000300"/28], 0x50)
setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000005c0)=0x3, 0x4)
r9 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={<r10=>0x0}, &(0x7f0000000200)=0xc)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)=<r11=>0x0)
sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000dc0)=@RTM_NEWNSID={0x54, 0x58, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NETNSA_FD={0x8, 0x3, r9}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_PID={0x8, 0x2, r10}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_PID={0x8}, @NETNSA_PID={0x8, 0x2, r11}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4)

2.762652645s ago: executing program 0 (id=1074):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r2, 0x21eae}}, 0x20}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32, @ANYBLOB="00020700400400001c0012800900010069706970000000000c000280050009"], 0x3c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r6)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r8=>0xffffffffffffffff})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r10=>0x0})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r11, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x44, r9, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)
sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r12 = socket$unix(0x1, 0x2, 0x0)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r14=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYRES32=r14, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x8918, &(0x7f0000000100))
r15 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r15, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x0, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})

2.013067086s ago: executing program 2 (id=1090):
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request={0x11, 0x0, 0x0, 0x4}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x10, "ff00000058b274e6d84516edefe42897054804577b00000000002000fcffeb00", 0xb2, 0xb, 0x6, 0x6}, 0x3c)

1.940525469s ago: executing program 2 (id=1091):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket(0x11, 0x800, 0xfffffffc)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4844}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140), 0x4)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0xffff, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]})
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000030000000900010073797a310000000014000000020a010400000000000000080000000034000000140a03000000000000000000030000000800e19b2ef000090000000000000031000000000900020073797a3000000000140000001100010000000000000000000000000a338c03f24f0f9cff363289f93c8eb93ab6170ca8f621224e96b662da9f8a9fe4629d7357009fa4a8c91ba61a53d5e834c448931d18ff3d5ddf207f47e91be8deaada6aa92f36a2b18ea4056453580fdb6f253d69deaa7ae7358e9d3af444"], 0x90}}, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000600), &(0x7f0000000640)=0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e006f9721acbd0848ab8b27000000f32700000505f600040b00000020400000ceb51321b283eceded2694787ce15243e5210056ca4454e727ca8c2da9e6a773902036442e85dc21b1793d3ad5f11de42e1cd3e6a2603a06ebf1b0255bf9d2469adf", @ANYRES32=r3, @ANYBLOB="1000"/20, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0100000000000000020000000300"/28], 0x50)
setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000005c0)=0x3, 0x4)
r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={<r6=>0x0}, &(0x7f0000000200)=0xc)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)=<r7=>0x0)
sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000dc0)=@RTM_NEWNSID={0x54, 0x58, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NETNSA_FD={0x8, 0x3, r5}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_PID={0x8, 0x2, r6}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_PID={0x8}, @NETNSA_PID={0x8, 0x2, r7}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4)

1.940125315s ago: executing program 2 (id=1092):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000ffd418bb000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.880622365s ago: executing program 2 (id=1093):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket(0x29, 0x2, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4844}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0) (async)
r4 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) (async)
getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140), 0x4) (async)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYRES8=r1], 0x7c}, 0x1, 0x0, 0x0, 0x15}, 0x0) (async)
sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) (async)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0xffff, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) (async)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000030000000900010073797a310000000014000000020a010400000000000000080000000034000000140a03000000000000000000030000000800e19b2ef000090000000000000031000000000900020073797a3000000000140000001100010000000000000000000000000a338c03f24f0f9cff363289f93c8eb93ab6170ca8f621224e96b662da9f8a9fe4629d7357009fa4a8c91ba61a53d5e834c448931d18ff3d5ddf207f47e91be8deaada6aa92f36a2b18ea4056453580fdb6f253d69deaa7ae7358e9d3af444"], 0x90}}, 0x0) (async)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000600), &(0x7f0000000640)=0x4) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e006f9721acbd0848ab8b27000000f32700000505f600040b00000020400000ceb51321b283eceded2694787ce15243e5210056ca4454e727ca8c2da9e6a773902036442e85dc21b1793d3ad5f11de42e1cd3e6a2603a06ebf1b0255bf9d2469adf", @ANYRES32=r7, @ANYBLOB="1000"/20, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0100000000000000020000000300"/28], 0x50)
setsockopt$inet_sctp_SCTP_NODELAY(r7, 0x84, 0x3, &(0x7f00000005c0)=0x3, 0x4) (async)
r9 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={<r10=>0x0}, &(0x7f0000000200)=0xc) (async)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)=<r11=>0x0)
sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="540000005800000227bd7000fedbdf250008000300", @ANYRES32=r9, @ANYBLOB="080001000400000008000200", @ANYRES32=r10, @ANYBLOB="08000100030000000800010004000000080001000200000008000200", @ANYRES32=0x0, @ANYBLOB="600a67a66c2d448dfd18070c1f8c74d3dc21998204f3addee443468df0473381d166ede7fa63ea88b1616af394c9e233fb3ee88eab23834c9493c2b2d1c71c9489708eca8db3a91628a690482ca315d32a", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00'], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)

1.880372407s ago: executing program 0 (id=1094):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0)
sendto$inet(r1, &(0x7f0000000040)="0e00", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0)

1.879829512s ago: executing program 0 (id=1095):
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(0x4)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0)
splice(r0, 0x0, r3, 0x0, 0x80, 0x6)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
write(r3, &(0x7f0000003300)="ac", 0x1)
write(r1, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf25250000000e0001006e65746465767369650000000f6400"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r9, 0x0, 0x7f}, 0x18)
r10 = socket$inet6(0xa, 0x3, 0x3c)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
connect$inet6(r10, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c)
writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1)
sendmsg$nl_generic(r8, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x10)

1.797824308s ago: executing program 2 (id=1097):
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request={0x11, 0x0, 0x0, 0x4}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x10, "ff00000058b274e6d84516edefe42897054804577b0000ffffffa400fcffeb00", 0xb2, 0xb, 0x6, 0x6}, 0x3c)

1.797446366s ago: executing program 2 (id=1098):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x48, 0x8, 0xfe, 0x401}, {0x6, 0x8, 0xfe, 0x7}]})
write$ppp(r1, &(0x7f0000000940)="3df5", 0x2)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000000301010100000000000000000a0000030c0019800800020017000000300002802c0001"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x4000800)
r5 = gettid()
r6 = gettid()
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000280)=<r7=>0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x38, 0x1, 0x20, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x40010)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000300)=<r9=>0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000001040)={0x48c, 0x5e, 0x1, 0x0, 0x0, {}, [@nested={0x475, 0xb5, 0x0, 0x1, [@typed={0x14, 0xa1, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @nested={0x18, 0x11b, 0x0, 0x1, [@generic="c1d9d34f1fd3822b0dd9fadb5970beac", @typed={0x4, 0x98}]}, @nested={0xc, 0xeb, 0x0, 0x1, [@typed={0x8, 0xa2, 0x0, 0x0, @fd=r4}]}, @typed={0x8, 0x4d, 0x0, 0x0, @pid=r5}, @generic="47921ba12fa34c6f643a82fc9eece4bb9087c877181ac18a654177d59fde4373b332fbafcd300c2a12650b0e507711a172aa0fa77865e5b5329fed8aedd058ba51121b991cd7974ec28301e81e08bf54deb2bb01a79cdc7238f47c6a9b668041cc85cad626042590399435e6bf1af5aa944dc5f28f255b4ec626c81c48efb0452d7669a63f6eeeaf111b8eff18e5fb5cfa8bfcb8d993db4c5c040dbbd1a7fde63d54eb4c7b1876c8ca198d7baca5875d99e3dd05f95f706483ca872bbab57234f32ef3620b8bb3f5eff91d941ee89a29c2473533dce9c9fd54e7f5536929f7fe4b9453a08bc821fecf5d3372404dbd7eeadb404cd129d300d0", @nested={0x1c4, 0xaf, 0x0, 0x1, [@generic="b6426978495063c1bf8c7a1e96c547cd117bbe5571fea4a206a7e51ab373953bee30992c591cd310b9d84976d42c27c086561da1f3088f6867b6f5321a0e14f451575bd233f46d6b91c74f8237d7a877b312b49a49b330745f084350ce30d08882d8871bb1b5d4d0163dc49f252ea324befef479fee1417afb62debb741ad02ef8b180895c7f046095bff63b62da73f8e8657b5d5d55c743c40fbd75dc0a359ab3a14203e4773e00", @nested={0x14, 0x8b, 0x0, 0x1, [@nested={0x4, 0x3e}, @nested={0x4, 0xfd}, @nested={0x4, 0x59}, @typed={0x4, 0xb0}]}, @nested={0x104, 0x14e, 0x0, 0x1, [@nested={0x4, 0x144}, @nested={0x4, 0x2978}, @typed={0x8, 0x4b, 0x0, 0x0, @uid}, @nested={0x4, 0x45}, @typed={0x8, 0x126, 0x0, 0x0, @uid=r9}, @typed={0x8, 0x39, 0x0, 0x0, @ipv4=@local}, @generic="a68879923ac3873ec669e16b6cae74a32e8945850707b33eb235d2091a918ca242fa33be1fec021c198277e00399cd28c740e802e2ab44ec2f66e89443517968aaca89978565f39647ddb8a2135485f137d01e7ebc939ea72ac398b45d32f8847d5cd34cdc3545b93368db2f3984e78c0f35e2d03f16f0c29df348db1096", @typed={0x8, 0x99, 0x0, 0x0, @ipv4=@broadcast}, @generic="689543025de10cdceb7bd6381e0a5de264bfab3b26494270767e0d6fd7fa327c1600e71ed1c9f5fb8213b9e400a7b339c0ef6283fa4329a90e5b23cde9459f567fbd3c6f534f", @typed={0x4, 0x36}, @nested={0xb, 0x10e, 0x0, 0x1, [@generic="166e8b998c7e5b"]}]}]}, @nested={0x173, 0x102, 0x0, 0x1, [@generic="9e9fc05aee3885f8bc9597e0e904197b0232b03585", @typed={0x8, 0xd9, 0x0, 0x0, @fd=r0}, @typed={0x8, 0xca, 0x0, 0x0, @pid=r6}, @typed={0xc, 0x10e, 0x0, 0x0, @u64=0x7}, @typed={0x8, 0x9c, 0x0, 0x0, @pid=r7}, @nested={0x4, 0x4}, @generic="1ec167b17a12f84f6aa3205f3dd76465b3db3f8028c2eac9ba9048f8bd07b9d6ada82f5255a98bddea6ff958da796dfe7b7b76b6c99b5f993c596a09975c367c4c3bd3388d7642d7649831ace425b85c600702e97d1c997a07afe2dcd4d27c5fb934e23c7b2920267c1143141764f72d11f2157bc9295e56daf9f4c066624095fe59e0dd2087ba697d0f98c596c6b5e20cc9519e441fceff56c7073b53a70020b6581ec9b37b68f48763921a1dc5601785", @generic="4ec82604f45689668287bb2e9c9fc7694db828c6d52221ffa12355c6ee96291545750c4c9fdf7a97138dc9b5c4650948aef96345e071af213320f3ed6385dafecb2ecf252eb951a98955301dbf07ce1ad334a292e934d7cb2b7a7790eabd5383c9532c8eb84b61bc1ac021aba26e362d4b0345b241de6b29040842f389", @nested={0x4, 0x69}]}]}]}, 0x48c}}, 0x0)
close(r2)
getsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000000080)=0x8b, &(0x7f0000000200)=0x4)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="11000000700001002abd70000000000007"], 0x24}}, 0x80)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
unshare(0x6a040000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x68}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x50)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x3fffe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b70300000000000035090100000000009500000000000000bf9800000000000056080000000000008500000007000000b700000000000000950000000000000032224fe8f63a7969f662cebb579e40799c59065d7b4376eb930400000000000000caec85b6d4d9b2246ac241f8f29438966a38aad1d4a4038d68841ea3bbfdea87ae7168f29a9e87159b31aae07f1c8bad2513b45e018163649bf36200"/187], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)

1.723165907s ago: executing program 3 (id=1100):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0)
unshare(0x40000)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a30000000004800048020000180070001007274000014000280080001400000000d080002400000000124000180090001006d6574610000000014000280080001400000001008000240"], 0xf8}}, 0x0)
r4 = socket(0x10, 0x803, 0x2)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdba, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
socket(0x29, 0x2, 0x0)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1800000015140300"], 0x18}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvfrom$packet(0xffffffffffffffff, &(0x7f00000004c0)=""/179, 0xb3, 0x101, &(0x7f0000000080)={0x11, 0x4, r5, 0x1, 0x81, 0x6, @multicast}, 0x14)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000", @ANYRES32, @ANYBLOB="0000008000"/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="02000076c48ed0a0000100f6ff02000000000000000000018c191928b37bd6f89399ad64e67ff60000000000"], 0x50)
r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x81, 0x7, 0x7, 0x1a00, r9, 0x6, '\x00', r2, r10, 0x2, 0x0, 0x5, 0x8}, 0x50)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, 0x0, 0x0)
ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0xffff, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]})
socket$inet_sctp(0x2, 0x5, 0x84)

1.63945617s ago: executing program 3 (id=1101):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x3, &(0x7f00000000c0)=0x2)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000100))
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x10, 0x803, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x999, 0x5932}}}}}}, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50)
r2 = socket(0x8000000010, 0x2, 0x0)
write(r2, &(0x7f00000002c0)="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", 0xfc)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x4, 0x100030, r0, 0x92afe000)
socketpair(0x2b, 0x2, 0xffffffe1, &(0x7f0000000180))
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]})

1.552383142s ago: executing program 0 (id=1102):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0xc, &(0x7f0000000040), 0x4)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0xa0, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x1, 0xf}}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0xc4, 0x7f, 0x8, 0x0, 0x3, 0xdbd, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x6, 0x7, 0x100, 0x3, 0x2, 0x42, 0x447, 0x5}}, {0xe, 0x2, [0x4a9, 0x2, 0xc000, 0x52, 0x109]}}, {{0x1c, 0x1, {0x0, 0xaa, 0x63da, 0xc, 0x1, 0xffffffff, 0x5, 0x3}}, {0xa, 0x2, [0x101, 0x7, 0x3]}}]}]}, 0xa0}}, 0x4000000)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f00000001c0)=0x81)
socket$inet6(0xa, 0x3, 0x9)
r8 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0x1f}, 0x10)
sendmsg$nl_route_sched(r8, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=@newtaction={0x14, 0x5a, 0x301, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r9)
r10 = socket$unix(0x1, 0x1, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x8, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x20040840)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.552133913s ago: executing program 3 (id=1103):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000040), 0x10)
sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001340)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x440c0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket(0xa, 0x3, 0x3a)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4)

1.412495427s ago: executing program 3 (id=1104):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async)
sendto$netrom(r1, 0x0, 0x700, 0x40, &(0x7f0000000000)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast]}, 0x48) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) (async)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff}) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xaf62}]}}]}, 0x44}}, 0x20004055) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000000c0), 0x4)

1.407684817s ago: executing program 3 (id=1105):
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request={0x11, 0x0, 0x0, 0x4}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x10, "ff00000058b274e6d84516edefe42897054804577b0000000000ff00fcffeb00", 0xb2, 0xb, 0x6, 0x6}, 0x3c)

0s ago: executing program 3 (id=1106):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"})
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
r3 = socket$kcm(0x29, 0x5, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000040)=0x8, 0x4)
setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000000), 0x4)
ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000180)={0x6, 0x2})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r5, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0xfffffffd}, 0x10}, 0x94)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a300000000033000000080a03000000000000000000020000030900010073797a3000000000140000000000010000000000000000000000a8f9e1000a"], 0x74}}, 0x0)
r9 = socket$inet6_udplite(0xa, 0x2, 0x88)
mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r9, 0x0)
sendmsg$unix(r0, &(0x7f00000014c0)={0xfffffffffffffffd, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000001380)="f8cb5257dc432a333d33e3c2bcdf76212fdcfcd647463217b1abd04cd6a8cad6fafb5048f937fc95273c60875953e9bebe7126bd1c36a549702df50eb2b16717ef920d72977c36dbdad898c88aa6ce70aaa880367705e99e03cc3dc1108ced48cccdac78feb371ce4e98c2fa039a73d83bc89f0631a72eae035c8115e21256da85bf4b2629b195c540ca8376788859c804be001b2e86e7c658e5393b81e9771b11751063577e0b1dfaa36e840512df04ba4a7d4b585fd3749768bcdbca1b0ce253df013d00a98039d13a87e11e46fda13f50b105d1af54abd465a61700a0c6a8a6c8f6d0000ac2a62c9be71e475ec0", 0xef}], 0x2, &(0x7f0000001480)=[@rights={{0x30, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r9, r7, r0]}}], 0x30, 0x20008400}, 0x48)
sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2})
ioctl$TUNSETSNDBUF(r10, 0x400454d4, &(0x7f0000000380)=0x2)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})
epoll_create1(0x80000)
socket(0x2a, 0xa, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x7fffffff}, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:55790' (ED25519) to the list of known hosts.
syzkaller login: [   49.226714][ T5788] cgroup: Unknown subsys name 'net'
[   49.376298][ T5788] cgroup: Unknown subsys name 'cpuset'
[   49.383164][ T5788] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.256662][ T5788] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.866407][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.871486][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.875032][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.878266][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.881731][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.964603][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.967612][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.970784][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.974015][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.976727][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.006349][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.009378][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.012606][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.016251][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.019651][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.161607][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   56.322109][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.325496][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.328417][ T5844] bridge_slave_0: entered allmulticast mode
[   56.332009][ T5844] bridge_slave_0: entered promiscuous mode
[   56.353302][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.355751][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.358326][ T5844] bridge_slave_1: entered allmulticast mode
[   56.362065][ T5844] bridge_slave_1: entered promiscuous mode
[   56.378128][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   56.405145][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.418786][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   56.426328][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.499183][ T5844] team0: Port device team_slave_0 added
[   56.514124][ T5844] team0: Port device team_slave_1 added
[   56.591918][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.594153][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.602204][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.606454][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.608844][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.611183][ T5851] bridge_slave_0: entered allmulticast mode
[   56.614304][ T5851] bridge_slave_0: entered promiscuous mode
[   56.617252][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.620120][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.623277][ T5849] bridge_slave_0: entered allmulticast mode
[   56.626655][ T5849] bridge_slave_0: entered promiscuous mode
[   56.630139][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.633034][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.635593][ T5849] bridge_slave_1: entered allmulticast mode
[   56.639202][ T5849] bridge_slave_1: entered promiscuous mode
[   56.646164][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.648896][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.659515][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.664915][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.667371][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.669857][ T5851] bridge_slave_1: entered allmulticast mode
[   56.673014][ T5851] bridge_slave_1: entered promiscuous mode
[   56.707837][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.721678][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.726744][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.730884][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.799510][ T5849] team0: Port device team_slave_0 added
[   56.802937][ T5851] team0: Port device team_slave_0 added
[   56.809506][ T5844] hsr_slave_0: entered promiscuous mode
[   56.813045][ T5844] hsr_slave_1: entered promiscuous mode
[   56.816835][ T5851] team0: Port device team_slave_1 added
[   56.820028][ T5849] team0: Port device team_slave_1 added
[   56.869300][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.871903][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.879904][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.884481][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.886685][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.895988][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.899901][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.902949][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.910552][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.935387][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.937847][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.946628][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.025737][ T5849] hsr_slave_0: entered promiscuous mode
[   57.028047][ T5849] hsr_slave_1: entered promiscuous mode
[   57.030239][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   57.032254][ T5849] Cannot create hsr debugfs directory
[   57.038539][ T5851] hsr_slave_0: entered promiscuous mode
[   57.040931][ T5851] hsr_slave_1: entered promiscuous mode
[   57.044671][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   57.046457][ T5851] Cannot create hsr debugfs directory
[   57.309763][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.341102][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.351772][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.358772][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.444833][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.455608][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.464605][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.478173][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.540938][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.548363][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.553645][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.566412][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.649555][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.690121][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   57.700365][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.715740][ T3543] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.718891][ T3543] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.737326][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.739831][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.746954][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   57.763052][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.766159][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.786230][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.789181][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.817518][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.859869][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   57.886158][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.888835][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.909005][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.912060][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.942511][ T5236] Bluetooth: hci0: command tx timeout
[   58.021911][ T5236] Bluetooth: hci1: command tx timeout
[   58.088532][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.104945][ T5236] Bluetooth: hci2: command tx timeout
[   58.127907][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.149686][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.164378][ T5844] veth0_vlan: entered promiscuous mode
[   58.185221][ T5844] veth1_vlan: entered promiscuous mode
[   58.217995][ T5851] veth0_vlan: entered promiscuous mode
[   58.234894][ T5849] veth0_vlan: entered promiscuous mode
[   58.244130][ T5851] veth1_vlan: entered promiscuous mode
[   58.249204][ T5849] veth1_vlan: entered promiscuous mode
[   58.265200][ T5844] veth0_macvtap: entered promiscuous mode
[   58.276923][ T5844] veth1_macvtap: entered promiscuous mode
[   58.302619][ T5849] veth0_macvtap: entered promiscuous mode
[   58.307078][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.317644][ T5849] veth1_macvtap: entered promiscuous mode
[   58.330077][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.339484][ T5851] veth0_macvtap: entered promiscuous mode
[   58.353238][ T5851] veth1_macvtap: entered promiscuous mode
[   58.356068][ T5865] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.360552][ T5865] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.377155][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.380498][ T5865] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.384629][ T5865] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.403999][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.423783][ T5865] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.441781][ T5865] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.460219][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.464990][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.476133][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.483512][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.526005][ T5709] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.528862][ T5709] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.539200][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.539448][ T5709] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.543776][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.545593][ T5709] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.586441][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.598673][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.618138][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.620605][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.639998][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.647536][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.672945][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.675579][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.709011][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.712469][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.719736][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.842204][ T5916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'.
[   58.934212][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'.
[   58.938247][ T5920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'.
[   58.966966][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'.
[   58.970227][ T5920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'.
[   58.975043][ T5865] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   58.978034][ T5865] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   58.980957][ T5865] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   58.993116][ T5865] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   59.004110][ T5920] Zero length message leads to an empty skb
[   59.185321][ T5937] Driver unsupported XDP return value 0 on prog  (id 3) dev N/A, expect packet loss!
[   59.305576][ T5948] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8'.
[   59.310761][ T5948] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8'.
[   59.330578][ T5948] bond0: entered promiscuous mode
[   59.340067][ T5948] bond_slave_0: entered promiscuous mode
[   59.343274][ T5948] bond_slave_1: entered promiscuous mode
[   59.346524][ T5948] ip6gretap0: entered promiscuous mode
[   59.518239][ T5964] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10'.
[   59.525120][ T5964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10'.
[   59.696365][ T5978] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.725885][ T5978] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15'.
[   59.747441][ T5980] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.760169][ T5980] netlink: 'syz.1.16': attribute type 1 has an invalid length.
[   59.776127][ T5978] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.005635][ T5990] bond0: Device is already in use.
[   60.009289][ T5989] bond0: Device is already in use.
[   60.015246][ T5990] netlink: 'syz.1.19': attribute type 23 has an invalid length.
[   60.032343][ T5236] Bluetooth: hci0: command tx timeout
[   60.079085][ T5989] netlink: 'syz.1.19': attribute type 4 has an invalid length.
[   60.101723][ T5236] Bluetooth: hci1: command tx timeout
[   60.181553][ T5236] Bluetooth: hci2: command tx timeout
[   60.317886][ T6012] netlink: 'syz.1.26': attribute type 1 has an invalid length.
[   60.874224][ T5978] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.306878][ T6034] netlink: 'syz.2.33': attribute type 1 has an invalid length.
[   61.421000][ T5978] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.529881][ T5978] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.689419][ T5709] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.720844][ T5709] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.735300][ T5709] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.739519][ T6055] netlink: 'syz.2.42': attribute type 1 has an invalid length.
[   61.744984][ T5709] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.999835][ T6073] trusted_key: syz.0.51 sent an empty control message without MSG_MORE.
[   62.017776][ T6075] netlink: 'syz.1.49': attribute type 1 has an invalid length.
[   62.102682][ T5236] Bluetooth: hci0: command tx timeout
[   62.117916][ T6085] syz.0.52 uses obsolete (PF_INET,SOCK_PACKET)
[   62.182935][ T5236] Bluetooth: hci1: command tx timeout
[   62.261804][ T5236] Bluetooth: hci2: command tx timeout
[   62.357275][ T6097] batman_adv: batadv0: Adding interface: dummy0
[   62.360821][ T6097] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.383474][ T6097] batman_adv: batadv0: Interface activated: dummy0
[   62.405456][ T6104] netlink: 'syz.2.56': attribute type 1 has an invalid length.
[   62.428137][ T6098] batadv0: mtu less than device minimum
[   62.431741][ T6098] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   62.437238][ T6098] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   62.442615][ T6098] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   62.447808][ T6098] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   62.453197][ T6098] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   62.458461][ T6098] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   62.463721][ T6098] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   62.468934][ T6098] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   62.474175][ T6098] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   62.620379][ T6111] syzkaller0: entered promiscuous mode
[   62.623019][ T6111] syzkaller0: entered allmulticast mode
[   63.313754][ T6144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.446191][ T6144] batman_adv: batadv0: Removing interface: batadv_slave_1
[   63.487144][ T6146] vti0: entered promiscuous mode
[   63.718712][ T6167] warning: `syz.2.69' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   64.101400][ T6197] netlink: 'syz.1.81': attribute type 4 has an invalid length.
[   64.182605][   T55] Bluetooth: hci0: command tx timeout
[   64.271466][   T55] Bluetooth: hci1: command tx timeout
[   64.311116][ T6205] netdevsim netdevsim1: Direct firmware load for  failed with error -2
[   64.314271][ T6205] netdevsim netdevsim1: Falling back to sysfs fallback for: 
[   64.351598][   T55] Bluetooth: hci2: command tx timeout
[   64.365760][ T6206] xt_limit: Overflow, try lower: 604147548/4200216962
[   64.656550][ T6212] __nla_validate_parse: 20 callbacks suppressed
[   64.656569][ T6212] netlink: 56 bytes leftover after parsing attributes in process `syz.2.87'.
[   64.665198][ T6212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.87'.
[   64.670720][ T6212] netlink: 24 bytes leftover after parsing attributes in process `syz.2.87'.
[   65.183821][ T6230] netlink: 56 bytes leftover after parsing attributes in process `syz.1.93'.
[   65.187431][ T6230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.93'.
[   65.195952][ T6230] netlink: 24 bytes leftover after parsing attributes in process `syz.1.93'.
[   65.259885][ T6232] syz_tun: entered allmulticast mode
[   65.323409][ T6231] syz_tun: left allmulticast mode
[   65.516726][ T6252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.101'.
[   65.778860][ T6270] IPv6: Can't replace route, no match found
[   65.785217][ T6269] IPv6: Can't replace route, no match found
[   65.893249][ T6275] netlink: 'syz.2.107': attribute type 4 has an invalid length.
[   65.980974][ T6275] netlink: 'syz.2.107': attribute type 4 has an invalid length.
[   66.849167][ T6295] netlink: 56 bytes leftover after parsing attributes in process `syz.1.114'.
[   66.853315][ T6295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.114'.
[   66.866607][ T6295] netlink: 24 bytes leftover after parsing attributes in process `syz.1.114'.
[   67.187385][ T6324] netlink: 'syz.2.121': attribute type 1 has an invalid length.
[   67.574410][ T6353] syz_tun: entered allmulticast mode
[   67.578140][ T6351] syz_tun: left allmulticast mode
[   67.674679][ T6366] syz_tun: entered allmulticast mode
[   67.677882][ T6365] syz_tun: left allmulticast mode
[   67.724719][ T6372] netlink: 'syz.1.143': attribute type 3 has an invalid length.
[   67.733834][ T6372] syz_tun: entered allmulticast mode
[   67.752052][ T6372] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   67.760048][ T6372] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   67.806848][ T6382] net_ratelimit: 31 callbacks suppressed
[   67.806866][ T6382] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   67.824622][ T6371] syz_tun: left allmulticast mode
[   67.885868][ T6393] syz_tun: entered allmulticast mode
[   67.888648][ T6392] syz_tun: left allmulticast mode
[   68.002553][ T6403] syzkaller0: entered promiscuous mode
[   68.004639][ T6403] syzkaller0: entered allmulticast mode
[   68.686719][ T6407] lo speed is unknown, defaulting to 1000
[   68.689299][ T6407] lo speed is unknown, defaulting to 1000
[   68.696310][ T6407] lo speed is unknown, defaulting to 1000
[   68.724019][ T6407] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   68.756243][ T6407] lo speed is unknown, defaulting to 1000
[   68.760398][ T6407] lo speed is unknown, defaulting to 1000
[   68.774105][ T6407] lo speed is unknown, defaulting to 1000
[   68.837009][ T6407] tipc: Started in network mode
[   68.838822][ T6407] tipc: Node identity 1e4155e6a051, cluster identity 4711
[   68.841825][ T6407] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.846862][ T6407] veth0_to_bridge: entered promiscuous mode
[   68.849181][ T6407] veth0_to_bridge: entered allmulticast mode
[   68.880744][ T6406] tipc: Disabling bearer <eth:syzkaller0>
[   69.022952][ T6415] netlink: 'syz.2.155': attribute type 8 has an invalid length.
[   69.022952][ T6416] netlink: 'syz.2.155': attribute type 8 has an invalid length.
[   69.140804][ T6429] netlink: 'syz.1.160': attribute type 39 has an invalid length.
[   69.725327][ T6459] __nla_validate_parse: 21 callbacks suppressed
[   69.725338][ T6459] netlink: 256 bytes leftover after parsing attributes in process `syz.1.167'.
[   69.771149][ T6460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.167'.
[   70.325520][ T6500] netlink: 71 bytes leftover after parsing attributes in process `syz.2.178'.
[   70.329776][ T6500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.178'.
[   70.410545][ T6499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.180'.
[   70.477373][ T6503] netlink: 16 bytes leftover after parsing attributes in process `syz.0.180'.
[   70.480200][ T6503] netlink: 236 bytes leftover after parsing attributes in process `syz.0.180'.
[   70.488151][ T6499] hsr_slave_1 (unregistering): left promiscuous mode
[   70.516981][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   70.520408][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.529854][ T6503] netlink: 16 bytes leftover after parsing attributes in process `syz.0.180'.
[   70.530462][ T6504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.180'.
[   70.586646][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   70.589891][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.655977][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   70.659216][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.716077][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   70.719550][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.777753][ T6512] netlink: 12 bytes leftover after parsing attributes in process `syz.0.183'.
[   70.807625][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   70.813874][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   70.817438][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.820866][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.825399][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   70.863812][   T13] bridge_slave_1: left allmulticast mode
[   70.869639][   T13] bridge_slave_1: left promiscuous mode
[   70.873193][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.879863][   T13] bridge_slave_0: left allmulticast mode
[   70.884410][   T13] bridge_slave_0: left promiscuous mode
[   70.886827][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.966797][   T13] ip6gretap0 (unregistering): left promiscuous mode
[   71.068523][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.071396][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.217027][   T13] bond0 (unregistering): left promiscuous mode
[   71.219506][   T13] bond_slave_0: left promiscuous mode
[   71.222546][   T13] bond_slave_1: left promiscuous mode
[   71.240524][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   71.247479][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   71.252943][   T13] bond0 (unregistering): Released all slaves
[   71.268966][   T13] bond1 (unregistering): Released all slaves
[   71.337552][ T6514] lo speed is unknown, defaulting to 1000
[   71.526309][   T13] hsr_slave_0: left promiscuous mode
[   71.530016][   T13] hsr_slave_1: left promiscuous mode
[   71.532879][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.536561][   T13] batadv0: mtu less than device minimum
[   71.540108][   T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   71.545084][   T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   71.549641][   T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   71.553949][   T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   71.557876][   T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   71.562202][   T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   71.566656][   T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   71.570640][   T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   71.585716][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.596014][   T13] batman_adv: batadv0: Interface deactivated: dummy0
[   71.598611][   T13] batman_adv: batadv0: Removing interface: dummy0
[   71.616657][   T13] veth1_macvtap: left promiscuous mode
[   71.619021][   T13] veth0_macvtap: left promiscuous mode
[   71.622143][   T13] veth1_vlan: left promiscuous mode
[   71.624394][   T13] veth0_vlan: left promiscuous mode
[   71.911588][   T13] team0 (unregistering): Port device team_slave_1 removed
[   71.938198][   T13] team0 (unregistering): Port device team_slave_0 removed
[   72.289496][ T6514] chnl_net:caif_netlink_parms(): no params data found
[   72.356030][ T6564] netlink: 'syz.0.195': attribute type 1 has an invalid length.
[   72.383385][ T6564] bond1: entered promiscuous mode
[   72.385440][ T6564] 8021q: adding VLAN 0 to HW filter on device bond1
[   72.468480][ T6514] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.471168][ T6514] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.477595][ T6514] bridge_slave_0: entered allmulticast mode
[   72.481098][ T6514] bridge_slave_0: entered promiscuous mode
[   72.499029][ T6514] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.511702][ T6514] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.514003][ T6514] bridge_slave_1: entered allmulticast mode
[   72.530026][ T6514] bridge_slave_1: entered promiscuous mode
[   72.560214][ T6514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.566858][ T6514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.594390][ T6578] netlink: 'syz.0.199': attribute type 1 has an invalid length.
[   72.597453][ T6578] netlink: 'syz.0.199': attribute type 1 has an invalid length.
[   72.602652][ T6514] team0: Port device team_slave_0 added
[   72.609706][ T6514] team0: Port device team_slave_1 added
[   72.637265][ T6514] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.639714][ T6514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.650871][ T6514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.656788][ T6514] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.659407][ T6514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.669507][ T6514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.707833][ T6514] hsr_slave_0: entered promiscuous mode
[   72.710587][ T6514] hsr_slave_1: entered promiscuous mode
[   72.850305][ T6514] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   72.858175][ T6514] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   72.865067][ T6514] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   72.870356][ T6514] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   72.882120][ T6598] netlink: 'syz.2.206': attribute type 10 has an invalid length.
[   72.885358][ T6601] netlink: 'syz.2.206': attribute type 10 has an invalid length.
[   72.895837][ T6598] batman_adv: batadv0: Adding interface: netdevsim0
[   72.897969][ T6598] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.906318][   T55] Bluetooth: hci0: command tx timeout
[   72.908866][ T6598] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[   72.920603][ T6514] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.923595][ T6514] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.927216][ T6514] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.930014][ T6514] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.006194][ T6514] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.024233][ T3543] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.028491][ T3543] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.041199][ T6514] 8021q: adding VLAN 0 to HW filter on device team0
[   73.056144][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.059331][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.070789][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.073391][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.217056][ T6514] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.249794][ T6514] veth0_vlan: entered promiscuous mode
[   73.264049][ T6514] veth1_vlan: entered promiscuous mode
[   73.292424][ T6514] veth0_macvtap: entered promiscuous mode
[   73.305980][ T6514] veth1_macvtap: entered promiscuous mode
[   73.326807][ T6514] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.338455][ T6514] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.350910][ T5865] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.363837][ T5865] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.369695][ T5865] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.381118][ T5865] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.411931][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.414349][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.442812][ T6633] ieee802154 phy0 wpan0: encryption failed: -22
[   73.446900][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.449339][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.647381][ T6661] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   73.813111][ T6676] syzkaller1: entered promiscuous mode
[   73.816930][ T6676] syzkaller1: entered allmulticast mode
[   73.825722][ T5878] IPVS: starting estimator thread 0...
[   73.931956][ T6677] IPVS: using max 64 ests per chain, 153600 per kthread
[   74.076963][ T6688] tap0: tun_chr_ioctl cmd 1074025680
[   74.087001][ T6687] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.090757][ T6687] D: renamed from syzkaller0
[   74.095162][ T6687] tipc: Disabling bearer <eth:syzkaller0>
[   74.353016][ T6701] lo speed is unknown, defaulting to 1000
[   74.494637][ T6712] Bluetooth: MGMT ver 1.23
[   74.502466][ T6717] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   74.511851][ T6715] IPVS: stopping backup sync thread 6717 ...
[   74.550167][ T6720] syz_tun: entered allmulticast mode
[   74.577850][ T6726] netlink: 'syz.0.239': attribute type 1 has an invalid length.
[   74.630081][ T6729] netlink: 'syz.3.240': attribute type 32 has an invalid length.
[   74.636607][ T6729] (unnamed net_device) (uninitialized): option coupled_control: invalid value (115)
[   74.661630][ T6726] bond0: (slave bond_slave_1): Releasing backup interface
[   74.812677][ T6745] syz_tun: entered allmulticast mode
[   74.983402][   T55] Bluetooth: hci0: command tx timeout
[   75.189073][ T6757] __nla_validate_parse: 26 callbacks suppressed
[   75.189091][ T6757] netlink: 56 bytes leftover after parsing attributes in process `syz.0.249'.
[   75.195564][ T6756] netlink: 'syz.2.250': attribute type 11 has an invalid length.
[   75.247512][ T6764] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[   75.252822][ T6764] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[   75.256003][ T6764] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[   75.268882][ T6766] netlink: 56 bytes leftover after parsing attributes in process `syz.0.253'.
[   75.274603][ T6766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.253'.
[   75.278879][ T6766] netlink: 24 bytes leftover after parsing attributes in process `syz.0.253'.
[   75.299020][ T6767] net_ratelimit: 11 callbacks suppressed
[   75.299035][ T6767] sock: sock_set_timeout: `syz.2.252' (pid 6767) tries to set negative timeout
[   75.382996][ T6773] netlink: 'syz.0.256': attribute type 10 has an invalid length.
[   75.390443][ T6773] 8021q: adding VLAN 0 to HW filter on device team0
[   75.395863][ T6773] bond0: (slave team0): Enslaving as an active interface with an up link
[   75.544124][ T6777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.257'.
[   75.586836][ T6777] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.590494][ T6777] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.646123][ T6777] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.658930][ T6777] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.662293][ T6779] netlink: 'syz.0.257': attribute type 1 has an invalid length.
[   75.750736][ T6777] bond1: left promiscuous mode
[   75.776023][ T5865] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.779002][ T5865] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.793465][ T6777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.257'.
[   75.798845][ T5865] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.801674][ T5865] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.804912][ T6777] hsr_slave_0: left promiscuous mode
[   76.043194][ T6790] lo speed is unknown, defaulting to 1000
[   76.198059][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'.
[   76.202831][ T6798] netlink: 24 bytes leftover after parsing attributes in process `syz.2.263'.
[   76.206925][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'.
[   76.210635][ T6798] netlink: 24 bytes leftover after parsing attributes in process `syz.2.263'.
[   77.071819][   T55] Bluetooth: hci0: command tx timeout
[   77.595607][ T6838] pim6reg1: entered promiscuous mode
[   77.597421][ T6838] pim6reg1: entered allmulticast mode
[   77.735950][ T6845] netlink: 'syz.2.279': attribute type 1 has an invalid length.
[   77.916485][ T6850] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   77.919391][ T6850] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   77.961933][ T6853] bridge_slave_0: left allmulticast mode
[   77.963715][ T6853] bridge_slave_0: left promiscuous mode
[   77.965552][ T6853] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.973928][ T6853] bridge_slave_1: left allmulticast mode
[   77.976097][ T6853] bridge_slave_1: left promiscuous mode
[   77.978062][ T6853] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.989656][ T6853] bond0: (slave bond_slave_0): Releasing backup interface
[   77.995899][ T6853] bond0: (slave bond_slave_1): Releasing backup interface
[   78.005739][ T6853] team0: Port device team_slave_0 removed
[   78.015739][ T6853] team0: Port device team_slave_1 removed
[   78.019271][ T6853] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.023194][ T6853] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.034869][ T6853] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.037466][ T6853] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.065177][ T6853] batman_adv: batadv0: Removing interface: netdevsim0
[   78.076602][    T9] lo speed is unknown, defaulting to 1000
[   78.634792][ T6876] netlink: 'syz.2.288': attribute type 4 has an invalid length.
[   78.651148][ T6876] netlink: 'syz.2.288': attribute type 4 has an invalid length.
[   78.669458][ T6876] netlink: 'syz.2.288': attribute type 4 has an invalid length.
[   78.690272][ T6876] netlink: 'syz.2.288': attribute type 4 has an invalid length.
[   78.699898][ T6876] netlink: 'syz.2.288': attribute type 4 has an invalid length.
[   78.718379][ T6876] netlink: 'syz.2.288': attribute type 4 has an invalid length.
[   78.754832][ T6876] netlink: 'syz.2.288': attribute type 4 has an invalid length.
[   78.767119][ T6876] netlink: 'syz.2.288': attribute type 4 has an invalid length.
[   78.778700][ T6876] netlink: 'syz.2.288': attribute type 4 has an invalid length.
[   79.151723][   T55] Bluetooth: hci0: command tx timeout
[   79.683787][ T6904] 8021q: VLANs not supported on ip_vti0
[   79.903267][ T6916] 8021q: adding VLAN 0 to HW filter on device bond1
[   79.917475][ T6916] bond1: (slave bridge4): making interface the new active one
[   79.921011][ T6916] bond1: (slave bridge4): Enslaving as an active interface with an up link
[   79.930967][ T6916] bond1: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   79.934145][    C1] vcan0: j1939_tp_rxtimer: 0xffff888109039800: rx timeout, send abort
[   79.939271][    C1] vcan0: j1939_tp_rxtimer: 0xffff888038f6e800: rx timeout, send abort
[   79.942263][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888109039800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   79.946993][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888038f6e800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   80.105787][ T6923] 8021q: VLANs not supported on sit0
[   80.560602][ T6958] __nla_validate_parse: 24 callbacks suppressed
[   80.560617][ T6958] netlink: 84 bytes leftover after parsing attributes in process `syz.0.317'.
[   80.567745][ T6957] netlink: 24 bytes leftover after parsing attributes in process `syz.0.317'.
[   80.623726][ T6962] netlink: 156 bytes leftover after parsing attributes in process `syz.0.318'.
[   80.940582][ T6980] netlink: 56 bytes leftover after parsing attributes in process `syz.0.325'.
[   80.945735][ T6980] netlink: 24 bytes leftover after parsing attributes in process `syz.0.325'.
[   81.228339][ T6987] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe
[   81.237977][ T6989] netlink: 40 bytes leftover after parsing attributes in process `syz.2.329'.
[   81.306041][  T794] cfg80211: failed to load regulatory.db
[   81.471783][ T6995] lo speed is unknown, defaulting to 1000
[   81.588081][ T6540] nci: nci_rx_work: unknown MT 0x1
[   81.591619][ T6540] nci: nci_rx_work: unknown MT 0x1
[   82.106875][ T7008] netlink: 84 bytes leftover after parsing attributes in process `syz.2.332'.
[   82.116641][ T7010] netlink: 56 bytes leftover after parsing attributes in process `syz.2.332'.
[   82.120611][ T7010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.332'.
[   82.294542][ T7015] 8021q: adding VLAN 0 to HW filter on device bond2
[   82.305692][ T7015] bond2: (slave bridge5): making interface the new active one
[   82.308770][ T7015] bond2: (slave bridge5): Enslaving as an active interface with an up link
[   82.317408][ T7015] bond2: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   82.432677][ T7028] netlink: 88 bytes leftover after parsing attributes in process `syz.0.339'.
[   82.442592][ T7029] hsr0: entered promiscuous mode
[   82.444684][ T7029] macvlan2: entered promiscuous mode
[   82.446972][ T7029] macvlan2: entered allmulticast mode
[   82.449393][ T7029] hsr0: entered allmulticast mode
[   82.454896][ T7029] hsr_slave_0: entered allmulticast mode
[   82.457191][ T7029] hsr_slave_1: entered allmulticast mode
[   82.638951][ T7048] 8021q: adding VLAN 0 to HW filter on device bond2
[   82.718948][ T7052] bond2: (slave bridge1): making interface the new active one
[   82.724297][ T7052] bond2: (slave bridge1): Enslaving as an active interface with an up link
[   82.737377][ T7048] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   82.885269][ T7067] tipc: Started in network mode
[   82.887444][ T7067] tipc: Node identity 7f000001, cluster identity 4711
[   82.891089][ T7067] tipc: Enabled bearer <udp:syz2>, priority 10
[   82.921192][ T7067] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   83.046069][ T7087] gretap0: entered promiscuous mode
[   83.107356][ T7094] syz_tun: entered allmulticast mode
[   83.109899][ T7093] syz_tun: left allmulticast mode
[   83.341505][ T7116] validate_nla: 62 callbacks suppressed
[   83.341532][ T7116] netlink: 'syz.0.366': attribute type 32 has an invalid length.
[   83.360233][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   83.364607][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   83.368513][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   83.376940][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   83.513187][ T7124] syz_tun: entered allmulticast mode
[   83.515767][ T7123] syz_tun: left allmulticast mode
[   83.883936][ T5845] tipc: Node number set to 2130706433
[   84.099851][ T7137] tipc: Started in network mode
[   84.103732][ T7137] tipc: Node identity be4622b1cfa4, cluster identity 4711
[   84.106685][ T7137] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.119253][ T7137] syzkaller0: entered promiscuous mode
[   84.121876][ T7137] syzkaller0: entered allmulticast mode
[   84.129568][ T7137] tipc: Resetting bearer <eth:syzkaller0>
[   84.140121][ T7136] tipc: Resetting bearer <eth:syzkaller0>
[   84.150823][ T7136] tipc: Disabling bearer <eth:syzkaller0>
[   84.195712][ T7141] netlink: 'syz.2.374': attribute type 2 has an invalid length.
[   84.400693][ T7155] netlink: 'syz.2.379': attribute type 1 has an invalid length.
[   84.403972][ T7156] netlink: 'syz.2.379': attribute type 1 has an invalid length.
[   84.427080][ T7156] 8021q: adding VLAN 0 to HW filter on device bond3
[   84.806937][ T7167] syz_tun: entered allmulticast mode
[   84.810734][ T7166] syz_tun: left allmulticast mode
[   84.850470][ T7169] netlink: 'syz.0.384': attribute type 1 has an invalid length.
[   84.869064][ T7169] 8021q: adding VLAN 0 to HW filter on device bond3
[   84.886079][ T7169] bond3: (slave bridge2): making interface the new active one
[   84.889923][ T7169] bond3: (slave bridge2): Enslaving as an active interface with an up link
[   84.905970][ T7169] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   85.192714][ T7183] netlink: 'syz.3.388': attribute type 2 has an invalid length.
[   85.204812][ T7183] : entered promiscuous mode
[   85.207107][ T7188] syz_tun: entered allmulticast mode
[   85.210415][ T7187] syz_tun: left allmulticast mode
[   85.249625][ T7190] netlink: 'syz.3.391': attribute type 1 has an invalid length.
[   85.295680][ T7190] 8021q: adding VLAN 0 to HW filter on device bond1
[   85.315887][ T7190] bond1: (slave bridge1): making interface the new active one
[   85.320210][ T7190] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   85.334022][ T7190] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   85.350548][ T7198] bridge0: entered allmulticast mode
[   85.357061][ T7198] bridge_slave_1: left allmulticast mode
[   85.359076][ T7198] bridge_slave_1: left promiscuous mode
[   85.362149][ T7198] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.368370][ T7198] bridge_slave_0: left allmulticast mode
[   85.370301][ T7198] bridge_slave_0: left promiscuous mode
[   85.372935][ T7198] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.674360][ T7217] netlink: 'syz.3.401': attribute type 1 has an invalid length.
[   85.707233][ T7217] 8021q: adding VLAN 0 to HW filter on device bond2
[   85.720624][ T7220] vlan3: entered allmulticast mode
[   85.720818][ T7225] netlink: 'syz.0.403': attribute type 6 has an invalid length.
[   85.723506][ T7220] bridge_slave_0: entered allmulticast mode
[   85.742566][ T7225] netlink: 'syz.0.403': attribute type 1 has an invalid length.
[   85.746709][ T7217] bond2: (slave bridge2): making interface the new active one
[   85.750249][ T7217] bond2: (slave bridge2): Enslaving as an active interface with an up link
[   85.759941][ T7217] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   85.973844][ T7254] syz_tun: entered allmulticast mode
[   86.157297][ T7272] __nla_validate_parse: 22 callbacks suppressed
[   86.157309][ T7272] netlink: 100 bytes leftover after parsing attributes in process `syz.2.419'.
[   86.237297][ T7284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.422'.
[   86.260341][ T7285] ieee802154 phy0 wpan0: encryption failed: -22
[   86.285827][ T7284] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[   86.294742][ T7284] bond3: (slave vxcan3): Error -95 calling set_mac_address
[   86.406803][ T7291] macvlan3: entered allmulticast mode
[   86.408794][ T7291] veth1_vlan: entered allmulticast mode
[   86.413970][ T7291] veth1_vlan: left allmulticast mode
[   86.458569][ T7295] tipc: Can't bind to reserved service type 1
[   86.567423][ T7303] 8021q: adding VLAN 0 to HW filter on device bond4
[   86.600300][ T7303] bond4: (slave bridge0): making interface the new active one
[   86.603833][ T7303] bond4: (slave bridge0): Enslaving as an active interface with an up link
[   86.615069][ T7303] bond4: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   86.682909][ T7309] netlink: 24 bytes leftover after parsing attributes in process `syz.3.431'.
[   86.713075][ T7309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.431'.
[   86.797912][ T7317] team0: Mode changed to "activebackup"
[   86.811952][ T7254] syz_tun: left allmulticast mode
[   86.819758][ T7309] lo speed is unknown, defaulting to 1000
[   86.845527][ T7321] syz_tun: entered allmulticast mode
[   86.860189][ T7319] syz_tun: left allmulticast mode
[   86.865301][ T7309] netlink: 40 bytes leftover after parsing attributes in process `syz.3.431'.
[   87.109641][ T7338] 8021q: adding VLAN 0 to HW filter on device bond4
[   87.161026][ T7342] team0: Device ipip0 is of different type
[   87.502355][ T7364] ieee802154 phy0 wpan0: encryption failed: -22
[   87.630935][ T7368] syz.3.449: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   87.639732][ T7368] CPU: 0 UID: 0 PID: 7368 Comm: syz.3.449 Not tainted syzkaller #0 PREEMPT(full) 
[   87.639752][ T7368] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   87.639761][ T7368] Call Trace:
[   87.639780][ T7368]  <TASK>
[   87.639788][ T7368]  dump_stack_lvl+0x189/0x250
[   87.639813][ T7368]  ? __pfx_dump_stack_lvl+0x10/0x10
[   87.639828][ T7368]  ? __pfx__printk+0x10/0x10
[   87.639847][ T7368]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   87.639864][ T7368]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   87.639880][ T7368]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   87.639897][ T7368]  warn_alloc+0x214/0x310
[   87.639922][ T7368]  ? __pfx_warn_alloc+0x10/0x10
[   87.639967][ T7368]  ? __get_vm_area_node+0x28f/0x300
[   87.639986][ T7368]  ? fq_pie_init+0x430/0x840
[   87.640007][ T7368]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   87.640045][ T7368]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   87.640065][ T7368]  ? rcu_is_watching+0x15/0xb0
[   87.640080][ T7368]  ? fq_pie_init+0x430/0x840
[   87.640093][ T7368]  ? fq_pie_init+0x430/0x840
[   87.640106][ T7368]  __kvmalloc_node_noprof+0x3b8/0x5f0
[   87.640125][ T7368]  ? fq_pie_init+0x430/0x840
[   87.640140][ T7368]  ? tcf_block_get+0x67/0xa0
[   87.640159][ T7368]  ? __pfx_tcf_chain_head_change_dflt+0x10/0x10
[   87.640181][ T7368]  fq_pie_init+0x430/0x840
[   87.640212][ T7368]  ? __pfx_fq_pie_init+0x10/0x10
[   87.640228][ T7368]  qdisc_create+0x7ac/0xea0
[   87.640251][ T7368]  tc_modify_qdisc+0x1538/0x20e0
[   87.640280][ T7368]  ? __pfx_tc_modify_qdisc+0x10/0x10
[   87.640320][ T7368]  ? __pfx_tc_modify_qdisc+0x10/0x10
[   87.640335][ T7368]  rtnetlink_rcv_msg+0x77c/0xb70
[   87.640358][ T7368]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[   87.640376][ T7368]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   87.640423][ T7368]  ? ref_tracker_free+0x63a/0x7d0
[   87.640442][ T7368]  ? __asan_memcpy+0x40/0x70
[   87.640457][ T7368]  ? __pfx_ref_tracker_free+0x10/0x10
[   87.640472][ T7368]  ? __skb_clone+0x63/0x7a0
[   87.640496][ T7368]  netlink_rcv_skb+0x208/0x470
[   87.640517][ T7368]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   87.640534][ T7368]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   87.640559][ T7368]  ? netlink_deliver_tap+0x2e/0x1b0
[   87.640584][ T7368]  netlink_unicast+0x82f/0x9e0
[   87.640604][ T7368]  ? __pfx_netlink_unicast+0x10/0x10
[   87.640620][ T7368]  ? netlink_sendmsg+0x642/0xb30
[   87.640630][ T7368]  ? skb_put+0x11b/0x210
[   87.640644][ T7368]  netlink_sendmsg+0x805/0xb30
[   87.640660][ T7368]  ? __pfx_netlink_sendmsg+0x10/0x10
[   87.640674][ T7368]  ? aa_sock_msg_perm+0xf1/0x1d0
[   87.640688][ T7368]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   87.640701][ T7368]  ? __pfx_netlink_sendmsg+0x10/0x10
[   87.640711][ T7368]  __sock_sendmsg+0x21c/0x270
[   87.640730][ T7368]  ____sys_sendmsg+0x505/0x830
[   87.640749][ T7368]  ? __pfx_____sys_sendmsg+0x10/0x10
[   87.640766][ T7368]  ? import_iovec+0x74/0xa0
[   87.640778][ T7368]  ___sys_sendmsg+0x21f/0x2a0
[   87.640789][ T7368]  ? __pfx____sys_sendmsg+0x10/0x10
[   87.640826][ T7368]  ? __fget_files+0x2a/0x420
[   87.640846][ T7368]  ? __fget_files+0x3a0/0x420
[   87.640870][ T7368]  __x64_sys_sendmsg+0x19b/0x260
[   87.640886][ T7368]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   87.640915][ T7368]  ? do_syscall_64+0xbe/0x3b0
[   87.640930][ T7368]  do_syscall_64+0xfa/0x3b0
[   87.640940][ T7368]  ? lockdep_hardirqs_on+0x9c/0x150
[   87.640956][ T7368]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.640966][ T7368]  ? exc_page_fault+0x9f/0xf0
[   87.640985][ T7368]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.640996][ T7368] RIP: 0033:0x7f6174d8ebe9
[   87.641008][ T7368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   87.641018][ T7368] RSP: 002b:00007f6175c69038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   87.641033][ T7368] RAX: ffffffffffffffda RBX: 00007f6174fc6180 RCX: 00007f6174d8ebe9
[   87.641041][ T7368] RDX: 000000002000400c RSI: 00002000000000c0 RDI: 0000000000000026
[   87.641048][ T7368] RBP: 00007f6174e11e19 R08: 0000000000000000 R09: 0000000000000000
[   87.641055][ T7368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   87.641062][ T7368] R13: 00007f6174fc6218 R14: 00007f6174fc6180 R15: 00007ffdc5b9e828
[   87.641079][ T7368]  </TASK>
[   87.641215][ T7368] Mem-Info:
[   87.785984][ T7368] active_anon:4441 inactive_anon:0 isolated_anon:0
[   87.785984][ T7368]  active_file:1287 inactive_file:38240 isolated_file:0
[   87.785984][ T7368]  unevictable:1768 dirty:74 writeback:0
[   87.785984][ T7368]  slab_reclaimable:10296 slab_unreclaimable:53118
[   87.785984][ T7368]  mapped:17960 shmem:2448 pagetables:851
[   87.785984][ T7368]  sec_pagetables:0 bounce:0
[   87.785984][ T7368]  kernel_misc_reclaimable:0
[   87.785984][ T7368]  free:297460 free_pcp:23418 free_cma:0
[   87.810321][ T7368] Node 0 active_anon:10320kB inactive_anon:0kB active_file:4496kB inactive_file:145760kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:9644kB dirty:204kB writeback:0kB shmem:5096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6160kB pagetables:1444kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   87.824185][ T7368] Node 1 active_anon:7444kB inactive_anon:0kB active_file:652kB inactive_file:7200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:62196kB dirty:92kB writeback:0kB shmem:4696kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5452kB pagetables:1960kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   87.835288][ T7368] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   87.845183][ T7368] lowmem_reserve[]: 0 811 811 811 811
[   87.847294][ T7368] Node 0 DMA32 free:341320kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10320kB inactive_anon:0kB active_file:4496kB inactive_file:145760kB unevictable:3536kB writepending:204kB present:1556484kB managed:830928kB mlocked:0kB bounce:0kB free_pcp:43224kB local_pcp:29208kB free_cma:0kB
[   87.857945][ T7368] lowmem_reserve[]: 0 0 0 0 0
[   87.859579][ T7368] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   87.869125][ T7368] lowmem_reserve[]: 0 0 854 854 854
[   87.870819][ T7368] Node 1 Normal free:374544kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7376kB inactive_anon:0kB active_file:652kB inactive_file:7200kB unevictable:3536kB writepending:92kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:50756kB local_pcp:18556kB free_cma:0kB
[   87.882398][ T7368] lowmem_reserve[]: 0 0 0 0 0
[   87.884211][ T7368] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   87.888291][ T7368] Node 0 DMA32: 1378*4kB (UME) 306*8kB (UME) 9*16kB (UME) 118*32kB (UME) 297*64kB (UM) 161*128kB (UM) 50*256kB (UME) 25*512kB (UME) 8*1024kB (UM) 3*2048kB (UME) 61*4096kB (M) = 341288kB
[   87.895704][ T7368] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   87.902017][ T7368] Node 1 Normal: 2*4kB (ME) 19*8kB (UE) 153*16kB (UE) 169*32kB (UE) 42*64kB (UME) 18*128kB (UME) 12*256kB (UME) 6*512kB (UME) 3*1024kB (UM) 2*2048kB (UE) 85*4096kB (M) = 374480kB
[   87.909020][ T7368] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   87.912830][ T7368] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   87.916591][ T7368] 41975 total pagecache pages
[   87.918547][ T7368] 0 pages in swap cache
[   87.920025][ T7368] Free swap  = 124996kB
[   87.921497][ T7368] Total swap = 124996kB
[   87.922993][ T7368] 786301 pages RAM
[   87.924295][ T7368] 0 pages HighMem/MovableOnly
[   87.926308][ T7368] 241337 pages reserved
[   87.928031][ T7368] 0 pages cma reserved
[   88.237878][ T7412] Bluetooth: MGMT ver 1.23
[   88.240900][ T7413] netlink: 56 bytes leftover after parsing attributes in process `syz.3.463'.
[   88.247959][ T7413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.463'.
[   88.251029][ T7411] netlink: 56 bytes leftover after parsing attributes in process `syz.3.463'.
[   88.255872][ T7411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.463'.
[   88.260007][ T7412] netlink: 24 bytes leftover after parsing attributes in process `syz.3.463'.
[   88.345084][ T7415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.362967][ T7417] ip6gretap0: entered promiscuous mode
[   88.366164][ T7417] bridge4: port 1(macvlan3) entered blocking state
[   88.368427][ T7417] bridge4: port 1(macvlan3) entered disabled state
[   88.371007][ T7417] macvlan3: entered allmulticast mode
[   88.374361][ T7417] ip6gretap0: entered allmulticast mode
[   88.377388][ T7417] macvlan3: entered promiscuous mode
[   88.380640][ T7417] bridge4: port 1(macvlan3) entered blocking state
[   88.383247][ T7417] bridge4: port 1(macvlan3) entered forwarding state
[   88.475207][ T7423] dvmrp8: entered allmulticast mode
[   88.637377][ T7431] validate_nla: 4 callbacks suppressed
[   88.637390][ T7431] netlink: 'syz.2.467': attribute type 23 has an invalid length.
[   89.359616][ T7423] dvmrp8: left allmulticast mode
[   89.395668][ T7430] lo speed is unknown, defaulting to 1000
[   89.518958][ T7438] netlink: 'syz.0.470': attribute type 1 has an invalid length.
[   89.541111][ T7438] 8021q: adding VLAN 0 to HW filter on device bond4
[   89.582560][ T7441] netlink: 'syz.0.471': attribute type 1 has an invalid length.
[   89.610516][ T7441] 8021q: adding VLAN 0 to HW filter on device bond5
[   89.644371][ T7441] bond5: (slave bridge0): making interface the new active one
[   89.647939][ T7441] bond5: (slave bridge0): Enslaving as an active interface with an up link
[   89.661150][ T7441] bond5: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   89.999330][ T7457] netlink: 'syz.3.476': attribute type 9 has an invalid length.
[   90.004916][ T7457] netlink: 'syz.3.476': attribute type 7 has an invalid length.
[   90.008006][ T7457] netlink: 'syz.3.476': attribute type 8 has an invalid length.
[   90.186261][ T7467] pim6reg1: entered promiscuous mode
[   90.188613][ T7467] pim6reg1: entered allmulticast mode
[   90.507011][ T7469] netlink: 'syz.2.480': attribute type 1 has an invalid length.
[   90.900444][ T7486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   90.906714][ T7486] bond0 (unregistering): (slave team0): Releasing backup interface
[   90.910858][ T7486] bond0 (unregistering): Released all slaves
[   91.140155][ T7502] lo speed is unknown, defaulting to 1000
[   91.145085][ T7502] lo speed is unknown, defaulting to 1000
[   91.147269][ T7502] lo speed is unknown, defaulting to 1000
[   91.212842][ T7505] 8021q: adding VLAN 0 to HW filter on device team0
[   91.218667][ T7505] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   91.278650][ T7502] infiniband syz0: set active
[   91.280618][ T7502] infiniband syz0: added lo
[   91.280987][ T6631] lo speed is unknown, defaulting to 1000
[   91.287166][ T6631] syz0: Port: 1 Link ACTIVE
[   91.320848][ T7502] RDS/IB: syz0: added
[   91.323510][ T7502] smc: adding ib device syz0 with port count 1
[   91.327406][ T7502] smc:    ib device syz0 port 1 has pnetid 
[   91.331999][  T794] lo speed is unknown, defaulting to 1000
[   91.336288][ T7502] lo speed is unknown, defaulting to 1000
[   91.493241][ T7502] lo speed is unknown, defaulting to 1000
[   91.523490][ T7510] __nla_validate_parse: 19 callbacks suppressed
[   91.523506][ T7510] netlink: 56 bytes leftover after parsing attributes in process `syz.2.491'.
[   91.529794][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.491'.
[   91.536879][ T7510] netlink: 24 bytes leftover after parsing attributes in process `syz.2.491'.
[   91.617576][ T7517] hsr0: entered allmulticast mode
[   91.619639][ T7517] hsr_slave_0: entered allmulticast mode
[   91.625571][ T7517] hsr_slave_1: entered allmulticast mode
[   91.736524][ T7519] netlink: 28 bytes leftover after parsing attributes in process `syz.2.493'.
[   91.797328][ T7517] bridge4: port 1(macvlan3) entered disabled state
[   91.837535][ T7517] ip6gretap0: left promiscuous mode
[   91.841149][   T47] lo speed is unknown, defaulting to 1000
[   91.841613][ T7502] lo speed is unknown, defaulting to 1000
[   91.845551][   T47] syz2: Port: 1 Link DOWN
[   91.845611][ T7518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.493'.
[   91.863347][ T7433] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.867380][ T7433] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.883112][ T7433] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.887303][ T7433] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   92.161094][ T7531] netlink: 'syz.0.498': attribute type 1 has an invalid length.
[   92.165021][ T7531] netlink: 'syz.0.498': attribute type 1 has an invalid length.
[   92.173384][ T7528] netlink: 'syz.3.497': attribute type 1 has an invalid length.
[   92.236800][ T7528] 8021q: adding VLAN 0 to HW filter on device bond5
[   92.397071][ T7531] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.418356][ T7531] bond0: (slave wlan0): Enslaving as an active interface with a down link
[   92.440266][ T7531] vlan2: entered allmulticast mode
[   92.442867][ T7531] veth1: entered allmulticast mode
[   92.445770][ T7531] bond0: (slave vlan2): Opening slave failed
[   92.533279][ T7544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'.
[   92.597729][ T7544] 8021q: adding VLAN 0 to HW filter on device bond6
[   92.600780][ T7544] bridge3: port 1(bond6) entered blocking state
[   92.603646][ T7544] bridge3: port 1(bond6) entered disabled state
[   92.606582][ T7544] bond6: entered allmulticast mode
[   92.614045][ T7544] bridge3: port 1(bond6) entered blocking state
[   92.616571][ T7544] bridge3: port 1(bond6) entered forwarding state
[   93.057510][ T7559] 8021q: adding VLAN 0 to HW filter on device bond6
[   93.355211][ T7574] netlink: 56 bytes leftover after parsing attributes in process `syz.3.508'.
[   93.358752][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.508'.
[   93.479058][   T24] IPVS: starting estimator thread 0...
[   93.555233][   T26] bridge3: port 1(bond6) entered disabled state
[   93.571425][ T7577] IPVS: using max 64 ests per chain, 153600 per kthread
[   93.838256][ T7606] netlink: 56 bytes leftover after parsing attributes in process `syz.2.518'.
[   93.841181][ T7606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.518'.
[   93.875823][ T7610] unsupported nlmsg_type 40
[   93.952563][ T7618] validate_nla: 3 callbacks suppressed
[   93.952573][ T7618] netlink: 'syz.3.521': attribute type 1 has an invalid length.
[   93.979620][ T7618] 8021q: adding VLAN 0 to HW filter on device bond7
[   93.992636][ T7618] bond7: (slave bridge4): making interface the new active one
[   93.996381][ T7618] bond7: (slave bridge4): Enslaving as an active interface with an up link
[   94.001609][ T7600] syzkaller0: entered allmulticast mode
[   94.008099][ T7618] bond7: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   94.069127][ T7600] syzkaller0 (unregistering): left allmulticast mode
[   94.266310][ T7641] raw_sendmsg: syz.0.526 forgot to set AF_INET. Fix it!
[   94.277299][ T7641] bridge0: port 1(erspan0) entered blocking state
[   94.280291][ T7641] bridge0: port 1(erspan0) entered disabled state
[   94.283468][ T7641] erspan0: entered allmulticast mode
[   94.287699][ T7641] erspan0: entered promiscuous mode
[   94.291199][ T7641] bridge0: port 1(erspan0) entered blocking state
[   94.293780][ T7641] bridge0: port 1(erspan0) entered forwarding state
[   94.444097][ T7654] netlink: 'syz.0.529': attribute type 1 has an invalid length.
[   94.980941][ T7678] netlink: 'syz.0.536': attribute type 1 has an invalid length.
[   95.003808][ T7678] 8021q: adding VLAN 0 to HW filter on device bond7
[   95.017283][ T7678] bond7: (slave bridge4): making interface the new active one
[   95.020601][ T7678] bond7: (slave bridge4): Enslaving as an active interface with an up link
[   95.030492][ T7678] bond7: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   95.204163][ T7692] netlink: 'syz.0.541': attribute type 1 has an invalid length.
[   95.379428][ T7694] lo speed is unknown, defaulting to 1000
[   95.387275][ T7694] lo speed is unknown, defaulting to 1000
[   95.388900][ T7701] lo speed is unknown, defaulting to 1000
[   95.530252][ T7701] lo speed is unknown, defaulting to 1000
[   96.212005][ T7718] netlink: 'syz.2.546': attribute type 1 has an invalid length.
[   96.402760][ T7718] 8021q: adding VLAN 0 to HW filter on device bond5
[   96.413264][ T7724] bond5: (slave bridge6): making interface the new active one
[   96.416370][ T7724] bond5: (slave bridge6): Enslaving as an active interface with an up link
[   96.681816][ T7738] netlink: 'syz.2.553': attribute type 1 has an invalid length.
[   96.711135][ T7738] 8021q: adding VLAN 0 to HW filter on device bond6
[   96.733508][ T7738] bond6: (slave bridge7): making interface the new active one
[   96.736634][ T7738] bond6: (slave bridge7): Enslaving as an active interface with an up link
[   96.748380][ T7738] bond6: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   97.102172][ T7747] netlink: 'syz.0.556': attribute type 3 has an invalid length.
[   97.105139][ T7747] netlink: 'syz.0.556': attribute type 1 has an invalid length.
[   97.133069][ T7750] __nla_validate_parse: 10 callbacks suppressed
[   97.133084][ T7750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.557'.
[   97.137970][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.557'.
[   97.205644][ T7758] netlink: 'syz.3.560': attribute type 1 has an invalid length.
[   97.231570][ T7760] netlink: 56 bytes leftover after parsing attributes in process `syz.2.558'.
[   97.236311][ T7758] 8021q: adding VLAN 0 to HW filter on device bond8
[   97.241940][ T7760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.558'.
[   97.255793][ T7758] bond8: (slave bridge5): making interface the new active one
[   97.259134][ T7758] bond8: (slave bridge5): Enslaving as an active interface with an up link
[   97.268978][ T7760] netlink: 24 bytes leftover after parsing attributes in process `syz.2.558'.
[   97.272841][ T7758] bond8: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   97.377856][ T7765] netlink: 'syz.2.562': attribute type 1 has an invalid length.
[   97.402091][ T7765] 8021q: adding VLAN 0 to HW filter on device bond7
[   97.416531][ T7765] bond7: (slave gretap1): making interface the new active one
[   97.420305][ T7765] bond7: (slave gretap1): Enslaving as an active interface with an up link
[   97.442841][ T7765] syz.2.562 (7765) used greatest stack depth: 18712 bytes left
[   97.606759][ T7784] bridge6: entered promiscuous mode
[   97.608348][ T7784] bridge6: entered allmulticast mode
[   97.612502][ T7784] team0: Port device bridge6 added
[   97.620232][ T7786] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   97.695147][ T7790] netlink: 56 bytes leftover after parsing attributes in process `syz.2.570'.
[   97.698897][ T7790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.570'.
[   97.705705][ T7790] netlink: 24 bytes leftover after parsing attributes in process `syz.2.570'.
[   97.709854][ T7792] netlink: 32 bytes leftover after parsing attributes in process `syz.2.570'.
[   97.793098][ T7801] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   97.859440][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.574'.
[   98.137091][ T7838] IPVS: set_ctl: invalid protocol: 4 127.0.0.1:20002
[   98.149023][   T47] IPVS: starting estimator thread 0...
[   98.157693][ T7833] tap0: tun_chr_ioctl cmd 1074025675
[   98.159876][ T7833] tap0: persist disabled
[   98.241407][ T7840] IPVS: using max 64 ests per chain, 153600 per kthread
[   98.317862][ T7844] lo speed is unknown, defaulting to 1000
[   98.320705][ T7844] lo speed is unknown, defaulting to 1000
[   98.874492][ T7865] gretap0: refused to change device tx_queue_len
[   98.876820][ T7865] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  100.119579][ T7865] pim6reg1: entered promiscuous mode
[  100.124137][ T7865] pim6reg1: entered allmulticast mode
[  100.194363][ T7876] syz_tun: entered allmulticast mode
[  100.207498][ T7875] syz_tun: left allmulticast mode
[  100.292708][ T7878] validate_nla: 2 callbacks suppressed
[  100.292727][ T7878] netlink: 'syz.2.594': attribute type 303 has an invalid length.
[  100.310233][ T7884] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  100.317694][ T7883] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  100.318509][ T7878] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  100.328196][ T7878] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  100.423394][ T7890] bridge0: entered promiscuous mode
[  100.426021][ T7890] macsec1: entered promiscuous mode
[  100.432928][ T7890] bridge0: left promiscuous mode
[  100.730478][ T7903] netlink: 'syz.3.602': attribute type 1 has an invalid length.
[  100.752972][ T7903] 8021q: adding VLAN 0 to HW filter on device bond10
[  100.770927][ T7903] bond10: (slave bridge7): making interface the new active one
[  100.776908][ T7903] bond10: (slave bridge7): Enslaving as an active interface with an up link
[  101.133877][ T7920] netlink: 'syz.2.608': attribute type 1 has an invalid length.
[  101.162656][ T7920] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  101.166985][ T7920] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  101.170982][ T7920] bond8: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  101.977248][ T7974] netlink: 'syz.0.626': attribute type 6 has an invalid length.
[  101.980585][ T7974] IPv6: NLM_F_CREATE should be specified when creating new route
[  102.222904][ T7986] gretap1: entered promiscuous mode
[  102.224823][ T7986] gretap1: entered allmulticast mode
[  102.364380][ T7990] __nla_validate_parse: 18 callbacks suppressed
[  102.364466][ T7990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.632'.
[  102.369412][ T7990] netlink: 24 bytes leftover after parsing attributes in process `syz.3.632'.
[  102.627905][ T8010] netlink: 56 bytes leftover after parsing attributes in process `syz.3.639'.
[  102.629746][ T8012] netlink: 'syz.2.640': attribute type 3 has an invalid length.
[  102.631014][ T8010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.639'.
[  102.635947][ T8012] netlink: 'syz.2.640': attribute type 1 has an invalid length.
[  102.638657][ T8012] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.640'.
[  102.646564][ T8010] netlink: 24 bytes leftover after parsing attributes in process `syz.3.639'.
[  102.695971][ T8016] batadv_slave_1: entered promiscuous mode
[  102.718383][ T8018] batadv_slave_1: left promiscuous mode
[  102.850735][ T8034] mac80211_hwsim hwsim11 wlan0: entered promiscuous mode
[  102.854195][ T8034] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  102.972946][ T8044] netlink: 56 bytes leftover after parsing attributes in process `syz.2.651'.
[  102.975881][ T8044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.651'.
[  102.980881][ T8044] netlink: 24 bytes leftover after parsing attributes in process `syz.2.651'.
[  103.080439][ T8060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.655'.
[  103.212257][ T8073] netlink: 'syz.2.659': attribute type 11 has an invalid length.
[  103.231487][ T8069] nbd0: detected capacity change from 0 to 127
[  103.239671][   T56] block nbd0: Receive control failed (result -32)
[  103.288574][ T8076] can: request_module (can-proto-3) failed.
[  103.417687][ T8095] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.420383][ T8095] syzkaller0: entered promiscuous mode
[  103.422340][ T8095] syzkaller0: entered allmulticast mode
[  103.427591][ T8095] syzkaller0: mtu greater than device maximum
[  103.704343][ T8088] tipc: Resetting bearer <eth:syzkaller0>
[  103.718498][ T8088] tipc: Disabling bearer <eth:syzkaller0>
[  103.734548][ T8102] syzkaller0: entered promiscuous mode
[  103.736818][ T8102] syzkaller0: entered allmulticast mode
[  103.745340][ T8102] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.768526][ T8102] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  103.813375][ T8102] tipc: Resetting bearer <eth:syzkaller0>
[  103.826155][ T8101] tipc: Resetting bearer <eth:syzkaller0>
[  103.844274][ T8109] netlink: 'syz.2.671': attribute type 4 has an invalid length.
[  103.850706][ T8101] tipc: Disabling bearer <eth:syzkaller0>
[  104.085425][ T8132] ip6tnl1: entered promiscuous mode
[  104.194616][ T8145] netlink: 'syz.2.681': attribute type 83 has an invalid length.
[  104.545783][ T8157] batadv_slave_1: entered promiscuous mode
[  104.558580][ T8156] batadv_slave_1: left promiscuous mode
[  104.800983][ T8167] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.878271][ T8167] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.986100][ T8167] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.030012][ T8174] erspan0: left allmulticast mode
[  105.033572][ T8174] erspan0: left promiscuous mode
[  105.035312][ T8174] bridge0: port 1(erspan0) entered disabled state
[  105.061012][ T8174] bond5: (slave bridge0): Releasing active interface
[  105.109747][ T8167] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.118435][ T8176] netlink: 'syz.2.693': attribute type 7 has an invalid length.
[  105.144890][ T8176] 8021q: adding VLAN 0 to HW filter on device bond9
[  105.148698][ T8176] bridge10: port 1(bond9) entered blocking state
[  105.154342][ T8176] bridge10: port 1(bond9) entered disabled state
[  105.156520][ T8176] bond9: entered allmulticast mode
[  105.161813][ T8176] bridge10: port 1(bond9) entered blocking state
[  105.163795][ T8176] bridge10: port 1(bond9) entered forwarding state
[  105.209168][ T5709] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.233141][   T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.249215][   T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.266978][   T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.423833][ T8195] macvlan4: entered promiscuous mode
[  105.425995][ T8195] bond0: entered promiscuous mode
[  105.428377][ T8195] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  105.467081][ T8189] sctp: [Deprecated]: syz.3.697 (pid 8189) Use of struct sctp_assoc_value in delayed_ack socket option.
[  105.467081][ T8189] Use struct sctp_sack_info instead
[  105.784836][   T53] bridge10: port 1(bond9) entered disabled state
[  106.512130][ T8236] vlan0: entered promiscuous mode
[  106.514054][ T8236] vlan0: entered allmulticast mode
[  106.877198][ T8244] syzkaller0: entered allmulticast mode
[  107.004024][ T8249] team0: Mode "l" not found
[  107.007236][ T8248] netlink: 'syz.2.718': attribute type 1 has an invalid length.
[  107.164571][ T8261] xt_limit: Overflow, try lower: 271964/0
[  107.502614][ T8299] __nla_validate_parse: 29 callbacks suppressed
[  107.502626][ T8299] netlink: 56 bytes leftover after parsing attributes in process `syz.0.730'.
[  107.508902][ T8299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.730'.
[  107.513520][ T8299] netlink: 24 bytes leftover after parsing attributes in process `syz.0.730'.
[  107.819979][ T8316] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  108.443033][ T8335] pim6reg1: entered promiscuous mode
[  108.444798][ T8335] pim6reg1: entered allmulticast mode
[  108.529411][ T8338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.743'.
[  108.532615][ T8338] netlink: 'syz.0.743': attribute type 7 has an invalid length.
[  108.535601][ T8338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.743'.
[  108.538666][ T8338] netlink: 'syz.0.743': attribute type 7 has an invalid length.
[  108.570691][ T8340] syz_tun: entered allmulticast mode
[  108.574927][ T8339] syz_tun: left allmulticast mode
[  109.128301][ T8359] netlink: 'syz.2.750': attribute type 21 has an invalid length.
[  109.133578][ T8359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.750'.
[  109.143642][ T8359] netlink: 'syz.2.750': attribute type 21 has an invalid length.
[  109.146429][ T8359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.750'.
[  109.973324][ T8402] netlink: 40 bytes leftover after parsing attributes in process `syz.3.765'.
[  110.169610][ T8415] bridge0: port 1(batadv1) entered blocking state
[  110.171969][ T8415] bridge0: port 1(batadv1) entered disabled state
[  110.174244][ T8415] batadv1: entered allmulticast mode
[  110.178562][ T8415] batadv1: entered promiscuous mode
[  110.637226][ T8435] netlink: 56 bytes leftover after parsing attributes in process `syz.0.774'.
[  110.671984][ T7433] batman_adv: batadv1: IGMP Querier appeared
[  110.674237][ T7433] batman_adv: batadv1: MLD Querier appeared
[  110.788685][ T8441] netlink: 56 bytes leftover after parsing attributes in process `syz.0.776'.
[  111.357305][ T8453] lo speed is unknown, defaulting to 1000
[  111.361713][ T8453] lo speed is unknown, defaulting to 1000
[  111.920610][ T8470] syz_tun: entered allmulticast mode
[  111.927533][ T8469] syz_tun: left allmulticast mode
[  112.044890][ T8474] lo speed is unknown, defaulting to 1000
[  112.048631][ T8474] lo speed is unknown, defaulting to 1000
[  112.050422][ T8476] netlink: 'syz.0.786': attribute type 1 has an invalid length.
[  112.404020][ T8488] pim6reg1: entered promiscuous mode
[  112.406111][ T8488] pim6reg1: entered allmulticast mode
[  112.804249][ T8506] __nla_validate_parse: 6 callbacks suppressed
[  112.804264][ T8506] netlink: 56 bytes leftover after parsing attributes in process `syz.3.792'.
[  112.810155][ T8506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.792'.
[  112.822702][ T8505] netlink: 24 bytes leftover after parsing attributes in process `syz.3.792'.
[  113.077393][ T8518] netlink: 'syz.3.796': attribute type 10 has an invalid length.
[  113.096302][ T8518] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  113.142069][ T8522] netlink: 'syz.3.798': attribute type 1 has an invalid length.
[  113.173895][ T8520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.797'.
[  113.180285][ T8522] 8021q: adding VLAN 0 to HW filter on device bond11
[  113.225146][ T8522] bond11: (slave bridge9): making interface the new active one
[  113.229803][ T8522] bond11: (slave bridge9): Enslaving as an active interface with an up link
[  113.258203][ T8522] bond11: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  113.279241][ T8527] netlink: 56 bytes leftover after parsing attributes in process `syz.2.800'.
[  113.285414][ T8527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.800'.
[  113.289624][ T8527] netlink: 24 bytes leftover after parsing attributes in process `syz.2.800'.
[  113.376984][ T8534] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.383980][ T8534] syzkaller0: entered promiscuous mode
[  113.386993][ T8534] syzkaller0: entered allmulticast mode
[  113.408353][ T8534] tipc: Resetting bearer <eth:syzkaller0>
[  113.459424][ T8544] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  113.464272][ T8533] tipc: Resetting bearer <eth:syzkaller0>
[  113.482086][ T8533] tipc: Disabling bearer <eth:syzkaller0>
[  113.541116][ T8547] netlink: 56 bytes leftover after parsing attributes in process `syz.3.805'.
[  113.545229][ T8547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.805'.
[  113.557351][ T8546] netlink: 24 bytes leftover after parsing attributes in process `syz.3.805'.
[  113.585834][ T8549] pim6reg1: entered promiscuous mode
[  113.588058][ T8549] pim6reg1: entered allmulticast mode
[  114.478904][ T8581] netlink: 'syz.2.817': attribute type 12 has an invalid length.
[  114.537226][ T8585] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  114.547965][ T8585] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.557837][ T8585] tipc: Resetting bearer <eth:syzkaller0>
[  114.563987][ T8584] tipc: Resetting bearer <eth:syzkaller0>
[  114.574650][ T8584] tipc: Disabling bearer <eth:syzkaller0>
[  114.638684][ T8590] netlink: 'syz.2.821': attribute type 1 has an invalid length.
[  114.662987][ T8590] 8021q: adding VLAN 0 to HW filter on device bond10
[  114.680936][ T8590] bond10: (slave bridge11): making interface the new active one
[  114.686895][ T8590] bond10: (slave bridge11): Enslaving as an active interface with an up link
[  114.706297][ T8598] pim6reg1: entered promiscuous mode
[  114.709617][ T8598] pim6reg1: entered allmulticast mode
[  114.995340][ T8612] syzkaller1: entered promiscuous mode
[  114.997492][ T8612] syzkaller1: entered allmulticast mode
[  115.596833][ T8619] netlink: 'syz.0.831': attribute type 1 has an invalid length.
[  115.626405][ T8619] 8021q: adding VLAN 0 to HW filter on device bond8
[  115.648151][ T8619] bond8: (slave bridge0): making interface the new active one
[  115.652588][ T8619] bond8: (slave bridge0): Enslaving as an active interface with an up link
[  115.754396][ T8632] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  115.807585][ T8632] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  115.857249][ T8632] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  115.907037][ T8632] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  115.966709][ T7433] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  115.977155][ T7433] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  115.988479][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  115.999654][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  116.031782][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.036920][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.082836][ T8639] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82
[  116.205309][ T8648] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  116.420703][ T8662] syz_tun: entered allmulticast mode
[  116.437297][ T8660] syz_tun: left allmulticast mode
[  116.839878][ T8694] netlink: 'syz.0.859': attribute type 5 has an invalid length.
[  116.847245][ T8698] netlink: 'syz.3.861': attribute type 42 has an invalid length.
[  116.854710][ T8698] netlink: 'syz.3.861': attribute type 42 has an invalid length.
[  116.859174][ T8698] netlink: 'syz.3.861': attribute type 42 has an invalid length.
[  116.944889][ T8710] lo speed is unknown, defaulting to 1000
[  116.947860][ T8710] lo speed is unknown, defaulting to 1000
[  117.058514][ T8720] validate_nla: 30 callbacks suppressed
[  117.058525][ T8720] netlink: 'syz.0.863': attribute type 11 has an invalid length.
[  117.138782][ T8720] pim6reg1: entered promiscuous mode
[  117.140793][ T8720] pim6reg1: entered allmulticast mode
[  117.750076][ T8745] syzkaller1: entered promiscuous mode
[  117.752531][ T8745] syzkaller1: entered allmulticast mode
[  117.909672][ T8755] __nla_validate_parse: 12 callbacks suppressed
[  117.909689][ T8755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.872'.
[  117.942844][ T8755] netlink: 'syz.2.872': attribute type 1 has an invalid length.
[  117.946446][ T8755] netlink: 'syz.2.872': attribute type 1 has an invalid length.
[  118.252545][ T8763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.875'.
[  118.256279][ T8763] netlink: 'syz.0.875': attribute type 20 has an invalid length.
[  118.260262][ T8763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.875'.
[  118.265933][ T8763] netlink: 'syz.0.875': attribute type 20 has an invalid length.
[  118.369245][ T8772] syz_tun: entered allmulticast mode
[  118.373559][ T8771] syz_tun: left allmulticast mode
[  118.405181][ T8775] netlink: 64 bytes leftover after parsing attributes in process `syz.3.879'.
[  118.464605][ T8781] netlink: 56 bytes leftover after parsing attributes in process `syz.2.881'.
[  118.468164][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.881'.
[  118.498725][ T8787] netlink: 56 bytes leftover after parsing attributes in process `syz.0.884'.
[  118.502992][ T8787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.884'.
[  118.503084][ T8781] netlink: 24 bytes leftover after parsing attributes in process `syz.2.881'.
[  118.511014][ T8781] netlink: 24 bytes leftover after parsing attributes in process `syz.2.881'.
[  118.577317][ T8798] syzkaller1: entered promiscuous mode
[  118.579304][ T8798] syzkaller1: entered allmulticast mode
[  118.611884][ T8802] openvswitch: netlink: Flow key attr not present in new flow.
[  118.795800][ T8816] pim6reg1: entered promiscuous mode
[  118.797997][ T8816] pim6reg1: entered allmulticast mode
[  118.810305][ T8819] geneve2: entered promiscuous mode
[  118.813098][ T8819] geneve2: entered allmulticast mode
[  119.300084][ T8848] netlink: 'syz.2.903': attribute type 1 has an invalid length.
[  119.326467][ T8848] 8021q: adding VLAN 0 to HW filter on device bond11
[  119.346439][ T8848] bond11: (slave bridge13): making interface the new active one
[  119.350460][ T8848] bond11: (slave bridge13): Enslaving as an active interface with an up link
[  119.691461][ T8854] vlan0: entered allmulticast mode
[  119.693393][ T8854] bond12: entered allmulticast mode
[  119.720235][   T24] lo speed is unknown, defaulting to 1000
[  119.864686][ T8867] netlink: 'syz.3.910': attribute type 1 has an invalid length.
[  119.892321][ T8867] 8021q: adding VLAN 0 to HW filter on device bond13
[  119.912769][ T8867] bond13: (slave bridge10): making interface the new active one
[  119.917093][ T8867] bond13: (slave bridge10): Enslaving as an active interface with an up link
[  119.996878][ T8876] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  120.247473][ T8902] netlink: 'syz.2.919': attribute type 1 has an invalid length.
[  120.269796][ T8902] 8021q: adding VLAN 0 to HW filter on device bond12
[  120.284865][ T8902] bond12: (slave bridge14): making interface the new active one
[  120.288525][ T8902] bond12: (slave bridge14): Enslaving as an active interface with an up link
[  120.678535][ T8927] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  120.994223][ T8930] netlink: 'syz.3.928': attribute type 1 has an invalid length.
[  121.038424][ T8930] 8021q: adding VLAN 0 to HW filter on device bond14
[  121.074963][ T8930] bond14: (slave bridge11): making interface the new active one
[  121.082581][ T8930] bond14: (slave bridge11): Enslaving as an active interface with an up link
[  121.614911][ T8958] netlink: 'syz.0.936': attribute type 1 has an invalid length.
[  121.639052][ T8958] 8021q: adding VLAN 0 to HW filter on device bond9
[  121.652280][ T8958] bond9: (slave bridge5): making interface the new active one
[  121.656778][ T8958] bond9: (slave bridge5): Enslaving as an active interface with an up link
[  122.247939][ T8984] netlink: 'syz.0.944': attribute type 1 has an invalid length.
[  122.270706][ T8984] 8021q: adding VLAN 0 to HW filter on device bond10
[  122.290842][ T8984] bond10: (slave bridge6): making interface the new active one
[  122.296074][ T8984] bond10: (slave bridge6): Enslaving as an active interface with an up link
[  122.669985][ T9012] netlink: 'syz.3.954': attribute type 1 has an invalid length.
[  122.703443][ T9012] 8021q: adding VLAN 0 to HW filter on device bond15
[  122.735697][ T9012] bond15: (slave bridge12): making interface the new active one
[  122.741081][ T9012] bond15: (slave bridge12): Enslaving as an active interface with an up link
[  123.500130][ T9043] __nla_validate_parse: 64 callbacks suppressed
[  123.500145][ T9043] netlink: 19 bytes leftover after parsing attributes in process `syz.0.963'.
[  123.671561][ T9051] netlink: 'syz.3.967': attribute type 2 has an invalid length.
[  123.677056][ T9054] netlink: 'syz.3.967': attribute type 2 has an invalid length.
[  123.680769][ T9054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.967'.
[  123.739535][ T9057] netlink: 'syz.3.968': attribute type 1 has an invalid length.
[  123.769765][ T9057] 8021q: adding VLAN 0 to HW filter on device bond16
[  123.795560][ T9057] bond16: (slave bridge13): making interface the new active one
[  123.803165][ T9057] bond16: (slave bridge13): Enslaving as an active interface with an up link
[  124.196911][ T9079] netlink: 'syz.3.975': attribute type 1 has an invalid length.
[  124.223440][ T9079] 8021q: adding VLAN 0 to HW filter on device bond17
[  124.238021][ T9079] bond17: (slave bridge14): making interface the new active one
[  124.241971][ T9079] bond17: (slave bridge14): Enslaving as an active interface with an up link
[  124.333568][ T9085] lo speed is unknown, defaulting to 1000
[  124.643337][ T9086] netlink: 156 bytes leftover after parsing attributes in process `syz.3.977'.
[  124.690838][ T9097] netlink: 60 bytes leftover after parsing attributes in process `syz.0.981'.
[  124.697326][ T9097] netlink: 35 bytes leftover after parsing attributes in process `syz.0.981'.
[  124.793592][ T9099] netlink: 24 bytes leftover after parsing attributes in process `syz.0.982'.
[  124.816446][ T9099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.982'.
[  124.819351][ T9099] netlink: 16 bytes leftover after parsing attributes in process `syz.0.982'.
[  124.824932][ T9099] netlink: 40 bytes leftover after parsing attributes in process `syz.0.982'.
[  124.830610][ T9099] netlink: 540 bytes leftover after parsing attributes in process `syz.0.982'.
[  124.836604][ T9099] netlink: 'syz.0.982': attribute type 10 has an invalid length.
[  125.044413][ T9111] netlink: 'syz.0.986': attribute type 2 has an invalid length.
[  125.079704][ T9111] : entered promiscuous mode
[  125.123699][ T9118] netlink: 'syz.0.989': attribute type 1 has an invalid length.
[  125.140125][ T9118] 8021q: adding VLAN 0 to HW filter on device bond11
[  125.151206][ T9118] bond11: (slave bridge8): making interface the new active one
[  125.156964][ T9118] bond11: (slave bridge8): Enslaving as an active interface with an up link
[  125.379339][ T9120] macvtap1: entered allmulticast mode
[  125.381899][ T9120] mac80211_hwsim hwsim11 wlan0: entered allmulticast mode
[  125.385767][ T9120] mac80211_hwsim hwsim11 wlan0: left allmulticast mode
[  125.406693][ T9114] lo speed is unknown, defaulting to 1000
[  125.415375][ T9137] vlan3: entered promiscuous mode
[  125.417674][ T9137] vlan3: entered allmulticast mode
[  126.352315][ T9159] syzkaller0: entered promiscuous mode
[  126.354553][ T9159] syzkaller0: entered allmulticast mode
[  127.856980][ T9190] pim6reg1: entered promiscuous mode
[  127.859793][ T9190] pim6reg1: entered allmulticast mode
[  128.010850][ T9207] netlink: 'syz.3.1013': attribute type 1 has an invalid length.
[  128.030929][ T9207] 8021q: adding VLAN 0 to HW filter on device bond18
[  128.056663][ T9207] bond18: (slave bridge15): making interface the new active one
[  128.060968][ T9207] bond18: (slave bridge15): Enslaving as an active interface with an up link
[  128.158438][ T9213] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  128.324956][ T9227] pim6reg: entered allmulticast mode
[  128.327695][ T9227] netlink: 'syz.2.1021': attribute type 1 has an invalid length.
[  128.327755][ T9228] netlink: 'syz.2.1021': attribute type 1 has an invalid length.
[  128.338658][ T9227] pim6reg: left allmulticast mode
[  128.459373][ T9237] netlink: 'syz.2.1024': attribute type 4 has an invalid length.
[  128.526985][ T9242] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  128.529706][ T9242] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  128.534261][ T9242] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  128.581019][ T9245] sock: sock_set_timeout: `syz.2.1026' (pid 9245) tries to set negative timeout
[  128.624134][ T9250] netlink: 'syz.2.1028': attribute type 1 has an invalid length.
[  128.645425][ T9250] 8021q: adding VLAN 0 to HW filter on device bond13
[  128.668402][ T9250] bond13: (slave bridge15): making interface the new active one
[  128.673258][ T9250] bond13: (slave bridge15): Enslaving as an active interface with an up link
[  128.979222][ T9283] IPv6: addrconf: prefix option has invalid lifetime
[  129.042665][ T9285] syz_tun (unregistering): left allmulticast mode
[  129.110383][ T9286] lo speed is unknown, defaulting to 1000
[  129.126079][ T9294] netlink: 'syz.3.1039': attribute type 10 has an invalid length.
[  129.131479][ T9294] __nla_validate_parse: 7 callbacks suppressed
[  129.131490][ T9294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1039'.
[  129.136810][ T9294] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1039'.
[  129.140941][ T9294] netlink: 'syz.3.1039': attribute type 7 has an invalid length.
[  129.146033][ T9294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1039'.
[  129.194453][ T9294] 8021q: adding VLAN 0 to HW filter on device bond19
[  129.297590][ T9294] bond19 (unregistering): Released all slaves
[  129.456126][ T9305] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1042'.
[  129.524347][ T9309] netlink: 'syz.3.1043': attribute type 1 has an invalid length.
[  129.582020][ T9309] bond19: entered promiscuous mode
[  129.583924][ T9309] bond19: entered allmulticast mode
[  129.611907][ T9311] bridge16: entered promiscuous mode
[  129.613944][ T9311] bridge16: entered allmulticast mode
[  129.623631][ T9311] bond19: (slave bridge16): making interface the new active one
[  129.629025][ T9311] bond19: (slave bridge16): Enslaving as an active interface with an up link
[  129.904898][ T9327] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1050'.
[  129.914993][ T9327] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1050'.
[  129.965686][ T9329] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1051'.
[  129.984753][ T9329] netlink: 'syz.3.1051': attribute type 2 has an invalid length.
[  129.987679][ T9329] netlink: 'syz.3.1051': attribute type 2 has an invalid length.
[  130.007378][ T9329] 8021q: adding VLAN 0 to HW filter on device bond20
[  130.665591][ T9352] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1059'.
[  130.859100][ T9356] batadv1: entered allmulticast mode
[  130.862945][ T9356] 8021q: adding VLAN 0 to HW filter on device batadv1
[  130.939131][ T9360] syz_tun: entered allmulticast mode
[  130.945429][ T9359] syz_tun: left allmulticast mode
[  131.202644][ T9374] veth0: entered promiscuous mode
[  131.213681][ T9374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1067'.
[  131.217721][ T9374] openvswitch: netlink: Missing key (keys=40, expected=80)
[  131.218075][ T9370] tap0: tun_chr_ioctl cmd 1074025677
[  131.224896][ T9370] tap0: linktype set to 0
[  131.242999][ T9374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1067'.
[  131.537556][ T9401] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  131.554682][ T9401] team0: Port device team_slave_0 removed
[  131.567739][ T9401] team0: Port device team_slave_1 removed
[  131.570414][ T9401] batman_adv: batadv0: Removing interface: batadv_slave_0
[  131.589011][ T9401] batman_adv: batadv0: Removing interface: batadv_slave_1
[  131.606487][ T9401] bond0: (slave wlan0): Releasing active interface
[  131.620651][ T9401] bond2: (slave bridge1): Releasing active interface
[  131.633991][ T9401] bond3: (slave bridge2): Releasing active interface
[  131.645118][ T9401] bond6: left allmulticast mode
[  131.647222][ T9401] bridge3: port 1(bond6) entered disabled state
[  131.655165][ T9401] bond7: (slave bridge4): Releasing active interface
[  131.663808][ T9401] bond8: (slave bridge0): Releasing active interface
[  131.670896][ T9401] bond9: (slave bridge5): Releasing active interface
[  131.678663][ T9401] bond10: (slave bridge6): Releasing active interface
[  131.687114][ T9401] bond11: (slave bridge8): Releasing active interface
[  131.720267][ T9411] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2
[  131.734914][ T9413] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  131.749395][ T9401] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  131.757669][ T9401] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  132.517320][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.555912][ T9471] lo speed is unknown, defaulting to 1000
[  132.767001][ T9482] pim6reg: entered allmulticast mode
[  132.774785][ T9482] pim6reg: left allmulticast mode
[  132.793639][ T9483] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.820274][ T9483] syzkaller0: entered promiscuous mode
[  132.823268][ T9483] syzkaller0: entered allmulticast mode
[  134.234234][ T9490] tipc: Resetting bearer <eth:syzkaller0>
[  134.248025][ T9480] tipc: Resetting bearer <eth:syzkaller0>
[  134.270966][ T9480] tipc: Disabling bearer <eth:syzkaller0>
[  134.337351][ T9497] ==================================================================
[  134.339975][ T9497] BUG: KASAN: use-after-free in xfrm_alloc_spi+0x570/0xf30
[  134.342735][ T9497] Read of size 4 at addr ffff888034cd49c4 by task syz.3.1106/9497
[  134.346341][ T9497] 
[  134.347771][ T9497] CPU: 1 UID: 0 PID: 9497 Comm: syz.3.1106 Not tainted syzkaller #0 PREEMPT(full) 
[  134.347796][ T9497] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  134.347806][ T9497] Call Trace:
[  134.347815][ T9497]  <TASK>
[  134.347825][ T9497]  dump_stack_lvl+0x189/0x250
[  134.347850][ T9497]  ? __kasan_check_byte+0x12/0x40
[  134.347877][ T9497]  ? __pfx_dump_stack_lvl+0x10/0x10
[  134.347895][ T9497]  ? lock_release+0x4b/0x3e0
[  134.347924][ T9497]  ? __virt_addr_valid+0x4a5/0x5c0
[  134.347951][ T9497]  print_report+0xca/0x240
[  134.347967][ T9497]  ? xfrm_alloc_spi+0x570/0xf30
[  134.347985][ T9497]  kasan_report+0x118/0x150
[  134.348008][ T9497]  ? xfrm_alloc_spi+0x570/0xf30
[  134.348025][ T9497]  xfrm_alloc_spi+0x570/0xf30
[  134.348041][ T9497]  ? xfrm_alloc_spi+0x2a0/0xf30
[  134.348064][ T9497]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  134.348079][ T9497]  ? xfrm_find_acq+0x87/0xa0
[  134.348097][ T9497]  xfrm_alloc_userspi+0x70b/0xc90
[  134.348122][ T9497]  ? apparmor_capable+0x137/0x1b0
[  134.348140][ T9497]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  134.348158][ T9497]  ? __nla_parse+0x40/0x60
[  134.348182][ T9497]  xfrm_user_rcv_msg+0x7a3/0xab0
[  134.348202][ T9497]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  134.348229][ T9497]  ? __pfx___mutex_trylock_common+0x10/0x10
[  134.348245][ T9497]  ? rcu_is_watching+0x15/0xb0
[  134.348259][ T9497]  ? trace_contention_end+0x39/0x120
[  134.348284][ T9497]  ? __mutex_lock+0x335/0x1350
[  134.348301][ T9497]  netlink_rcv_skb+0x208/0x470
[  134.348325][ T9497]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  134.348343][ T9497]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  134.348369][ T9497]  ? netlink_deliver_tap+0x2e/0x1b0
[  134.348388][ T9497]  ? netlink_deliver_tap+0x2e/0x1b0
[  134.348408][ T9497]  xfrm_netlink_rcv+0x79/0x90
[  134.348425][ T9497]  netlink_unicast+0x82f/0x9e0
[  134.348446][ T9497]  ? __pfx_netlink_unicast+0x10/0x10
[  134.348463][ T9497]  ? netlink_sendmsg+0x642/0xb30
[  134.348474][ T9497]  ? skb_put+0x11b/0x210
[  134.348489][ T9497]  netlink_sendmsg+0x805/0xb30
[  134.348504][ T9497]  ? __pfx_netlink_sendmsg+0x10/0x10
[  134.348517][ T9497]  ? aa_sock_msg_perm+0xf1/0x1d0
[  134.348530][ T9497]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  134.348584][ T9497]  ? __pfx_netlink_sendmsg+0x10/0x10
[  134.348600][ T9497]  __sock_sendmsg+0x21c/0x270
[  134.348622][ T9497]  ____sys_sendmsg+0x505/0x830
[  134.348639][ T9497]  ? __pfx_____sys_sendmsg+0x10/0x10
[  134.348657][ T9497]  ? import_iovec+0x74/0xa0
[  134.348673][ T9497]  ___sys_sendmsg+0x21f/0x2a0
[  134.348689][ T9497]  ? __pfx____sys_sendmsg+0x10/0x10
[  134.348715][ T9497]  ? __fget_files+0x2a/0x420
[  134.348736][ T9497]  ? __fget_files+0x3a0/0x420
[  134.348758][ T9497]  __x64_sys_sendmsg+0x19b/0x260
[  134.348774][ T9497]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  134.348791][ T9497]  ? rcu_is_watching+0x15/0xb0
[  134.348806][ T9497]  ? do_syscall_64+0xbe/0x3b0
[  134.348821][ T9497]  do_syscall_64+0xfa/0x3b0
[  134.348832][ T9497]  ? lockdep_hardirqs_on+0x9c/0x150
[  134.348851][ T9497]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.348865][ T9497]  ? exc_page_fault+0x9f/0xf0
[  134.348883][ T9497]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.348897][ T9497] RIP: 0033:0x7f6174d8ebe9
[  134.348912][ T9497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  134.348925][ T9497] RSP: 002b:00007f6175cab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  134.348943][ T9497] RAX: ffffffffffffffda RBX: 00007f6174fc5fa0 RCX: 00007f6174d8ebe9
[  134.348955][ T9497] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000009
[  134.348964][ T9497] RBP: 00007f6174e11e19 R08: 0000000000000000 R09: 0000000000000000
[  134.348973][ T9497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  134.348982][ T9497] R13: 00007f6174fc6038 R14: 00007f6174fc5fa0 R15: 00007ffdc5b9e828
[  134.349000][ T9497]  </TASK>
[  134.349006][ T9497] 
[  134.481350][ T9497] The buggy address belongs to the physical page:
[  134.483436][ T9497] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888034cd5c00 pfn:0x34cd4
[  134.486598][ T9497] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  134.489052][ T9497] raw: 00fff00000000000 ffffea00009ed408 ffffea00009c4f08 0000000000000000
[  134.492067][ T9497] raw: ffff888034cd5c00 0000000000100000 00000000ffffffff 0000000000000000
[  134.495172][ T9497] page dumped because: kasan: bad access detected
[  134.497504][ T9497] page_owner tracks the page as freed
[  134.499414][ T9497] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9114, tgid 9112 (syz.3.988), ts 125591819255, free_ts 131527795429
[  134.505984][ T9497]  post_alloc_hook+0x240/0x2a0
[  134.507454][ T9497]  get_page_from_freelist+0x21e4/0x22c0
[  134.509348][ T9497]  __alloc_frozen_pages_noprof+0x181/0x370
[  134.511146][ T9497]  alloc_pages_mpol+0x232/0x4a0
[  134.512693][ T9497]  allocate_slab+0x8a/0x370
[  134.514097][ T9497]  ___slab_alloc+0xbeb/0x1410
[  134.515512][ T9497]  __kmalloc_noprof+0x305/0x4f0
[  134.516963][ T9497]  ops_init+0x7b/0x5c0
[  134.518302][ T9497]  setup_net+0x10c/0x320
[  134.519639][ T9497]  copy_net_ns+0x31b/0x4d0
[  134.521018][ T9497]  create_new_namespaces+0x3f3/0x720
[  134.522693][ T9497]  unshare_nsproxy_namespaces+0x11c/0x170
[  134.524440][ T9497]  ksys_unshare+0x4c8/0x8c0
[  134.526068][ T9497]  __x64_sys_unshare+0x38/0x50
[  134.527833][ T9497]  do_syscall_64+0xfa/0x3b0
[  134.529418][ T9497]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.531240][ T9497] page last free pid 5849 tgid 5849 stack trace:
[  134.533508][ T9497]  __free_frozen_pages+0xbc4/0xd30
[  134.535409][ T9497]  __put_partials+0x156/0x1a0
[  134.537021][ T9497]  ___slab_alloc+0x4bd/0x1410
[  134.538568][ T9497]  __kmalloc_node_noprof+0x2fd/0x4e0
[  134.540523][ T9497]  allocate_slab+0x16a/0x370
[  134.542228][ T9497]  ___slab_alloc+0xbeb/0x1410
[  134.544028][ T9497]  kmem_cache_alloc_noprof+0x283/0x3c0
[  134.546193][ T9497]  anon_vma_clone+0xb8/0x4f0
[  134.548028][ T9497]  anon_vma_fork+0x79/0x500
[  134.549640][ T9497]  dup_mmap+0x9eb/0x1ac0
[  134.551106][ T9497]  copy_mm+0x13c/0x4b0
[  134.552385][ T9497]  copy_process+0x1706/0x3c00
[  134.553838][ T9497]  kernel_clone+0x21e/0x840
[  134.555235][ T9497]  __x64_sys_clone+0x18b/0x1e0
[  134.556722][ T9497]  do_syscall_64+0xfa/0x3b0
[  134.558338][ T9497]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.560195][ T9497] 
[  134.560941][ T9497] Memory state around the buggy address:
[  134.562678][ T9497]  ffff888034cd4880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  134.565136][ T9497]  ffff888034cd4900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  134.567683][ T9497] >ffff888034cd4980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  134.570094][ T9497]                                            ^
[  134.572016][ T9497]  ffff888034cd4a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  134.574424][ T9497]  ffff888034cd4a80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  134.576900][ T9497] ==================================================================
[  134.579679][ T9497] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  134.581985][ T9497] CPU: 1 UID: 0 PID: 9497 Comm: syz.3.1106 Not tainted syzkaller #0 PREEMPT(full) 
[  134.584801][ T9497] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  134.587975][ T9497] Call Trace:
[  134.589040][ T9497]  <TASK>
[  134.589975][ T9497]  dump_stack_lvl+0x99/0x250
[  134.591377][ T9497]  ? __asan_memcpy+0x40/0x70
[  134.592811][ T9497]  ? __pfx_dump_stack_lvl+0x10/0x10
[  134.594428][ T9497]  ? __pfx__printk+0x10/0x10
[  134.595829][ T9497]  vpanic+0x281/0x750
[  134.597110][ T9497]  ? __pfx_vpanic+0x10/0x10
[  134.598557][ T9497]  ? irqentry_exit+0x74/0x90
[  134.599985][ T9497]  panic+0xb9/0xc0
[  134.601158][ T9497]  ? __pfx_panic+0x10/0x10
[  134.602584][ T9497]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  134.604406][ T9497]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  134.606183][ T9497]  ? xfrm_alloc_spi+0x570/0xf30
[  134.607722][ T9497]  check_panic_on_warn+0x89/0xb0
[  134.609222][ T9497]  ? xfrm_alloc_spi+0x570/0xf30
[  134.610748][ T9497]  end_report+0x78/0x160
[  134.612059][ T9497]  kasan_report+0x129/0x150
[  134.613450][ T9497]  ? xfrm_alloc_spi+0x570/0xf30
[  134.614943][ T9497]  xfrm_alloc_spi+0x570/0xf30
[  134.616374][ T9497]  ? xfrm_alloc_spi+0x2a0/0xf30
[  134.617932][ T9497]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  134.619500][ T9497]  ? xfrm_find_acq+0x87/0xa0
[  134.620931][ T9497]  xfrm_alloc_userspi+0x70b/0xc90
[  134.622460][ T9497]  ? apparmor_capable+0x137/0x1b0
[  134.624036][ T9497]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  134.625759][ T9497]  ? __nla_parse+0x40/0x60
[  134.627184][ T9497]  xfrm_user_rcv_msg+0x7a3/0xab0
[  134.628739][ T9497]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  134.630436][ T9497]  ? __pfx___mutex_trylock_common+0x10/0x10
[  134.632206][ T9497]  ? rcu_is_watching+0x15/0xb0
[  134.633759][ T9497]  ? trace_contention_end+0x39/0x120
[  134.635344][ T9497]  ? __mutex_lock+0x335/0x1350
[  134.636803][ T9497]  netlink_rcv_skb+0x208/0x470
[  134.638362][ T9497]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  134.640026][ T9497]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  134.641872][ T9497]  ? netlink_deliver_tap+0x2e/0x1b0
[  134.643485][ T9497]  ? netlink_deliver_tap+0x2e/0x1b0
[  134.645115][ T9497]  xfrm_netlink_rcv+0x79/0x90
[  134.646559][ T9497]  netlink_unicast+0x82f/0x9e0
[  134.648223][ T9497]  ? __pfx_netlink_unicast+0x10/0x10
[  134.649991][ T9497]  ? netlink_sendmsg+0x642/0xb30
[  134.651469][ T9497]  ? skb_put+0x11b/0x210
[  134.652772][ T9497]  netlink_sendmsg+0x805/0xb30
[  134.654261][ T9497]  ? __pfx_netlink_sendmsg+0x10/0x10
[  134.655910][ T9497]  ? aa_sock_msg_perm+0xf1/0x1d0
[  134.657599][ T9497]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  134.659234][ T9497]  ? __pfx_netlink_sendmsg+0x10/0x10
[  134.660863][ T9497]  __sock_sendmsg+0x21c/0x270
[  134.662342][ T9497]  ____sys_sendmsg+0x505/0x830
[  134.664126][ T9497]  ? __pfx_____sys_sendmsg+0x10/0x10
[  134.666021][ T9497]  ? import_iovec+0x74/0xa0
[  134.667724][ T9497]  ___sys_sendmsg+0x21f/0x2a0
[  134.669226][ T9497]  ? __pfx____sys_sendmsg+0x10/0x10
[  134.671204][ T9497]  ? __fget_files+0x2a/0x420
[  134.673005][ T9497]  ? __fget_files+0x3a0/0x420
[  134.674801][ T9497]  __x64_sys_sendmsg+0x19b/0x260
[  134.676692][ T9497]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  134.678717][ T9497]  ? rcu_is_watching+0x15/0xb0
[  134.680569][ T9497]  ? do_syscall_64+0xbe/0x3b0
[  134.682431][ T9497]  do_syscall_64+0xfa/0x3b0
[  134.684187][ T9497]  ? lockdep_hardirqs_on+0x9c/0x150
[  134.686200][ T9497]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.688252][ T9497]  ? exc_page_fault+0x9f/0xf0
[  134.689715][ T9497]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.691555][ T9497] RIP: 0033:0x7f6174d8ebe9
[  134.692891][ T9497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  134.699726][ T9497] RSP: 002b:00007f6175cab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  134.702913][ T9497] RAX: ffffffffffffffda RBX: 00007f6174fc5fa0 RCX: 00007f6174d8ebe9
[  134.705943][ T9497] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000009
[  134.708598][ T9497] RBP: 00007f6174e11e19 R08: 0000000000000000 R09: 0000000000000000
[  134.711115][ T9497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  134.713884][ T9497] R13: 00007f6174fc6038 R14: 00007f6174fc5fa0 R15: 00007ffdc5b9e828
[  134.716599][ T9497]  </TASK>
[  134.718493][ T9497] Kernel Offset: disabled
[  134.720083][ T9497] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:21:33  Registers:
info registers vcpu 0

CPU#0
RAX=66634776c336e700 RBX=ffffffff9037bf01 RCX=66634776c336e700 RDX=ffffc90003c9eb01
RSI=ffffffff8be337e0 RDI=ffffffff8be337a0 RBP=dffffc0000000000 RSP=ffffc90003c9ea18
R8 =ffffc90003c9ecd0 R9 =0000000000000000 R10=ffffc90003c9ebf8 R11=fffff52000793d81
R12=ffffc90003c9ece0 R13=ffffffff8172c195 R14=ffffffff8e139ee0 R15=ffffffff8172c195
RIP=ffffffff8b79e167 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555573026500 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd2200f56c0 CR3=00000001091c8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f9673212e53
XMM06=0000000000000000 00007f9673212e4d XMM07=0000000000000000 00007f9673212e61
XMM08=0000000000000000 00007f9673212ee7 XMM09=0000000000000000 00007f9673212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001382 RDI=0000000000001383 RBP=00000000000003f8 RSP=ffffc9000600e9f0
R8 =ffff888107960237 R9 =1ffff11020f2c046 R10=dffffc0000000000 R11=ffffffff854f38c0
R12=dffffc0000000000 R13=ffffffff99afd8c3 R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f393c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f6175cab6c0 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000000017c0 CR3=0000000035e04000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ff00000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007f6175afd100 00007f6174f97460 XMM05=00007f6174f97478 00007f6174f974c0
XMM06=00007f6174f974b8 00007f6174f974b0 XMM07=00007f6174f974a8 00007f6174f974a0
XMM08=0000000000000000 00007f6174e12ee7 XMM09=0000000000000000 00007f6174e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
