last executing test programs:

1.910126438s ago: executing program 2 (id=1373):
unshare(0x6a040000)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r0}, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4040)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rxrpc_call\x00', r3}, 0x10)

1.596884449s ago: executing program 2 (id=1375):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x40}}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.596105647s ago: executing program 2 (id=1376):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 64)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (rerun: 64)
close(0x4) (async, rerun: 64)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
unshare(0x6a040000) (async, rerun: 64)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (rerun: 64)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r1=>0x0}) (async, rerun: 32)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff) (rerun: 32)
vmsplice(r0, 0x0, 0x0, 0x5) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)={0x2c, r2, 0x601, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}]}]}, 0x7c}}, 0x0) (async, rerun: 64)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) (async)
listen(r5, 0x0) (async)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async)
r7 = accept(r5, 0x0, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[], 0x6c}}, 0x0) (rerun: 64)

1.459520514s ago: executing program 1 (id=1378):
unshare(0x68040200)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async)
r2 = socket(0x1, 0x803, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) (async)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) (async)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xff}]}}}]}, 0x40}}, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r7], 0x50}}, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r8=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async)
unshare(0x12010200) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) (async)
socket$inet6(0xa, 0x3, 0x8)
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) (async)
setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f0000000000)=0x11800, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r13, 0x1, 0x1a, &(0x7f0000000380)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x28, 0x0, 0x0, 0x6ebf}, {0x6}]}, 0x10) (async)
sendmmsg$unix(r12, &(0x7f00000000c0), 0x3f, 0x0)

1.458763905s ago: executing program 2 (id=1379):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
unshare(0x6a040000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a300000000014000000020a0300000000000000000002000003140000001100010000000000000000000000000a187b639904240561e0b40fc7cf272a8c0d2c243cb41c4c5756d5a706f03839db5356ed1f7c498ef773120872b92cda58384e329ca65b12cf45072d05fb4b984251c3c7"], 0x68}}, 0x0)
syz_emit_ethernet(0xe6, &(0x7f00000009c0)={@local, @local, @val, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0xa8, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00\x00@', 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@routing={0x2b}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}]}, @srh={0x0, 0x0, 0x4, 0x0, 0x0, 0x20}, @dstopts={0x4, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x34}, @ra={0x5, 0x2, 0x8e}]}], "cc9d4b7cf8a03c8f14bc0f8d97168aff37973da7dd81885022357e50f5039b0faacecdb716b1fb28ed5dd8f9099c1045840bc6f29f1793debc23b1f557c2b9e7"}}}}}}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x50)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x3fffe, 0x0, r1, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300000000000035090100000000009500000000000000bf9800000000000056080000000000008500000007000000b700000000000000950000000000000032224fe8f63a7969f662cebb579e40799c59065d7b4376eb930400000000000000caec85b6d4d9b2246ac241f8f29438966a38aad1d4a4038d68841ea3bbfdea87ae7168f29a9e87159b31aae07f1c8bad2513b45e018163649bf36200"/182], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xf2e8a000)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
epoll_create1(0x0)
sendmmsg$inet6(r3, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="9610dabc9faf3e977f158162eb949442935bc4535e3e7e8517b802e00b2967e075d527f2330a55a0a097a764ee313ab141e5b4032792e7196eed8f5ef9b9053f2fbcd02ce382b769e4ecac3b073e353cfc44e907393c5d3bd7d8791bb91282f6a80253018daccac7732625524167df0395de", 0x72}], 0x1, &(0x7f0000000440)=[@rthdr_2292={{0x48, 0x29, 0x39, {0x5e, 0x6, 0x0, 0xc, 0x0, [@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x401}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0xc, 0x1, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x13}]}}}], 0x88}}], 0x1, 0x4048894)
socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000940), 0x10)
clock_gettime(0xfffffffffffffff1, &(0x7f0000000040))
close(0x3)
listen(0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c)

1.069152362s ago: executing program 1 (id=1383):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x2)
ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000000)={0x283, 0x1})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4) (async)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000) (async)
unshare(0x6a040000)
socket(0x8, 0x3, 0x0) (async)
socket(0x8, 0x3, 0x0)
socket(0x2, 0x80805, 0x0) (async)
socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1) (async)
close(r1)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x9)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
unshare(0x22020400)
unshare(0x24020400)
r3 = socket(0x1, 0x2, 0x0)
bind$unix(r3, 0x0, 0x0) (async)
bind$unix(r3, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x73, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c)
sendmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0) (async)
shutdown(r7, 0x0)
close(0x3)

1.068904932s ago: executing program 0 (id=1384):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r1, &(0x7f0000000580)=ANY=[], 0x8)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000400)=0xc)
sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)={0x3c, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid=r4}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x14, 0xf6, 0x0, 0x1, [@nested={0x10, 0x146, 0x0, 0x1, [@typed={0x8, 0x14a, 0x0, 0x0, @u32=0xb3}, @nested={0x4, 0x4d}]}]}]}]}, 0x3c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000001000)={0x1, &(0x7f0000000140)=[{0x6, 0x1, 0xfb}]})
write(r0, &(0x7f0000000080)="3aa0", 0x2)

917.897112ms ago: executing program 0 (id=1385):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0xa000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x3}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0xfff}]}}}]}, 0x4c}}, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r4, @ANYBLOB="000000000000000025000000a29b930b8f0100000018000000000000000f000000000000009500000000000000a7030000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00'}, 0x94)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000100)=0x82)
close(r7)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', <r8=>0x0})
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r8}, 0x90)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, 0x4100}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r9}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}]}]}, 0x34}}, 0x4008000)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="09052cbd7000fbdbdf250300000003000000000000000a000000e0b829330b0f458c63bc5fca4a013f104cec37b5fa42c361a6a1587db19aff1e89d67463c8eff962992819f9120aecebcacd6d7e8714a5a391a6"], 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x40080d0)
r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="f4fffcffffff85200004382f72336d0100000032811600350a00000d6f3b"], &(0x7f00000001c0)='syzkaller\x00', 0xa3e, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x8, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x9}, 0x94)
r13 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440), 0x2, 0x0)
ppoll(&(0x7f0000000480)=[{r0, 0x4c0}, {r10, 0x8229}, {r12, 0x200}, {r13, 0x9785}], 0x4, &(0x7f00000004c0)={0x0, 0x989680}, &(0x7f0000000500)={[0x7fffffff]}, 0x8)
r14 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'})
r15 = socket$nl_generic(0x10, 0x3, 0x10)
r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r17=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r16, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r17, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc000008000900050000000800070098010000200001"], 0x234}}, 0x0)

912.238114ms ago: executing program 2 (id=1386):
r0 = socket(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000003200)=@name={0x1e, 0x2, 0x1, {{0x2, 0x3}}}, 0x10) (async, rerun: 64)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) (async, rerun: 64)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="a00000001a00010000000000000000001c140000000079"], 0xa0}}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r3, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa8}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4050)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r7 = socket$kcm(0x2, 0xa, 0x2) (async)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r8, 0x0, 0xd}, 0x18) (async)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r6, &(0x7f0000000340)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x4f1c, 0x1b59, 0x8}}}}}}}, 0x42) (async)
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001800)=ANY=[@ANYBLOB="5f64818d0216756d1c992800000029df7119cd535be7ac74b349d1da613f5dfc13c162b9d99b21787ab2ff6e051916c75c766b8e1b7895590000000000fde400007fab4b584df48e600442bccdbd0e532cbd9ce254768d9ebece231792a79f4794842598e59d4b2dde51f2777f7640bdf996e84f39f6a375f82a5fcd0e835528e0c666a2d219eabef98e0d6c7a4ebd5e535a923ec7a48f94c1cae598953a665d5d62abe0b0d1661a8469985cb11a24b7186464700c2d131619aa173cacca57a5f86056393e3538bb", @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf2501000000080001007c0000000c0099000000000025000000"], 0x28}, 0x1, 0x0, 0x0, 0x20044005}, 0x4000080) (async)
recvmsg$unix(r0, &(0x7f0000000480)={&(0x7f0000000280), 0x6e, &(0x7f0000000400)=[{&(0x7f0000000380)=""/105, 0x69}], 0x1, &(0x7f0000001780)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x68}, 0x40010140)
sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea) (async)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000001900)=ANY=[@ANYBLOB="d108e35dbde350cef3e81eb6f63835fcc4835ecaffc9ad761ea5e4d21f7c3be7f05e1da6563fe8d0d0cf64000d4b17203de453d66c3321e286b337454cbb9e068b307448e746d23f697d8301448db0b1083d243a0ba3f860cf4c7506d868743b6e588cec0a8411a91afa3ccf7d58a5d7fbc789c3d2b92cd07c3854ca07907f1567d9bba85c9650b091cff25543b7e718ad5561fb6859c0d09410cc4cedd1a687bbdd63d0a3ff9f7ff4b7773a1cb177232d0f41522bf07ba4d6f2d5d0c794250ef39e2aa4b7ff17c24e2cfd0263e17b3d5f8aace4dba8c8ea635c23176de544ec3c8cc9867f0a12c2d3e2b68c7fe37f50ea23514bf8029c38c6b583"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0xfffffffffffffd0c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rxrpc_conn\x00', r9}, 0x18) (async)
r10 = socket$l2tp6(0xa, 0x2, 0x73)
sendto$inet6(r10, &(0x7f0000000780)="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", 0x1000, 0x40000, &(0x7f0000000040)={0xa, 0x4e20, 0x58c, @remote, 0x9e2}, 0x1c) (async)
unshare(0x62040200)

630.371775ms ago: executing program 0 (id=1387):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000008c0)=0x400002)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000001a950000000bf62d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x2, &(0x7f00000000c0)=[{0x48, 0x7, 0x29}, {0x6, 0xf8}]})
ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000080)=0x9)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000250001002cbdd2cb2d569f40ae0c2508"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x10)
write(r0, &(0x7f0000000280)="4591", 0x2)

629.605449ms ago: executing program 2 (id=1388):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x828000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10008000}, 0x40008)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r3, 0xfffffffc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @local, @val, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x10, 0x3a, 0x0, @private0, @mcast2, {[], @ni={0x1d0899e851774393, 0x0, 0x0, 0x9, 0x5, 0xba}}}}}}, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000140000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000340)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4)
sendmsg$unix(r9, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
recvfrom$inet6(r3, &(0x7f00000003c0)=""/237, 0xed, 0x2000, &(0x7f00000001c0)={0xa, 0x4e23, 0x7a0090cb, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x3d95a577}, 0x1c)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r13=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r12, 0x84, 0x9, &(0x7f0000000080)={r13, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x2, 0x80000003, 0x4, 0xe2d8f2eb1d010935, 0x5, 0x9}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000180)={0x1, 0xb7, 0x4, 0xe, 0x0, 0x6, 0x6, 0x1ff, r13}, 0x20)
sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x100}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x28}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={0x3c, r2, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000080)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1, 0x0, &(0x7f0000000000)='{', 0x0, 0x2, 0x0, 0x48}, 0x50)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)

530.00917ms ago: executing program 0 (id=1389):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000a000002c0012800b00010062726964676500001c0002800c002100030000c8844fa52409b7a39da842fb9d12300000000c002000ff0f000000000000"], 0x4c}}, 0x4)

529.278279ms ago: executing program 1 (id=1390):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r0}, 0x38)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x4000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rxrpc_conn\x00', r3}, 0x18)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0)
unshare(0x62040200)

438.693378ms ago: executing program 0 (id=1391):
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x809, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x40810, 0xa03}, [@IFLA_GROUP={0x8, 0x1b, 0xe}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x0)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'veth1_to_team\x00'}}, 0x1e)
r2 = socket$pppoe(0x18, 0x1, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r4)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f0000000140)={r9, 0x4}, 0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000140)={0x9, 0x8104, 0x8000, 0x80, r9}, &(0x7f0000000180)=0x10)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r10, 0x29, 0x48, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ce5d508f"], 0x18)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01600000000000000100077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004200000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x80}, 0x0)
connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'geneve0\x00'}}, 0x1e)
connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x0, @remote, 'macvlan1\x00'}}, 0x1e)

438.101899ms ago: executing program 0 (id=1392):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYRESHEX], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x786ba9af, @mcast1, 0x7}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000580)="69b1cd1aa3b6b202915f0c2951725031cb90f8c0c68e6a62e5c9fe7f7b7f2d81acf1e3faaa1fccb4f3746804283c0f71c178f3f2f232c8b5f141f6cdb4607e7e08343a0de825412157fdc9b1ef59aa5126767d5568eefb4c274d539ead6f6f87cd926a6b970176e6e667c36d0dccd243494b01fc37dc56cdf4141d95", 0x7c}], 0x1, &(0x7f0000000a80)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xbf}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x1c}}}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffc00}}], 0x70}}], 0x2, 0x2400c044) (async)
shutdown(r1, 0x1) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, 0x0) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
recvmmsg(r3, &(0x7f0000000480), 0x0, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
recvfrom(r3, 0x0, 0x0, 0x2000, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4, 0x4, 0x3}}, 0x80) (async)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000b00)={0x3fc, r7, 0x1, 0x200800, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x3d4, 0x8, 0x0, 0x1, [{0x3d0, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xd08}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x3a0, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}]}]}]}]}, 0x3fc}, 0x1, 0x500000000000000, 0x0, 0x4084}, 0x20000010) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async)
unshare(0x62040200)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r4, 0x4) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_CONNECT(r8, 0x0, 0x4010) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x0) (async)
nanosleep(0x0, 0x0)

347.763817ms ago: executing program 1 (id=1393):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000040)={0x10, 0x0, "44456570ec44a7731addafebdf4d61e7"})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r1 = socket(0x8, 0x3, 0x0)
ioctl$sock_netrom_SIOCADDRT(r1, 0x61f0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x2, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0x3, 0x7}, {0x5}}, [@TCA_RATE={0x6, 0x5, {0x71, 0x3f}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffff000}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008080}, 0x880)

119.932998ms ago: executing program 1 (id=1394):
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
socket$inet_mptcp(0x2, 0x1, 0x106)
unshare(0x6a040000)
r0 = socket(0x27, 0x5, 0x3ff)
readv(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'sit0\x00', &(0x7f00000004c0)={'syztnl0\x00', <r1=>0x0, 0x7800, 0x8000, 0x9, 0x10, {{0x5, 0x4, 0x1, 0x12, 0x14, 0x67, 0x0, 0x9, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x3b}}}}})
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001b40)=ANY=[@ANYBLOB="8100000057a21f730ebbca22a7d240b5df4ea7d8", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1108}, 0x1, 0x0, 0x0, 0x28000}, 0x20000004)
syz_open_procfs$namespace(0x0, 0x0)
unshare(0x6a040000)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r3, 0x1)
shutdown(r3, 0x1)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0500000004000000060000000400000000008000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRESDEC=r3, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="000000000000000000000100000100000997c1070000000000006ef419c50800000000000000"], 0x48)
accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000180)=0x60, 0x80800)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000c00038004000380040001"], 0x38}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r9, 0x0, 0x0)

0s ago: executing program 1 (id=1395):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x20, @local}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
r2 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xfffd, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d6, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x0, 0x0, 0x0, 0x2}}, 0xe8)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x9, @loopback}, 0x1c)
writev(r2, &(0x7f0000000600)=[{&(0x7f0000000180)="d2", 0x1}], 0x1)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
close(r3)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6(0xa, 0x3, 0x7)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
shutdown(r3, 0x0)
recvmmsg(r3, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)
r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ac0)={r5, 0x58, &(0x7f0000000a40)}, 0x10)
recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=""/10, 0xa}, {&(0x7f0000000300)=""/143, 0x8f}, {&(0x7f00000005c0)=""/212, 0xd4}, {&(0x7f00000006c0)=""/135, 0x87}], 0x4, &(0x7f0000000240)=""/89, 0x59}, 0x4}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/191, 0xbf}], 0x1}, 0x9}], 0x2, 0x100, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r6, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400})
setsockopt$sock_int(r6, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4)
sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000080))
ioctl$PPPIOCSMRU1(r7, 0x40047452, &(0x7f0000000080)=0x7)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)=ANY=[@ANYBLOB="88010000", @ANYRES16=r8, @ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x40}, 0x4000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:32260' (ED25519) to the list of known hosts.
syzkaller login: [   57.659356][ T5825] cgroup: Unknown subsys name 'net'
[   57.788966][ T5825] cgroup: Unknown subsys name 'cpuset'
[   57.795715][ T5825] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.841337][ T5825] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   65.882710][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   65.895370][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   65.898500][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   65.904526][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   65.907775][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   65.968650][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   65.972583][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   65.976536][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   65.980196][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   65.996773][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   65.999634][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   66.016630][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   66.019909][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   66.036565][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   66.041082][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   66.168748][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   66.367759][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.370662][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.373414][ T5844] bridge_slave_0: entered allmulticast mode
[   66.377652][ T5844] bridge_slave_0: entered promiscuous mode
[   66.413149][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.416517][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.418822][ T5844] bridge_slave_1: entered allmulticast mode
[   66.421923][ T5844] bridge_slave_1: entered promiscuous mode
[   66.468144][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.471446][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   66.488892][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.524478][ T5844] team0: Port device team_slave_0 added
[   66.527019][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   66.533327][ T5844] team0: Port device team_slave_1 added
[   66.596825][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.599324][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.609664][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.651385][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.655822][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.666353][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.671203][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.674753][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.677596][ T5849] bridge_slave_0: entered allmulticast mode
[   66.680752][ T5849] bridge_slave_0: entered promiscuous mode
[   66.685469][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.687923][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.690389][ T5849] bridge_slave_1: entered allmulticast mode
[   66.694088][ T5849] bridge_slave_1: entered promiscuous mode
[   66.768200][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.771190][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.775133][ T5850] bridge_slave_0: entered allmulticast mode
[   66.779332][ T5850] bridge_slave_0: entered promiscuous mode
[   66.786204][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.789126][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.792601][ T5850] bridge_slave_1: entered allmulticast mode
[   66.796720][ T5850] bridge_slave_1: entered promiscuous mode
[   66.801363][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.807019][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.867830][ T5844] hsr_slave_0: entered promiscuous mode
[   66.871547][ T5844] hsr_slave_1: entered promiscuous mode
[   66.895467][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.902069][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.908091][ T5849] team0: Port device team_slave_0 added
[   66.944445][ T5849] team0: Port device team_slave_1 added
[   67.017294][ T5850] team0: Port device team_slave_0 added
[   67.027990][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.030930][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.041746][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.048597][ T5850] team0: Port device team_slave_1 added
[   67.057829][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.060789][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.072334][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.125517][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.128325][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.138600][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.164092][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.166962][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.177543][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.279730][ T5849] hsr_slave_0: entered promiscuous mode
[   67.282323][ T5849] hsr_slave_1: entered promiscuous mode
[   67.285842][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   67.287838][ T5849] Cannot create hsr debugfs directory
[   67.310491][ T5850] hsr_slave_0: entered promiscuous mode
[   67.319029][ T5850] hsr_slave_1: entered promiscuous mode
[   67.322110][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   67.324765][ T5850] Cannot create hsr debugfs directory
[   67.430378][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   67.465509][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   67.482504][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   67.512237][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   67.619992][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   67.628079][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   67.636715][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   67.643768][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   67.712085][ T5850] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   67.723291][ T5850] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   67.729903][ T5850] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   67.742969][ T5850] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   67.791073][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.845938][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   67.865323][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.867780][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.880972][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.892385][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.895494][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.927255][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   67.950210][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.952986][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.956260][   T54] Bluetooth: hci0: command tx timeout
[   67.965473][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.973720][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.976881][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.027819][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   68.035075][   T54] Bluetooth: hci1: command tx timeout
[   68.052204][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.055216][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.071627][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   68.082278][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.085340][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.114584][   T54] Bluetooth: hci2: command tx timeout
[   68.197126][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.284326][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.289750][ T5844] veth0_vlan: entered promiscuous mode
[   68.306368][ T5844] veth1_vlan: entered promiscuous mode
[   68.350736][ T5844] veth0_macvtap: entered promiscuous mode
[   68.360485][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.371199][ T5844] veth1_macvtap: entered promiscuous mode
[   68.380456][ T5849] veth0_vlan: entered promiscuous mode
[   68.398633][ T5849] veth1_vlan: entered promiscuous mode
[   68.405033][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.426029][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.450765][ T5736] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.460607][ T5736] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.478823][ T5736] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.485226][ T5850] veth0_vlan: entered promiscuous mode
[   68.495486][ T5736] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.519946][ T5850] veth1_vlan: entered promiscuous mode
[   68.528488][ T5849] veth0_macvtap: entered promiscuous mode
[   68.541561][ T5849] veth1_macvtap: entered promiscuous mode
[   68.582697][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.585868][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.597757][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.632529][ T5850] veth0_macvtap: entered promiscuous mode
[   68.638433][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.646897][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.647772][ T5850] veth1_macvtap: entered promiscuous mode
[   68.649488][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.657072][ T5736] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.663562][ T5736] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.669004][ T5736] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.680775][ T5736] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.731995][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.732823][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.777667][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.803745][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.809603][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.813175][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.829652][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.840563][ T1297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.843824][ T1297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.327787][ T1297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.330244][ T1297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.577743][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.638419][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.724018][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.730459][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.828126][ T5921] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3'.
[   70.026203][ T5936] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   70.039875][ T5937] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   70.044350][   T54] Bluetooth: hci0: command tx timeout
[   70.124361][   T54] Bluetooth: hci1: command tx timeout
[   70.173351][ T5941] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.177485][ T5941] batadv_slave_0: entered promiscuous mode
[   70.185889][ T5937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8'.
[   70.189728][ T5941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8'.
[   70.194246][   T54] Bluetooth: hci2: command tx timeout
[   70.216679][ T5936] netlink: 428 bytes leftover after parsing attributes in process `syz.2.8'.
[   70.220742][ T5936] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8'.
[   70.381626][ T5943] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10'.
[   70.391211][ T5943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10'.
[   70.466720][ T5952] netlink: 100 bytes leftover after parsing attributes in process `syz.2.14'.
[   70.547906][ T5957] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   70.562145][ T5956] sit1: entered promiscuous mode
[   70.571888][ T5909] IPVS: starting estimator thread 0...
[   70.649597][ T5957] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.653361][ T5957] batadv_slave_1: entered promiscuous mode
[   70.664434][ T5958] IPVS: using max 64 ests per chain, 153600 per kthread
[   70.668591][ T5957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16'.
[   70.680277][ T5957] netlink: 428 bytes leftover after parsing attributes in process `syz.2.16'.
[   70.902784][ T5976] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   71.276431][ T5991] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   71.320338][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.323958][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.348032][ T5991] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.352815][ T5991] batadv_slave_0: entered promiscuous mode
[   71.437302][ T5993] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   71.463556][ T5993] Zero length message leads to an empty skb
[   71.749871][ T6011] netlink: 'syz.0.30': attribute type 13 has an invalid length.
[   71.753004][ T6011] netlink: 'syz.0.30': attribute type 17 has an invalid length.
[   71.844517][ T6011] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   72.194532][   T54] Bluetooth: hci1: command tx timeout
[   72.274288][   T54] Bluetooth: hci2: command tx timeout
[   72.520957][ T6037] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0018 with DS=0x3
[   72.818729][ T6020] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   73.219562][ T6057] netlink: 'syz.2.41': attribute type 9 has an invalid length.
[   73.537478][ T6069] syz.1.44 uses obsolete (PF_INET,SOCK_PACKET)
[   73.785065][ T6082] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.274410][   T54] Bluetooth: hci1: command tx timeout
[   74.290643][ T6101] vlan2: entered promiscuous mode
[   74.292930][ T6101] vlan2: entered allmulticast mode
[   74.295682][ T6101] hsr_slave_1: entered allmulticast mode
[   74.354319][   T54] Bluetooth: hci2: command tx timeout
[   74.598818][ T6106] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   74.942664][ T6122] __nla_validate_parse: 15 callbacks suppressed
[   74.942682][ T6122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.56'.
[   75.234551][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.58'.
[   75.482290][ T6139] netlink: 20 bytes leftover after parsing attributes in process `syz.1.59'.
[   75.508033][ T6139] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.528265][ T6135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.59'.
[   75.538263][ T6135] netlink: 428 bytes leftover after parsing attributes in process `syz.1.59'.
[   75.547645][ T6146] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   75.552219][ T6135] netlink: 32 bytes leftover after parsing attributes in process `syz.1.59'.
[   75.585331][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.62'.
[   75.711212][ T6147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.61'.
[   75.926186][ T6161] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   76.206392][ T6177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'.
[   76.236224][ T6170] netlink: 332 bytes leftover after parsing attributes in process `syz.1.66'.
[   77.266865][ T6202] syzkaller1: entered promiscuous mode
[   77.275967][ T6202] syzkaller1: entered allmulticast mode
[   77.733250][ T6222] syzkaller0: entered promiscuous mode
[   77.736542][ T6222] syzkaller0: entered allmulticast mode
[   78.071857][ T6237] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   78.806274][ T6226] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.810736][ T6226] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.820847][ T6226] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   78.901998][ T6240] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   78.983818][ T6241] warning: `syz.0.81' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   79.149949][ T6250] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   79.276658][ T6248] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   79.279792][ T5896] IPVS: starting estimator thread 0...
[   79.280574][ T6251] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   79.384506][ T6260] IPVS: using max 60 ests per chain, 144000 per kthread
[   80.182751][ T6298] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   80.261691][ T6298] batadv_slave_0: entered promiscuous mode
[   80.263815][ T6298] __nla_validate_parse: 8 callbacks suppressed
[   80.263826][ T6298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.94'.
[   80.271562][ T6298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.94'.
[   80.281151][ T6298] netlink: 428 bytes leftover after parsing attributes in process `syz.1.94'.
[   80.286642][ T6298] netlink: 32 bytes leftover after parsing attributes in process `syz.1.94'.
[   80.513194][ T6310] bridge_slave_0: left allmulticast mode
[   80.518926][ T6310] bridge_slave_0: left promiscuous mode
[   80.521992][ T6310] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.546653][ T6310] bridge_slave_1: left allmulticast mode
[   80.549359][ T6310] bridge_slave_1: left promiscuous mode
[   80.552384][ T6310] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.585868][ T6310] bond0: (slave bond_slave_0): Releasing backup interface
[   80.597013][ T6310] bond0: (slave bond_slave_1): Releasing backup interface
[   80.614360][ T6317] netlink: 44 bytes leftover after parsing attributes in process `syz.1.98'.
[   80.618601][ T6317] netlink: 43 bytes leftover after parsing attributes in process `syz.1.98'.
[   80.622463][ T6317] netlink: 43 bytes leftover after parsing attributes in process `syz.1.98'.
[   80.624709][ T6310] team0: Port device team_slave_0 removed
[   80.637600][ T6310] team0: Port device team_slave_1 removed
[   80.641318][ T6310] batman_adv: batadv0: Removing interface: batadv_slave_0
[   80.646666][ T6310] batman_adv: batadv0: Removing interface: batadv_slave_1
[   80.652639][ T6310] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   80.690863][ T6319] netlink: 24 bytes leftover after parsing attributes in process `syz.0.99'.
[   80.967970][ T6332] Bluetooth: MGMT ver 1.23
[   80.973002][ T6326] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[   80.985806][ T6326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.101'.
[   80.993028][ T6326] netlink: 532 bytes leftover after parsing attributes in process `syz.2.101'.
[   81.839836][ T6377] netlink: 'syz.0.115': attribute type 13 has an invalid length.
[   81.839901][ T6378] netlink: 'syz.0.115': attribute type 13 has an invalid length.
[   81.842372][ T6377] netlink: 'syz.0.115': attribute type 17 has an invalid length.
[   81.852428][ T6378] netlink: 'syz.0.115': attribute type 17 has an invalid length.
[   81.870618][ T6373] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input4
[   81.881945][ T6377] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   81.926161][ T6378] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   82.522104][ T6412] tipc: Started in network mode
[   82.524890][ T6412] tipc: Node identity 5217aaca6113, cluster identity 4711
[   82.528394][ T6412] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.549812][ T6412] tipc: Disabling bearer <eth:syzkaller0>
[   83.336617][ T6436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.389477][ T6459] netlink: 'syz.1.132': attribute type 2 has an invalid length.
[   84.400714][ T6459] : entered promiscuous mode
[   84.418854][ T6459] netlink: 'syz.1.132': attribute type 9 has an invalid length.
[   84.738947][ T6471] netlink: 'syz.1.135': attribute type 1 has an invalid length.
[   84.907917][ T6476] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   85.226209][ T6490] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   85.308652][ T6494] __nla_validate_parse: 7 callbacks suppressed
[   85.308663][ T6494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.141'.
[   85.316621][ T6494] netlink: 428 bytes leftover after parsing attributes in process `syz.2.141'.
[   85.319467][ T6494] netlink: 32 bytes leftover after parsing attributes in process `syz.2.141'.
[   85.385634][ T6496] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   85.396156][ T6497] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   85.473304][ T6502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.143'.
[   85.483335][ T6497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.143'.
[   85.578569][ T6508] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   85.619374][ T6510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.146'.
[   85.659921][ T6508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.145'.
[   85.668164][ T6508] netlink: 428 bytes leftover after parsing attributes in process `syz.2.145'.
[   85.671674][ T6513] netlink: 'syz.1.147': attribute type 13 has an invalid length.
[   85.671851][ T6508] netlink: 32 bytes leftover after parsing attributes in process `syz.2.145'.
[   85.675783][ T6512] netlink: 'syz.1.147': attribute type 13 has an invalid length.
[   85.675798][ T6512] netlink: 'syz.1.147': attribute type 17 has an invalid length.
[   85.717906][ T6512] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.720487][ T6512] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.722927][ T6512] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.725412][ T6512] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.743172][ T6512] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   85.758192][ T6513] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   86.001811][ T6530] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   86.129874][ T6535] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   86.475230][ T6551] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[   86.479563][ T6551] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[   86.682667][   T24] cfg80211: failed to load regulatory.db
[   86.707934][ T6566] netlink: 156 bytes leftover after parsing attributes in process `syz.2.158'.
[   86.782891][ T6568] bridge10: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   86.829550][ T6570] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   87.278870][ T6594] vlan2: entered promiscuous mode
[   87.280664][ T6594] vlan2: entered allmulticast mode
[   87.282340][ T6594] hsr_slave_1: entered allmulticast mode
[   87.589269][ T6610] sctp: [Deprecated]: syz.2.169 (pid 6610) Use of int in max_burst socket option deprecated.
[   87.589269][ T6610] Use struct sctp_assoc_value instead
[   88.050110][ T6618] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5
[   88.266625][ T6633] ieee802154 phy0 wpan0: encryption failed: -22
[   88.710248][ T6656] hsr_slave_1 (unregistering): left promiscuous mode
[   89.266500][ T6686] validate_nla: 2 callbacks suppressed
[   89.266538][ T6686] netlink: 'syz.0.188': attribute type 13 has an invalid length.
[   90.626242][ T6727] __nla_validate_parse: 17 callbacks suppressed
[   90.626253][ T6727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.197'.
[   90.654889][ T6727] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   90.862293][ T6743] netlink: 20 bytes leftover after parsing attributes in process `syz.1.199'.
[   90.866958][ T6732] netlink: 20 bytes leftover after parsing attributes in process `syz.1.199'.
[   90.910719][ T6746] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   90.950634][ T6748] netlink: 44 bytes leftover after parsing attributes in process `syz.0.202'.
[   90.980994][ T6752] netlink: 428 bytes leftover after parsing attributes in process `syz.2.201'.
[   90.985777][ T6752] netlink: 32 bytes leftover after parsing attributes in process `syz.2.201'.
[   91.020523][ T6754] netlink: 16 bytes leftover after parsing attributes in process `syz.1.203'.
[   91.122185][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.205'.
[   91.195574][ T6766] netlink: 'syz.2.207': attribute type 83 has an invalid length.
[   91.205195][ T6766] netlink: 'syz.2.207': attribute type 1 has an invalid length.
[   91.264950][ T6769] IPVS: set_ctl: invalid protocol: 37 0.0.0.0:20002
[   91.645797][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.213'.
[   91.753777][ T6788] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   91.829810][ T6788] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   91.848968][ T6788] batadv_slave_1: entered promiscuous mode
[   91.885712][ T6788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.214'.
[   91.966464][ T6792] netlink: 'syz.2.215': attribute type 13 has an invalid length.
[   91.969767][ T6792] netlink: 'syz.2.215': attribute type 17 has an invalid length.
[   92.077526][ T6792] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   92.258847][ T6792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.867092][ T6839] geneve2: entered promiscuous mode
[   93.531881][ T6863] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   93.964684][ T6890] netlink: 'syz.2.239': attribute type 1 has an invalid length.
[   94.392789][ T6916] sctp: [Deprecated]: syz.2.244 (pid 6916) Use of int in max_burst socket option.
[   94.392789][ T6916] Use struct sctp_assoc_value instead
[   94.533013][ T6918] 8021q: adding VLAN 0 to HW filter on device bond1
[   94.538014][ T6918] bond0: (slave bond1): Enslaving as an active interface with an up link
[   94.572974][ T6929] IPVS: Error joining to the multicast group
[   94.850229][ T5874] nci: nci_rx_work: unknown MT 0x1
[   94.856975][ T6936] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   94.995982][ T6949] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.066071][ T6949] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.218570][ T6949] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.290251][ T6949] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.390192][ T5886] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.409560][ T5874] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.431726][ T5874] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.452285][ T5874] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.643762][ T6966] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.716687][ T6970] netlink: 'syz.1.253': attribute type 83 has an invalid length.
[   95.909075][ T6981] __nla_validate_parse: 17 callbacks suppressed
[   95.909087][ T6981] netlink: 44 bytes leftover after parsing attributes in process `syz.2.255'.
[   97.453711][ T7019] netlink: 72 bytes leftover after parsing attributes in process `syz.1.262'.
[   97.500696][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.262'.
[   97.654085][ T7031] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.016293][ T7053] batadv_slave_1: entered promiscuous mode
[   98.119678][ T7052] batadv_slave_1: left promiscuous mode
[   98.211163][ T7065] bridge13: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   98.291509][ T7077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.276'.
[   98.305985][ T7077] netlink: 428 bytes leftover after parsing attributes in process `syz.2.276'.
[   98.308989][ T7077] netlink: 32 bytes leftover after parsing attributes in process `syz.2.276'.
[   98.527731][ T7091] pim6reg1: entered promiscuous mode
[   98.529673][ T7091] pim6reg1: entered allmulticast mode
[   98.910684][ T7109] bridge14: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   99.125766][ T7123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.288'.
[   99.141441][ T7123] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[   99.220275][ T7128] netlink: 32 bytes leftover after parsing attributes in process `syz.0.290'.
[   99.281818][ T7128] sctp: [Deprecated]: syz.0.290 (pid 7128) Use of struct sctp_assoc_value in delayed_ack socket option.
[   99.281818][ T7128] Use struct sctp_sack_info instead
[   99.290559][ T7128] sctp: [Deprecated]: syz.0.290 (pid 7128) Use of struct sctp_assoc_value in delayed_ack socket option.
[   99.290559][ T7128] Use struct sctp_sack_info instead
[   99.856558][ T7161] bridge15: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  100.047717][ T7168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.298'.
[  100.077855][ T7161] netlink: 428 bytes leftover after parsing attributes in process `syz.2.298'.
[  100.819784][ T7201] netlink: 'syz.0.307': attribute type 13 has an invalid length.
[  100.822259][ T7201] netlink: 'syz.0.307': attribute type 17 has an invalid length.
[  100.856993][ T7201] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  100.996888][ T7201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.626323][ T7231] netlink: 'syz.0.315': attribute type 13 has an invalid length.
[  101.629397][ T7231] netlink: 'syz.0.315': attribute type 17 has an invalid length.
[  101.648339][ T7231] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  101.846462][ T7231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.868728][ T7238] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:0
[  101.889439][ T7238] __nla_validate_parse: 2 callbacks suppressed
[  101.889461][ T7238] netlink: 20 bytes leftover after parsing attributes in process `syz.2.316'.
[  101.889532][ T7239] netlink: 20 bytes leftover after parsing attributes in process `syz.2.316'.
[  103.088765][ T7282] bridge16: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  103.187326][ T7282] batadv_slave_0: entered allmulticast mode
[  103.205422][ T7282] netlink: 428 bytes leftover after parsing attributes in process `syz.2.326'.
[  103.210968][ T7282] netlink: 32 bytes leftover after parsing attributes in process `syz.2.326'.
[  103.439333][ T7293] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  103.442090][ T7293] IPv6: NLM_F_CREATE should be set when creating new route
[  103.503195][ T7296] netlink: 'syz.0.331': attribute type 1 has an invalid length.
[  103.677776][ T7312] netlink: 348 bytes leftover after parsing attributes in process `syz.0.335'.
[  103.790918][ T7312] netlink: 16 bytes leftover after parsing attributes in process `syz.0.335'.
[  103.794565][ T7312] vcan0: Master is either lo or non-ether device
[  103.864046][ T7319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.336'.
[  103.871740][ T7319] bridge8: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  104.435289][ T7357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.343'.
[  104.859101][ T7377] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621
[  105.106417][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.353'.
[  105.110661][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.353'.
[  105.508353][ T7414] delete_channel: no stack
[  105.583239][ T7414] syzkaller0: entered promiscuous mode
[  105.601778][ T7414] syzkaller0: entered allmulticast mode
[  106.992528][ T7442] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  107.231404][ T7457] __nla_validate_parse: 6 callbacks suppressed
[  107.231417][ T7457] netlink: 36 bytes leftover after parsing attributes in process `syz.2.367'.
[  107.256075][ T7455] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.462125][ T7468] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  107.464772][ T7468] IPv6: NLM_F_CREATE should be set when creating new route
[  107.539945][ T7470] netlink: 'syz.2.370': attribute type 13 has an invalid length.
[  107.544725][ T7470] netlink: 'syz.2.370': attribute type 17 has an invalid length.
[  107.562898][ T7470] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  107.569394][ T7471] kthread_run failed with err -4
[  107.735439][ T7482] netlink: 'syz.0.374': attribute type 4 has an invalid length.
[  108.300965][ T7511] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6_vti0, syncid = 3, id = 0
[  108.678213][ T7525] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  108.712148][ T7527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.384'.
[  108.738480][ T7527] bridge9: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  108.930757][ T7534] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6
[  109.137729][ T7545] netlink: 240 bytes leftover after parsing attributes in process `syz.0.387'.
[  109.267629][ T7553] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  109.450329][ T7568] netlink: 'syz.1.394': attribute type 12 has an invalid length.
[  110.378085][ T7599] @: renamed from veth0_vlan (while UP)
[  110.423350][ T7601] pimreg: entered allmulticast mode
[  110.570996][ T7616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.405'.
[  110.583025][ T7616] bridge10: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  110.658145][ T7618] netlink: 16 bytes leftover after parsing attributes in process `syz.0.406'.
[  110.662677][ T7618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.406'.
[  110.672539][ T7618] netlink: 428 bytes leftover after parsing attributes in process `syz.0.406'.
[  110.676189][ T7619] netlink: 428 bytes leftover after parsing attributes in process `syz.0.406'.
[  110.679047][ T7619] netlink: 32 bytes leftover after parsing attributes in process `syz.0.406'.
[  110.687875][ T7618] netlink: 32 bytes leftover after parsing attributes in process `syz.0.406'.
[  111.489579][ T7656] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  112.466497][ T7710] netlink: 'syz.2.425': attribute type 13 has an invalid length.
[  112.469602][ T7710] netlink: 'syz.2.425': attribute type 17 has an invalid length.
[  112.489977][ T7710] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  112.496421][   T56] block nbd0: Receive control failed (result -32)
[  112.646474][ T7722] __nla_validate_parse: 5 callbacks suppressed
[  112.646492][ T7722] netlink: 72 bytes leftover after parsing attributes in process `syz.0.427'.
[  112.655207][ T7720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  112.659825][ T7718] netlink: 72 bytes leftover after parsing attributes in process `syz.0.427'.
[  113.047670][ T7728] sctp: [Deprecated]: syz.1.429 (pid 7728) Use of int in max_burst socket option.
[  113.047670][ T7728] Use struct sctp_assoc_value instead
[  113.106976][ T7729] netlink: 20 bytes leftover after parsing attributes in process `syz.0.428'.
[  113.111505][ T7729] netlink: 'syz.0.428': attribute type 4 has an invalid length.
[  113.179194][ T7728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.429'.
[  113.444659][ T7746] netlink: 28 bytes leftover after parsing attributes in process `syz.2.432'.
[  113.619575][ T7746] batadv_slave_0: left allmulticast mode
[  113.642039][ T7746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.432'.
[  113.680861][ T7746] netlink: 428 bytes leftover after parsing attributes in process `syz.2.432'.
[  113.694136][ T7746] netlink: 32 bytes leftover after parsing attributes in process `syz.2.432'.
[  114.577504][ T7792] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  114.630299][ T7792] netlink: 12 bytes leftover after parsing attributes in process `syz.0.439'.
[  114.770645][ T7798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.441'.
[  114.789515][ T7798] bridge17: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  115.514669][ T7807] syzkaller1: entered promiscuous mode
[  115.516963][ T7807] syzkaller1: entered allmulticast mode
[  115.796746][ T7817] netlink: 'syz.2.445': attribute type 13 has an invalid length.
[  115.807692][ T7817] netlink: 'syz.2.445': attribute type 17 has an invalid length.
[  115.830384][ T7817] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  115.989361][ T7817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  116.054508][ T7827] bridge11: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  116.840974][ T7850] sctp: [Deprecated]: syz.0.453 (pid 7850) Use of int in max_burst socket option.
[  116.840974][ T7850] Use struct sctp_assoc_value instead
[  118.192605][ T7925] __nla_validate_parse: 12 callbacks suppressed
[  118.192625][ T7925] netlink: 24 bytes leftover after parsing attributes in process `syz.1.465'.
[  118.219682][ T7928] netlink: 24 bytes leftover after parsing attributes in process `syz.1.465'.
[  118.638053][ T7975] netlink: 256 bytes leftover after parsing attributes in process `syz.2.467'.
[  118.974745][ T7988] netlink: 56 bytes leftover after parsing attributes in process `syz.1.469'.
[  119.406669][ T8000] netlink: 96 bytes leftover after parsing attributes in process `syz.1.471'.
[  119.578667][ T8008] netlink: 'syz.1.473': attribute type 4 has an invalid length.
[  119.582284][ T8008] netlink: 'syz.1.473': attribute type 4 has an invalid length.
[  119.718356][ T8010] netlink: 28 bytes leftover after parsing attributes in process `syz.1.474'.
[  119.912654][ T8010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.474'.
[  119.930206][ T8010] netlink: 428 bytes leftover after parsing attributes in process `syz.1.474'.
[  119.933036][ T8010] netlink: 32 bytes leftover after parsing attributes in process `syz.1.474'.
[  120.379291][ T7867] Set syz1 is full, maxelem 65536 reached
[  120.627665][ T8045] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  120.718981][ T8046] netlink: 20 bytes leftover after parsing attributes in process `syz.0.484'.
[  120.722108][ T8046] batadv_slave_0: entered allmulticast mode
[  120.730063][ T8046] batman_adv: batadv0: Interface activated: batadv_slave_0
[  120.884940][ T8051] bridge10: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  120.937824][ T8051] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  120.941030][ T8051] batadv_slave_0: left allmulticast mode
[  121.772972][ T8087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  122.302743][ T8113] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  122.429708][ T8127] netlink: 'syz.1.506': attribute type 17 has an invalid length.
[  122.438363][ T8125] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  122.502003][ T8129] netlink: 'syz.2.505': attribute type 7 has an invalid length.
[  122.506678][ T8127] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  122.972833][ T8137] batadv_slave_0: left promiscuous mode
[  122.978448][ T8137] batadv_slave_1: left promiscuous mode
[  123.066872][ T8137] geneve2: left promiscuous mode
[  123.101874][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.105874][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.132832][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.141564][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.215246][ T8135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  124.124239][ T8184] netlink: get zone limit has 8 unknown bytes
[  124.227834][ T8186] bridge18: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  124.472638][ T8191] __nla_validate_parse: 7 callbacks suppressed
[  124.472649][ T8191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.516'.
[  124.901930][ T8214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.522'.
[  124.924775][ T8214] netlink: 428 bytes leftover after parsing attributes in process `syz.1.522'.
[  124.944263][ T8214] netlink: 32 bytes leftover after parsing attributes in process `syz.1.522'.
[  125.982754][ T8251] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  126.003671][ T8247] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  126.022952][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.530'.
[  126.136536][ T8259] netlink: 240 bytes leftover after parsing attributes in process `syz.1.529'.
[  126.790016][ T8287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.537'.
[  126.866746][ T8293] netlink: 32 bytes leftover after parsing attributes in process `syz.1.538'.
[  126.870487][ T8293] netlink: 'syz.1.538': attribute type 9 has an invalid length.
[  126.873042][ T8293] netlink: 'syz.1.538': attribute type 7 has an invalid length.
[  126.878850][ T8293] netlink: 'syz.1.538': attribute type 8 has an invalid length.
[  126.883638][ T8293] netlink: 48 bytes leftover after parsing attributes in process `syz.1.538'.
[  127.421441][ T8308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.541'.
[  127.544864][ T8310] batadv_slave_0: entered promiscuous mode
[  127.848809][ T8329] bridge13: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  128.395970][ T8361] bridge20: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  128.561681][ T8370] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  130.498597][ T8430] __nla_validate_parse: 8 callbacks suppressed
[  130.498615][ T8430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.566'.
[  130.843590][ T8448] netlink: 24 bytes leftover after parsing attributes in process `syz.2.571'.
[  130.911584][ T8454] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.256218][ T8470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.577'.
[  131.262739][ T8470] netlink: 428 bytes leftover after parsing attributes in process `syz.1.577'.
[  131.268897][ T8470] netlink: 32 bytes leftover after parsing attributes in process `syz.1.577'.
[  131.407772][ T8487] netlink: 'syz.1.581': attribute type 1 has an invalid length.
[  131.696874][ T8498] syzkaller1: entered promiscuous mode
[  131.699292][ T8498] syzkaller1: entered allmulticast mode
[  131.712783][ T8500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.585'.
[  131.731963][ T8500] bridge12: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  131.830529][ T8502] netlink: 11 bytes leftover after parsing attributes in process `syz.1.584'.
[  132.758888][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.761519][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  133.523308][ T8552] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7
[  133.645860][ T8559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.596'.
[  133.677486][ T8561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.597'.
[  133.688799][ T8561] bridge14: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  133.737741][ T8563] bridge21: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  133.833155][ T8571] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  133.836071][ T8571] IPv6: NLM_F_CREATE should be set when creating new route
[  133.965315][ T8580] IPVS: stopping master sync thread 8581 ...
[  133.966109][ T8581] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  133.979091][ T8583] netlink: 28 bytes leftover after parsing attributes in process `syz.0.604'.
[  134.162690][ T8593] bridge22: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  134.277554][    C0] vcan0: j1939_tp_rxtimer: 0xffff888032b70400: rx timeout, send abort
[  134.777663][    C0] vcan0: j1939_tp_rxtimer: 0xffff888032b70000: rx timeout, send abort
[  134.781977][    C0] vcan0: j1939_tp_rxtimer: 0xffff888032b70400: abort rx timeout. Force session deactivation
[  134.888276][ T8622] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  135.280650][    C0] vcan0: j1939_tp_rxtimer: 0xffff888032b70000: abort rx timeout. Force session deactivation
[  135.461828][ T8647] ieee802154 phy0 wpan0: encryption failed: -22
[  135.509874][ T8650] __nla_validate_parse: 1 callbacks suppressed
[  135.509886][ T8650] netlink: 28 bytes leftover after parsing attributes in process `syz.2.621'.
[  135.668298][ T8662] netlink: 'syz.0.625': attribute type 11 has an invalid length.
[  135.670929][ T8662] netlink: 244 bytes leftover after parsing attributes in process `syz.0.625'.
[  136.147350][ T8685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.629'.
[  136.194897][ T8689] netlink: 'syz.1.630': attribute type 21 has an invalid length.
[  136.308334][ T8689] netlink: 156 bytes leftover after parsing attributes in process `syz.1.630'.
[  136.319014][ T8687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.628'.
[  136.339295][ T8689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.630'.
[  136.342979][ T8689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.630'.
[  136.346916][ T8689] netlink: 'syz.1.630': attribute type 18 has an invalid length.
[  136.518630][ T8696] netlink: 28 bytes leftover after parsing attributes in process `syz.2.631'.
[  136.759337][ T5846] Bluetooth: hci1: command 0x0405 tx timeout
[  136.926576][ T8712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.634'.
[  136.939518][ T8712] bridge23: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  137.306281][ T8725] netlink: 'syz.2.637': attribute type 9 has an invalid length.
[  137.318245][ T8725] netlink: 224 bytes leftover after parsing attributes in process `syz.2.637'.
[  137.505229][ T8730] netlink: 'syz.0.638': attribute type 12 has an invalid length.
[  137.651520][ T8740] netlink: 'syz.0.641': attribute type 2 has an invalid length.
[  138.850651][ T8772] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  139.009146][ T8780] bridge15: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  139.125992][ T8788] nbd: socks must be embedded in a SOCK_ITEM attr
[  139.128596][ T8788] block nbd1: shutting down sockets
[  139.350808][ T8800] can: request_module (can-proto-0) failed.
[  140.379159][ T8818] bridge16: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  140.448901][ T8818] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  140.451877][ T8818] batadv_slave_1: entered promiscuous mode
[  140.635835][ T8828] netlink: 'syz.0.663': attribute type 12 has an invalid length.
[  140.910954][ T8841] netlink: 'syz.1.666': attribute type 13 has an invalid length.
[  140.915353][ T8841] netlink: 'syz.1.666': attribute type 17 has an invalid length.
[  140.979776][ T8841] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  141.429577][ T8854] netlink: 'syz.2.669': attribute type 16 has an invalid length.
[  141.432551][ T8854] __nla_validate_parse: 8 callbacks suppressed
[  141.432564][ T8854] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.669'.
[  141.857517][ T8874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.673'.
[  143.288820][ T8930] bond0: entered promiscuous mode
[  143.291077][ T8930] bond_slave_0: entered promiscuous mode
[  143.293806][ T8930] bond_slave_1: entered promiscuous mode
[  143.298536][ T8930] bond1: entered promiscuous mode
[  143.313789][ T8930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.685'.
[  144.282589][ T8947] netlink: 'syz.2.689': attribute type 1 has an invalid length.
[  144.286130][ T8947] netlink: 224 bytes leftover after parsing attributes in process `syz.2.689'.
[  144.483735][ T8956] netlink: 32 bytes leftover after parsing attributes in process `syz.1.691'.
[  144.571295][ T8961] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  144.574175][ T8955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.691'.
[  144.760230][ T8972] tipc: Cannot configure node identity twice
[  144.888037][ T8980] netlink: 32 bytes leftover after parsing attributes in process `syz.2.695'.
[  145.067885][ T8991] bridge24: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  145.167938][ T8994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.700'.
[  145.261703][ T8997] syzkaller1: entered promiscuous mode
[  145.265279][ T8997] syzkaller1: entered allmulticast mode
[  145.412766][ T9007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.702'.
[  145.422391][ T8999] netlink: 428 bytes leftover after parsing attributes in process `syz.0.702'.
[  145.563969][ T9015] nbd: couldn't find device at index 1
[  145.817317][ T9026] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  145.884150][ T5846] Bluetooth: hci1: command 0x0405 tx timeout
[  146.507897][ T9065] __nla_validate_parse: 3 callbacks suppressed
[  146.507912][ T9065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.716'.
[  146.516505][ T9065] netlink: 428 bytes leftover after parsing attributes in process `syz.0.716'.
[  146.519599][ T9065] netlink: 32 bytes leftover after parsing attributes in process `syz.0.716'.
[  146.845842][ T9075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.719'.
[  146.859789][ T9075] bridge17: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  146.951977][ T9081] bridge13: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  146.963830][ T9079] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8
[  146.989991][ T9081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.721'.
[  146.998768][ T9081] netlink: 428 bytes leftover after parsing attributes in process `syz.0.721'.
[  147.002618][ T9081] netlink: 32 bytes leftover after parsing attributes in process `syz.0.721'.
[  147.259793][ T9103] bridge18: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  147.300811][ T9101] bridge19: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  147.346640][ T9115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.728'.
[  147.600359][ T9130] netlink: 'syz.1.733': attribute type 1 has an invalid length.
[  147.964826][ T9145] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9
[  148.152542][ T9149] netlink: 240 bytes leftover after parsing attributes in process `syz.0.735'.
[  148.469651][ T9156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.737'.
[  148.484436][ T9156] bridge20: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  148.842030][ T9169] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  148.977793][ T9180] bridge21: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  149.722269][ T9208] bridge22: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  150.515040][ T9233] bridge25: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  150.777105][ T9250] Driver unsupported XDP return value 0 on prog  (id 372) dev N/A, expect packet loss!
[  150.807223][ T9249] netlink: 'syz.0.763': attribute type 2 has an invalid length.
[  150.822330][ T9249] tipc: Started in network mode
[  150.824210][ T9249] tipc: Node identity 6eb3564ec9de, cluster identity 4711
[  150.826932][ T9249] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  150.833319][ T9249] syzkaller0: entered promiscuous mode
[  150.835606][ T9249] syzkaller0: entered allmulticast mode
[  150.861034][ T9249] tipc: Resetting bearer <eth:syzkaller0>
[  150.923194][ T9248] tipc: Resetting bearer <eth:syzkaller0>
[  150.936477][ T9248] tipc: Disabling bearer <eth:syzkaller0>
[  151.657571][ T9282] veth1_macvtap: left promiscuous mode
[  151.659915][ T9282] macsec0: entered promiscuous mode
[  151.662046][ T9282] macsec0: entered allmulticast mode
[  151.673450][ T9281] veth1_macvtap: entered promiscuous mode
[  151.675929][ T9281] veth1_macvtap: entered allmulticast mode
[  151.679130][ T9281] macsec0: left promiscuous mode
[  151.681523][ T9281] macsec0: left allmulticast mode
[  151.683805][ T9281] veth1_macvtap: left allmulticast mode
[  151.947489][ T9297] __nla_validate_parse: 10 callbacks suppressed
[  151.947513][ T9297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.777'.
[  152.645265][ T9318] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input10
[  152.745754][ T9327] netlink: 28 bytes leftover after parsing attributes in process `syz.0.784'.
[  152.771059][ T9328] netlink: 'syz.1.785': attribute type 13 has an invalid length.
[  152.781310][ T9328] netlink: 'syz.1.785': attribute type 17 has an invalid length.
[  152.820893][ T9328] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  152.987274][ T9339] syz.0.787 uses old SIOCAX25GETINFO
[  153.082013][ T9342] netlink: 412 bytes leftover after parsing attributes in process `syz.1.789'.
[  153.094372][ T9342] netlink: 32 bytes leftover after parsing attributes in process `syz.1.789'.
[  153.186959][ T9348] netlink: 24 bytes leftover after parsing attributes in process `syz.1.791'.
[  153.476953][ T9372] bridge14: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  153.576429][ T9378] netlink: 'syz.0.797': attribute type 13 has an invalid length.
[  153.588287][ T9378] netlink: 'syz.0.797': attribute type 17 has an invalid length.
[  153.600438][ T9378] bond0: left promiscuous mode
[  153.603585][ T9378] bond_slave_0: left promiscuous mode
[  153.606984][ T9378] bond_slave_1: left promiscuous mode
[  153.609246][ T9378] bond1: left promiscuous mode
[  153.613107][ T9378] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.618487][ T9378] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  153.688504][ T9382] team0: No ports can be present during mode change
[  153.749852][ T9382] netlink: 44 bytes leftover after parsing attributes in process `syz.0.798'.
[  153.884950][ T9389] netlink: 'syz.0.800': attribute type 13 has an invalid length.
[  153.887956][ T9389] netlink: 'syz.0.800': attribute type 17 has an invalid length.
[  154.396186][ T9406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.804'.
[  154.538464][ T9413] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  154.628746][ T9415] netlink: 'syz.2.806': attribute type 13 has an invalid length.
[  154.632093][ T9415] netlink: 'syz.2.806': attribute type 17 has an invalid length.
[  154.665119][ T9415] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.668731][ T9415] 8021q: adding VLAN 0 to HW filter on device team0
[  154.680718][ T9415] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  154.745188][ T9424] netlink: 16 bytes leftover after parsing attributes in process `syz.1.809'.
[  154.758097][ T9424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.809'.
[  155.097074][ T9435] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  155.680395][ T9453] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  155.735553][ T9455] netlink: 'syz.2.815': attribute type 13 has an invalid length.
[  155.738361][ T9455] netlink: 'syz.2.815': attribute type 17 has an invalid length.
[  155.774150][ T9455] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  155.856407][ T9457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.816'.
[  156.053110][ T9463] bridge15: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  156.259592][ T9471] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input11
[  156.436428][ T9482] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  156.590469][ T9481] ieee802154 phy1 wpan1: encryption failed: -90
[  156.611573][ T9491] bridge23: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  156.721483][ T9496] openvswitch: netlink: Key type 10759 is out of range max 32
[  157.298646][ T9520] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  157.301786][ T9520] IPv6: NLM_F_CREATE should be set when creating new route
[  157.318114][ T9514] __nla_validate_parse: 6 callbacks suppressed
[  157.318133][ T9514] netlink: 9 bytes leftover after parsing attributes in process `syz.1.830'.
[  157.606250][ T9532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.834'.
[  157.613629][ T9532] bridge16: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  157.708956][ T9534] syzkaller1: entered promiscuous mode
[  157.711143][ T9534] syzkaller1: entered allmulticast mode
[  158.228078][ T9558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.840'.
[  158.232437][ T9561] netlink: 44 bytes leftover after parsing attributes in process `syz.1.841'.
[  158.236917][ T9558] netlink: 428 bytes leftover after parsing attributes in process `syz.0.840'.
[  158.241488][ T9558] netlink: 32 bytes leftover after parsing attributes in process `syz.0.840'.
[  158.298384][ T9561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.841'.
[  159.012645][ T9594] syzkaller0: entered promiscuous mode
[  159.015051][ T9594] syzkaller0: entered allmulticast mode
[  160.873641][ T9625] validate_nla: 1 callbacks suppressed
[  160.873665][ T9625] netlink: 'syz.2.857': attribute type 13 has an invalid length.
[  160.880808][ T9625] netlink: 'syz.2.857': attribute type 17 has an invalid length.
[  160.891824][ T9625] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  160.902448][ T9626] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  161.486234][ T9635] bridge24: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  161.559186][ T9635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.859'.
[  161.564432][ T9635] netlink: 428 bytes leftover after parsing attributes in process `syz.1.859'.
[  161.567377][ T9635] netlink: 32 bytes leftover after parsing attributes in process `syz.1.859'.
[  161.603640][ T9638] bridge26: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  161.725208][ T9647] bridge18: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  162.200018][ T9678] netlink: 'syz.1.870': attribute type 13 has an invalid length.
[  162.202573][ T9678] netlink: 'syz.1.870': attribute type 17 has an invalid length.
[  162.213693][ T9678] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  162.563605][ T9687] __nla_validate_parse: 12 callbacks suppressed
[  162.563618][ T9687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.871'.
[  163.293296][ T9698] netlink: 44 bytes leftover after parsing attributes in process `syz.1.873'.
[  163.412086][ T9709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.876'.
[  163.911127][ T9734] syzkaller0: entered promiscuous mode
[  163.912912][ T9734] syzkaller0: entered allmulticast mode
[  163.927724][ T9735] netlink: 48 bytes leftover after parsing attributes in process `syz.0.880'.
[  163.947281][ T9738] netlink: 48 bytes leftover after parsing attributes in process `syz.2.882'.
[  164.011550][ T9732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.880'.
[  164.015864][ T9744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.882'.
[  165.500954][ T9767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.886'.
[  165.519824][ T9767] bridge27: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  165.654930][ T9773] bridge28: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  165.715043][ T9775] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.722137][ T9775] bond0: (slave rose0): Enslaving as an active interface with an up link
[  165.772449][ T9781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.889'.
[  165.787549][ T9775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.890'.
[  166.165220][ T9808] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  166.221717][ T9815] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  166.428313][ T9829] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  166.917962][ T9855] bridge29: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  167.740508][ T9893] bridge30: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  167.760785][ T9894] bridge31: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  167.919855][ T9894] __nla_validate_parse: 16 callbacks suppressed
[  167.919868][ T9894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.914'.
[  167.930473][ T9902] netlink: 428 bytes leftover after parsing attributes in process `syz.2.914'.
[  167.935747][ T9894] netlink: 428 bytes leftover after parsing attributes in process `syz.2.914'.
[  167.939597][ T9894] netlink: 32 bytes leftover after parsing attributes in process `syz.2.914'.
[  167.943203][ T9902] netlink: 32 bytes leftover after parsing attributes in process `syz.2.914'.
[  167.994044][ T9903] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  168.090118][ T9905] netlink: 28 bytes leftover after parsing attributes in process `syz.0.917'.
[  168.093514][ T9905] netlink: 48 bytes leftover after parsing attributes in process `syz.0.917'.
[  168.120057][ T9905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.917'.
[  168.288578][ T9914] netlink: 'syz.2.919': attribute type 13 has an invalid length.
[  168.314083][ T9914] netlink: 'syz.2.919': attribute type 17 has an invalid length.
[  168.367352][ T9914] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  168.636145][ T9938] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  168.797517][ T9937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.924'.
[  169.574070][ T9968] netlink: 44 bytes leftover after parsing attributes in process `syz.2.931'.
[  169.757544][ T9977] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.760827][ T9977] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.127478][ T9991] syzkaller1: entered promiscuous mode
[  170.129691][ T9991] syzkaller1: entered allmulticast mode
[  170.250144][ T9996] netlink: 'syz.0.939': attribute type 1 has an invalid length.
[  170.570359][T10019] netlink: 'syz.1.945': attribute type 13 has an invalid length.
[  170.576421][T10019] netlink: 'syz.1.945': attribute type 17 has an invalid length.
[  170.652567][T10019] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.654958][T10019] bridge0: port 2(bridge_slave_1) entered forwarding state
[  170.657938][T10019] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.660224][T10019] bridge0: port 1(bridge_slave_0) entered forwarding state
[  170.665598][T10019] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  173.892918][T10043] netlink: 'syz.0.949': attribute type 13 has an invalid length.
[  173.901050][T10043] netlink: 'syz.0.949': attribute type 17 has an invalid length.
[  173.928196][T10043] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  174.060103][T10048] __nla_validate_parse: 7 callbacks suppressed
[  174.060123][T10048] netlink: 80 bytes leftover after parsing attributes in process `syz.2.951'.
[  174.116680][T10048] syz.2.951 (10048) used obsolete PPPIOCDETACH ioctl
[  174.121692][T10052] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  174.126758][T10052] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  174.161697][T10054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.952'.
[  174.165487][T10056] netlink: 28 bytes leftover after parsing attributes in process `syz.0.953'.
[  174.194714][T10056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.953'.
[  174.263622][T10063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.953'.
[  174.270414][T10056] netlink: 428 bytes leftover after parsing attributes in process `syz.0.953'.
[  174.273411][T10056] netlink: 32 bytes leftover after parsing attributes in process `syz.0.953'.
[  174.818807][T10086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.959'.
[  174.827500][T10086] netlink: 428 bytes leftover after parsing attributes in process `syz.2.959'.
[  174.831296][T10086] netlink: 32 bytes leftover after parsing attributes in process `syz.2.959'.
[  175.705682][T10124] netlink: 'syz.0.968': attribute type 13 has an invalid length.
[  175.708843][T10124] netlink: 'syz.0.968': attribute type 17 has an invalid length.
[  175.744808][T10124] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  176.168552][T10150] netlink: 'syz.2.976': attribute type 11 has an invalid length.
[  176.390345][T10163] sctp: [Deprecated]: syz.2.980 (pid 10163) Use of struct sctp_assoc_value in delayed_ack socket option.
[  176.390345][T10163] Use struct sctp_sack_info instead
[  176.562582][T10175] bridge21: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  176.943423][T10195] bridge25: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  178.087248][T10224] netlink: 'syz.2.993': attribute type 21 has an invalid length.
[  178.257961][T10242] bridge32: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  178.701740][T10276] netlink: 'syz.2.1004': attribute type 13 has an invalid length.
[  178.709372][T10276] netlink: 'syz.2.1004': attribute type 17 has an invalid length.
[  178.717128][T10276] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  178.823813][T10288] bridge22: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  178.829223][T10285] geneve0: entered allmulticast mode
[  179.087172][T10303] bridge33: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  179.490105][T10327] can: request_module (can-proto-0) failed.
[  179.639838][T10333] __nla_validate_parse: 31 callbacks suppressed
[  179.639856][T10333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1017'.
[  179.653644][T10333] bridge27: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  179.740254][T10335] netlink: 'syz.1.1018': attribute type 13 has an invalid length.
[  179.742779][T10335] netlink: 'syz.1.1018': attribute type 17 has an invalid length.
[  179.749468][T10335] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  179.758271][T10336] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1018'.
[  179.929802][T10344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1021'.
[  179.975389][T10353] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1022'.
[  179.979606][T10344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1021'.
[  180.058316][T10353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1022'.
[  180.071401][T10353] netlink: 428 bytes leftover after parsing attributes in process `syz.0.1022'.
[  180.099446][T10353] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1022'.
[  181.050269][T10385] netlink: 'syz.0.1030': attribute type 2 has an invalid length.
[  182.039175][T10423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1038'.
[  182.053288][T10423] bridge23: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  182.165991][T10428] bridge24: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  182.480644][T10449] syzkaller0: entered promiscuous mode
[  182.483060][T10449] syzkaller0: entered allmulticast mode
[  183.859059][T10466] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  184.063778][T10479] netlink: 'syz.2.1048': attribute type 13 has an invalid length.
[  184.071359][T10479] netlink: 'syz.2.1048': attribute type 17 has an invalid length.
[  184.085281][T10479] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  184.322909][T10484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1049'.
[  184.442960][T10491] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input12
[  184.878005][T10497] __nla_validate_parse: 1 callbacks suppressed
[  184.878019][T10497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1051'.
[  184.892053][T10497] bridge34: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  185.383045][T10512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1055'.
[  185.389386][T10513] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1055'.
[  185.601342][T10521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1058'.
[  185.606238][T10518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1057'.
[  185.611103][T10521] bridge25: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  186.304699][T10540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1064'.
[  186.308580][T10540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1064'.
[  186.312992][T10540] netlink: 'syz.0.1064': attribute type 18 has an invalid length.
[  186.319859][T10542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1065'.
[  186.340603][T10542] bridge35: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  186.403517][T10545] bridge36: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  186.521895][T10545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1066'.
[  186.528005][T10545] netlink: 428 bytes leftover after parsing attributes in process `syz.2.1066'.
[  187.001489][T10562] bridge26: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  187.053493][T10564] bridge37: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  187.473132][T10583] bridge27: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  187.663317][T10591] bridge28: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  189.359943][T10622] bridge38: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  189.493688][T10629] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20001
[  189.509590][T10627] 8021q: adding VLAN 0 to HW filter on device bond1
[  189.738831][T10649] bridge39: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  189.899610][T10651] __nla_validate_parse: 12 callbacks suppressed
[  189.899627][T10651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1093'.
[  189.909381][T10651] bridge40: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  190.905914][T10671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1097'.
[  190.971497][T10679] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1099'.
[  191.157718][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  191.163607][T10691] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1101'.
[  192.551815][T10755] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1113'.
[  192.753547][T10776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1117'.
[  193.015594][T10792] netlink: 'syz.2.1119': attribute type 30 has an invalid length.
[  193.593712][T10819] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1124'.
[  193.664520][T10825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1124'.
[  193.945531][T10830] netlink: 'syz.2.1126': attribute type 11 has an invalid length.
[  193.978395][T10832] bridge28: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  194.163287][T10843] netlink: 'syz.1.1129': attribute type 1 has an invalid length.
[  194.165268][T10842] netlink: 'syz.1.1129': attribute type 1 has an invalid length.
[  194.166664][T10843] netlink: 'syz.1.1129': attribute type 4 has an invalid length.
[  194.166675][T10843] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1129'.
[  194.167638][T10843] netlink: 'syz.1.1129': attribute type 1 has an invalid length.
[  194.178544][T10845] netlink: 'syz.1.1129': attribute type 1 has an invalid length.
[  194.179455][T10843] netlink: 'syz.1.1129': attribute type 4 has an invalid length.
[  194.182330][T10845] netlink: 'syz.1.1129': attribute type 4 has an invalid length.
[  194.182345][T10845] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1129'.
[  194.188458][T10848] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  194.199402][T10842] netlink: 'syz.1.1129': attribute type 4 has an invalid length.
[  194.203336][T10847] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  194.213679][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  194.369221][T10853] netdevsim netdevsim1: Direct firmware load for .. failed with error -2
[  194.372132][T10853] netdevsim netdevsim1: Falling back to sysfs fallback for: ..
[  195.115021][T10868] bond0: Unable to set down delay as MII monitoring is disabled
[  195.386904][T10885] __nla_validate_parse: 2 callbacks suppressed
[  195.386948][T10885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1137'.
[  195.423053][T10888] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1138'.
[  195.537133][T10897] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1140'.
[  195.663796][T10903] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1141'.
[  195.860428][T10915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1144'.
[  196.145704][T10923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1146'.
[  196.158685][T10923] bridge42: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  196.219774][T10925] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1147'.
[  196.587873][T10944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1153'.
[  196.598608][T10944] bridge29: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  196.967490][T10963] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  198.696913][T11034] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  198.699447][T11034] team0: Device macvtap1 is already an upper device of the team interface
[  199.149747][T11047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1174'.
[  199.281154][T11054] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1175'.
[  199.285520][T11054] netlink: 'syz.2.1175': attribute type 7 has an invalid length.
[  199.288030][T11054] netlink: 'syz.2.1175': attribute type 8 has an invalid length.
[  199.582126][T11078] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input13
[  200.078198][T11098] netlink: 'syz.2.1183': attribute type 5 has an invalid length.
[  200.508752][T11125] __nla_validate_parse: 5 callbacks suppressed
[  200.508764][T11125] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1190'.
[  200.514510][T11125] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1190'.
[  200.549708][T11122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1189'.
[  200.589379][T11122] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1189'.
[  200.729790][T11137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1192'.
[  200.742472][T11131] netlink: 428 bytes leftover after parsing attributes in process `syz.2.1192'.
[  200.747280][T11131] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1192'.
[  200.908553][T11152] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1197'.
[  200.967032][T11146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1197'.
[  201.727960][T11192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1206'.
[  201.829959][T11198] netlink: 'syz.1.1208': attribute type 13 has an invalid length.
[  201.833367][T11198] netlink: 'syz.1.1208': attribute type 17 has an invalid length.
[  201.844739][T11198] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  202.634324][T11225] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input14
[  203.491204][T11254] tipc: New replicast peer: 0.0.0.0
[  203.495452][T11254] tipc: Enabled bearer <udp:syz2>, priority 10
[  203.721121][T11271] bond1: entered promiscuous mode
[  203.723278][T11271] bond1: entered allmulticast mode
[  203.734914][T11271] 8021q: adding VLAN 0 to HW filter on device bond1
[  204.340893][T11298] netlink: 'syz.1.1225': attribute type 13 has an invalid length.
[  204.425035][T11302] bridge29: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  204.605447][ T5895] tipc: Node number set to 2808960590
[  204.680190][T11320] lo speed is unknown, defaulting to 1000
[  204.682867][T11320] lo speed is unknown, defaulting to 1000
[  204.705917][T11320] lo speed is unknown, defaulting to 1000
[  204.719122][T11320] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  204.757842][T11320] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  204.780727][T11320] lo speed is unknown, defaulting to 1000
[  204.786467][T11320] lo speed is unknown, defaulting to 1000
[  204.791103][T11320] lo speed is unknown, defaulting to 1000
[  204.795428][T11320] lo speed is unknown, defaulting to 1000
[  204.987267][T11337] lo speed is unknown, defaulting to 1000
[  205.084148][T11333] lo speed is unknown, defaulting to 1000
[  205.278833][T11345] lo speed is unknown, defaulting to 1000
[  205.413310][T11353] bridge43: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  205.487798][T11355] lo speed is unknown, defaulting to 1000
[  205.629581][T11364] lo speed is unknown, defaulting to 1000
[  205.677130][T11371] __nla_validate_parse: 16 callbacks suppressed
[  205.677147][T11371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1240'.
[  205.710473][T11366] lo speed is unknown, defaulting to 1000
[  205.732509][T11370] lo speed is unknown, defaulting to 1000
[  205.803979][ T6516] wlan0: Trigger new scan to find an IBSS to join
[  205.806864][ T5846] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  206.108600][T11393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1245'.
[  206.123809][T11393] bridge30: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  206.197837][T11398] batman_adv: batadv0: Interface activated: batadv_slave_0
[  206.202755][T11398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1244'.
[  206.209278][T11391] netlink: 428 bytes leftover after parsing attributes in process `syz.0.1244'.
[  206.212450][T11391] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1244'.
[  206.343468][T11400] lo speed is unknown, defaulting to 1000
[  206.422922][T11411] lo speed is unknown, defaulting to 1000
[  206.508280][T11416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1251'.
[  206.549472][T11425] bridge44: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  206.635493][T11430] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1253'.
[  206.639296][T11430] batadv_slave_0: left promiscuous mode
[  206.642927][T11430] batadv_slave_0: entered allmulticast mode
[  206.656523][T11430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1253'.
[  206.680175][T11425] netlink: 428 bytes leftover after parsing attributes in process `syz.2.1253'.
[  206.687902][T11433] bridge30: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  206.694024][T11425] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1253'.
[  206.777343][T11434] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  206.808787][T11437] bridge45: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  206.930230][T11438] batadv_slave_0: entered promiscuous mode
[  206.932573][T11438] batadv_slave_0: left allmulticast mode
[  206.938939][T11442] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  206.941821][T11442] IPv6: NLM_F_CREATE should be set when creating new route
[  206.944423][T11442] IPv6: NLM_F_CREATE should be set when creating new route
[  207.023595][T11440] lo speed is unknown, defaulting to 1000
[  207.168520][T11448] netlink: 'syz.0.1260': attribute type 13 has an invalid length.
[  207.171654][T11448] netlink: 'syz.0.1260': attribute type 17 has an invalid length.
[  207.201426][T11448] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  207.209466][T11458] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  207.230196][T11458] lo speed is unknown, defaulting to 1000
[  207.299075][T11457] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input15
[  207.363683][T11463] lo speed is unknown, defaulting to 1000
[  207.563804][T11474] bridge31: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  207.670027][T11479] lo speed is unknown, defaulting to 1000
[  207.740336][T11481] lo speed is unknown, defaulting to 1000
[  208.119997][T11501] bridge46: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  208.142998][T11497] lo speed is unknown, defaulting to 1000
[  208.179273][T11504] bridge47: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  208.251893][T11503] lo speed is unknown, defaulting to 1000
[  208.396264][T11514] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:20002
[  208.398616][T11514] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:20002
[  208.400874][T11514] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:20002
[  208.403140][T11514] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:20002
[  208.418576][T11514] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:20002
[  208.420991][T11514] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:20002
[  208.423261][T11514] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:20002
[  208.549338][T11528] lo speed is unknown, defaulting to 1000
[  208.566768][T11530] bridge32: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  208.701150][T11528] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  208.712108][T11533] lo speed is unknown, defaulting to 1000
[  208.845214][   T84] wlan0: Trigger new scan to find an IBSS to join
[  208.890356][T11546] lo speed is unknown, defaulting to 1000
[  209.132283][T11557] lo speed is unknown, defaulting to 1000
[  209.323576][T11562] lo speed is unknown, defaulting to 1000
[  209.510188][T11568] lo speed is unknown, defaulting to 1000
[  209.543110][T11569] lo speed is unknown, defaulting to 1000
[  209.893262][T11579] bridge33: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  210.252173][T11599] lo speed is unknown, defaulting to 1000
[  210.390253][ T5895] lo speed is unknown, defaulting to 1000
[  211.042958][T11614] __nla_validate_parse: 20 callbacks suppressed
[  211.042969][T11614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1302'.
[  211.298454][T11620] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1304'.
[  211.302816][T11620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1304'.
[  211.479818][T11623] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input16
[  211.626214][T11628] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  211.659338][T11629] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1305'.
[  212.290964][T11639] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1309'.
[  212.329800][T11636] lo speed is unknown, defaulting to 1000
[  212.430087][T11646] sock: sock_timestamping_bind_phc: sock not bind to device
[  212.542914][T11649] lo speed is unknown, defaulting to 1000
[  212.618100][T11655] lo speed is unknown, defaulting to 1000
[  212.837949][T11663] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1315'.
[  212.855084][T11663] nbd: socks must be embedded in a SOCK_ITEM attr
[  212.891829][T11666] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.920038][T11668] netlink: 'syz.1.1315': attribute type 4 has an invalid length.
[  212.923200][T11663] lo speed is unknown, defaulting to 1000
[  212.971476][T11666] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.097622][T11666] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.157175][T11666] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.221582][T11679] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1318'.
[  213.243581][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  213.258983][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  213.275816][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.313102][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.432638][T11685] lo speed is unknown, defaulting to 1000
[  213.464206][T11689] lo speed is unknown, defaulting to 1000
[  213.679519][T11694] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1322'.
[  213.764367][T11694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1322'.
[  213.771559][T11696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1323'.
[  213.848372][T11700] lo speed is unknown, defaulting to 1000
[  214.071645][T11712] netlink: 'syz.0.1326': attribute type 13 has an invalid length.
[  214.076151][T11712] netlink: 'syz.0.1326': attribute type 17 has an invalid length.
[  214.082386][T11712] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  214.109321][T11712] lo speed is unknown, defaulting to 1000
[  214.191927][T11716] lo speed is unknown, defaulting to 1000
[  214.811425][T11733] netlink: 'syz.0.1331': attribute type 13 has an invalid length.
[  214.824065][T11733] netlink: 'syz.0.1331': attribute type 17 has an invalid length.
[  214.850571][T11733] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  214.871567][T11732] lo speed is unknown, defaulting to 1000
[  214.949123][T11733] lo speed is unknown, defaulting to 1000
[  215.187107][T11740] lo speed is unknown, defaulting to 1000
[  215.579839][T11745] bridge34: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  215.742411][T11750] lo speed is unknown, defaulting to 1000
[  215.924752][T11761] netlink: 'syz.1.1339': attribute type 13 has an invalid length.
[  215.927331][T11761] netlink: 'syz.1.1339': attribute type 17 has an invalid length.
[  215.935055][T11761] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  215.956873][T11763] bridge35: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  215.971788][T11761] lo speed is unknown, defaulting to 1000
[  216.210729][T11772] __nla_validate_parse: 6 callbacks suppressed
[  216.210741][T11772] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1343'.
[  216.286108][T11783] lo speed is unknown, defaulting to 1000
[  216.386956][T11796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1349'.
[  216.395273][T11796] bridge31: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  216.449602][T11798] lo speed is unknown, defaulting to 1000
[  216.731568][T11813] lo speed is unknown, defaulting to 1000
[  217.070301][T11827] netlink: 'syz.1.1357': attribute type 1 has an invalid length.
[  217.073777][T11827] netlink: 'syz.1.1357': attribute type 2 has an invalid length.
[  217.148262][T11828] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1357'.
[  217.151228][T11828] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1357'.
[  217.155689][T11828] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1357'.
[  217.159774][T11828] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1357'.
[  217.431063][T11841] lo speed is unknown, defaulting to 1000
[  217.499860][T11841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1360'.
[  217.597256][T11849] lo speed is unknown, defaulting to 1000
[  217.720777][T11854] lo speed is unknown, defaulting to 1000
[  217.860290][T11858] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input17
[  218.000802][T11863] lo speed is unknown, defaulting to 1000
[  218.031351][T11864] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1363'.
[  218.546240][T11870] lo speed is unknown, defaulting to 1000
[  218.623719][T11870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1365'.
[  218.792672][T11875] lo speed is unknown, defaulting to 1000
[  219.038482][T11882] lo speed is unknown, defaulting to 1000
[  219.065767][T11888] netlink: 788 bytes leftover after parsing attributes in process `syz.0.1367'.
[  219.068716][T11885] lo speed is unknown, defaulting to 1000
[  219.402882][T11895] lo speed is unknown, defaulting to 1000
[  219.433583][T11901] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input18
[  219.709415][T11905] lo speed is unknown, defaulting to 1000
[  219.776758][T11910] bridge32: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  220.023366][T11928] lo speed is unknown, defaulting to 1000
[  220.138927][T11934] lo speed is unknown, defaulting to 1000
[  220.507763][T11950] lo speed is unknown, defaulting to 1000
[  220.518171][T11947] lo speed is unknown, defaulting to 1000
[  220.578148][T11956] bridge36: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  220.694543][T11959] lo speed is unknown, defaulting to 1000
[  221.014925][T11969] bridge37: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  221.036165][T11972] lo speed is unknown, defaulting to 1000
[  221.100995][T11977] netlink: 'syz.0.1392': attribute type 13 has an invalid length.
[  221.111216][T11977] netlink: 'syz.0.1392': attribute type 17 has an invalid length.
[  221.139370][T11977] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  221.206891][T11977] lo speed is unknown, defaulting to 1000
[  221.220364][T11980] lo speed is unknown, defaulting to 1000
[  221.391748][T11987] lo speed is unknown, defaulting to 1000
[  221.541763][T11992] ==================================================================
[  221.545074][T11992] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  221.547708][T11992] Read of size 1 at addr ffff8880295150b0 by task syz.1.1395/11992
[  221.551678][T11992] 
[  221.553080][T11992] CPU: 1 UID: 0 PID: 11992 Comm: syz.1.1395 Not tainted syzkaller #0 PREEMPT(full) 
[  221.553099][T11992] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  221.553109][T11992] Call Trace:
[  221.553116][T11992]  <TASK>
[  221.553123][T11992]  dump_stack_lvl+0x189/0x250
[  221.553142][T11992]  ? __kasan_check_byte+0x12/0x40
[  221.553165][T11992]  ? __pfx_dump_stack_lvl+0x10/0x10
[  221.553181][T11992]  ? lock_release+0x4b/0x3e0
[  221.553203][T11992]  ? __virt_addr_valid+0x4a5/0x5c0
[  221.553222][T11992]  print_report+0xca/0x240
[  221.553265][T11992]  ? xfrm_state_find+0x2cf2/0x5400
[  221.553284][T11992]  kasan_report+0x118/0x150
[  221.553303][T11992]  ? xfrm_state_find+0x2cf2/0x5400
[  221.553321][T11992]  xfrm_state_find+0x2cf2/0x5400
[  221.553344][T11992]  ? xfrm_state_find+0x1da/0x5400
[  221.553361][T11992]  ? __pfx_xfrm_state_find+0x10/0x10
[  221.553375][T11992]  ? ip6_pol_route+0x547/0x1180
[  221.553393][T11992]  ? fib6_rule_saddr+0xc0/0x420
[  221.553409][T11992]  ? __pfx_ip6_pol_route+0x10/0x10
[  221.553424][T11992]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  221.553461][T11992]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  221.553477][T11992]  ? __lock_acquire+0xab9/0xd20
[  221.553498][T11992]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  221.553516][T11992]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  221.553533][T11992]  ? xfrm_expand_policies+0x41f/0x6a0
[  221.553551][T11992]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  221.553567][T11992]  ? __pfx_ip6_dst_lookup_tail+0x10/0x10
[  221.553585][T11992]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  221.553603][T11992]  xfrm_lookup_route+0x3c/0x1c0
[  221.553619][T11992]  ? ip6_datagram_dst_update+0x511/0xcb0
[  221.553632][T11992]  ip6_datagram_dst_update+0x75c/0xcb0
[  221.553646][T11992]  ? __pfx_ip6_datagram_dst_update+0x10/0x10
[  221.553657][T11992]  ? futex_private_hash_put+0x4b/0x280
[  221.553674][T11992]  ? __lock_acquire+0xab9/0xd20
[  221.553689][T11992]  ? __ip6_datagram_connect+0xb92/0x1150
[  221.553703][T11992]  __ip6_datagram_connect+0xbd1/0x1150
[  221.553718][T11992]  ? __pfx___ip6_datagram_connect+0x10/0x10
[  221.553729][T11992]  ? __local_bh_enable_ip+0x12d/0x1c0
[  221.553742][T11992]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  221.553760][T11992]  ip6_datagram_connect_v6_only+0x63/0xa0
[  221.553772][T11992]  __sys_connect+0x316/0x440
[  221.553787][T11992]  ? __pfx___sys_connect+0x10/0x10
[  221.553839][T11992]  ? rcu_is_watching+0x15/0xb0
[  221.553856][T11992]  __x64_sys_connect+0x7a/0x90
[  221.553871][T11992]  do_syscall_64+0xfa/0x3b0
[  221.553889][T11992]  ? lockdep_hardirqs_on+0x9c/0x150
[  221.553902][T11992]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.553915][T11992]  ? exc_page_fault+0x9f/0xf0
[  221.553927][T11992]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.553938][T11992] RIP: 0033:0x7f524478eba9
[  221.553951][T11992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  221.553964][T11992] RSP: 002b:00007f52429f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  221.553978][T11992] RAX: ffffffffffffffda RBX: 00007f52449d6090 RCX: 00007f524478eba9
[  221.553989][T11992] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000005
[  221.553996][T11992] RBP: 00007f5244811e19 R08: 0000000000000000 R09: 0000000000000000
[  221.554004][T11992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  221.554013][T11992] R13: 00007f52449d6128 R14: 00007f52449d6090 R15: 00007fffd3d30418
[  221.554026][T11992]  </TASK>
[  221.554033][T11992] 
[  221.671881][T11992] Allocated by task 10147:
[  221.673281][T11992]  kasan_save_track+0x3e/0x80
[  221.674770][T11992]  __kasan_slab_alloc+0x6c/0x80
[  221.676313][T11992]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  221.678056][T11992]  xfrm_state_alloc+0x24/0x2f0
[  221.679593][T11992]  xfrm_add_acquire+0xf7/0xb20
[  221.681117][T11992]  xfrm_user_rcv_msg+0x7a3/0xab0
[  221.682698][T11992]  netlink_rcv_skb+0x208/0x470
[  221.684207][T11992]  xfrm_netlink_rcv+0x79/0x90
[  221.685751][T11992]  netlink_unicast+0x82f/0x9e0
[  221.687303][T11992]  netlink_sendmsg+0x805/0xb30
[  221.688824][T11992]  __sock_sendmsg+0x21c/0x270
[  221.690332][T11992]  ____sys_sendmsg+0x505/0x830
[  221.691859][T11992]  ___sys_sendmsg+0x21f/0x2a0
[  221.693399][T11992]  __x64_sys_sendmsg+0x19b/0x260
[  221.694951][T11992]  do_syscall_64+0xfa/0x3b0
[  221.696388][T11992]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.698185][T11992] 
[  221.698948][T11992] Freed by task 10147:
[  221.700325][T11992]  kasan_save_track+0x3e/0x80
[  221.701819][T11992]  kasan_save_free_info+0x46/0x50
[  221.703415][T11992]  __kasan_slab_free+0x5b/0x80
[  221.704906][T11992]  kmem_cache_free+0x18f/0x400
[  221.706439][T11992]  xfrm_add_acquire+0x9cc/0xb20
[  221.707981][T11992]  xfrm_user_rcv_msg+0x7a3/0xab0
[  221.709568][T11992]  netlink_rcv_skb+0x208/0x470
[  221.711178][T11992]  xfrm_netlink_rcv+0x79/0x90
[  221.712683][T11992]  netlink_unicast+0x82f/0x9e0
[  221.714188][T11992]  netlink_sendmsg+0x805/0xb30
[  221.715727][T11992]  __sock_sendmsg+0x21c/0x270
[  221.717261][T11992]  ____sys_sendmsg+0x505/0x830
[  221.718797][T11992]  ___sys_sendmsg+0x21f/0x2a0
[  221.720294][T11992]  __x64_sys_sendmsg+0x19b/0x260
[  221.722060][T11992]  do_syscall_64+0xfa/0x3b0
[  221.723924][T11992]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.726058][T11992] 
[  221.726906][T11992] The buggy address belongs to the object at ffff888029514d80
[  221.726906][T11992]  which belongs to the cache xfrm_state of size 928
[  221.731273][T11992] The buggy address is located 816 bytes inside of
[  221.731273][T11992]  freed 928-byte region [ffff888029514d80, ffff888029515120)
[  221.735622][T11992] 
[  221.736553][T11992] The buggy address belongs to the physical page:
[  221.738846][T11992] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888029514000 pfn:0x29514
[  221.741981][T11992] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  221.744656][T11992] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  221.747061][T11992] page_type: f5(slab)
[  221.748371][T11992] raw: 00fff00000000040 ffff888104b56640 dead000000000122 0000000000000000
[  221.751083][T11992] raw: ffff888029514000 00000000800e000d 00000000f5000000 0000000000000000
[  221.753862][T11992] head: 00fff00000000040 ffff888104b56640 dead000000000122 0000000000000000
[  221.756551][T11992] head: ffff888029514000 00000000800e000d 00000000f5000000 0000000000000000
[  221.759331][T11992] head: 00fff00000000002 ffffea0000a54501 00000000ffffffff 00000000ffffffff
[  221.762052][T11992] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  221.764639][T11992] page dumped because: kasan: bad access detected
[  221.766634][T11992] page_owner tracks the page as allocated
[  221.768453][T11992] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7414, tgid 7413 (syz.0.359), ts 105646555043, free_ts 105403646854
[  221.774398][T11992]  post_alloc_hook+0x240/0x2a0
[  221.775925][T11992]  get_page_from_freelist+0x21e4/0x22c0
[  221.777670][T11992]  __alloc_frozen_pages_noprof+0x181/0x370
[  221.779491][T11992]  alloc_pages_mpol+0x232/0x4a0
[  221.781008][T11992]  allocate_slab+0x8a/0x370
[  221.782441][T11992]  ___slab_alloc+0xbeb/0x1420
[  221.783924][T11992]  kmem_cache_alloc_noprof+0x283/0x3c0
[  221.785667][T11992]  xfrm_state_alloc+0x24/0x2f0
[  221.787170][T11992]  xfrm_add_sa+0x17d1/0x4070
[  221.788631][T11992]  xfrm_user_rcv_msg+0x7a3/0xab0
[  221.790172][T11992]  netlink_rcv_skb+0x208/0x470
[  221.791748][T11992]  xfrm_netlink_rcv+0x79/0x90
[  221.793300][T11992]  netlink_unicast+0x82f/0x9e0
[  221.794873][T11992]  netlink_sendmsg+0x805/0xb30
[  221.796397][T11992]  __sock_sendmsg+0x21c/0x270
[  221.797886][T11992]  ____sys_sendmsg+0x505/0x830
[  221.799418][T11992] page last free pid 7405 tgid 7405 stack trace:
[  221.801399][T11992]  __free_frozen_pages+0xbc4/0xd30
[  221.803015][T11992]  __put_partials+0x156/0x1a0
[  221.804502][T11992]  put_cpu_partial+0x17c/0x250
[  221.806016][T11992]  __slab_free+0x2d5/0x3c0
[  221.807417][T11992]  qlist_free_all+0x97/0x140
[  221.808872][T11992]  kasan_quarantine_reduce+0x148/0x160
[  221.810673][T11992]  __kasan_slab_alloc+0x22/0x80
[  221.812275][T11992]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  221.813984][T11992]  vm_area_alloc+0x24/0x140
[  221.815433][T11992]  mmap_region+0xdc7/0x20c0
[  221.816881][T11992]  do_mmap+0xc45/0x10d0
[  221.818227][T11992]  vm_mmap_pgoff+0x2a6/0x4d0
[  221.819697][T11992]  do_syscall_64+0xfa/0x3b0
[  221.821139][T11992]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.823077][T11992] 
[  221.823848][T11992] Memory state around the buggy address:
[  221.825643][T11992]  ffff888029514f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  221.828144][T11992]  ffff888029515000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  221.830682][T11992] >ffff888029515080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  221.833346][T11992]                                      ^
[  221.835126][T11992]  ffff888029515100: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  221.837666][T11992]  ffff888029515180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  221.840228][T11992] ==================================================================
[  221.870917][T11992] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  221.873308][T11992] CPU: 1 UID: 0 PID: 11992 Comm: syz.1.1395 Not tainted syzkaller #0 PREEMPT(full) 
[  221.876257][T11992] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  221.879458][T11992] Call Trace:
[  221.880534][T11992]  <TASK>
[  221.881489][T11992]  dump_stack_lvl+0x99/0x250
[  221.882956][T11992]  ? __asan_memcpy+0x40/0x70
[  221.884434][T11992]  ? __pfx_dump_stack_lvl+0x10/0x10
[  221.886127][T11992]  ? __pfx__printk+0x10/0x10
[  221.887610][T11992]  vpanic+0x281/0x750
[  221.888880][T11992]  ? preempt_schedule+0xae/0xc0
[  221.890421][T11992]  ? __pfx_vpanic+0x10/0x10
[  221.891846][T11992]  ? preempt_schedule_common+0x83/0xd0
[  221.893592][T11992]  ? preempt_schedule+0xae/0xc0
[  221.895192][T11992]  ? __pfx_preempt_schedule+0x10/0x10
[  221.896905][T11992]  panic+0xb9/0xc0
[  221.898098][T11992]  ? __pfx_panic+0x10/0x10
[  221.899510][T11992]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  221.901403][T11992]  ? xfrm_state_find+0x2cf2/0x5400
[  221.903128][T11992]  check_panic_on_warn+0x89/0xb0
[  221.904718][T11992]  ? xfrm_state_find+0x2cf2/0x5400
[  221.906345][T11992]  end_report+0x78/0x160
[  221.907735][T11992]  kasan_report+0x129/0x150
[  221.909174][T11992]  ? xfrm_state_find+0x2cf2/0x5400
[  221.910814][T11992]  xfrm_state_find+0x2cf2/0x5400
[  221.912403][T11992]  ? xfrm_state_find+0x1da/0x5400
[  221.913960][T11992]  ? __pfx_xfrm_state_find+0x10/0x10
[  221.915627][T11992]  ? ip6_pol_route+0x547/0x1180
[  221.917201][T11992]  ? fib6_rule_saddr+0xc0/0x420
[  221.918835][T11992]  ? __pfx_ip6_pol_route+0x10/0x10
[  221.920571][T11992]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  221.922473][T11992]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  221.924927][T11992]  ? __lock_acquire+0xab9/0xd20
[  221.927010][T11992]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  221.929272][T11992]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  221.931497][T11992]  ? xfrm_expand_policies+0x41f/0x6a0
[  221.933236][T11992]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  221.934967][T11992]  ? __pfx_ip6_dst_lookup_tail+0x10/0x10
[  221.936775][T11992]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  221.938564][T11992]  xfrm_lookup_route+0x3c/0x1c0
[  221.940120][T11992]  ? ip6_datagram_dst_update+0x511/0xcb0
[  221.941905][T11992]  ip6_datagram_dst_update+0x75c/0xcb0
[  221.943627][T11992]  ? __pfx_ip6_datagram_dst_update+0x10/0x10
[  221.945579][T11992]  ? futex_private_hash_put+0x4b/0x280
[  221.947331][T11992]  ? __lock_acquire+0xab9/0xd20
[  221.948869][T11992]  ? __ip6_datagram_connect+0xb92/0x1150
[  221.950661][T11992]  __ip6_datagram_connect+0xbd1/0x1150
[  221.952476][T11992]  ? __pfx___ip6_datagram_connect+0x10/0x10
[  221.954437][T11992]  ? __local_bh_enable_ip+0x12d/0x1c0
[  221.956594][T11992]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  221.958974][T11992]  ip6_datagram_connect_v6_only+0x63/0xa0
[  221.961310][T11992]  __sys_connect+0x316/0x440
[  221.962886][T11992]  ? __pfx___sys_connect+0x10/0x10
[  221.964781][T11992]  ? rcu_is_watching+0x15/0xb0
[  221.966356][T11992]  __x64_sys_connect+0x7a/0x90
[  221.967891][T11992]  do_syscall_64+0xfa/0x3b0
[  221.969352][T11992]  ? lockdep_hardirqs_on+0x9c/0x150
[  221.971007][T11992]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.972957][T11992]  ? exc_page_fault+0x9f/0xf0
[  221.974547][T11992]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.976450][T11992] RIP: 0033:0x7f524478eba9
[  221.978026][T11992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  221.985109][T11992] RSP: 002b:00007f52429f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  221.988572][T11992] RAX: ffffffffffffffda RBX: 00007f52449d6090 RCX: 00007f524478eba9
[  221.991831][T11992] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000005
[  221.995090][T11992] RBP: 00007f5244811e19 R08: 0000000000000000 R09: 0000000000000000
[  221.998349][T11992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  222.001598][T11992] R13: 00007f52449d6128 R14: 00007f52449d6090 R15: 00007fffd3d30418
[  222.004831][T11992]  </TASK>
[  222.006837][T11992] Kernel Offset: disabled
[  222.008392][T11992] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:21:27  Registers:
info registers vcpu 0

CPU#0
RAX=1ffff110096065f3 RBX=ffff88804b032f98 RCX=5535421096318600 RDX=ffffc9000310f101
RSI=ffffffff8be33860 RDI=ffffffff8be33820 RBP=dffffc0000000000 RSP=ffffc9000310f078
R8 =ffffc9000310f4d8 R9 =0000000000000000 R10=ffffc9000310f1b8 R11=fffff52000621e39
R12=ffffc9000310f4e8 R13=ffffc90003108000 R14=ffffffff8dbe1d10 R15=dffffc0000000000
RIP=ffffffff81a66045 RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055558b9305c8 CR3=00000001076e8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 006e75745f7a7973
XMM02=00007f38fd5a7498 00007f38fd5a7470 XMM03=00007f38fd5a74a8 00007f38fd5a74a0
XMM04=00007f38fe10d100 00007f38fd5a7460 XMM05=00007f38fd5a7478 00007f38fd5a74c0
XMM06=00007f38fd5a74b8 00007f38fd5a74b0 XMM07=00007f38fd5a74a8 00007f38fd5a74a0
XMM08=0000000000000000 00007f38fd412ee7 XMM09=0000000000000000 00007f38fd412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000016df RDI=00000000000016e0 RBP=00000000000003f8 RSP=ffffc90008a66cb0
R8 =ffff888108b18237 R9 =1ffff11021163046 R10=dffffc0000000000 R11=ffffffff854f4b80
R12=dffffc0000000000 R13=ffffffff99b018ca R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f4bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f52429f66c0 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f52429f6d58 CR3=000000003203a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f52449a7498 00007f52449a7470 XMM03=00007f52449a74a8 00007f52449a74a0
XMM04=00007f524550d100 00007f52449a7460 XMM05=00007f52449a7478 00007f52449a74c0
XMM06=00007f52449a74b8 00007f52449a74b0 XMM07=00007f52449a74a8 00007f52449a74a0
XMM08=0000000000000000 00007f5244812ee7 XMM09=0000000000000000 00007f5244812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
