last executing test programs:

6.930305172s ago: executing program 2 (id=874):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
r2 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
write$cgroup_pid(r1, &(0x7f00000000c0)=r2, 0x12)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="a400000001021c428500000000000000030000070800100000000002080004400000000108000940000000379700074000020000540001800c000280050001003a0000002c00018014000300fe80000000000000000000000000001114000400ff0100000000000000000000000000010600034000000000060003400002000006000340000300000a000b00512e08000b0073697000"/164], 0xa4}, 0x1, 0x0, 0x0, 0x4008801}, 0x8000)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x1)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r10], 0x54}}, 0x0)
r11 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff, 0x20, 0xf8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x401, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r12 = socket$netlink(0x10, 0x3, 0x0)
r13 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r14, @ANYBLOB="0174dfdb0ddad488bc"], 0x20}}, 0x0)
r15 = socket(0x1, 0x803, 0x0)
getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r16, @ANYBLOB="c349c30aa1e373ec1c42e3e8f540415cb2d831b28a028859561fd24c59a6b56b656e8ac5f5049dce39f846dfe5e959c3bc48b27bdf4b4f4ae0091595ad613e0a3b4a4402e9572d70f47e2e611b283d92017c5a9b2bde30c1f5c3c4065c68428b49d216d085fc20fd7bc86664f234bc79de52c10ebd1dccf149520e29b90af1b8416045b4fc463d"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="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"], 0x30}}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005400000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))

6.800997388s ago: executing program 2 (id=875):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r4, 0x1, 0x70bd25, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x4000001, 0x1, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20040803}, 0x20000000)
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
readv(r5, &(0x7f0000001b00)=[{&(0x7f00000008c0)=""/4096, 0x1000}], 0x1)
splice(r5, 0x0, r1, 0x0, 0x10000008ebc, 0x0)
write$cgroup_subtree(r1, &(0x7f00000001c0)={[{0x2d, 'net_prio'}, {0x2b, 'pids'}, {0x2b, 'hugetlb'}, {0x2b, 'hugetlb'}]}, 0x22)
splice(r0, 0x0, r6, 0x0, 0x25a5, 0x0)

5.958650566s ago: executing program 2 (id=882):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) (async)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x4, 0x24, 0x68, 0x0, 0x7, 0x21, 0x0, @remote, @empty}, {{0x4e21, 0x4e23, 0x4, 0x1, 0xb, 0x0, 0x0, 0x8, 0x2, '\x00', 0x3, "e85ae2"}}}}}}, 0x0) (async)
close(r3) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x36) (async)
connect(r0, &(0x7f0000000000)=@qipcrtr={0x2a, 0x2}, 0x80) (async)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r0)
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000008c0)={0x0, 0xfffffffffffffdf5, &(0x7f0000000880)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000004b9399c48d7116c310b50abeedbb3b92013fb98c11", @ANYRES16=r4, @ANYBLOB="010026bd7000fbdbdf25010000000000000008410000004c001800000800696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x20}, 0x4000) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)

5.868566794s ago: executing program 2 (id=884):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000380)=@req3={0x1, 0x400, 0x8, 0x1, 0xffffffff, 0x4, 0x1000}, 0x1c)
pipe(&(0x7f0000000080)) (async)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x50, 0x1405, 0x10, 0x70bd28, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x800)
splice(r1, 0x0, r4, 0x0, 0x1, 0x0) (async)
splice(r1, 0x0, r4, 0x0, 0x1, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000004200)="2000000021008108090f9becdb4cb92e02000069fe6b02015400000000000000", 0x20}], 0x1}, 0x0) (async)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000004200)="2000000021008108090f9becdb4cb92e02000069fe6b02015400000000000000", 0x20}], 0x1}, 0x0)
vmsplice(r3, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) (async)
vmsplice(r3, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000042000b0026bd70000040000003000000080002"], 0x3c}, 0x1, 0x0, 0x0, 0x24000091}, 0x0)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @remote}, 0x10)
clock_gettime(0x812f3c4a9f652968, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d5, 0x32}, 0x0, @in6=@loopback, 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0xffffffff, 0xfffffff9}}, 0xe8)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x7a44, 0x1700)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r8, 0x607d8000)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
writev(r9, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) (async)
writev(r9, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r10, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
sendmmsg(r6, &(0x7f0000000180), 0x400000000000077, 0x7600)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0xc, 0x7ff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xb, 0x9, 0x0, 0x2, 0x4}, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0xc, 0x7ff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xb, 0x9, 0x0, 0x2, 0x4}, 0x0, 0x0)
write(r0, &(0x7f0000000280)="8ef8", 0x2)

5.781317189s ago: executing program 2 (id=886):
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000000c0), 0x4)
connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0)
splice(r2, 0x0, r1, 0x0, 0xea8, 0xa)

2.759301714s ago: executing program 2 (id=934):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)='8', 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRESOCT=r2], 0x18}}], 0x1, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r2, 0x0, r4, 0x0, 0x39000, 0x0)

1.799201733s ago: executing program 0 (id=949):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)='8', 0x1}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=0x0], 0x18}}], 0x1, 0x4004)
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
sendto$inet(r2, &(0x7f0000001500)="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", 0x1000, 0x80, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
sendmsg$inet6(r3, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=[@dstopts={{0xe0, 0x29, 0x37, {0x1d, 0x18, '\x00', [@calipso={0x7, 0x10, {0x2, 0x2, 0x30, 0x1, [0x6]}}, @enc_lim={0x4, 0x1, 0x8c}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @empty}, @generic={0x5, 0x6e, "8463bfc0194728cbbde73967d6c2ed1320d7b3adcd89d52ee17238ede9ea7674264ed24cb1795a4287aed877f00c0bcacd0d5370319aa8f34073cb2a15d2880a02a11e5794bd7a43f5e2cdcca25e1da3e6cb9a98f804a038c277244e3b80dea83114eafb399802a41ab7e25edbdc"}, @pad1, @hao={0xc9, 0x10, @private0}, @jumbo={0xc2, 0x4, 0xfffffffa}, @jumbo={0xc2, 0x4, 0x2}]}}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@loopback]}}}], 0x108}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000000, 0x4)

1.798159758s ago: executing program 0 (id=950):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)='8', 0x1}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x18}}], 0x1, 0x4)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff)
r5 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, &(0x7f00000000c0)=0x10)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000980)=@nat={'nat\x00', 0x1b, 0x5, 0x3b0, 0x270, 0x0, 0xffffffff, 0xf8, 0x0, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, &(0x7f0000000200), {[{{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x4, 0x4a2, 0x0, 0x1}}, @common=@socket0={{0x20}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x800, @gre_key=0x3e5}}}}, {{@ip={@empty, @broadcast, 0x0, 0xff000000, 'team0\x00', 'veth0_to_bridge\x00', {}, {}, 0x84}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x3}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1e, @multicast1, @loopback, @icmp_id=0x65, @gre_key=0xfff6}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x4, @private=0xa010101, @loopback, @gre_key=0x1, @gre_key=0x98e}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xb, @rand_addr=0x64010101, @loopback, @gre_key=0x55a5, @port=0x4e21}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000005e40)={0x0, 0x0, &(0x7f0000005e00)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c030000", @ANYRES16=r4, @ANYBLOB="21008d000000fbdbdf25030000002800018014000400fe880000000000000000000000000001060001000a00000008000700", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8004)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000040), 0x4)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x20, 0x3, 0x8, 0x201, 0x0, 0x0, {0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x20}}, 0xd4)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
vmsplice(r6, &(0x7f0000000040), 0x100000000000026a, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r8 = accept4(r7, 0x0, 0x0, 0x0)
sendmmsg$alg(r8, &(0x7f0000004140)=[{0x7b, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="1e12643e36", 0x5}, {&(0x7f0000000900)="e9cb9a5307a26d913fc8c82929ff17e52811211c6ba5b229ecbe905ac217948050c25bc961ec7b4681d51c69f841c134a294b4c5b09bbde7c91e9b9401537939a1", 0x41}, {0x0}, {0x0}], 0x4, 0x0, 0x0, 0x4808}], 0x1, 0x0)
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
splice(r0, 0x0, r9, 0x0, 0x39000, 0x0)

1.741007096s ago: executing program 0 (id=951):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r5, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0)
splice(r1, 0x0, r3, 0x0, 0x1, 0x0)
vmsplice(r2, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
recvfrom(r7, 0x0, 0x0, 0xc0006020, 0x0, 0x0)
sendmsg$802154_raw(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)="111a9a302b963e", 0x7}, 0x1, 0x0, 0x0, 0x24000051}, 0xc0e4)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xffffffffbffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x5, 0x0, 0x9, 0xffffffffffffff80, 0x0, 0x7fffffff, 0x3ff}, 0x0, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r9 = accept4(r8, 0x0, 0x0, 0x80800)
sendmmsg$inet(r9, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000005280)=[{&(0x7f00000050c0)='k', 0x1}, {&(0x7f00000005c0)='0', 0x1}, {&(0x7f0000005180)='^', 0x1}], 0x3}}], 0x1, 0x0)
write(r0, &(0x7f0000000280)="8ef8", 0x2)

1.510718616s ago: executing program 1 (id=952):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xd1, 0x0, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000095009a1000"/32], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x300)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c9", 0x1)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmmsg$alg(r5, &(0x7f0000005dc0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)="d8", 0x1}], 0x1, 0x0, 0x0, 0x80}], 0x1, 0x40)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4)
recvmmsg(r5, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b40)=""/98, 0x62}], 0x1}, 0x7ffe}], 0x1, 0x10000, 0x0)
sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="be18e3db161489108b8c4a358a48a5135cff7b72551cf37032db6aa4be9e422d486e70bd1ae453a3b68354fcbf3c8d", 0x2f}, {&(0x7f0000000040)="402698c203befd3883945ba1c8cba6fe731df86aa2857257f92c949c4329822704", 0x21}, {&(0x7f0000000100)="e7d020e49c79e2ac029958ca536b9572babd", 0x12}], 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00\x00'], 0x58}, 0x80)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={<r7=>0x0}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000180)={r7, 0x8001}, &(0x7f0000000200)=0x8)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r5, 0x40049366, &(0x7f00000003c0))
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000005000000b7030000000000b7000000000000009500"/40], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9, 0x0, 0x2}, 0x18)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(r10, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000100)=0x40)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001900010028bd700000003dc02d"], 0x1c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000300)=@newtaction={0x5c, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0xec0, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0)

1.391389698s ago: executing program 1 (id=953):
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0)
shutdown(r1, 0x1)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private0, 0x0, 0x6c}, @in6=@remote, {}, {0x549}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'aegis256-aesni\x00'}, 0x0, 0x80}}]}, 0x184}}, 0x0)
splice(r1, 0x0, r0, 0x0, 0x2, 0x0)

1.274011101s ago: executing program 1 (id=954):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000240)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4044090}, 0x0)
recvmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000600)=""/4095, 0xfff}], 0x1}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac0100001000330600000f0000000000fc000000000000000000000000000000ffffffff00ffffffff00000000ffff0000004000000080010000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000032000000e000000200000000000000000019000023030000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd7000000000000a000200000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0020"], 0x1ac}}, 0x0)

1.1296252s ago: executing program 1 (id=955):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(r4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x1f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4)
close(0x4)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x1}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}]}}]}, 0x48}}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.010392499s ago: executing program 1 (id=956):
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r1 = socket(0x10, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000001d0001002abd7000fcdbdf2502000000", @ANYRES32=0x0, @ANYBLOB="80002900140001"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40048a0)
write(r1, &(0x7f0000000000)="240000001e005f8000400000000000000a000000010000000000080008000100000303ff", 0x24)
sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1a, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0)

1.010015287s ago: executing program 1 (id=957):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f0000000040)=0x1, 0x4)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa16725d7f004b756}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r3, 0x200, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x101}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20004005)
r4 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r4, &(0x7f00000000c0)={0x18, 0x2, {0x3, @broadcast}}, 0x1e)
bind$pptp(r4, &(0x7f0000000200)={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e)
setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0)
splice(r2, 0x0, r1, 0x0, 0x30fea7, 0xa)

860.826017ms ago: executing program 0 (id=958):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000040)=0x78, 0x4)
sendmmsg$inet6(r2, &(0x7f0000000440)=[{{&(0x7f0000007c00)={0xa, 0x4e24, 0xfffffffe, @local, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@pktinfo={{0x24, 0x29, 0x32, {@private1}}}], 0x28}}], 0x1, 0x40d4)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x9, 0xa, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x50}, 0x1, 0x7}, 0x0)
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
socket$l2tp(0x2, 0x2, 0x73)
readv(r0, &(0x7f0000001b00), 0x7e)
splice(r4, 0x0, r1, 0x0, 0x10000008ebc, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0xa0, 0x10, 0x701, 0x0, 0x0, {0xa}, [@generic="a90e2aa61063a8d769d8628028e24c64f1388920eb44dc9c1cb534302939732d6966a64bfb5976e2d82ede295866e7852a30ec4cdbac65877df44b617466febceb4a481425637a696fb5a7332d376b9f2f6ae5c6730c88421a5e74ddcaf9c975bc6c18427aac75f59109bec5c5ef456c768a636c2bbc504fdab53cc799755d45859250f066c3157c4b"]}, 0xa0}, 0x1, 0x0, 0x0, 0x4040091}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x34, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x800}, @TCA_HHF_QUANTUM={0x8, 0x2, 0xd}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x6}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x8}, @TCA_HHF_BACKLOG_LIMIT={0x0, 0x1, 0x2}, @TCA_HHF_QUANTUM={0x3, 0x2, 0xffff8001}]}}, @TCA_RATE={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x48801}, 0x0)
splice(r0, 0x0, r5, 0x0, 0x25a5, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e23, 0xfe, @mcast2, 0xae}}, 0x0, 0x0, 0xb, 0x0, "7a901f645285cddfbb9f5795f0625f8a34bce2feeb361638a6d5afea5c9a74bde0f286f2c3b72daeddecb7630c2aa1556c5789bf4e55abc554f7a3e237a207726dbaf419a45b6108df8bfb132769b332"}, 0xd8)

730.806µs ago: executing program 0 (id=959):
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000050000000000000023000000611108040000000085000000c6000a009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffc0}, 0x94)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x3, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000000080)="44f9", 0x2, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e0794ba217d24cb1dd5eab952f7a5004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a6dc4facc231ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148be3b2e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979009857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef09eecfc3344b8d3d524a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef568fc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b625491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd907000000000000000d9cae846bcbfa8cce7b893e578af7dc7d5e8732cac2d114b1457261bc5dfb508078d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000ff0300000000000000000000000000000000005205000000dc1c010100000000000052a93466ae595c6a8cda6d0d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd5236460000000000000000000000000000000000000000000000ff01000000000000ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf10775"], 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1e, 0xc, 0x5, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0), &(0x7f00000007c0), 0xc2a, r2}, 0x38)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x32)
getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000080))
sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x4000002)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20)
sendto$inet6(r1, &(0x7f0000000340)="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", 0x1000, 0x480f4, &(0x7f0000000040)={0xa, 0x4e21, 0xff, @local, 0x1ff}, 0x1c)
r5 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r5, 0x1, 0x5, &(0x7f00000000c0)=0xabb3, 0x4)
sendmsg$inet(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x48, &(0x7f00000001c0)=[{&(0x7f0000000200)="080016fbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x40810)
splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0)

0s ago: executing program 0 (id=960):
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r3)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r4, 0x821, 0x70bd2c, 0x2ddfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0x9, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_SHORT_ADDR={0x0, 0x4, 0xaaa2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x40080)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x2, 0x8, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x48084)
recvmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x2022)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x1, @none}, 0xe)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r7)
sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)={0x28, r8, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000002c0)={'wpan4\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan3\x00', <r10=>0x0})
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x12012, r5, 0x9fdf5000)
ppoll(0x0, 0x0, &(0x7f0000002d00)={0x0, 0x989680}, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000380)={'wpan3\x00', <r11=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r8, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x40800)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000004c0)={<r12=>0xffffffffffffffff})
setsockopt$TIPC_SRC_DROPPABLE(r12, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4)
setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x2, 0x3, 0x2)
close(0xffffffffffffffff)
socket$kcm(0x2, 0x3, 0x2)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:22856' (ED25519) to the list of known hosts.
syzkaller login: [   48.571522][ T5817] cgroup: Unknown subsys name 'net'
[   48.703538][ T5817] cgroup: Unknown subsys name 'cpuset'
[   48.710952][ T5817] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.201223][ T5817] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.715447][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.731935][ T5219] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.746493][ T5219] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.750794][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.753800][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.757966][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.762656][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.764136][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.768199][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.771325][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.771911][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.774167][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.778269][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.782609][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.787803][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.027235][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   54.115797][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   54.121222][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.124415][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.127197][ T5832] bridge_slave_0: entered allmulticast mode
[   54.130203][ T5832] bridge_slave_0: entered promiscuous mode
[   54.152265][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.154761][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.158744][ T5832] bridge_slave_1: entered allmulticast mode
[   54.161699][ T5832] bridge_slave_1: entered promiscuous mode
[   54.222656][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   54.235779][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.241473][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.291355][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.294827][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.298147][ T5828] bridge_slave_0: entered allmulticast mode
[   54.301943][ T5828] bridge_slave_0: entered promiscuous mode
[   54.308306][ T5832] team0: Port device team_slave_0 added
[   54.310700][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.313818][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.317266][ T5828] bridge_slave_1: entered allmulticast mode
[   54.321206][ T5828] bridge_slave_1: entered promiscuous mode
[   54.343927][ T5832] team0: Port device team_slave_1 added
[   54.381386][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.421220][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.433339][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.436114][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.445120][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.475573][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.480376][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.483529][ T5837] bridge_slave_0: entered allmulticast mode
[   54.487956][ T5837] bridge_slave_0: entered promiscuous mode
[   54.493779][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.497090][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.506169][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.517784][ T5828] team0: Port device team_slave_0 added
[   54.521179][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.524331][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.528261][ T5837] bridge_slave_1: entered allmulticast mode
[   54.532225][ T5837] bridge_slave_1: entered promiscuous mode
[   54.552794][ T5828] team0: Port device team_slave_1 added
[   54.611501][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.615497][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.620022][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.630213][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.638368][ T5832] hsr_slave_0: entered promiscuous mode
[   54.640797][ T5832] hsr_slave_1: entered promiscuous mode
[   54.644473][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.660415][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.662853][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.672320][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.700674][ T5837] team0: Port device team_slave_0 added
[   54.725264][ T5837] team0: Port device team_slave_1 added
[   54.763553][ T5828] hsr_slave_0: entered promiscuous mode
[   54.766109][ T5828] hsr_slave_1: entered promiscuous mode
[   54.769473][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.772830][ T5828] Cannot create hsr debugfs directory
[   54.791175][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.793629][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.803348][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.814161][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.816821][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.825446][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.920853][ T5837] hsr_slave_0: entered promiscuous mode
[   54.923191][ T5837] hsr_slave_1: entered promiscuous mode
[   54.925464][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.929014][ T5837] Cannot create hsr debugfs directory
[   55.058487][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.069560][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.083719][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.101261][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.134713][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.140983][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.149764][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.154937][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.204934][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.212434][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.225218][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.232882][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.321347][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.357350][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   55.363268][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.375730][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.381576][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.384520][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.399673][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.402181][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.413910][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   55.434280][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.437404][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.449568][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   55.461692][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.464680][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.495495][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.498453][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.503802][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.506236][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.526198][ T5828] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   55.530200][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.610212][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.669720][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.679223][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.729753][ T5828] veth0_vlan: entered promiscuous mode
[   55.734622][ T5832] veth0_vlan: entered promiscuous mode
[   55.741177][ T5828] veth1_vlan: entered promiscuous mode
[   55.749652][ T5832] veth1_vlan: entered promiscuous mode
[   55.754989][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.792364][ T5832] veth0_macvtap: entered promiscuous mode
[   55.795724][ T5828] veth0_macvtap: entered promiscuous mode
[   55.802193][ T5828] veth1_macvtap: entered promiscuous mode
[   55.812983][ T5832] veth1_macvtap: entered promiscuous mode
[   55.829357][ T5837] veth0_vlan: entered promiscuous mode
[   55.839632][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.852801][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.857304][ T5830] Bluetooth: hci2: command tx timeout
[   55.857645][ T5219] Bluetooth: hci1: command tx timeout
[   55.859431][ T5836] Bluetooth: hci0: command tx timeout
[   55.868478][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.873149][ T5837] veth1_vlan: entered promiscuous mode
[   55.883780][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.889088][ T5678] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.899594][ T5678] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.902563][ T5678] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.914196][ T5678] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.938579][ T5678] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.942128][ T5678] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.945904][ T5837] veth0_macvtap: entered promiscuous mode
[   55.955499][ T5678] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.958968][ T5678] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.963323][ T5837] veth1_macvtap: entered promiscuous mode
[   56.019258][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.055389][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.074370][ T2958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.087848][ T2958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.088719][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.092962][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.099757][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.113163][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.130556][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.133464][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.142564][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.145510][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.154951][ T2958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.160704][ T2958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.192115][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.197805][ T2958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.200347][ T2958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.228164][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.230796][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.258886][ T5897] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1'.
[   56.500986][ T5922] syz.0.9 uses old SIOCAX25GETINFO
[   56.717170][ T5938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13'.
[   56.729452][ T5938] macvlan2: entered allmulticast mode
[   56.731783][ T5938] veth1_vlan: entered allmulticast mode
[   56.851746][ T5947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16'.
[   56.862966][ T5947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16'.
[   56.949516][ T5951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19'.
[   56.953444][ T5951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19'.
[   56.959088][ T5953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18'.
[   56.968397][ T5953] sch_tbf: burst 0 is lower than device veth1 mtu (1514) !
[   57.902134][ T5976] netlink: 16 bytes leftover after parsing attributes in process `syz.2.26'.
[   57.937054][ T5830] Bluetooth: hci1: command tx timeout
[   57.937236][ T5219] Bluetooth: hci2: command tx timeout
[   57.939206][ T5836] Bluetooth: hci0: command tx timeout
[   57.982937][ T5980] lo: entered promiscuous mode
[   57.985164][ T5980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28'.
[   58.088635][ T5988] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.200730][ T5998] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   58.427806][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33'.
[   58.815684][ T5979] lo: left promiscuous mode
[   59.455995][ T6021] gretap0: entered promiscuous mode
[   59.463414][ T6021] 0{X: renamed from gretap0
[   59.468207][ T6021] 0{X: left promiscuous mode
[   59.470098][ T6021] 0{X: entered allmulticast mode
[   59.473258][ T6021] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[   59.480447][ T6022] 1{X: renamed from 30{X (while UP)
[   59.484533][ T6022] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[   60.016726][ T5836] Bluetooth: hci0: command tx timeout
[   60.016764][ T5219] Bluetooth: hci1: command tx timeout
[   60.026499][ T5219] Bluetooth: hci2: command tx timeout
[   60.029075][ T6049] rdma_op ffff8881247561f0 conn xmit_rdma 0000000000000000
[   60.035322][ T6049] xfrm1: entered promiscuous mode
[   60.037592][ T6049] xfrm1: entered allmulticast mode
[   60.198620][ T6067] Cannot find del_set index 0 as target
[   60.341975][ T6078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   60.354419][ T6078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   60.365542][ T6078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   60.995439][ T6110] warning: `syz.2.66' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   61.174483][ T6116] netlink: 'syz.2.67': attribute type 2 has an invalid length.
[   61.215217][ T6118] nbd: must specify at least one socket
[   61.541190][ T6127] Zero length message leads to an empty skb
[   62.097125][ T5836] Bluetooth: hci2: command tx timeout
[   62.099675][ T5830] Bluetooth: hci0: command tx timeout
[   62.099764][ T5219] Bluetooth: hci1: command tx timeout
[   62.313613][ T6158] syz.2.81 uses obsolete (PF_INET,SOCK_PACKET)
[   62.643644][ T6175] tipc: Started in network mode
[   62.645505][ T6175] tipc: Node identity 8a2969d15eae, cluster identity 4711
[   62.648845][ T6175] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.662827][ T6175] tipc: Resetting bearer <eth:syzkaller0>
[   62.680231][ T6179] __nla_validate_parse: 11 callbacks suppressed
[   62.680240][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.88'.
[   62.685347][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.88'.
[   62.702903][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.88'.
[   62.862364][ T6190] syzkaller1: entered promiscuous mode
[   62.864558][ T6190] syzkaller1: entered allmulticast mode
[   63.497840][ T6173] tipc: Disabling bearer <eth:syzkaller0>
[   63.573031][ T6203] netlink: 12 bytes leftover after parsing attributes in process `syz.0.95'.
[   63.576246][ T6203] netlink: 12 bytes leftover after parsing attributes in process `syz.0.95'.
[   63.625361][ T6205] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.630600][ T6205] xt_SECMARK: invalid mode: 0
[   63.990192][ T6234] Driver unsupported XDP return value 0 on prog  (id 12) dev N/A, expect packet loss!
[   64.070014][ T6242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.107'.
[   64.073114][ T6242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.107'.
[   64.076110][ T6242] netlink: 'syz.2.107': attribute type 11 has an invalid length.
[   64.085713][ T6242] netlink: 132 bytes leftover after parsing attributes in process `syz.2.107'.
[   64.103664][ T6242] syz.2.107 (6242) used greatest stack depth: 20360 bytes left
[   64.384604][ T6256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.109'.
[   64.501258][ T6259] netlink: 410 bytes leftover after parsing attributes in process `syz.1.110'.
[   64.601035][ T6262] tipc: Started in network mode
[   64.602806][ T6262] tipc: Node identity , cluster identity 4711
[   64.604999][ T6262] tipc: Failed to obtain node identity
[   64.609318][ T6262] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   64.613098][ T6262] syzkaller0: entered promiscuous mode
[   64.615001][ T6262] syzkaller0: entered allmulticast mode
[   65.624065][ T6287] netlink: 'syz.1.119': attribute type 1 has an invalid length.
[   65.632820][ T6287] netlink: 'syz.1.119': attribute type 3 has an invalid length.
[   65.842159][ T6303] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.845514][ T6303] batman_adv: batadv0: Removing interface: batadv_slave_0
[   65.850589][ T6303] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   65.853586][ T6303] batman_adv: batadv0: Removing interface: batadv_slave_1
[   66.109480][ T6315] bridge_slave_0: left allmulticast mode
[   66.111543][ T6315] bridge_slave_0: left promiscuous mode
[   66.114164][ T6315] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.122080][ T6315] bridge_slave_1: left allmulticast mode
[   66.124579][ T6315] bridge_slave_1: left promiscuous mode
[   66.129151][ T6315] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.137730][ T6315] bond0: (slave bond_slave_0): Releasing backup interface
[   66.144579][ T6315] bond0: (slave bond_slave_1): Releasing backup interface
[   66.152647][ T6315] team0: Port device team_slave_0 removed
[   66.158449][ T6315] team0: Port device team_slave_1 removed
[   66.217080][ T6317] xt_TPROXY: Can be used only with -p tcp or -p udp
[   67.124079][ T6341] netlink: 'syz.0.132': attribute type 64 has an invalid length.
[   67.182835][ T6341] veth1_vlan (unregistering): left allmulticast mode
[   67.414475][ T6349] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[   69.331145][ T6369] xt_hashlimit: size too large, truncated to 1048576
[   69.454322][ T6373] openvswitch: netlink: Missing key (keys=44, expected=200000)
[   69.594093][ T6384] __nla_validate_parse: 10 callbacks suppressed
[   69.594105][ T6384] netlink: 16 bytes leftover after parsing attributes in process `syz.2.145'.
[   69.601297][ T6384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.145'.
[   69.609226][ T6384] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   69.615081][ T6387] ip6tnl1: entered promiscuous mode
[   69.677425][ T6390] netlink: 'syz.2.147': attribute type 83 has an invalid length.
[   69.715436][ T6394] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.738026][ T6396] netlink: 'syz.2.149': attribute type 1 has an invalid length.
[   69.763904][ T6396] 8021q: adding VLAN 0 to HW filter on device bond1
[   69.773587][ T6396] bond1: (slave ip6gretap1): making interface the new active one
[   69.778656][ T6396] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[   69.784223][ T6396] erspan0: entered allmulticast mode
[   69.791760][ T6396] bond1: (slave erspan0): Enslaving as an active interface with an up link
[   70.932209][ T6449] netlink: 'syz.1.161': attribute type 39 has an invalid length.
[   70.980268][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[   70.982548][ T1359] ieee802154 phy1 wpan1: encryption failed: -22
[   71.179389][ T6456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.163'.
[   71.267817][ T6459] netlink: 'syz.1.163': attribute type 2 has an invalid length.
[   71.279219][ T6459] : entered promiscuous mode
[   71.333540][ T6465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.165'.
[   71.413438][ T6471] bridge: RTM_NEWNEIGH with invalid state 0x1
[   71.633073][ T6476] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   71.644827][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.168'.
[   71.719419][ T6482] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.722777][ T6482] batadv_slave_0: entered promiscuous mode
[   71.733470][ T6476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.168'.
[   72.005908][ T6507] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32)
[   72.011152][ T6507] netlink: 36 bytes leftover after parsing attributes in process `syz.0.172'.
[   72.279331][ T6517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.175'.
[   73.445315][ T6541] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[   73.831372][ T6567] netlink: 'syz.2.187': attribute type 1 has an invalid length.
[   73.838813][ T6567] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.897155][ T6571] xt_socket: unknown flags 0xd0
[   74.005735][ T6578] netlink: 80 bytes leftover after parsing attributes in process `syz.2.191'.
[   74.220021][ T6592] can: request_module (can-proto-3) failed.
[   74.537892][ T6612] netlink: 44 bytes leftover after parsing attributes in process `syz.0.200'.
[   74.555057][ T6612] netlink: 'syz.0.200': attribute type 4 has an invalid length.
[   74.566043][ T6612] : renamed from bond0 (while UP)
[   75.144982][ T6628] syzkaller0: entered promiscuous mode
[   75.148031][ T6628] syzkaller0: entered allmulticast mode
[   75.232491][ T6635] __nla_validate_parse: 1 callbacks suppressed
[   75.232500][ T6635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.206'.
[   75.433620][ T6649] netem: incorrect ge model size
[   75.435556][ T6649] netem: change failed
[   75.461323][ T6649] bridge0: port 3(batadv1) entered blocking state
[   75.464472][ T6649] bridge0: port 3(batadv1) entered disabled state
[   75.469595][ T6649] batadv1: entered allmulticast mode
[   75.474211][ T6649] batadv1: entered promiscuous mode
[   75.750057][ T6665] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.892930][ T6665] netlink: 'syz.0.214': attribute type 1 has an invalid length.
[   75.896428][ T6665] netlink: 232 bytes leftover after parsing attributes in process `syz.0.214'.
[   75.900389][ T6665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.214'.
[   75.955967][ T6670] Bluetooth: MGMT ver 1.23
[   75.960522][   T13] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[   75.963684][   T13] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[   76.266142][ T6700] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   76.477625][ T6722] tipc: Started in network mode
[   76.479299][ T6722] tipc: Node identity ac14140f, cluster identity 4711
[   76.481794][ T6722] tipc: New replicast peer: 255.255.255.255
[   76.484148][ T6722] tipc: Enabled bearer <udp:syz2>, priority 10
[   76.517154][ T6722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.230'.
[   76.520058][ T6722] tipc: Disabling bearer <udp:syz2>
[   77.275915][ T6724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.232'.
[   77.305058][ T6724] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address
[   77.318992][ T6724] bond0: (slave vxcan3): Error -95 calling set_mac_address
[   77.345932][ T6730] netlink: 'syz.2.234': attribute type 4 has an invalid length.
[   77.357383][ T6735] macvlan0: entered promiscuous mode
[   77.360472][ T6735] macvlan0: entered allmulticast mode
[   77.366619][ T6735] bond0: (slave macvlan0): Error -98 calling set_mac_address
[   77.475868][ T6744] netlink: 24 bytes leftover after parsing attributes in process `syz.2.238'.
[   77.478960][ T6744] netlink: 24 bytes leftover after parsing attributes in process `syz.2.238'.
[   77.482463][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.238'.
[   77.485692][ T6744] netlink: 12 bytes leftover after parsing attributes in process `syz.2.238'.
[   77.490680][ T6747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.237'.
[   78.252730][ T6788] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.256015][ T6788] syzkaller0: entered promiscuous mode
[   78.262922][ T6788] syzkaller0: entered allmulticast mode
[   78.290579][ T6788] tipc: Resetting bearer <eth:syzkaller0>
[   78.340636][ T6788] tipc: Disabling bearer <eth:syzkaller0>
[   78.415279][ T6800] netlink: 'syz.0.250': attribute type 1 has an invalid length.
[   78.421727][ T6800] netlink: 'syz.0.250': attribute type 1 has an invalid length.
[   79.420540][ T6842] Cannot find del_set index 0 as target
[   79.771338][ T6866] netlink: 'syz.2.265': attribute type 4 has an invalid length.
[   79.925655][ T6886] tc_dump_action: action bad kind
[   80.036836][ T6896] bridge0: port 4(erspan0) entered blocking state
[   80.039985][ T6896] bridge0: port 4(erspan0) entered disabled state
[   80.043535][ T6896] erspan0: entered allmulticast mode
[   80.055124][ T6896] erspan0: entered promiscuous mode
[   80.060002][ T6896] bridge0: port 4(erspan0) entered blocking state
[   80.062655][ T6896] bridge0: port 4(erspan0) entered forwarding state
[   80.077363][ T6896] erspan0: left allmulticast mode
[   80.079244][ T6896] erspan0: left promiscuous mode
[   80.083226][ T6896] bridge0: port 4(erspan0) entered disabled state
[   81.044812][ T6928] __nla_validate_parse: 9 callbacks suppressed
[   81.044823][ T6928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.278'.
[   81.080618][ T6930] syzkaller1: entered promiscuous mode
[   81.082490][ T6930] syzkaller1: entered allmulticast mode
[   81.217976][    T9] cfg80211: failed to load regulatory.db
[   81.454566][ T6954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.287'.
[   81.459223][ T6954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.287'.
[   81.470893][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.287'.
[   81.749743][ T6970] netlink: 20 bytes leftover after parsing attributes in process `syz.2.292'.
[   81.959220][ T6983] netlink: 20 bytes leftover after parsing attributes in process `syz.2.296'.
[   82.554321][ T6997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.300'.
[   82.588587][ T6999] netlink: 108 bytes leftover after parsing attributes in process `syz.1.299'.
[   82.597652][ T6999] netlink: 108 bytes leftover after parsing attributes in process `syz.1.299'.
[   82.755409][ T7007] ip6gre1: entered allmulticast mode
[   82.815481][ T7009] netlink: 'syz.2.304': attribute type 1 has an invalid length.
[   82.819502][ T7009] netlink: 244 bytes leftover after parsing attributes in process `syz.2.304'.
[   82.899342][ T7013] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[   82.929062][ T7009] netlink: 'syz.2.304': attribute type 1 has an invalid length.
[   83.288130][ T7036] sctp: [Deprecated]: syz.2.311 (pid 7036) Use of struct sctp_assoc_value in delayed_ack socket option.
[   83.288130][ T7036] Use struct sctp_sack_info instead
[   83.972424][ T7057] netlink: 'syz.1.316': attribute type 1 has an invalid length.
[   83.975563][ T7057] netlink: 'syz.1.316': attribute type 1 has an invalid length.
[   84.211634][ T7074] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   84.215095][ T7074] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   85.061360][ T7090] xt_l2tp: invalid flags combination: 8
[   85.245542][ T7098] mac80211_hwsim hwsim2 ": renamed from wlan0 (while UP)
[   85.306558][ T5219] Bluetooth: hci2: command tx timeout
[   85.628524][ T7125] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   85.632192][ T7125] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   86.074450][ T7149] __nla_validate_parse: 8 callbacks suppressed
[   86.074460][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.346'.
[   86.079712][ T7147] lo: entered promiscuous mode
[   86.083799][ T7152] netlink: 68 bytes leftover after parsing attributes in process `syz.0.345'.
[   86.191055][ T7147] lo: left promiscuous mode
[   86.252428][ T7156] netlink: 'syz.2.347': attribute type 1 has an invalid length.
[   86.255076][ T7156] netlink: 'syz.2.347': attribute type 11 has an invalid length.
[   86.258527][ T7156] netlink: 220 bytes leftover after parsing attributes in process `syz.2.347'.
[   86.261771][ T7156] netlink: 'syz.2.347': attribute type 1 has an invalid length.
[   86.265020][ T7156] netlink: 'syz.2.347': attribute type 11 has an invalid length.
[   86.268735][ T7156] netlink: 220 bytes leftover after parsing attributes in process `syz.2.347'.
[   86.271984][ T7156] netlink: 'syz.2.347': attribute type 1 has an invalid length.
[   86.275482][ T7156] netlink: 'syz.2.347': attribute type 11 has an invalid length.
[   86.282675][ T7156] netlink: 220 bytes leftover after parsing attributes in process `syz.2.347'.
[   86.285762][ T7156] netlink: 'syz.2.347': attribute type 1 has an invalid length.
[   86.289274][ T7156] netlink: 'syz.2.347': attribute type 11 has an invalid length.
[   86.292608][ T7156] netlink: 220 bytes leftover after parsing attributes in process `syz.2.347'.
[   86.295644][ T7156] netlink: 'syz.2.347': attribute type 1 has an invalid length.
[   86.298562][ T7156] netlink: 'syz.2.347': attribute type 11 has an invalid length.
[   86.301208][ T7156] netlink: 220 bytes leftover after parsing attributes in process `syz.2.347'.
[   86.304337][ T7156] netlink: 220 bytes leftover after parsing attributes in process `syz.2.347'.
[   86.383998][ T7163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.349'.
[   86.389078][ T7163] netlink: 24 bytes leftover after parsing attributes in process `syz.2.349'.
[   87.421107][ T7180] ieee802154 phy0 wpan0: encryption failed: -90
[   87.625862][ T7197] Bluetooth: MGMT ver 1.23
[   88.327949][ T7249] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   88.511491][ T7264] syzkaller0: entered promiscuous mode
[   88.513710][ T7264] syzkaller0: entered allmulticast mode
[   88.985672][ T7283] x_tables: duplicate underflow at hook 2
[   89.080075][ T7281] syz.2.387 (7281) used greatest stack depth: 19128 bytes left
[   89.603282][ T7329] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.606203][ T7329] syzkaller0: entered promiscuous mode
[   89.608682][ T7329] syzkaller0: entered allmulticast mode
[   89.624742][ T7329] tipc: Resetting bearer <eth:syzkaller0>
[   90.149842][ T7370] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   90.180847][ T7375] _Z`Ԁ@: entered promiscuous mode
[   90.552583][ T7395] xt_connbytes: Forcing CT accounting to be enabled
[   90.555198][ T7395] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   90.560049][ T7395] xt_bpf: check failed: parse error
[   90.628236][ T5860] tipc: Node number set to 3565644241
[   90.704762][ T7399] team0: entered promiscuous mode
[   90.954177][ T7407] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.148129][ T7414] __nla_validate_parse: 74 callbacks suppressed
[   91.148145][ T7414] netlink: 100 bytes leftover after parsing attributes in process `syz.0.426'.
[   91.431713][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.431'.
[   91.450623][ T7440] xt_socket: unknown flags 0x8
[   91.458040][ T7441] netlink: 24 bytes leftover after parsing attributes in process `syz.1.432'.
[   91.483500][ T7438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.431'.
[   91.496971][ T7438] batadv1: left allmulticast mode
[   91.499111][ T7438] batadv1: left promiscuous mode
[   91.501406][ T7438] bridge0: port 3(batadv1) entered disabled state
[   91.505704][ T7438] bridge_slave_1: left allmulticast mode
[   91.508110][ T7438] bridge_slave_1: left promiscuous mode
[   91.510347][ T7438] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.515658][ T7438] bridge_slave_0: left allmulticast mode
[   91.518941][ T7438] bridge_slave_0: left promiscuous mode
[   91.521086][ T7438] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.769584][ T7449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.433'.
[   91.923821][ T7452] netlink: 20 bytes leftover after parsing attributes in process `syz.2.434'.
[   94.310110][ T7509] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   94.335817][ T7513] validate_nla: 7 callbacks suppressed
[   94.335832][ T7513] netlink: 'syz.2.450': attribute type 11 has an invalid length.
[   94.404139][ T7525] netlink: 36 bytes leftover after parsing attributes in process `syz.0.451'.
[   95.503374][ T7589] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   95.508681][ T7589] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   95.555135][ T7594] netlink: 24 bytes leftover after parsing attributes in process `syz.0.463'.
[   97.925041][ T7681] netlink: 'syz.1.487': attribute type 4 has an invalid length.
[   97.928584][ T7681] netlink: 'syz.1.487': attribute type 6 has an invalid length.
[   97.931616][ T7681] netlink: 204 bytes leftover after parsing attributes in process `syz.1.487'.
[   98.294464][ T7704] netlink: 'syz.2.491': attribute type 1 has an invalid length.
[   98.325456][ T7704] 8021q: adding VLAN 0 to HW filter on device bond4
[   98.338609][ T7704] vlan2: entered promiscuous mode
[   98.340338][ T7704] bond4: entered promiscuous mode
[   98.342466][ T7704] vlan2: entered allmulticast mode
[   98.344697][ T7704] bond4: entered allmulticast mode
[   98.360734][ T7704] bond4: (slave gretap2): making interface the new active one
[   98.364343][ T7704] gretap2: entered promiscuous mode
[   98.373546][ T7704] gretap2: entered allmulticast mode
[   98.384051][ T7704] bond4: (slave gretap2): Enslaving as an active interface with an up link
[   98.392447][ T7708] netlink: 'syz.1.492': attribute type 33 has an invalid length.
[   98.395799][ T7708] netlink: 152 bytes leftover after parsing attributes in process `syz.1.492'.
[   98.419442][ T7704] syz.2.491 (7704) used greatest stack depth: 18480 bytes left
[   98.464168][ T7711] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   98.559443][ T7722] netlink: 'syz.1.496': attribute type 2 has an invalid length.
[   98.609215][ T7727] netlink: 'syz.1.497': attribute type 9 has an invalid length.
[   98.704287][ T7734] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[   98.748687][ T7736] netlink: 224 bytes leftover after parsing attributes in process `syz.2.499'.
[   98.756143][ T7736] netlink: 'syz.2.499': attribute type 1 has an invalid length.
[   98.791000][ T7736] 8021q: adding VLAN 0 to HW filter on device bond5
[   98.805481][ T7736] bond5: (slave gretap3): making interface the new active one
[   98.811624][ T7736] bond5: (slave gretap3): Enslaving as an active interface with an up link
[   98.999619][ T7746] openvswitch: netlink: IP tunnel dst address not specified
[   99.765281][ T7755] netlink: 20 bytes leftover after parsing attributes in process `syz.1.504'.
[   99.849156][ T7757] netlink: 244 bytes leftover after parsing attributes in process `syz.2.505'.
[  100.881046][ T7787] netlink: 'syz.2.513': attribute type 1 has an invalid length.
[  100.884516][ T7787] netlink: 'syz.2.513': attribute type 4 has an invalid length.
[  100.889105][ T7787] netlink: 192 bytes leftover after parsing attributes in process `syz.2.513'.
[  101.188129][ T7808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.519'.
[  101.249464][ T7814] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  101.250564][ T7811] netlink: zone id is out of range
[  101.259769][ T7811] netlink: zone id is out of range
[  101.261746][ T7811] netlink: zone id is out of range
[  101.263509][ T7811] netlink: zone id is out of range
[  101.265313][ T7811] netlink: zone id is out of range
[  101.269023][ T7811] netlink: zone id is out of range
[  101.270923][ T7811] netlink: zone id is out of range
[  101.272833][ T7811] netlink: zone id is out of range
[  101.277822][ T7814] tipc: Resetting bearer <eth:syzkaller0>
[  101.292172][ T7813] tipc: Resetting bearer <eth:syzkaller0>
[  102.009475][ T7813] tipc: Disabling bearer <eth:syzkaller0>
[  102.282399][ T7838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.525'.
[  102.285252][ T7838] veth1_macvtap: default FDB implementation only supports local addresses
[  102.327859][ T7843] xt_hashlimit: max too large, truncated to 1048576
[  102.347379][ T7849] netlink: 48 bytes leftover after parsing attributes in process `syz.1.529'.
[  102.376035][ T7854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.530'.
[  102.383386][ T7854] netlink: 'syz.2.530': attribute type 1 has an invalid length.
[  102.484539][ T7860] netlink: 'syz.2.530': attribute type 2 has an invalid length.
[  102.513053][ T7854] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  102.579733][ T7865] netlink: 'syz.0.534': attribute type 9 has an invalid length.
[  102.821296][ T7883] tipc: Started in network mode
[  102.823517][ T7883] tipc: Node identity 6ec1bbdb3585, cluster identity 4711
[  102.827105][ T7883] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.830416][ T7883] syzkaller0: entered promiscuous mode
[  102.832867][ T7883] syzkaller0: entered allmulticast mode
[  102.899500][ T7882] tipc: Resetting bearer <eth:syzkaller0>
[  102.913573][ T7882] tipc: Disabling bearer <eth:syzkaller0>
[  103.211907][ T7912] pim6reg1: entered promiscuous mode
[  103.214849][ T7912] pim6reg1: entered allmulticast mode
[  103.218292][ T7913] netlink: 'syz.1.547': attribute type 6 has an invalid length.
[  103.372201][ T5836] Bluetooth: hci2: link tx timeout
[  103.374326][ T5836] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  103.418220][ T7928] xt_HMARK: proto mask must be zero with L3 mode
[  103.475175][ T7935] __nla_validate_parse: 4 callbacks suppressed
[  103.475188][ T7935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.552'.
[  103.493022][ T7935] gtp0: entered promiscuous mode
[  103.495303][ T7935] gtp0: entered allmulticast mode
[  103.502891][ T7935] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.552'.
[  103.671515][ T7948] netlink: 'syz.1.558': attribute type 2 has an invalid length.
[  103.674953][ T7948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.558'.
[  103.958913][ T7970] netlink: 16 bytes leftover after parsing attributes in process `syz.0.566'.
[  104.519115][ T7988] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  104.867494][ T8001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.574'.
[  104.890833][ T8001] xt_CT: You must specify a L4 protocol and not use inversions on it
[  104.899522][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.574'.
[  104.924228][ T8001] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3942. macoff=106
[  105.088834][ T8006] syz_tun: entered promiscuous mode
[  105.093373][ T8006] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network
[  105.100031][ T8006] hsr1: entered allmulticast mode
[  105.102247][ T8006] syz_tun: entered allmulticast mode
[  105.104778][ T8006] batadv_slave_0: entered allmulticast mode
[  105.216529][ T5836] Bluetooth: hci2: command 0x0401 tx timeout
[  105.219115][ T5219] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  105.233118][ T8010] netlink: 88 bytes leftover after parsing attributes in process `syz.0.577'.
[  105.411042][ T8022] team0: entered promiscuous mode
[  105.413140][ T8022] team_slave_0: entered promiscuous mode
[  105.415153][ T8022] team_slave_1: entered promiscuous mode
[  105.709234][ T8034] netlink: 'syz.2.582': attribute type 1 has an invalid length.
[  105.742456][ T8034] gretap4: entered promiscuous mode
[  105.840868][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.583'.
[  105.844788][ T8037] netlink: 'syz.2.583': attribute type 5 has an invalid length.
[  105.851522][ T8037] netlink: 20 bytes leftover after parsing attributes in process `syz.2.583'.
[  105.860213][ T8037] geneve2: entered promiscuous mode
[  105.862222][ T8037] geneve2: entered allmulticast mode
[  105.866080][   T13] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  105.871291][   T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  105.875327][   T13] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  105.879806][   T13] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  105.935584][ T8039] netlink: 'syz.2.584': attribute type 12 has an invalid length.
[  106.821286][ T8044] netlink: 260 bytes leftover after parsing attributes in process `syz.2.586'.
[  106.897933][ T8049] vlan3: entered promiscuous mode
[  106.899865][ T8049] bond0: entered promiscuous mode
[  107.127414][ T8071] veth1_to_team: entered allmulticast mode
[  107.132938][ T8071] net_ratelimit: 6 callbacks suppressed
[  107.132947][ T8071] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  107.296955][ T5219] Bluetooth: hci2: command 0x0401 tx timeout
[  108.222417][ T8094] can: request_module (can-proto-3) failed.
[  108.414475][ T8021] team0: left promiscuous mode
[  108.416951][ T8021] team_slave_0: left promiscuous mode
[  108.419459][ T8021] team_slave_1: left promiscuous mode
[  108.672327][ T8115] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  108.850258][ T8124] __nla_validate_parse: 6 callbacks suppressed
[  108.850268][ T8124] netlink: 88 bytes leftover after parsing attributes in process `syz.0.610'.
[  109.102957][ T8136] netlink: 16 bytes leftover after parsing attributes in process `syz.0.612'.
[  109.931900][ T8145] netlink: 'syz.0.615': attribute type 1 has an invalid length.
[  109.950305][ T8145] 8021q: adding VLAN 0 to HW filter on device bond2
[  109.971129][ T8145] bond2: (slave veth3): Enslaving as an active interface with a down link
[  109.979765][ T8145] vlan0: entered allmulticast mode
[  109.981575][ T8145] veth1: entered allmulticast mode
[  110.313929][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.621'.
[  110.318995][ T8167] netlink: 24 bytes leftover after parsing attributes in process `syz.0.621'.
[  110.325766][ T8171] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.622'.
[  110.442342][ T8181] netlink: 'syz.0.625': attribute type 4 has an invalid length.
[  110.459438][ T8181] netlink: 'syz.0.625': attribute type 4 has an invalid length.
[  110.560690][ T8195] netlink: 24 bytes leftover after parsing attributes in process `syz.2.629'.
[  110.561044][ T8196] netlink: 24 bytes leftover after parsing attributes in process `syz.2.629'.
[  111.304371][ T8213] netlink: 'syz.1.634': attribute type 12 has an invalid length.
[  111.784602][ T8252] tipc: New replicast peer: 255.255.255.67
[  111.787992][ T8252] tipc: Enabled bearer <udp:syz2>, priority 10
[  112.192920][ T8263] netlink: 'syz.0.647': attribute type 1 has an invalid length.
[  112.339476][ T8268] netlink: 180 bytes leftover after parsing attributes in process `syz.0.649'.
[  112.411724][ T8272] tc_dump_action: action bad kind
[  112.414013][ T8272] netlink: 9896 bytes leftover after parsing attributes in process `syz.0.651'.
[  112.578684][ T8282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  113.664965][ T8323] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.668856][ T8324] syzkaller0: entered promiscuous mode
[  113.670989][ T8324] syzkaller0: entered allmulticast mode
[  113.683689][ T8324] tipc: Resetting bearer <eth:syzkaller0>
[  113.802751][ T8326] tipc: Resetting bearer <eth:syzkaller0>
[  113.811175][ T8326] tipc: Disabling bearer <eth:syzkaller0>
[  113.875342][ T8328] netlink: 88 bytes leftover after parsing attributes in process `syz.2.665'.
[  114.091754][ T8337] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.095652][ T8337] syzkaller0: entered promiscuous mode
[  114.098334][ T5219] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  114.102251][ T8337] syzkaller0: entered allmulticast mode
[  114.106487][ T5219] Bluetooth: hci2: command 0x0401 tx timeout
[  114.119039][ T8337] tipc: Resetting bearer <eth:syzkaller0>
[  114.122433][ T8336] tipc: Resetting bearer <eth:syzkaller0>
[  114.132595][ T8336] tipc: Disabling bearer <eth:syzkaller0>
[  114.393169][ T8350] netlink: 32 bytes leftover after parsing attributes in process `syz.2.670'.
[  114.397241][ T8350] netlink: 24 bytes leftover after parsing attributes in process `syz.2.670'.
[  114.402323][ T8352] netlink: 32 bytes leftover after parsing attributes in process `syz.2.670'.
[  114.476788][ T8356] pim6reg1: entered promiscuous mode
[  114.479105][ T8356] pim6reg1: entered allmulticast mode
[  115.359590][ T8365] veth4: entered allmulticast mode
[  115.521893][ T8369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.675'.
[  116.552641][ T8379] netlink: 172 bytes leftover after parsing attributes in process `syz.1.679'.
[  116.557874][ T8379] netlink: 'syz.1.679': attribute type 83 has an invalid length.
[  116.593013][ T8381] netlink: 16 bytes leftover after parsing attributes in process `syz.1.680'.
[  117.430175][ T8413] Bluetooth: MGMT ver 1.23
[  117.434478][ T8413] netlink: 'syz.0.687': attribute type 1 has an invalid length.
[  117.481826][ T8413] 8021q: adding VLAN 0 to HW filter on device bond4
[  117.486708][ T8413] bond3: (slave bond4): making interface the new active one
[  117.489893][ T8413] bond3: (slave bond4): Enslaving as an active interface with an up link
[  117.498893][ T8413] netlink: 28 bytes leftover after parsing attributes in process `syz.0.687'.
[  117.502886][ T8413] 8021q: adding VLAN 0 to HW filter on device bond3
[  117.585353][ T8422] SET target dimension over the limit!
[  117.615246][ T8424] netlink: 16 bytes leftover after parsing attributes in process `syz.2.691'.
[  117.620962][ T8424] No such timeout policy "syz0"
[  118.830094][ T8510] lo speed is unknown, defaulting to 1000
[  118.834775][ T8510] lo speed is unknown, defaulting to 1000
[  118.844101][ T8510] lo speed is unknown, defaulting to 1000
[  119.318544][ T3146] lo speed is unknown, defaulting to 1000
[  119.321167][ T8510] infiniband syz0: set active
[  119.326700][ T8510] infiniband syz0: added lo
[  119.377954][ T8510] RDS/IB: syz0: added
[  119.379734][ T8510] smc: adding ib device syz0 with port count 1
[  119.382122][ T8510] smc:    ib device syz0 port 1 has pnetid 
[  119.392634][ T3146] lo speed is unknown, defaulting to 1000
[  119.395370][ T8510] lo speed is unknown, defaulting to 1000
[  119.532751][ T8510] lo speed is unknown, defaulting to 1000
[  119.630194][ T8510] lo speed is unknown, defaulting to 1000
[  120.151735][ T8558] netlink: 24 bytes leftover after parsing attributes in process `syz.0.709'.
[  121.335622][ T8580] netlink: 'syz.0.714': attribute type 1 has an invalid length.
[  121.355949][ T8580] 8021q: adding VLAN 0 to HW filter on device bond5
[  121.378123][ T8580] veth7: entered promiscuous mode
[  121.382331][ T8580] erspan0: entered allmulticast mode
[  121.613818][ T3146] IPVS: starting estimator thread 0...
[  121.653276][ T8588] lo speed is unknown, defaulting to 1000
[  121.716804][ T8589] IPVS: using max 79 ests per chain, 189600 per kthread
[  121.945389][ T8596] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:20000
[  121.974991][ T8601] netlink: 'syz.2.720': attribute type 1 has an invalid length.
[  122.001343][ T8605] netlink: 20 bytes leftover after parsing attributes in process `syz.0.719'.
[  122.112744][ T8599] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.244076][ T8599] tipc: Resetting bearer <eth:syzkaller0>
[  122.260645][ T5678] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.267086][ T5678] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.276468][ T5678] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.280219][ T5678] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.445524][ T8620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.725'.
[  122.946004][ T5860] IPVS: starting estimator thread 0...
[  123.036686][ T8643] IPVS: using max 78 ests per chain, 187200 per kthread
[  132.419626][ T1359] ieee802154 phy0 wpan0: encryption failed: -22
[  146.370187][ T8647] netlink: 16 bytes leftover after parsing attributes in process `syz.2.733'.
[  146.477433][ T8664] netlink: 'syz.2.733': attribute type 1 has an invalid length.
[  146.531755][ T8672] ieee802154 phy0 wpan0: encryption failed: -22
[  146.533960][ T8672] netlink: 196 bytes leftover after parsing attributes in process `syz.0.737'.
[  147.513260][ T8696] pim6reg9: entered allmulticast mode
[  147.602633][ T8709] netlink: 'syz.1.749': attribute type 1 has an invalid length.
[  147.605989][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.749'.
[  147.618720][ T8709] netlink: 200 bytes leftover after parsing attributes in process `syz.1.749'.
[  147.624876][ T8709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.749'.
[  147.764214][ T8724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.754'.
[  147.783678][ T8724] batman_adv: batadv0: Removing interface: batadv_slave_0
[  147.787999][ T8724] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.998845][ T8748] SET target dimension over the limit!
[  149.602606][ T8753] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  149.640197][ T8772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.768'.
[  149.796085][ T8784] netlink: 'syz.1.772': attribute type 5 has an invalid length.
[  150.342701][ T8814] netlink: 27 bytes leftover after parsing attributes in process `syz.0.780'.
[  150.719724][ T8831] netlink: 'syz.0.783': attribute type 2 has an invalid length.
[  150.728967][ T8831] netlink: 240 bytes leftover after parsing attributes in process `syz.0.783'.
[  150.869273][ T5219] Bluetooth: hci0: command 0x0401 tx timeout
[  151.138520][ T8834] netlink: 56 bytes leftover after parsing attributes in process `syz.2.784'.
[  151.332425][ T8851] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  151.441252][ T8861] __nla_validate_parse: 1 callbacks suppressed
[  151.441262][ T8861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.792'.
[  151.445701][ T8857] netlink: 'syz.2.789': attribute type 1 has an invalid length.
[  151.450131][ T8857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.789'.
[  151.487860][ T8857] netlink: 16 bytes leftover after parsing attributes in process `syz.2.789'.
[  151.763108][ T8876] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  151.768274][ T8876] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  151.886075][ T8885] netlink: 88 bytes leftover after parsing attributes in process `syz.0.798'.
[  152.180597][ T8904] netlink: 44 bytes leftover after parsing attributes in process `syz.2.802'.
[  152.183774][ T8904] netlink: 80 bytes leftover after parsing attributes in process `syz.2.802'.
[  152.190734][ T8904] netlink: 28 bytes leftover after parsing attributes in process `syz.2.802'.
[  152.223642][ T8907] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  152.243962][ T5859] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.252841][ T5859] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.259223][ T5859] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.262694][ T5859] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.374925][ T8920] netlink: 64 bytes leftover after parsing attributes in process `syz.2.808'.
[  152.635132][ T8946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.814'.
[  152.644676][ T8935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.812'.
[  152.731673][ T8951] netlink: 'syz.2.815': attribute type 7 has an invalid length.
[  152.734296][ T8951] netlink: 'syz.2.815': attribute type 8 has an invalid length.
[  152.789049][ T8960] pim6reg1: entered promiscuous mode
[  152.791131][ T8960] pim6reg1: entered allmulticast mode
[  153.209829][ T8994] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  153.213057][ T8994] IPv6: NLM_F_CREATE should be set when creating new route
[  153.215590][ T8994] IPv6: NLM_F_CREATE should be set when creating new route
[  153.218096][ T8994] IPv6: NLM_F_CREATE should be set when creating new route
[  153.222003][ T8994] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  154.203071][ T9044] x_tables: duplicate underflow at hook 1
[  154.388703][ T9059] netlink: 'syz.2.844': attribute type 83 has an invalid length.
[  155.570679][ T9086] netlink: 'syz.1.851': attribute type 4 has an invalid length.
[  155.579071][ T9086] netlink: 'syz.1.851': attribute type 1 has an invalid length.
[  155.872305][ T9102] bridge0: port 3(erspan0) entered blocking state
[  155.875622][ T9102] bridge0: port 3(erspan0) entered disabled state
[  155.880368][ T9102] erspan0: entered allmulticast mode
[  155.883997][ T9102] erspan0: entered promiscuous mode
[  155.886740][ T9102] bridge0: port 3(erspan0) entered blocking state
[  155.889166][ T9102] bridge0: port 3(erspan0) entered forwarding state
[  155.893620][ T9102] erspan0: left allmulticast mode
[  155.895775][ T9102] erspan0: left promiscuous mode
[  155.899468][ T9102] bridge0: port 3(erspan0) entered disabled state
[  157.144558][ T9123] __nla_validate_parse: 6 callbacks suppressed
[  157.144573][ T9123] netlink: 27 bytes leftover after parsing attributes in process `syz.1.861'.
[  158.010141][ T9159] xt_CT: No such helper "snmp"
[  158.144349][ T9166] netlink: 'syz.1.872': attribute type 2 has an invalid length.
[  158.150361][ T9166] netlink: 240 bytes leftover after parsing attributes in process `syz.1.872'.
[  158.323405][ T9170] netlink: 'syz.2.874': attribute type 1 has an invalid length.
[  158.357011][ T9170] bond7: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  158.364584][   T13] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  158.365219][ T9170] 8021q: adding VLAN 0 to HW filter on device bond7
[  158.383725][ T9170] veth3: entered promiscuous mode
[  158.388702][ T9170] bond7: (slave veth3): Enslaving as a backup interface with a down link
[  158.392533][ T9170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.874'.
[  158.477497][   T13] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  158.968474][ T9192] netlink: 'syz.1.879': attribute type 3 has an invalid length.
[  158.971795][ T9192] netlink: 666 bytes leftover after parsing attributes in process `syz.1.879'.
[  159.401544][ T9219] netlink: 'syz.1.885': attribute type 1 has an invalid length.
[  159.405148][ T9219] netlink: 'syz.1.885': attribute type 2 has an invalid length.
[  159.439395][ T9223] sctp: [Deprecated]: syz.2.886 (pid 9223) Use of int in maxseg socket option.
[  159.439395][ T9223] Use struct sctp_assoc_value instead
[  159.547105][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.889'.
[  159.603346][ T9233] netlink: 24 bytes leftover after parsing attributes in process `syz.0.891'.
[  159.663005][ T9236] netlink: 88 bytes leftover after parsing attributes in process `syz.0.892'.
[  159.843693][ T9250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.894'.
[  159.868724][ T9250] syzkaller1: entered promiscuous mode
[  159.871076][ T9250] syzkaller1: entered allmulticast mode
[  159.989916][ T9254] netlink: 44 bytes leftover after parsing attributes in process `syz.1.896'.
[  160.035134][ T9256] netlink: 'syz.0.897': attribute type 1 has an invalid length.
[  160.061002][ T9256] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  160.091514][ T9260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.898'.
[  160.278324][ T9269] openvswitch: netlink: Flow key attr not present in new flow.
[  160.561457][   T33] audit: type=1107 audit(1753361204.875:2): pid=9285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  161.536548][ T5219] Bluetooth: hci0: command 0x0401 tx timeout
[  161.931259][ T9359] sctp: [Deprecated]: syz.1.923 (pid 9359) Use of struct sctp_assoc_value in delayed_ack socket option.
[  161.931259][ T9359] Use struct sctp_sack_info instead
[  162.305279][ T9381] tipc: Enabled bearer <eth:gre0>, priority 10
[  162.341157][ T9383] __nla_validate_parse: 9 callbacks suppressed
[  162.341166][ T9383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.931'.
[  162.588410][ T9401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.936'.
[  162.691972][ T9417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.939'.
[  163.084109][ T9438] netlink: 28 bytes leftover after parsing attributes in process `syz.0.945'.
[  163.116066][ T9442] netlink: 'syz.0.946': attribute type 5 has an invalid length.
[  163.118906][ T9442] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.946'.
[  163.123602][ T9442] netlink: 20 bytes leftover after parsing attributes in process `syz.0.946'.
[  163.131307][ T9443] netlink: 'syz.0.946': attribute type 5 has an invalid length.
[  163.133900][ T9443] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.946'.
[  163.313550][ T9449] netlink: 'syz.0.948': attribute type 1 has an invalid length.
[  163.327360][ T9449] bond8: entered promiscuous mode
[  163.329679][ T9449] 8021q: adding VLAN 0 to HW filter on device bond8
[  163.339013][ T9449] 8021q: adding VLAN 0 to HW filter on device bond8
[  163.341961][ T9449] bond8: (slave wireguard0): The slave device specified does not support setting the MAC address
[  163.345375][ T9449] bond8: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  163.354639][ T9449] bond8: (slave wireguard0): making interface the new active one
[  163.357339][ T9449] wireguard0: entered promiscuous mode
[  163.359764][ T9449] bond8: (slave wireguard0): Enslaving as an active interface with an up link
[  163.365564][ T9449] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  163.368701][ T9449] IPv6: NLM_F_CREATE should be set when creating new route
[  163.371800][ T9449] IPv6: NLM_F_CREATE should be set when creating new route
[  163.375224][ T9449] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  163.385881][ T9449] bond8: (slave wireguard1): The slave device specified does not support setting the MAC address
[  163.391811][ T9449] bond8: (slave wireguard1): Enslaving as a backup interface with an up link
[  163.521179][ T9459] netlink: 48 bytes leftover after parsing attributes in process `syz.0.951'.
[  163.738745][ T9466] "syz.1.952" (9466) uses obsolete ecb(arc4) skcipher
[  163.797603][ T9466] netlink: 56 bytes leftover after parsing attributes in process `syz.1.952'.
[  163.800807][ T9466] netlink: 56 bytes leftover after parsing attributes in process `syz.1.952'.
[  164.092476][ T9486] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.095330][ T9486] syzkaller0: entered promiscuous mode
[  164.098432][ T9486] syzkaller0: entered allmulticast mode
[  164.110583][ T9486] tipc: Resetting bearer <eth:syzkaller0>
[  164.113475][ T9485] tipc: Resetting bearer <eth:syzkaller0>
[  164.124413][ T9485] tipc: Disabling bearer <eth:syzkaller0>
[  165.318249][ T9500] ------------[ cut here ]------------
[  165.321061][ T9500] WARNING: CPU: 0 PID: 9500 at fs/exec.c:119 path_noexec+0x1af/0x200
[  165.324389][ T9500] Modules linked in:
[  165.327444][ T9500] CPU: 0 UID: 0 PID: 9500 Comm: syz.0.960 Not tainted 6.16.0-rc6-syzkaller-01646-g56613001dfc9-dirty #0 PREEMPT(full) 
[  165.332851][ T9500] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  165.337467][ T9500] RIP: 0010:path_noexec+0x1af/0x200
[  165.339699][ T9500] Code: 02 31 ff 48 89 de e8 e0 b0 8b ff d1 eb eb 07 e8 f7 ab 8b ff b3 01 89 d8 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 e2 ab 8b ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6
[  165.348591][ T9500] RSP: 0018:ffffc900080cfbd8 EFLAGS: 00010287
[  165.351289][ T9500] RAX: ffffffff82347e6e RBX: ffff888033af3680 RCX: 0000000000080000
[  165.354692][ T9500] RDX: ffffc900034c9000 RSI: 000000000000008a RDI: 000000000000008b
[  165.358607][ T9500] RBP: 0000000000080000 R08: ffff88802117d640 R09: 0000000000000003
[  165.362051][ T9500] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000002
[  165.365524][ T9500] R13: 1ffff92001019f90 R14: 0000000000000000 R15: dffffc0000000000
[  165.369402][ T9500] FS:  00007ff8fa6156c0(0000) GS:ffff8880b8615000(0000) knlGS:0000000000000000
[  165.373289][ T9500] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  165.376141][ T9500] CR2: 00007ff8f9774a00 CR3: 00000000287ce000 CR4: 00000000000006f0
[  165.380197][ T9500] Call Trace:
[  165.381649][ T9500]  <TASK>
[  165.382966][ T9500]  do_mmap+0xa43/0x10d0
[  165.384820][ T9500]  ? __pfx_do_mmap+0x10/0x10
[  165.387319][ T9500]  ? down_write_killable+0x178/0x230
[  165.389633][ T9500]  ? end_current_label_crit_section+0x152/0x180
[  165.392408][ T9500]  ? __pfx_down_write_killable+0x10/0x10
[  165.394388][ T9500]  vm_mmap_pgoff+0x31b/0x4c0
[  165.395942][ T9500]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  165.398015][ T9500]  ? __fget_files+0x2a/0x420
[  165.399621][ T9500]  ? __fget_files+0x3a0/0x420
[  165.401224][ T9500]  ? __fget_files+0x2a/0x420
[  165.402810][ T9500]  ksys_mmap_pgoff+0x51f/0x760
[  165.404429][ T9500]  do_syscall_64+0xfa/0x3b0
[  165.405928][ T9500]  ? lockdep_hardirqs_on+0x9c/0x150
[  165.408012][ T9500]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.410048][ T9500]  ? exc_page_fault+0x9f/0xf0
[  165.411596][ T9500]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.413635][ T9500] RIP: 0033:0x7ff8f978e9a9
[  165.415410][ T9500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  165.423973][ T9500] RSP: 002b:00007ff8fa615038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  165.427981][ T9500] RAX: ffffffffffffffda RBX: 00007ff8f99b5fa0 RCX: 00007ff8f978e9a9
[  165.431598][ T9500] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000200000003000
[  165.435024][ T9500] RBP: 00007ff8f9810d69 R08: 0000000000000006 R09: 000000009fdf5000
[  165.438982][ T9500] R10: 0000000000012012 R11: 0000000000000246 R12: 0000000000000000
[  165.442485][ T9500] R13: 0000000000000000 R14: 00007ff8f99b5fa0 R15: 00007ffea6340368
[  165.445430][ T9500]  </TASK>
[  165.446727][ T9500] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  165.449151][ T9500] CPU: 0 UID: 0 PID: 9500 Comm: syz.0.960 Not tainted 6.16.0-rc6-syzkaller-01646-g56613001dfc9-dirty #0 PREEMPT(full) 
[  165.453219][ T9500] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  165.456562][ T9500] Call Trace:
[  165.457752][ T9500]  <TASK>
[  165.458761][ T9500]  dump_stack_lvl+0x99/0x250
[  165.460322][ T9500]  ? __asan_memcpy+0x40/0x70
[  165.461862][ T9500]  ? __pfx_dump_stack_lvl+0x10/0x10
[  165.463606][ T9500]  ? __pfx__printk+0x10/0x10
[  165.465291][ T9500]  panic+0x2db/0x790
[  165.466613][ T9500]  ? __pfx_panic+0x10/0x10
[  165.468173][ T9500]  __warn+0x31b/0x4b0
[  165.469495][ T9500]  ? path_noexec+0x1af/0x200
[  165.471048][ T9500]  ? path_noexec+0x1af/0x200
[  165.472605][ T9500]  report_bug+0x2be/0x4f0
[  165.474047][ T9500]  ? path_noexec+0x1af/0x200
[  165.475609][ T9500]  ? path_noexec+0x1af/0x200
[  165.477147][ T9500]  ? path_noexec+0x1b1/0x200
[  165.478751][ T9500]  handle_bug+0x84/0x160
[  165.480122][ T9500]  exc_invalid_op+0x1a/0x50
[  165.481637][ T9500]  asm_exc_invalid_op+0x1a/0x20
[  165.483228][ T9500] RIP: 0010:path_noexec+0x1af/0x200
[  165.484868][ T9500] Code: 02 31 ff 48 89 de e8 e0 b0 8b ff d1 eb eb 07 e8 f7 ab 8b ff b3 01 89 d8 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 e2 ab 8b ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6
[  165.491327][ T9500] RSP: 0018:ffffc900080cfbd8 EFLAGS: 00010287
[  165.493347][ T9500] RAX: ffffffff82347e6e RBX: ffff888033af3680 RCX: 0000000000080000
[  165.495958][ T9500] RDX: ffffc900034c9000 RSI: 000000000000008a RDI: 000000000000008b
[  165.498624][ T9500] RBP: 0000000000080000 R08: ffff88802117d640 R09: 0000000000000003
[  165.501240][ T9500] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000002
[  165.503851][ T9500] R13: 1ffff92001019f90 R14: 0000000000000000 R15: dffffc0000000000
[  165.506480][ T9500]  ? path_noexec+0x1ae/0x200
[  165.508061][ T9500]  ? path_noexec+0x1ae/0x200
[  165.509722][ T9500]  do_mmap+0xa43/0x10d0
[  165.511127][ T9500]  ? __pfx_do_mmap+0x10/0x10
[  165.512680][ T9500]  ? down_write_killable+0x178/0x230
[  165.514446][ T9500]  ? end_current_label_crit_section+0x152/0x180
[  165.516521][ T9500]  ? __pfx_down_write_killable+0x10/0x10
[  165.518405][ T9500]  vm_mmap_pgoff+0x31b/0x4c0
[  165.520008][ T9500]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  165.521729][ T9500]  ? __fget_files+0x2a/0x420
[  165.523287][ T9500]  ? __fget_files+0x3a0/0x420
[  165.524836][ T9500]  ? __fget_files+0x2a/0x420
[  165.526390][ T9500]  ksys_mmap_pgoff+0x51f/0x760
[  165.527998][ T9500]  do_syscall_64+0xfa/0x3b0
[  165.529597][ T9500]  ? lockdep_hardirqs_on+0x9c/0x150
[  165.531360][ T9500]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.533396][ T9500]  ? exc_page_fault+0x9f/0xf0
[  165.534972][ T9500]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.536958][ T9500] RIP: 0033:0x7ff8f978e9a9
[  165.538454][ T9500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  165.544791][ T9500] RSP: 002b:00007ff8fa615038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  165.547535][ T9500] RAX: ffffffffffffffda RBX: 00007ff8f99b5fa0 RCX: 00007ff8f978e9a9
[  165.550289][ T9500] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000200000003000
[  165.552882][ T9500] RBP: 00007ff8f9810d69 R08: 0000000000000006 R09: 000000009fdf5000
[  165.555434][ T9500] R10: 0000000000012012 R11: 0000000000000246 R12: 0000000000000000
[  165.557986][ T9500] R13: 0000000000000000 R14: 00007ff8f99b5fa0 R15: 00007ffea6340368
[  165.560673][ T9500]  </TASK>
[  165.562374][ T9500] Kernel Offset: disabled
[  165.563771][ T9500] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:46:49  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff898c655a RBX=00028f5c28f5c28f RCX=ffff88802117d640 RDX=0000000000000100
RSI=0000000000000000 RDI=00028f5c28f5c28f RBP=0000000000000000 RSP=ffffc90000007a90
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=fffff52000000f54
R12=00000015798ee228 R13=0019999999999998 R14=ffffc9002a05cd70 R15=0000000225c17d04
RIP=ffffffff898c655a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ff8fa6156c0 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff8f9774a00 CR3=00000000287ce000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007ff8fa4ed100 00007ff8f9986440 XMM05=00007ff8f9986458 00007ff8f99864a0
XMM06=00007ff8f9986498 00007ff8f9986490 XMM07=00007ff8f9986488 00007ff8f9986480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007ff8f9811ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000
RSI=ffffffff8be28c20 RDI=ffffffff8be28be0 RBP=ffffffff8172aae5 RSP=ffffc900001b7310
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc900001b7518 R11=ffffffff81ad0050
R12=0000000000000002 R13=ffffffff8e13f0e0 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff8b704226 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055bda4356000 CR3=000000002394e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
