last executing test programs:

1.84279092s ago: executing program 0 (id=1061):
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r0=>0x0})
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000080)={@private0, r0}, 0x14)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="800034ca269bb73c", 0x8, 0x2004c080, &(0x7f0000000040)={0xa, 0xfffd, 0x9, @mcast2}, 0x1c)

1.842546123s ago: executing program 0 (id=1062):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
unshare(0x22020600)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'veth0_to_team\x00', 0x400})
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r5)
socket$unix(0x1, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r6 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x7, &(0x7f0000000000), 0xa0)
pipe(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_emit_ethernet(0x166, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4040850}, 0x4000)

972.544468ms ago: executing program 0 (id=1066):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b500000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c000280080014"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)
writev(r0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000ff7f000000000000000000009500000000000000d1c4183247ea0bbb5d"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0x100}], 0x1, 0x40001023, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002e00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

862.210302ms ago: executing program 0 (id=1070):
r0 = socket(0x1d, 0x2, 0x6)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x6a, 0x10, 0x0, &(0x7f0000000080))
syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb08004500001c000000000002908e7000000000000000000000000000000024e0248e1fcfa0805b61e632ede93c29c0d4f296a9bd1d60128ddbb031d02580cc789b81407025bce398025a63ff1ee8e121ebdb9dc32535eae2209ec9efb8780ea0875cfc947153361245c61c57f1668d8d03dce2e615e432e0436b87a07dcf98c2281f039a2689ff0f9cf3ee280e0774917582cc8043143f"], 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @private2, 0x10001}, 0x1c)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000100)=""/57, 0x39}, {&(0x7f00000003c0)=""/123, 0x7b}, {&(0x7f0000000500)=""/86, 0x56}, {&(0x7f0000000140)=""/28, 0x1c}, {&(0x7f0000000580)=""/95, 0x5f}, {&(0x7f0000000600)=""/99, 0x63}, {&(0x7f0000000680)=""/250, 0xfa}, {&(0x7f0000000780)=""/206, 0xce}, {&(0x7f0000000880)=""/102, 0x66}, {&(0x7f0000000900)=""/164, 0xa4}], 0xa, &(0x7f0000000a80)=""/80, 0x50}, 0x7ff}, {{&(0x7f0000000b00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000300)=""/4, 0x4}, {&(0x7f0000000b80)=""/54, 0x36}, {&(0x7f0000000bc0)=""/60, 0x3c}, {&(0x7f0000000c00)=""/179, 0xb3}, {&(0x7f0000000cc0)=""/183, 0xb7}, {&(0x7f0000000d80)=""/232, 0xe8}], 0x6, &(0x7f0000000f00)=""/228, 0xe4}, 0x6}, {{&(0x7f0000001000)=@un=@abs, 0x80, &(0x7f0000001100)=[{&(0x7f0000001080)}, {&(0x7f00000010c0)=""/11, 0xb}], 0x2, &(0x7f0000001140)=""/58, 0x3a}, 0x8000}, {{&(0x7f0000001180)=@rc, 0x80, &(0x7f0000001500)=[{&(0x7f0000001200)=""/41, 0x29}, {&(0x7f0000001240)=""/10, 0xa}, {&(0x7f0000001280)=""/65, 0x41}, {&(0x7f0000001300)=""/137, 0x89}, {&(0x7f00000013c0)=""/225, 0xe1}, {&(0x7f00000014c0)=""/34, 0x22}], 0x6}, 0x80000001}, {{&(0x7f0000001580), 0x80, &(0x7f0000002980)=[{&(0x7f0000001600)=""/130, 0x82}, {&(0x7f00000016c0)=""/103, 0x67}, {&(0x7f0000001740)=""/125, 0x7d}, {&(0x7f00000017c0)=""/44, 0x2c}, {&(0x7f0000001800)=""/235, 0xeb}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/18, 0x12}, {&(0x7f0000002940)=""/42, 0x2a}], 0x8, &(0x7f0000002a00)=""/80, 0x50}, 0x7f}, {{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000002a80)=""/62, 0x3e}, {&(0x7f0000002ac0)=""/153, 0x99}], 0x2, &(0x7f0000002bc0)=""/4096, 0x1000}, 0xb2}, {{&(0x7f0000003bc0)=@phonet, 0x80, &(0x7f0000003c40)}}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000003c80)=""/55, 0x37}, {&(0x7f0000003cc0)=""/50, 0x32}, {&(0x7f0000003d00)=""/72, 0x48}, {&(0x7f0000003d80)=""/241, 0xf1}, {&(0x7f0000003e80)=""/224, 0xe0}, {&(0x7f0000003f80)=""/137, 0x89}, {&(0x7f0000004040)=""/70, 0x46}, {&(0x7f00000040c0)=""/182, 0xb6}], 0x8, &(0x7f0000004200)=""/253, 0xfd}, 0xc}], 0x8, 0x1, &(0x7f0000004500))
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113b00000000008510000002000000850000001900000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10)
sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='htcp\x00', 0x51)
recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

484.26894ms ago: executing program 2 (id=1078):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) (async)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="00000400010000", 0x7) (async)
socket$netlink(0x10, 0x3, 0x10) (async)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x7a28, 0x4) (async)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) (async)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x5}, 0x8) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000400)=0x101, 0x4) (async)
r4 = socket$packet(0x11, 0x3, 0x300) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x68}}, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r6, 0x1, 0x53, 0x0, &(0x7f0000000380)) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000001c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x10000001}, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0)

412.614163ms ago: executing program 2 (id=1079):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x3, 0x28, 0x0, 0x0, 0xd, 0x4, 0x0, 0x7d, 0x21, 0x0, 0xc}, 0xe)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000300)={r1}, &(0x7f0000000340)=0x8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x40}}, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r4, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0x40000015})
connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0x2)
shutdown(r5, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)

339.663745ms ago: executing program 2 (id=1081):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x7800, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0)

280.756237ms ago: executing program 2 (id=1083):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6800000010000305c3ffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0)

280.259876ms ago: executing program 2 (id=1084):
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x160, 0xb, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_ADT={0x94, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x9, 0x1a, '\xb4^&&\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'ipvlan1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xa, 0x1a, '\r\\-\\!\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x6c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x6}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10f}, @IPSET_ATTR_COMMENT={0x16, 0x1a, '-}/&}-@^%${#:B+@-\x00'}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="d22fb19de32d"}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x6}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x48810}, 0x40041)
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'netdevsim0\x00', 0x2})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r1)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x1b, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x4869bd8e, 0x5b, &(0x7f0000000440)=""/91, 0x41100, 0x20, '\x00', 0x0, 0x17, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x5, 0x57d, 0x6c4}, 0x10, 0xda8b, r0, 0x7, &(0x7f0000000500)=[r0, r0, r0, r0], &(0x7f0000000540)=[{0x1, 0x4, 0x1, 0xc}, {0x4, 0x5, 0x2, 0x5}, {0x0, 0x3, 0xf, 0x6}, {0x5, 0x4, 0x4, 0x4}, {0x2, 0x4, 0x6, 0x2}, {0x5, 0x2, 0xd, 0x8}, {0x1, 0x5, 0x9, 0xa}], 0x10, 0x8}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r0, r2, 0x0, r0}, 0x10)
ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000006c0)=0x7)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000700), &(0x7f0000000740)=0x4)
setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f0000000780)=0x1, 0x4)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f00000007c0)={'lo\x00', {0x2, 0x0, @loopback}})
r3 = accept$inet6(r0, &(0x7f0000000800)={0xa, 0x0, 0x0, @local}, &(0x7f0000000840)=0x1c)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000940)={'tunl0\x00', &(0x7f0000000880)={'syztnl1\x00', <r4=>0x0, 0x10, 0x700, 0x5, 0xffffffff, {{0x1f, 0x4, 0x0, 0x4, 0x7c, 0x68, 0x0, 0x2, 0x29, 0x0, @remote, @multicast1, {[@generic={0x94, 0xf, "8c01497f6cc8a8afc09cf9bcde"}, @lsrr={0x83, 0x7, 0x57, [@private=0xa010101]}, @timestamp_prespec={0x44, 0x14, 0x78, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@remote, 0xa}]}, @timestamp_prespec={0x44, 0x1c, 0x8c, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@multicast1, 0x400}, {@rand_addr=0x64010102, 0x7}]}, @lsrr={0x83, 0x1f, 0xc9, [@broadcast, @remote, @loopback, @multicast1, @multicast1, @remote, @private=0xa010100]}, @end, @end]}}}}})
ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000980)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, r4})
recvmsg$unix(r0, &(0x7f00000010c0)={&(0x7f00000009c0)=@abs, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000a40)=""/108, 0x6c}, {&(0x7f0000000ac0)=""/57, 0x39}, {&(0x7f0000000b00)=""/58, 0x3a}, {&(0x7f0000000b40)=""/221, 0xdd}, {&(0x7f0000000c40)=""/6, 0x6}, {&(0x7f0000000c80)=""/252, 0xfc}, {&(0x7f0000000d80)=""/245, 0xf5}, {&(0x7f0000000e80)=""/125, 0x7d}], 0x8, &(0x7f0000000f80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}, 0x40000000)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001140), r1)
sendmsg$NLBL_UNLABEL_C_LIST(r8, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x30, r9, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x30}}, 0xc000)
recvmsg(r5, &(0x7f0000001480)={&(0x7f0000001240)=@phonet, 0x80, &(0x7f0000001340)=[{&(0x7f00000012c0)=""/80, 0x50}], 0x1, &(0x7f0000001380)=""/226, 0xe2}, 0x3)
socket$key(0xf, 0x3, 0x2)
setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f00000014c0)={@dev={0xac, 0x14, 0x14, 0xe}, @multicast2, @rand_addr=0x64010101}, 0xc)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_SET(r10, &(0x7f0000001700)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000016c0)={&(0x7f0000001540)={0x160, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x160}, 0x1, 0x0, 0x0, 0x4}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001740))
socket$packet(0x11, 0x2, 0x300)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x64}}, 0x40080)
r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001900), r5)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x2c, r11, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xa}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x2c}}, 0x40004)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_DEV(r12, &(0x7f0000001b40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x28, 0x0, 0x2, 0x70bd2b, 0x4, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4008810)

227.330353ms ago: executing program 2 (id=1086):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r3, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x1b, 0xd, @udp='udp:syz1\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x90)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kmem_cache_free\x00', r6, 0x0, 0x4}, 0x18)
socket$inet_udp(0x2, 0x2, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4)
setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4)
setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, {0xc, 0xffe0}, {}, {0xf, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8864}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x20040054)

162.591186ms ago: executing program 1 (id=1088):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c0000380004804e0d4e0a"], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e00010029bd7000fedbdf2500000000", @ANYRES32=r4, @ANYRES64=r3], 0x1c}, 0x1, 0x0, 0x0, 0x24}, 0x48840)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, <r5=>0x0}, &(0x7f00000000c0)=0xc)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x7, 0x0}, 0x4e23, 0x1, 0x4e22, 0xfffb, 0x2, 0x0, 0x20, 0x88, r4, r5}, {0x1, 0x81, 0x2, 0x9, 0x3, 0x8, 0xffffffffffffffff, 0xe}, {0x5, 0x7, 0x5000000000, 0xa}, 0x305, 0x6e6bbb, 0x2, 0x0, 0x3}, {{@in=@remote, 0x4d6, 0x32}, 0x2, @in=@empty, 0x0, 0x0, 0x2, 0x1, 0x10, 0x9, 0x3}}, 0xe8)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b0400000000000000000200fffe2c0004802800018007000100637400001c0002800800014000000002080002400000001405e10200000000000900010073797a30000000000900020073797a32"], 0x80}}, 0x24004800)

161.855919ms ago: executing program 1 (id=1089):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x40000, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff7f}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}}, 0x0)

82.130106ms ago: executing program 1 (id=1090):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x60, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x20050800)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)={0x14, 0x15, 0x1, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0)
socket$kcm(0x29, 0x7, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x60, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x20050800) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)={0x14, 0x15, 0x1, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
socket$kcm(0x29, 0x7, 0x0) (async)

81.368057ms ago: executing program 1 (id=1091):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1400000004000000040500000100faff14100000", @ANYRES32, @ANYBLOB="0000000000000000001d00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)

81.253034ms ago: executing program 1 (id=1092):
r0 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2400000002031f001cfffd946fa2830020200a800900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
r2 = accept(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r2, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0)
r3 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="2400000001031f001cfffd946fa2830020200a800900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)

1.249068ms ago: executing program 1 (id=1093):
r0 = socket$inet6(0xa, 0x2, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r1=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@private0, r1}, 0x14)
recvfrom(r0, 0x0, 0x0, 0x10000, 0x0, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="800034ca269bb73c", 0x8, 0x2004c080, &(0x7f0000000040)={0xa, 0xfffd, 0x9, @mcast2}, 0x1c)

501.878µs ago: executing program 0 (id=1094):
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x7, 0x9, 0x800, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x0, 0xfffffffd}, 0x50)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r2, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x80d4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x4, 0x1, 0xb, 0x2, 0xa, 0x0, 0xffb0}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

0s ago: executing program 0 (id=1095):
r0 = socket$inet6(0xa, 0x2, 0x3a)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@gettclass={0x24, 0x2a, 0x400, 0x70b527, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x2, 0xffe0}, {0xf, 0x10}, {0xfff3, 0x3}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4004881}, 0x40000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r2=>0x0})
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@private1={0xfc, 0x1, '\x00', 0x1}, r2}, 0x14)
recvfrom(r0, 0x0, 0x0, 0x10000, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000980)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56561, 0x2, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x36, 0x2, 0x7}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x4, 0xff, 0x8, 0x0, 0x5, 0x8}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4040010)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500100000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x85)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1800006, 0x50, r3, 0x2a1cf000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='qgroup_meta_reserve\x00'}, 0x18)
r8 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r8, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r9, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r9, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r10 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r10, 0x1, 0x50, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
epoll_create1(0x80000)
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x80000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:19364' (ED25519) to the list of known hosts.
syzkaller login: [   41.167745][ T5747] cgroup: Unknown subsys name 'net'
[   41.295394][ T5747] cgroup: Unknown subsys name 'cpuset'
[   41.299351][ T5747] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.984856][ T5747] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.927668][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.930908][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.934138][ T5824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.937717][ T5211] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.940070][ T5211] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.942435][ T5211] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.945304][ T5211] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.947752][ T5211] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.950722][ T5211] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.953729][ T5211] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   46.956096][ T5211] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.972134][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.972612][ T5211] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.977311][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.979802][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   47.232415][ T5819] chnl_net:caif_netlink_parms(): no params data found
[   47.272336][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   47.309598][ T5823] chnl_net:caif_netlink_parms(): no params data found
[   47.341670][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.345141][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.347808][ T5819] bridge_slave_0: entered allmulticast mode
[   47.351177][ T5819] bridge_slave_0: entered promiscuous mode
[   47.372885][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.375052][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.377330][ T5819] bridge_slave_1: entered allmulticast mode
[   47.380058][ T5819] bridge_slave_1: entered promiscuous mode
[   47.437363][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.440686][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.443058][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.445417][ T5826] bridge_slave_0: entered allmulticast mode
[   47.448042][ T5826] bridge_slave_0: entered promiscuous mode
[   47.470958][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.474990][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.477425][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.479622][ T5823] bridge_slave_0: entered allmulticast mode
[   47.482260][ T5823] bridge_slave_0: entered promiscuous mode
[   47.485472][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.487657][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.489890][ T5826] bridge_slave_1: entered allmulticast mode
[   47.494162][ T5826] bridge_slave_1: entered promiscuous mode
[   47.504212][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.506487][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.508782][ T5823] bridge_slave_1: entered allmulticast mode
[   47.511456][ T5823] bridge_slave_1: entered promiscuous mode
[   47.539206][ T5819] team0: Port device team_slave_0 added
[   47.542827][ T5819] team0: Port device team_slave_1 added
[   47.562417][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.585015][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.588337][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.590474][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.598613][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.604165][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.608326][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.611561][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.614329][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.622182][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.656901][ T5826] team0: Port device team_slave_0 added
[   47.669315][ T5823] team0: Port device team_slave_0 added
[   47.672196][ T5826] team0: Port device team_slave_1 added
[   47.684538][ T5823] team0: Port device team_slave_1 added
[   47.726760][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.728899][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.737109][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.746256][ T5819] hsr_slave_0: entered promiscuous mode
[   47.748586][ T5819] hsr_slave_1: entered promiscuous mode
[   47.751863][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.754527][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.762191][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.767188][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.769252][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.777918][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.781963][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.785163][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.794026][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.861420][ T5826] hsr_slave_0: entered promiscuous mode
[   47.864267][ T5826] hsr_slave_1: entered promiscuous mode
[   47.866355][ T5826] debugfs: 'hsr0' already exists in 'hsr'
[   47.868132][ T5826] Cannot create hsr debugfs directory
[   47.885729][ T5823] hsr_slave_0: entered promiscuous mode
[   47.888076][ T5823] hsr_slave_1: entered promiscuous mode
[   47.890254][ T5823] debugfs: 'hsr0' already exists in 'hsr'
[   47.892105][ T5823] Cannot create hsr debugfs directory
[   48.079060][ T5819] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   48.088212][ T5819] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   48.094971][ T5819] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   48.106601][ T5819] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   48.140298][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   48.151177][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   48.168579][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   48.176044][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.178374][ T5819] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.180969][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.183255][ T5819] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.188429][ T4016] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.192530][ T4016] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.204933][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   48.244389][ T5823] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   48.253986][ T5823] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   48.258804][ T5823] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   48.264424][ T5823] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   48.321191][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.349788][ T5819] 8021q: adding VLAN 0 to HW filter on device team0
[   48.361942][ T4016] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.364203][ T4016] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.370345][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.379398][ T4016] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.381662][ T4016] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.389690][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.403460][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   48.421389][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.423643][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.428315][ T5823] 8021q: adding VLAN 0 to HW filter on device team0
[   48.445855][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.448052][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.451467][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.453788][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.467464][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.469668][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.562142][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.596217][ T5819] veth0_vlan: entered promiscuous mode
[   48.601923][ T5819] veth1_vlan: entered promiscuous mode
[   48.618960][ T5819] veth0_macvtap: entered promiscuous mode
[   48.624596][ T5819] veth1_macvtap: entered promiscuous mode
[   48.647713][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.657646][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.677349][ T5852] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.682403][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.686596][ T5852] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.690908][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.695388][ T5852] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.698063][ T5852] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.766019][ T5823] veth0_vlan: entered promiscuous mode
[   48.777959][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.780402][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.796612][ T5826] veth0_vlan: entered promiscuous mode
[   48.801300][ T5823] veth1_vlan: entered promiscuous mode
[   48.810601][ T5826] veth1_vlan: entered promiscuous mode
[   48.824370][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.827019][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.843559][ T5823] veth0_macvtap: entered promiscuous mode
[   48.849994][ T5826] veth0_macvtap: entered promiscuous mode
[   48.859294][ T5826] veth1_macvtap: entered promiscuous mode
[   48.862193][ T5823] veth1_macvtap: entered promiscuous mode
[   48.887032][ T5819] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.897063][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.915694][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.927564][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.930016][ T5691] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.937786][ T5691] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.947582][ T5887] netlink: 'syz.1.2': attribute type 2 has an invalid length.
[   48.950023][ T5691] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.953566][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.960361][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.975238][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.978037][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.981052][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.005801][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.045626][ T5887] bridge_slave_0: left allmulticast mode
[   49.047495][ T5887] bridge_slave_0: left promiscuous mode
[   49.049416][ T5887] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.053295][ T5831] Bluetooth: hci1: command tx timeout
[   49.055582][   T55] Bluetooth: hci0: command tx timeout
[   49.056872][ T5824] Bluetooth: hci2: command tx timeout
[   49.060086][ T5887] bridge_slave_1: left allmulticast mode
[   49.062192][ T5887] bridge_slave_1: left promiscuous mode
[   49.064684][ T5887] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.070810][ T5887] bond0: (slave bond_slave_0): Releasing backup interface
[   49.078031][ T5887] bond0: (slave bond_slave_1): Releasing backup interface
[   49.084665][ T5887] team0: Port device team_slave_0 removed
[   49.090188][ T5887] team0: Port device team_slave_1 removed
[   49.095393][ T5887] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   49.097779][ T5887] batman_adv: batadv0: Removing interface: batadv_slave_0
[   49.101011][ T5887] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   49.105737][ T5887] batman_adv: batadv0: Removing interface: batadv_slave_1
[   49.122594][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.124982][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.175889][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.178956][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.200078][ T4111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.205138][ T4111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.224939][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.240140][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.334783][ T5897] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1'.
[   49.337943][ T5897] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1'.
[   49.342001][ T5894] tipc: Started in network mode
[   49.344698][ T5894] tipc: Node identity 72d7dd76b443, cluster identity 4711
[   49.347577][ T5894] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   49.356718][ T5897] IPVS: length: 148 != 24
[   49.404430][ T5902] syzkaller0: entered promiscuous mode
[   49.406283][ T5902] syzkaller0: entered allmulticast mode
[   49.484467][ T5893] tipc: Resetting bearer <eth:syzkaller0>
[   49.499265][ T5893] tipc: Disabling bearer <eth:syzkaller0>
[   49.575341][ T5917] macvlan2: entered promiscuous mode
[   49.758917][ T5936] netlink: 72 bytes leftover after parsing attributes in process `syz.0.18'.
[   49.800702][ T5940] macvlan3: entered promiscuous mode
[   49.841147][ T5943] netlink: 'syz.2.16': attribute type 2 has an invalid length.
[   49.847702][ T5943] netlink: 240 bytes leftover after parsing attributes in process `syz.2.16'.
[   50.209641][ T5950] netlink: 'syz.0.28': attribute type 2 has an invalid length.
[   50.235914][ T5953] warning: `syz.1.22' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   50.240278][ T5953] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.22'.
[   50.243655][ T5953] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   50.246242][ T5953] openvswitch: netlink: Duplicate key (type 0).
[   50.280949][ T5950] bridge_slave_0: left allmulticast mode
[   50.285713][ T5950] bridge_slave_0: left promiscuous mode
[   50.288111][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.295310][ T5950] bridge_slave_1: left allmulticast mode
[   50.297017][ T5950] bridge_slave_1: left promiscuous mode
[   50.298968][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.307553][ T5950] bond0: (slave bond_slave_0): Releasing backup interface
[   50.319059][ T5950] bond0: (slave bond_slave_1): Releasing backup interface
[   50.327563][ T5950] team0: Port device team_slave_0 removed
[   50.332370][ T5950] team0: Port device team_slave_1 removed
[   50.335881][ T5950] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   50.338359][ T5950] batman_adv: batadv0: Removing interface: batadv_slave_0
[   50.341270][ T5950] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   50.344289][ T5950] batman_adv: batadv0: Removing interface: batadv_slave_1
[   50.358709][ T5959] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   50.391319][ T5959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'.
[   50.396147][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24'.
[   50.411348][ T5852] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   50.419971][ T5852] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   50.429593][ T5852] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   50.435876][ T5852] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   50.480116][ T5963] macvlan4: entered promiscuous mode
[   50.606037][ T5971] syz.0.37 uses obsolete (PF_INET,SOCK_PACKET)
[   50.745158][ T5979] netlink: 'syz.2.35': attribute type 2 has an invalid length.
[   50.758330][ T5981] tipc: Started in network mode
[   50.760253][ T5981] tipc: Node identity c6e00fd96f8a, cluster identity 4711
[   50.765388][ T5981] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   50.805701][ T5979] bridge_slave_0: left allmulticast mode
[   50.807597][ T5979] bridge_slave_0: left promiscuous mode
[   50.809508][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.819369][ T5979] bridge_slave_1: left allmulticast mode
[   50.821153][ T5979] bridge_slave_1: left promiscuous mode
[   50.824691][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.831848][ T5979] bond0: (slave bond_slave_0): Releasing backup interface
[   50.838272][ T5979] bond0: (slave bond_slave_1): Releasing backup interface
[   50.844667][ T5979] team0: Port device team_slave_0 removed
[   50.849022][ T5979] team0: Port device team_slave_1 removed
[   50.851157][ T5979] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   50.855782][ T5979] batman_adv: batadv0: Removing interface: batadv_slave_0
[   50.859152][ T5979] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   50.861469][ T5979] batman_adv: batadv0: Removing interface: batadv_slave_1
[   50.870741][ T5984] syzkaller0: entered promiscuous mode
[   50.874684][ T5984] syzkaller0: entered allmulticast mode
[   50.917651][ T5990] macvlan5: entered promiscuous mode
[   50.920874][ T5990] macvlan5: entered allmulticast mode
[   50.924777][ T5980] tipc: Resetting bearer <eth:syzkaller0>
[   50.945868][ T5980] tipc: Disabling bearer <eth:syzkaller0>
[   51.039130][ T5996] syzkaller1: entered promiscuous mode
[   51.040907][ T5996] syzkaller1: entered allmulticast mode
[   51.045789][ T5996] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   51.046999][ T5994] netlink: 16 bytes leftover after parsing attributes in process `syz.2.41'.
[   51.055324][ T5994] Zero length message leads to an empty skb
[   51.106645][ T6001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.44'.
[   51.133430][   T55] Bluetooth: hci0: command tx timeout
[   51.133812][ T5831] Bluetooth: hci1: command tx timeout
[   51.135205][ T5824] Bluetooth: hci2: command tx timeout
[   51.846907][ T6009] macvlan2: entered promiscuous mode
[   51.884711][ T6013] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   51.888350][ T6013] syzkaller0: entered promiscuous mode
[   51.890108][ T6013] syzkaller0: entered allmulticast mode
[   51.917512][ T6013] tipc: Resetting bearer <eth:syzkaller0>
[   51.997196][ T6012] tipc: Resetting bearer <eth:syzkaller0>
[   52.007335][ T6012] tipc: Disabling bearer <eth:syzkaller0>
[   52.025395][ T6022] syzkaller1: entered promiscuous mode
[   52.027166][ T6022] syzkaller1: entered allmulticast mode
[   52.187280][ T6026] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   52.190391][ T6026] syzkaller0: entered promiscuous mode
[   52.201147][ T6026] syzkaller0: entered allmulticast mode
[   52.220006][ T6026] tipc: Resetting bearer <eth:syzkaller0>
[   52.227458][ T6025] tipc: Resetting bearer <eth:syzkaller0>
[   52.234904][ T6025] tipc: Disabling bearer <eth:syzkaller0>
[   52.279501][ T6030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.55'.
[   52.409391][ T6043] netlink: 'syz.0.60': attribute type 1 has an invalid length.
[   52.555358][ T6061] ip_vti0: Master is either lo or non-ether device
[   52.756212][ T6078] nbd: socks must be embedded in a SOCK_ITEM attr
[   52.891698][ T6092] ip_vti0: Master is either lo or non-ether device
[   52.996981][ T6105] syzkaller0: tun_chr_ioctl cmd 1074025677
[   52.998867][ T6105] syzkaller0: linktype set to 1
[   53.216173][ T5831] Bluetooth: hci2: command tx timeout
[   53.216228][ T5824] Bluetooth: hci0: command tx timeout
[   53.217860][ T5831] Bluetooth: hci1: command tx timeout
[   53.271428][ T6135] netlink: 'syz.0.82': attribute type 2 has an invalid length.
[   53.551184][ T6171] ip_vti0: Master is either lo or non-ether device
[   53.600872][ T6183] openvswitch: netlink: Actions may not be safe on all matching packets
[   53.665809][ T6190] ieee802154 phy0 wpan0: encryption failed: -22
[   53.813452][ T6203] ip_vti0: Master is either lo or non-ether device
[   54.230310][ T6242] ip_vti0: Master is either lo or non-ether device
[   54.376926][ T6251] team0: Mode changed to "loadbalance"
[   54.380983][ T6251] __nla_validate_parse: 5 callbacks suppressed
[   54.380993][ T6251] netlink: 96 bytes leftover after parsing attributes in process `syz.1.119'.
[   54.473818][ T6264] ip_vti0: Master is either lo or non-ether device
[   54.507414][ T6266] netlink: 100 bytes leftover after parsing attributes in process `syz.2.125'.
[   54.539464][ T6266] netlink: 120 bytes leftover after parsing attributes in process `syz.2.125'.
[   54.725512][ T6287] ip_vti0: Master is either lo or non-ether device
[   54.728006][ T6286] syzkaller0: tun_chr_ioctl cmd 35092
[   54.759162][ T6289] netlink: 'syz.1.134': attribute type 21 has an invalid length.
[   54.761602][ T6289] netlink: 128 bytes leftover after parsing attributes in process `syz.1.134'.
[   54.765792][ T6289] netlink: 3 bytes leftover after parsing attributes in process `syz.1.134'.
[   54.770110][ T6289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.134'.
[   54.774704][ T6289] netlink: 15 bytes leftover after parsing attributes in process `syz.1.134'.
[   54.785509][ T6289] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   54.792192][ T6289] syz.1.134 (6289) used greatest stack depth: 20840 bytes left
[   54.946850][ T6303] tap0: tun_chr_ioctl cmd 35108
[   55.026215][ T6309] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[   55.034004][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.143'.
[   55.060494][ T6314] lo speed is unknown, defaulting to 1000
[   55.062920][ T6314] lo speed is unknown, defaulting to 1000
[   55.066127][ T6314] lo speed is unknown, defaulting to 1000
[   55.072868][ T6314] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   55.080171][ T6314] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   55.086334][ T6309] netlink: 100 bytes leftover after parsing attributes in process `syz.2.142'.
[   55.106145][ T6314] lo speed is unknown, defaulting to 1000
[   55.109980][ T6314] lo speed is unknown, defaulting to 1000
[   55.113174][ T6314] lo speed is unknown, defaulting to 1000
[   55.261017][ T6329] lo speed is unknown, defaulting to 1000
[   55.286410][ T6328] lo speed is unknown, defaulting to 1000
[   55.295722][ T5831] Bluetooth: hci0: command tx timeout
[   55.297463][ T5831] Bluetooth: hci2: command tx timeout
[   55.302691][   T55] Bluetooth: hci1: command tx timeout
[   55.433009][ T6345] ip_vti0: Master is either lo or non-ether device
[   55.521001][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.154'.
[   55.543008][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   55.545925][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   55.549859][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   55.559176][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   55.745988][ T6374] ip_vti0: Master is either lo or non-ether device
[   55.998924][ T6391] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.040044][ T6390] 8021q: adding VLAN 0 to HW filter on device bond1
[   56.045034][ T6390] bond0: (slave bond1): Enslaving as an active interface with an up link
[   56.326481][ T6406] openvswitch: netlink: IP tunnel dst address not specified
[   56.584276][ T6422] ip_vti0: Master is either lo or non-ether device
[   56.709716][ T6437] veth3: entered promiscuous mode
[   56.852101][ T6447] syz_tun: entered allmulticast mode
[   57.064809][ T6473] ip_vti0: Master is either lo or non-ether device
[   57.108627][ T6477] netlink: 'syz.0.200': attribute type 5 has an invalid length.
[   57.219260][ T6487] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[   57.265987][ T6491] ip_vti0: Master is either lo or non-ether device
[   57.437402][ T6503] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   57.440572][ T6503] macsec1: entered promiscuous mode
[   57.446557][ T6503] macsec1: entered allmulticast mode
[   57.448542][ T6503] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   57.458291][ T6509] nbd: couldn't find a device at index 0
[   57.568877][ T6511] syz.2.213 (6511) used greatest stack depth: 19000 bytes left
[   57.677600][ T6518] ip_vti0: Master is either lo or non-ether device
[   57.910669][ T6534] netlink: 'syz.2.223': attribute type 10 has an invalid length.
[   57.950701][ T6537] geneve2: entered promiscuous mode
[   57.978543][ T6539] ip_vti0: Master is either lo or non-ether device
[   58.107702][ T6546] tipc: Enabling <ib:lo> not permitted
[   58.110474][ T6546] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[   58.318589][ T6573] bond0: mtu less than device minimum
[   58.320377][ T6574] bond0: mtu less than device minimum
[   58.327596][ T6561] IPVS: set_ctl: invalid protocol: 0 172.20.20.14:20003
[   58.334432][ T6575] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0xf
[   58.498924][ T6598] netlink: 'syz.2.244': attribute type 29 has an invalid length.
[   58.501928][ T6598] netlink: 'syz.2.244': attribute type 29 has an invalid length.
[   58.511947][ T6589] netlink: 'syz.1.242': attribute type 10 has an invalid length.
[   58.516590][ T6589] syz_tun: entered promiscuous mode
[   58.529684][ T6589] netlink: 'syz.1.242': attribute type 10 has an invalid length.
[   58.538677][ T6589] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.542040][ T6589] team0: Port device bond0 added
[   58.774180][ T6625] netlink: 'syz.1.250': attribute type 1 has an invalid length.
[   58.930211][ T6633] nbd: socks must be embedded in a SOCK_ITEM attr
[   59.274215][ T6654] netlink: 'syz.1.260': attribute type 1 has an invalid length.
[   59.337265][ T6654] 8021q: adding VLAN 0 to HW filter on device bond1
[   59.411894][ T6657] netlink: 'syz.1.261': attribute type 4 has an invalid length.
[   59.425171][   T47] lo speed is unknown, defaulting to 1000
[   59.427116][   T47] syz2: Port: 1 Link DOWN
[   59.594693][ T6688] __nla_validate_parse: 87 callbacks suppressed
[   59.594704][ T6688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.267'.
[   59.600082][ T6688] netlink: 24 bytes leftover after parsing attributes in process `syz.2.267'.
[   59.713993][ T6730] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   59.925013][ T6795] validate_nla: 1 callbacks suppressed
[   59.925035][ T6795] netlink: 'syz.1.274': attribute type 1 has an invalid length.
[   59.929251][ T6795] netlink: 228 bytes leftover after parsing attributes in process `syz.1.274'.
[   59.932137][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.274'.
[   59.951493][ T6795] netlink: 'syz.1.274': attribute type 1 has an invalid length.
[   59.991025][ T6799] ip_vti0: Master is either lo or non-ether device
[   60.247064][ T6826] ip_vti0: Master is either lo or non-ether device
[   60.282135][ T6828] syzkaller1: entered promiscuous mode
[   60.284029][ T6828] syzkaller1: entered allmulticast mode
[   60.294608][ T6828] netlink: 28 bytes leftover after parsing attributes in process `syz.0.286'.
[   60.297429][ T6828] netlink: 28 bytes leftover after parsing attributes in process `syz.0.286'.
[   60.304210][ T6828] veth1: entered promiscuous mode
[   60.306564][ T6828] batadv_slave_1: entered promiscuous mode
[   60.310540][ T6828] netlink: 28 bytes leftover after parsing attributes in process `syz.0.286'.
[   60.314665][ T6828] netlink: 28 bytes leftover after parsing attributes in process `syz.0.286'.
[   60.463827][ T6834] Bluetooth: MGMT ver 1.23
[   60.466316][ T6835] netlink: 16 bytes leftover after parsing attributes in process `syz.0.288'.
[   60.604307][ T6843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   61.024312][ T6854] ip_vti0: Master is either lo or non-ether device
[   61.112201][ T6861] netlink: 'syz.1.296': attribute type 1 has an invalid length.
[   61.115512][ T6861] netlink: 'syz.1.296': attribute type 2 has an invalid length.
[   61.450114][ T6870] netlink: 'syz.2.299': attribute type 12 has an invalid length.
[   61.452449][ T6870] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.299'.
[   61.489741][ T6873] ip_vti0: Master is either lo or non-ether device
[   61.584561][ T6880] sock: sock_set_timeout: `syz.1.303' (pid 6880) tries to set negative timeout
[   61.733427][ T6892] ip_vti0: Master is either lo or non-ether device
[   61.927614][ T6905] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   62.091240][ T6922] netlink: 'syz.1.320': attribute type 1 has an invalid length.
[   62.096219][ T6922] netlink: 'syz.1.320': attribute type 2 has an invalid length.
[   62.101081][ T6922] netlink: 'syz.1.320': attribute type 1 has an invalid length.
[   62.104954][ T6922] netlink: 'syz.1.320': attribute type 2 has an invalid length.
[   62.115475][ T6924] netlink: 'syz.0.321': attribute type 1 has an invalid length.
[   62.139861][ T6924] 8021q: adding VLAN 0 to HW filter on device bond1
[   62.145341][ T6927] openvswitch: netlink: Missing key (keys=40, expected=100)
[   62.149036][ T6927] openvswitch: netlink: Missing key (keys=40, expected=100)
[   62.153579][ T6924] bond1: (slave ip6gretap1): making interface the new active one
[   62.157281][ T6924] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[   62.174379][ T6924] veth5: entered promiscuous mode
[   62.177650][ T6924] erspan0: entered allmulticast mode
[   62.238317][ T6938] netem: unknown loss type 0
[   62.239993][ T6938] netem: change failed
[   62.315678][ T6938] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   62.387285][ T6950] veth1_to_team: entered allmulticast mode
[   62.726974][ T6979] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   62.731770][ T5860] lo speed is unknown, defaulting to 1000
[   62.734430][ T5860] syz2: Port: 1 Link ACTIVE
[   62.795587][ T6986] lo speed is unknown, defaulting to 1000
[   62.997525][ T6992] ip_vti0: Master is either lo or non-ether device
[   63.165508][ T7004] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[   63.272445][ T7016] ip_vti0: Master is either lo or non-ether device
[   63.547430][ T7048] ip_vti0: Master is either lo or non-ether device
[   63.952317][ T7091] ip_vti0: Master is either lo or non-ether device
[   63.958141][ T7090] tap0: tun_chr_ioctl cmd 1074025677
[   63.960040][ T7090] tap0: linktype set to 804
[   64.245416][ T7114] lo speed is unknown, defaulting to 1000
[   64.695904][ T7155] openvswitch: netlink: Multiple metadata blocks provided
[   65.381412][ T7165] validate_nla: 5 callbacks suppressed
[   65.381422][ T7165] netlink: 'syz.1.401': attribute type 21 has an invalid length.
[   65.391257][ T7167] __nla_validate_parse: 21 callbacks suppressed
[   65.391266][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.401'.
[   65.459379][ T7174] sctp: [Deprecated]: syz.2.403 (pid 7174) Use of int in maxseg socket option.
[   65.459379][ T7174] Use struct sctp_assoc_value instead
[   65.465165][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.403'.
[   65.551593][ T7186] ip_vti0: Master is either lo or non-ether device
[   65.599821][ T7192] netlink: 'syz.0.411': attribute type 1 has an invalid length.
[   65.602130][ T7192] netlink: 224 bytes leftover after parsing attributes in process `syz.0.411'.
[   65.652385][ T7201] netlink: 'syz.2.413': attribute type 1 has an invalid length.
[   65.656450][ T7201] netlink: 172 bytes leftover after parsing attributes in process `syz.2.413'.
[   65.659552][ T7201] netlink: 'syz.2.413': attribute type 1 has an invalid length.
[   65.720852][ T7206] lo speed is unknown, defaulting to 1000
[   65.766925][ T7210] ip_vti0: Master is either lo or non-ether device
[   65.817832][ T7218] geneve3: entered promiscuous mode
[   65.944015][ T7225] openvswitch: netlink: IPv4 tun info is not correct
[   65.989137][ T7229] x_tables: ip_tables: udp match: only valid for protocol 17
[   66.008685][ T7229] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   66.097779][ T7241] ip_vti0: Master is either lo or non-ether device
[   66.110818][ T7243] netlink: 64 bytes leftover after parsing attributes in process `syz.0.430'.
[   66.207610][ T7252] netlink: 32 bytes leftover after parsing attributes in process `syz.0.433'.
[   66.729713][ T7291] macvlan14: entered allmulticast mode
[   66.731503][ T7291] veth1_vlan: entered allmulticast mode
[   66.733553][   T55] Bluetooth: hci2: command tx timeout
[   66.810477][ T7293] lo speed is unknown, defaulting to 1000
[   66.837290][ T7297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.448'.
[   66.846228][ T7297] netlink: 356 bytes leftover after parsing attributes in process `syz.2.448'.
[   66.939219][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.452'.
[   67.057460][ T7322] macvlan11: entered promiscuous mode
[   67.059229][ T7322] macvlan11: entered allmulticast mode
[   67.098369][ T7327] netlink: 60 bytes leftover after parsing attributes in process `syz.2.459'.
[   67.108674][ T7328] netlink: zone id is out of range
[   67.110619][ T7328] netlink: zone id is out of range
[   67.112221][ T7328] netlink: zone id is out of range
[   67.114017][ T7328] netlink: zone id is out of range
[   67.116336][ T7328] netlink: zone id is out of range
[   67.122618][ T7328] netlink: zone id is out of range
[   67.124483][ T7328] netlink: zone id is out of range
[   67.126740][ T7328] netlink: zone id is out of range
[   67.128655][ T7328] netlink: zone id is out of range
[   67.130415][ T7328] netlink: get zone limit has 8 unknown bytes
[   67.157126][    T9] cfg80211: failed to load regulatory.db
[   67.232087][ T7345] macvlan12: entered promiscuous mode
[   67.234717][ T7345] macvlan12: entered allmulticast mode
[   67.236672][ T7345] veth1_vlan: entered allmulticast mode
[   67.385921][ T7364] macvlan16: entered promiscuous mode
[   67.391870][ T7364] macvlan16: entered allmulticast mode
[   67.421093][ T7368] ip_vti0: Master is either lo or non-ether device
[   67.476187][ T7378] netlink: 'syz.2.480': attribute type 2 has an invalid length.
[   67.481837][ T7376] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   67.490764][ T7376] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.563480][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   67.576050][ T7376] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   67.579319][ T7376] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.627078][ T7380] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   67.642241][ T7376] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   67.646735][ T7376] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.709720][ T7376] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   67.715801][ T7376] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.996534][ T7397] macvlan11: left promiscuous mode
[   67.998219][ T7397] macvlan11: left allmulticast mode
[   68.000174][ T7397] veth1_vlan: left allmulticast mode
[   68.002029][ T7397] macvlan12: left promiscuous mode
[   68.003777][ T7397] macvlan12: left allmulticast mode
[   68.079760][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   68.082400][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.085790][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   68.088671][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.092680][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   68.095320][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.098334][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   68.101411][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.150382][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   68.153858][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.156434][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   68.161050][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.170492][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   68.180495][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.199571][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   68.203239][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.355932][ T7435] netlink: 'syz.0.496': attribute type 1 has an invalid length.
[   68.467994][ T6360] nci: nci_rx_work: unknown MT 0x1
[   69.314368][ T7461] netlink: 'syz.2.504': attribute type 4 has an invalid length.
[   69.387990][ T7470] syzkaller1: entered promiscuous mode
[   69.389912][ T7470] syzkaller1: entered allmulticast mode
[   69.400809][ T7470] geneve2: entered promiscuous mode
[   69.674523][ T7493] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[   69.680473][ T7493] netlink: 'syz.2.516': attribute type 1 has an invalid length.
[   69.714991][ T7495] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   70.817452][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   70.998328][ T7528] pim6reg: entered allmulticast mode
[   71.012203][ T7525] pim6reg: left allmulticast mode
[   71.117578][ T7530] ip_vti0: Master is either lo or non-ether device
[   71.710379][ T7555] IPVS: Scheduler module ip_vs_sip not found
[   71.837575][ T7578] ip_vti0: Master is either lo or non-ether device
[   72.189204][ T7598] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[   72.198681][ T7598] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[   72.201390][ T7598] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[   72.204291][ T7598] netlink: 'syz.2.553': attribute type 46 has an invalid length.
[   72.209458][ T7598] __nla_validate_parse: 15 callbacks suppressed
[   72.209466][ T7598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.553'.
[   72.216882][ T7598] net_ratelimit: 2 callbacks suppressed
[   72.216899][ T7598] openvswitch: netlink: Flow actions attr not present in new flow.
[   72.360476][ T7611] netlink: 36 bytes leftover after parsing attributes in process `syz.0.559'.
[   72.421656][ T7622] netlink: 24 bytes leftover after parsing attributes in process `syz.1.564'.
[   72.449682][ T7624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.565'.
[   72.455244][ T7624] netlink: 44 bytes leftover after parsing attributes in process `syz.2.565'.
[   72.456179][ T7626] netlink: 'syz.0.566': attribute type 9 has an invalid length.
[   72.586330][ T7637] IPVS: Scheduler module ip_vs_sip not found
[   72.589923][ T7637] IPVS: length: 8 != 446622349272
[   72.616968][ T7644] tipc: Can't bind to reserved service type 2
[   72.645933][ T7646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.574'.
[   73.009367][ T7695] ip_vti0: Master is either lo or non-ether device
[   73.114104][ T7704] IPVS: Scheduler module ip_vs_sip not found
[   73.117257][ T7704] IPVS: length: 8 != 446622349272
[   73.119740][ T7704] netlink: 16 bytes leftover after parsing attributes in process `syz.0.597'.
[   73.894775][ T7720] netlink: 36 bytes leftover after parsing attributes in process `syz.1.602'.
[   73.898539][ T7720] netlink: 'syz.1.602': attribute type 29 has an invalid length.
[   73.935362][ T7722] ip_vti0: Master is either lo or non-ether device
[   74.024505][ T7725] Unsupported ieee802154 address type: 0
[   74.274692][ T7738] ip_vti0: Master is either lo or non-ether device
[   74.739420][ T7772] ip_vti0: Master is either lo or non-ether device
[   75.646684][ T7789] netlink: 20 bytes leftover after parsing attributes in process `syz.2.625'.
[   75.807164][ T7805] netlink: 'syz.1.631': attribute type 10 has an invalid length.
[   75.809540][ T7805] netlink: 40 bytes leftover after parsing attributes in process `syz.1.631'.
[   75.812210][ T7805] dummy0: entered promiscuous mode
[   75.815255][ T7805] dummy0: entered allmulticast mode
[   75.818027][ T7805] bridge0: port 1(dummy0) entered blocking state
[   75.820254][ T7805] bridge0: port 1(dummy0) entered disabled state
[   75.824641][ T7805] bridge0: port 1(dummy0) entered blocking state
[   75.826779][ T7805] bridge0: port 1(dummy0) entered forwarding state
[   75.867312][ T7811] dvmrp1: entered allmulticast mode
[   76.038203][ T7838] ip_vti0: Master is either lo or non-ether device
[   76.676427][ T7865] ip_vti0: Master is either lo or non-ether device
[   76.801501][ T7876] macvlan21: entered promiscuous mode
[   76.804606][ T7876] macvlan21: entered allmulticast mode
[   77.039868][ T7898] macvlan25: entered promiscuous mode
[   77.042079][ T7898] macvlan25: entered allmulticast mode
[   77.044814][ T7898] veth1_vlan: entered allmulticast mode
[   77.082344][ T7904] ip_vti0: Master is either lo or non-ether device
[   77.258426][ T7931] __nla_validate_parse: 4 callbacks suppressed
[   77.258436][ T7931] netlink: 20 bytes leftover after parsing attributes in process `syz.1.674'.
[   77.385485][ T7944] macvlan22: entered promiscuous mode
[   77.387469][ T7944] macvlan22: entered allmulticast mode
[   77.405536][ T7946] netlink: 20 bytes leftover after parsing attributes in process `syz.1.681'.
[   77.441854][ T7949] netlink: 20 bytes leftover after parsing attributes in process `syz.0.682'.
[   77.474681][ T7953] syzkaller1: entered promiscuous mode
[   77.476446][ T7953] syzkaller1: entered allmulticast mode
[   77.517671][ T7955] ip_vti0: Master is either lo or non-ether device
[   77.654324][ T7972] ip_vti0: Master is either lo or non-ether device
[   77.949934][ T7985] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   77.989626][ T7987] macvlan21: entered promiscuous mode
[   77.991446][ T7987] macvlan21: entered allmulticast mode
[   78.057122][ T7989] netlink: 20 bytes leftover after parsing attributes in process `syz.1.698'.
[   78.120864][ T7994] netlink: 24 bytes leftover after parsing attributes in process `syz.1.698'.
[   78.128370][ T7994] openvswitch: netlink: Flow key attr not present in new flow.
[   78.648689][ T8007] openvswitch: netlink: IP tunnel dst address not specified
[   78.777573][ T8013] macvlan25: entered promiscuous mode
[   78.779362][ T8013] macvlan25: entered allmulticast mode
[   78.850747][ T8019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.708'.
[   78.944886][ T8030] openvswitch: netlink: IP tunnel dst address not specified
[   79.022126][ T8042] macvlan27: entered promiscuous mode
[   79.030662][ T8042] macvlan27: entered allmulticast mode
[   79.039978][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.715'.
[   79.043146][ T8037] netlink: 16 bytes leftover after parsing attributes in process `syz.2.715'.
[   79.076694][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.715'.
[   79.079583][ T8037] nbd: must specify at least one socket
[   79.091642][ T8037] netlink: 32 bytes leftover after parsing attributes in process `syz.2.715'.
[   79.105368][ T8051] netlink: 'syz.1.718': attribute type 1 has an invalid length.
[   79.159166][ T8059] ip_vti0: Master is either lo or non-ether device
[   79.187138][ T8062] sctp: [Deprecated]: syz.2.723 (pid 8062) Use of int in maxseg socket option.
[   79.187138][ T8062] Use struct sctp_assoc_value instead
[   80.059934][ T8077] netlink: 'syz.2.728': attribute type 10 has an invalid length.
[   80.102738][ T8085] macvlan23: entered promiscuous mode
[   80.104664][ T8085] macvlan23: entered allmulticast mode
[   80.106382][ T8085] veth1_vlan: entered allmulticast mode
[   80.167285][ T8089] ip_vti0: Master is either lo or non-ether device
[   80.355314][ T8097] netlink: 'syz.1.735': attribute type 18 has an invalid length.
[   80.968292][ T8141] netlink: 'syz.0.749': attribute type 21 has an invalid length.
[   80.968398][ T8140] netlink: 'syz.0.749': attribute type 21 has an invalid length.
[   80.974686][ T8140] netlink: 'syz.0.749': attribute type 21 has an invalid length.
[   80.977992][ T8140] netlink: 'syz.0.749': attribute type 21 has an invalid length.
[   80.980491][ T8140] netlink: 'syz.0.749': attribute type 21 has an invalid length.
[   80.983811][ T8140] netlink: 'syz.0.749': attribute type 21 has an invalid length.
[   80.986419][ T8140] netlink: 'syz.0.749': attribute type 21 has an invalid length.
[   81.032377][ T8146] macvlan28: entered promiscuous mode
[   81.034229][ T8146] macvlan28: entered allmulticast mode
[   81.062172][ T8148] ip_vti0: Master is either lo or non-ether device
[   81.181768][ T8157] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[   81.185507][ T8157] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   81.298369][ T8167] 8021q: adding VLAN 0 to HW filter on device bond5
[   81.309130][ T8168] bond5: (slave bridge3): making interface the new active one
[   81.312281][ T8168] bond5: (slave bridge3): Enslaving as an active interface with an up link
[   81.319931][ T8167] gretap1: entered promiscuous mode
[   81.324578][ T8167] bond5: (slave gretap1): Enslaving as an active interface with an up link
[   81.331652][ T8168] macvlan29: entered promiscuous mode
[   81.334482][ T8168] macvlan29: entered allmulticast mode
[   81.336626][ T8168] bond5: entered promiscuous mode
[   81.338314][ T8168] bridge3: entered promiscuous mode
[   81.340464][ T8168] 8021q: adding VLAN 0 to HW filter on device macvlan29
[   81.343027][ T8168] bond5: (slave macvlan29): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   81.348311][ T8168] bond5: left promiscuous mode
[   81.349937][ T8168] bridge3: left promiscuous mode
[   81.547259][ T8180] macvlan30: entered promiscuous mode
[   81.549148][ T8180] macvlan30: entered allmulticast mode
[   81.624939][ T8186] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   81.627605][ T8186] openvswitch: netlink: Duplicate key (type 0).
[   81.990135][ T8213] pim6reg: entered allmulticast mode
[   81.993383][ T8213] pim6reg: left allmulticast mode
[   82.286091][ T8252] sock: sock_set_timeout: `syz.0.795' (pid 8252) tries to set negative timeout
[   82.629617][ T8272] batadv_slave_1: entered promiscuous mode
[   82.651727][ T8271] batadv_slave_1: left promiscuous mode
[   82.708836][ T8277] __nla_validate_parse: 74 callbacks suppressed
[   82.708849][ T8277] netlink: 44 bytes leftover after parsing attributes in process `syz.1.805'.
[   82.769589][ T8278] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20001
[   82.911317][ T8288] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.810'.
[   82.916130][ T8288] openvswitch: netlink: Port -8 exceeds max allowable 65535
[   82.919255][ T8288] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.976946][ T8292] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[   83.157132][ T8307] netlink: zone id is out of range
[   83.161138][ T8307] netlink: zone id is out of range
[   83.200838][ T8307] netlink: set zone limit has 4 unknown bytes
[   83.237011][ T8321] netlink: 52 bytes leftover after parsing attributes in process `syz.1.822'.
[   83.298845][ T8329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.825'.
[   83.355291][ T8329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.825'.
[   83.412977][ T8338] ip_vti0: Master is either lo or non-ether device
[   84.248532][ T8365] block nbd1: Receive control failed (result -32)
[   84.549347][ T8395] ip_vti0: Master is either lo or non-ether device
[   84.588025][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.855'.
[   84.828896][ T8430] netlink: 48 bytes leftover after parsing attributes in process `syz.2.864'.
[   84.838551][ T8430] macvlan31: entered promiscuous mode
[   84.840451][ T8430] macvlan31: entered allmulticast mode
[   85.236240][ T8456] netlink: 44 bytes leftover after parsing attributes in process `syz.0.869'.
[   85.264485][ T8458] netlink: 32 bytes leftover after parsing attributes in process `syz.1.871'.
[   85.269800][ T8458] netlink: 32 bytes leftover after parsing attributes in process `syz.1.871'.
[   85.298291][ T8461] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20001
[   85.451668][ T8476] ip_vti0: Master is either lo or non-ether device
[   85.516026][ T8484] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[   85.543094][ T1843] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   85.821786][ T8506] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20001
[   85.842811][ T1843] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   85.907777][ T8511] validate_nla: 64 callbacks suppressed
[   85.907790][ T8511] netlink: 'syz.2.891': attribute type 1 has an invalid length.
[   85.927241][ T8511] 8021q: adding VLAN 0 to HW filter on device bond2
[   85.945071][ T8511] bond2: (slave bridge1): making interface the new active one
[   85.948213][ T8511] bond2: (slave bridge1): Enslaving as an active interface with an up link
[   85.956731][ T8511] gretap1: entered promiscuous mode
[   85.960421][ T8511] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   85.968948][ T8511] macvlan32: entered promiscuous mode
[   85.970903][ T8511] macvlan32: entered allmulticast mode
[   85.973675][ T8511] bond2: entered promiscuous mode
[   85.975673][ T8511] bridge1: entered promiscuous mode
[   85.977991][ T8511] 8021q: adding VLAN 0 to HW filter on device macvlan32
[   85.980674][ T8511] bond2: (slave macvlan32): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   85.988028][ T8511] bond2: left promiscuous mode
[   85.989652][ T8511] bridge1: left promiscuous mode
[   86.009449][ T8512] macvlan32: entered promiscuous mode
[   86.011300][ T8512] macvlan32: entered allmulticast mode
[   86.013885][ T8512] bond2: entered promiscuous mode
[   86.015625][ T8512] bridge1: entered promiscuous mode
[   86.017871][ T8512] 8021q: adding VLAN 0 to HW filter on device macvlan32
[   86.020485][ T8512] bond2: (slave macvlan32): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   86.027185][ T8512] bond2: left promiscuous mode
[   86.028746][ T8512] bridge1: left promiscuous mode
[   86.195856][ T8531] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20001
[   86.265242][ T8539] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   86.292695][ T8542] ip_vti0: Master is either lo or non-ether device
[   86.480575][ T8554] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20001
[   86.579567][ T8560] macvlan34: entered promiscuous mode
[   86.581512][ T8560] macvlan34: entered allmulticast mode
[   86.649926][ T8566] ip_vti0: Master is either lo or non-ether device
[   86.681418][ T8570] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[   86.735046][ T8571] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20001
[   86.850633][ T8586] veth0_to_hsr: entered promiscuous mode
[   87.161242][ T8594] macvlan32: entered promiscuous mode
[   87.164943][ T8594] macvlan32: entered allmulticast mode
[   87.652133][ T8606] netlink: 'syz.1.926': attribute type 1 has an invalid length.
[   87.665964][ T8606] bond3: entered promiscuous mode
[   87.667952][ T8606] 8021q: adding VLAN 0 to HW filter on device bond3
[   87.685651][ T8610] ip_vti0: Master is either lo or non-ether device
[   87.940685][ T8631] __nla_validate_parse: 15 callbacks suppressed
[   87.940697][ T8631] netlink: 28 bytes leftover after parsing attributes in process `syz.0.933'.
[   87.945339][ T8631] netlink: 28 bytes leftover after parsing attributes in process `syz.0.933'.
[   88.636039][ T8651] netlink: 28 bytes leftover after parsing attributes in process `syz.1.942'.
[   88.771009][ T8660] macvlan30: entered promiscuous mode
[   88.773321][ T8660] macvlan30: entered allmulticast mode
[   88.901011][ T8674] ip_vti0: Master is either lo or non-ether device
[   88.928755][ T8677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.951'.
[   88.933354][ T8677] netlink: 32 bytes leftover after parsing attributes in process `syz.1.951'.
[   89.046686][ T8684] netlink: 'syz.2.954': attribute type 30 has an invalid length.
[   89.049290][ T8684] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[   89.052231][ T8684] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[   89.926803][   T33] audit: type=1800 audit(1754560727.014:2): pid=8710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.964" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=1598 res=0 errno=0
[   89.954339][   T33] audit: type=1804 audit(1754560727.044:3): pid=8710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.964" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=1598 res=1 errno=0
[   90.031133][ T8720] macvlan33: entered promiscuous mode
[   90.036046][ T8720] macvlan33: entered allmulticast mode
[   90.199837][ T8735] ip_vti0: Master is either lo or non-ether device
[   90.326538][ T8748] netlink: 28 bytes leftover after parsing attributes in process `syz.0.977'.
[   90.329481][ T8748] netlink: 28 bytes leftover after parsing attributes in process `syz.0.977'.
[   90.460358][ T8753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.979'.
[   90.829790][ T8757] netlink: 'syz.1.981': attribute type 1 has an invalid length.
[   90.832404][ T8757] netlink: 216 bytes leftover after parsing attributes in process `syz.1.981'.
[   90.836737][ T8757] netlink: 104 bytes leftover after parsing attributes in process `syz.1.981'.
[   91.116148][ T8781] macvlan34: entered promiscuous mode
[   91.118067][ T8781] macvlan34: entered allmulticast mode
[   91.145784][ T8783] netlink: 'syz.2.991': attribute type 1 has an invalid length.
[   91.333876][   T12] nci: nci_rsp_packet: unsupported rsp opcode 0xf2d
[   91.445184][ T8796] netlink: 'syz.0.995': attribute type 10 has an invalid length.
[   91.834454][ T8799] ip_vti0: Master is either lo or non-ether device
[   92.177915][ T8815] xt_limit: Overflow, try lower: 604147548/4200216962
[   93.039743][ T8842] __nla_validate_parse: 6 callbacks suppressed
[   93.039837][ T8842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1011'.
[   93.101021][ T8848] macvlan35: entered promiscuous mode
[   93.109446][ T8848] macvlan35: entered allmulticast mode
[   93.138726][ T8850] netlink: 'syz.0.1015': attribute type 17 has an invalid length.
[   93.141946][ T8850] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1015'.
[   93.155892][ T8850] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   93.221691][ T8866] ip_vti0: Master is either lo or non-ether device
[   93.426489][ T8887] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1024'.
[   93.429650][ T8887] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1024'.
[   93.432815][ T8887] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1024'.
[   93.578815][ T8892] netlink: 'syz.0.1025': attribute type 11 has an invalid length.
[   93.581387][ T8892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1025'.
[   93.584860][ T8892] netlink: 'syz.0.1025': attribute type 11 has an invalid length.
[   93.587362][ T8892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1025'.
[   93.591006][ T8892] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1025'.
[   94.079237][ T8896] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1027'.
[   94.196119][ T8901] lo speed is unknown, defaulting to 1000
[   94.206145][ T8907] netlink: 'syz.1.1031': attribute type 1 has an invalid length.
[   94.581639][ T8930] macvlan37: entered promiscuous mode
[   94.584426][ T8930] macvlan37: entered allmulticast mode
[   94.662831][ T8939] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1043'.
[   94.773406][ T8941] ip_vti0: Master is either lo or non-ether device
[   95.223140][ T8960] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   95.532019][ T8991] syzkaller0: entered promiscuous mode
[   95.534155][ T8991] syzkaller0: entered allmulticast mode
[   96.187904][   T33] audit: type=1804 audit(1754560733.274:4): pid=8996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1064" name="/newroot/397/cgroup.controllers" dev="tmpfs" ino=2071 res=1 errno=0
[   96.196967][   T33] audit: type=1800 audit(1754560733.284:5): pid=8996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1064" name="cgroup.controllers" dev="tmpfs" ino=2071 res=0 errno=0
[   96.359283][ T8998] macvlan38: entered promiscuous mode
[   96.361214][ T8998] macvlan38: entered allmulticast mode
[   96.389390][ T9000] netlink: 'syz.0.1066': attribute type 1 has an invalid length.
[   96.427000][ T9000] netlink: 'syz.0.1066': attribute type 20 has an invalid length.
[   96.664796][ T9018] ip_vti0: Master is either lo or non-ether device
[   96.917664][ T9041] netlink: 'syz.2.1079': attribute type 83 has an invalid length.
[   97.206512][ T9070] macvlan33: entered promiscuous mode
[   97.208495][ T9070] macvlan33: entered allmulticast mode
[   97.593020][ T5852] ==================================================================
[   97.595562][ T5852] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[   97.597991][ T5852] Read of size 1 at addr ffff88803744c7b0 by task kworker/u8:3/5852
[   97.601243][ T5852] 
[   97.602012][ T5852] CPU: 1 UID: 0 PID: 5852 Comm: kworker/u8:3 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10-dirty #0 PREEMPT(full) 
[   97.602024][ T5852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   97.602029][ T5852] Workqueue: ipv6_addrconf addrconf_dad_work
[   97.602044][ T5852] Call Trace:
[   97.602048][ T5852]  <TASK>
[   97.602053][ T5852]  dump_stack_lvl+0x189/0x250
[   97.602063][ T5852]  ? __kasan_check_byte+0x12/0x40
[   97.602076][ T5852]  ? __pfx_dump_stack_lvl+0x10/0x10
[   97.602084][ T5852]  ? lock_release+0x4b/0x3e0
[   97.602096][ T5852]  ? __virt_addr_valid+0x4a5/0x5c0
[   97.602105][ T5852]  print_report+0xca/0x240
[   97.602116][ T5852]  ? xfrm_state_find+0x2cf2/0x5400
[   97.602123][ T5852]  kasan_report+0x118/0x150
[   97.602135][ T5852]  ? xfrm_state_find+0x2cf2/0x5400
[   97.602161][ T5852]  xfrm_state_find+0x2cf2/0x5400
[   97.602170][ T5852]  ? check_noncircular+0xe0/0x160
[   97.602179][ T5852]  ? validate_chain+0x897/0x2140
[   97.602188][ T5852]  ? xfrm_state_find+0x1da/0x5400
[   97.602196][ T5852]  ? __pfx_xfrm_state_find+0x10/0x10
[   97.602207][ T5852]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[   97.602222][ T5852]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[   97.602232][ T5852]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[   97.602242][ T5852]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[   97.602252][ T5852]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[   97.602260][ T5852]  ? process_scheduled_works+0xae1/0x17b0
[   97.602278][ T5852]  ? __lock_acquire+0xab9/0xd20
[   97.602288][ T5852]  ? xfrm_expand_policies+0x41f/0x6a0
[   97.602297][ T5852]  xfrm_lookup_with_ifid+0x58a/0x1a70
[   97.602306][ T5852]  ? lockdep_hardirqs_on+0x9c/0x150
[   97.602319][ T5852]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[   97.602327][ T5852]  ? do_raw_spin_unlock+0x4d/0x240
[   97.602335][ T5852]  ? icmp6_dst_alloc+0x3a5/0x420
[   97.602344][ T5852]  ? icmp6_dst_alloc+0x3a5/0x420
[   97.602354][ T5852]  ndisc_send_skb+0x41f/0x1440
[   97.602366][ T5852]  ? ndisc_send_skb+0x20c/0x1440
[   97.602378][ T5852]  ? __pfx_ndisc_send_skb+0x10/0x10
[   97.602389][ T5852]  ? ndisc_ns_create+0x4ea/0x650
[   97.602395][ T5852]  ? __asan_memcpy+0x40/0x70
[   97.602407][ T5852]  ? mod_delayed_work_on+0x128/0x200
[   97.602416][ T5852]  ndisc_send_ns+0xcb/0x150
[   97.602424][ T5852]  ? __pfx_ndisc_send_ns+0x10/0x10
[   97.602430][ T5852]  ? addrconf_dad_work+0xa04/0x14b0
[   97.602440][ T5852]  addrconf_dad_work+0xaae/0x14b0
[   97.602447][ T5852]  ? __lock_acquire+0xab9/0xd20
[   97.602458][ T5852]  ? __pfx_addrconf_dad_work+0x10/0x10
[   97.602466][ T5852]  ? process_scheduled_works+0x9ef/0x17b0
[   97.602478][ T5852]  ? _raw_spin_unlock_irq+0x23/0x50
[   97.602488][ T5852]  ? process_scheduled_works+0x9ef/0x17b0
[   97.602498][ T5852]  ? process_scheduled_works+0x9ef/0x17b0
[   97.602509][ T5852]  process_scheduled_works+0xae1/0x17b0
[   97.602525][ T5852]  ? __pfx_process_scheduled_works+0x10/0x10
[   97.602539][ T5852]  worker_thread+0x8a0/0xda0
[   97.602551][ T5852]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   97.602562][ T5852]  ? __kthread_parkme+0x7b/0x200
[   97.602571][ T5852]  kthread+0x711/0x8a0
[   97.602579][ T5852]  ? __pfx_worker_thread+0x10/0x10
[   97.602590][ T5852]  ? __pfx_kthread+0x10/0x10
[   97.602598][ T5852]  ? _raw_spin_unlock_irq+0x23/0x50
[   97.602607][ T5852]  ? lockdep_hardirqs_on+0x9c/0x150
[   97.602616][ T5852]  ? __pfx_kthread+0x10/0x10
[   97.602625][ T5852]  ret_from_fork+0x3fc/0x770
[   97.602637][ T5852]  ? __pfx_ret_from_fork+0x10/0x10
[   97.602649][ T5852]  ? __switch_to_asm+0x39/0x70
[   97.602657][ T5852]  ? __switch_to_asm+0x33/0x70
[   97.602665][ T5852]  ? __pfx_kthread+0x10/0x10
[   97.602673][ T5852]  ret_from_fork_asm+0x1a/0x30
[   97.602685][ T5852]  </TASK>
[   97.602687][ T5852] 
[   97.711842][ T5852] Allocated by task 6964:
[   97.713192][ T5852]  kasan_save_track+0x3e/0x80
[   97.714664][ T5852]  __kasan_slab_alloc+0x6c/0x80
[   97.716192][ T5852]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[   97.717872][ T5852]  xfrm_state_alloc+0x24/0x2f0
[   97.719373][ T5852]  __find_acq_core+0x8a7/0x1c00
[   97.720877][ T5852]  xfrm_find_acq+0x78/0xa0
[   97.722275][ T5852]  xfrm_alloc_userspi+0x6b3/0xc90
[   97.723833][ T5852]  xfrm_user_rcv_msg+0x7a3/0xab0
[   97.725375][ T5852]  netlink_rcv_skb+0x208/0x470
[   97.726888][ T5852]  xfrm_netlink_rcv+0x79/0x90
[   97.728387][ T5852]  netlink_unicast+0x82f/0x9e0
[   97.729888][ T5852]  netlink_sendmsg+0x805/0xb30
[   97.731560][ T5852]  __sock_sendmsg+0x21c/0x270
[   97.733029][ T5852]  ____sys_sendmsg+0x505/0x830
[   97.734529][ T5852]  ___sys_sendmsg+0x21f/0x2a0
[   97.735995][ T5852]  __x64_sys_sendmsg+0x19b/0x260
[   97.737549][ T5852]  do_syscall_64+0xfa/0x3b0
[   97.738974][ T5852]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.740799][ T5852] 
[   97.741556][ T5852] Freed by task 5232:
[   97.742799][ T5852]  kasan_save_track+0x3e/0x80
[   97.744268][ T5852]  kasan_save_free_info+0x46/0x50
[   97.745828][ T5852]  __kasan_slab_free+0x62/0x70
[   97.747326][ T5852]  kmem_cache_free+0x18f/0x400
[   97.748821][ T5852]  xfrm_state_gc_task+0x518/0x6a0
[   97.750400][ T5852]  process_scheduled_works+0xae1/0x17b0
[   97.752129][ T5852]  worker_thread+0x8a0/0xda0
[   97.753593][ T5852]  kthread+0x711/0x8a0
[   97.754868][ T5852]  ret_from_fork+0x3fc/0x770
[   97.756323][ T5852]  ret_from_fork_asm+0x1a/0x30
[   97.757809][ T5852] 
[   97.758568][ T5852] The buggy address belongs to the object at ffff88803744c480
[   97.758568][ T5852]  which belongs to the cache xfrm_state of size 928
[   97.762788][ T5852] The buggy address is located 816 bytes inside of
[   97.762788][ T5852]  freed 928-byte region [ffff88803744c480, ffff88803744c820)
[   97.766950][ T5852] 
[   97.767717][ T5852] The buggy address belongs to the physical page:
[   97.769715][ T5852] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803744d680 pfn:0x3744c
[   97.772805][ T5852] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   97.775418][ T5852] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[   97.777737][ T5852] page_type: f5(slab)
[   97.778985][ T5852] raw: 00fff00000000040 ffff88801e28d3c0 dead000000000122 0000000000000000
[   97.781615][ T5852] raw: ffff88803744d680 00000000800e000d 00000000f5000000 0000000000000000
[   97.784244][ T5852] head: 00fff00000000040 ffff88801e28d3c0 dead000000000122 0000000000000000
[   97.786891][ T5852] head: ffff88803744d680 00000000800e000d 00000000f5000000 0000000000000000
[   97.789537][ T5852] head: 00fff00000000002 ffffea0000dd1301 00000000ffffffff 00000000ffffffff
[   97.792202][ T5852] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[   97.794858][ T5852] page dumped because: kasan: bad access detected
[   97.796831][ T5852] page_owner tracks the page as allocated
[   97.798576][ T5852] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6953, tgid 6952 (syz.1.331), ts 62425332780, free_ts 61475294087
[   97.804255][ T5852]  post_alloc_hook+0x240/0x2a0
[   97.805734][ T5852]  get_page_from_freelist+0x21e4/0x22c0
[   97.807451][ T5852]  __alloc_frozen_pages_noprof+0x181/0x370
[   97.809251][ T5852]  alloc_pages_mpol+0x232/0x4a0
[   97.810766][ T5852]  allocate_slab+0x8a/0x3b0
[   97.812203][ T5852]  ___slab_alloc+0xbfc/0x1480
[   97.813665][ T5852]  kmem_cache_alloc_noprof+0x283/0x3c0
[   97.815434][ T5852]  xfrm_state_alloc+0x24/0x2f0
[   97.816914][ T5852]  xfrm_add_sa+0x17d1/0x4070
[   97.818350][ T5852]  xfrm_user_rcv_msg+0x7a3/0xab0
[   97.819870][ T5852]  netlink_rcv_skb+0x208/0x470
[   97.821329][ T5852]  xfrm_netlink_rcv+0x79/0x90
[   97.822720][ T5852]  netlink_unicast+0x82f/0x9e0
[   97.824165][ T5852]  netlink_sendmsg+0x805/0xb30
[   97.825632][ T5852]  __sock_sendmsg+0x21c/0x270
[   97.827088][ T5852]  ____sys_sendmsg+0x505/0x830
[   97.828586][ T5852] page last free pid 6866 tgid 6862 stack trace:
[   97.830537][ T5852]  free_unref_folios+0xc66/0x14d0
[   97.832223][ T5852]  folios_put_refs+0x559/0x640
[   97.833742][ T5852]  shmem_undo_range+0x49e/0x14b0
[   97.835228][ T5852]  shmem_evict_inode+0x272/0xa70
[   97.836786][ T5852]  evict+0x504/0x9c0
[   97.838029][ T5852]  __dentry_kill+0x209/0x660
[   97.839489][ T5852]  dput+0x19f/0x2b0
[   97.840693][ T5852]  __fput+0x68e/0xa70
[   97.841944][ T5852]  task_work_run+0x1d4/0x260
[   97.843399][ T5852]  do_exit+0x6b5/0x22e0
[   97.844709][ T5852]  do_group_exit+0x21c/0x2d0
[   97.846164][ T5852]  get_signal+0x1286/0x1340
[   97.847586][ T5852]  arch_do_signal_or_restart+0x9a/0x750
[   97.849326][ T5852]  exit_to_user_mode_loop+0x75/0x110
[   97.850984][ T5852]  do_syscall_64+0x2bd/0x3b0
[   97.852449][ T5852]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.854305][ T5852] 
[   97.855059][ T5852] Memory state around the buggy address:
[   97.856795][ T5852]  ffff88803744c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   97.859277][ T5852]  ffff88803744c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   97.861708][ T5852] >ffff88803744c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   97.864210][ T5852]                                      ^
[   97.865940][ T5852]  ffff88803744c800: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[   97.868398][ T5852]  ffff88803744c880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   97.870850][ T5852] ==================================================================
[   97.884014][ T5852] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   97.886320][ T5852] CPU: 1 UID: 0 PID: 5852 Comm: kworker/u8:3 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10-dirty #0 PREEMPT(full) 
[   97.890081][ T5852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   97.893183][ T5852] Workqueue: ipv6_addrconf addrconf_dad_work
[   97.894996][ T5852] Call Trace:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   97.896171][ T5852]  <TASK>
[   97.897096][ T5852]  dump_stack_lvl+0x99/0x250
[   97.898659][ T5852]  ? __asan_memcpy+0x40/0x70
[   97.900120][ T5852]  ? __pfx_dump_stack_lvl+0x10/0x10
[   97.901760][ T5852]  ? __pfx__printk+0x10/0x10
[   97.903227][ T5852]  panic+0x2db/0x790
[   97.904454][ T5852]  ? __pfx_panic+0x10/0x10
[   97.905857][ T5852]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[   97.907707][ T5852]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   97.909667][ T5852]  ? print_memory_metadata+0x314/0x400
[   97.911371][ T5852]  ? xfrm_state_find+0x2cf2/0x5400
[   97.912972][ T5852]  check_panic_on_warn+0x89/0xb0
[   97.914515][ T5852]  ? xfrm_state_find+0x2cf2/0x5400
[   97.916105][ T5852]  end_report+0x78/0x160
[   97.917454][ T5852]  kasan_report+0x129/0x150
[   97.918874][ T5852]  ? xfrm_state_find+0x2cf2/0x5400
[   97.920466][ T5852]  xfrm_state_find+0x2cf2/0x5400
[   97.922003][ T5852]  ? check_noncircular+0xe0/0x160
[   97.923569][ T5852]  ? validate_chain+0x897/0x2140
[   97.925163][ T5852]  ? xfrm_state_find+0x1da/0x5400
[   97.926712][ T5852]  ? __pfx_xfrm_state_find+0x10/0x10
[   97.928356][ T5852]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[   97.930279][ T5852]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[   97.932111][ T5852]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[   97.934157][ T5852]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[   97.935973][ T5852]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[   97.937823][ T5852]  ? process_scheduled_works+0xae1/0x17b0
[   97.939589][ T5852]  ? __lock_acquire+0xab9/0xd20
[   97.941094][ T5852]  ? xfrm_expand_policies+0x41f/0x6a0
[   97.942760][ T5852]  xfrm_lookup_with_ifid+0x58a/0x1a70
[   97.944424][ T5852]  ? lockdep_hardirqs_on+0x9c/0x150
[   97.946028][ T5852]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[   97.947844][ T5852]  ? do_raw_spin_unlock+0x4d/0x240
[   97.949430][ T5852]  ? icmp6_dst_alloc+0x3a5/0x420
[   97.950981][ T5852]  ? icmp6_dst_alloc+0x3a5/0x420
[   97.952529][ T5852]  ndisc_send_skb+0x41f/0x1440
[   97.954031][ T5852]  ? ndisc_send_skb+0x20c/0x1440
[   97.955590][ T5852]  ? __pfx_ndisc_send_skb+0x10/0x10
[   97.957197][ T5852]  ? ndisc_ns_create+0x4ea/0x650
[   97.958726][ T5852]  ? __asan_memcpy+0x40/0x70
[   97.960176][ T5852]  ? mod_delayed_work_on+0x128/0x200
[   97.961806][ T5852]  ndisc_send_ns+0xcb/0x150
[   97.963226][ T5852]  ? __pfx_ndisc_send_ns+0x10/0x10
[   97.964819][ T5852]  ? addrconf_dad_work+0xa04/0x14b0
[   97.966484][ T5852]  addrconf_dad_work+0xaae/0x14b0
[   97.968053][ T5852]  ? __lock_acquire+0xab9/0xd20
[   97.969588][ T5852]  ? __pfx_addrconf_dad_work+0x10/0x10
[   97.971298][ T5852]  ? process_scheduled_works+0x9ef/0x17b0
[   97.973056][ T5852]  ? _raw_spin_unlock_irq+0x23/0x50
[   97.974673][ T5852]  ? process_scheduled_works+0x9ef/0x17b0
[   97.976438][ T5852]  ? process_scheduled_works+0x9ef/0x17b0
[   97.978194][ T5852]  process_scheduled_works+0xae1/0x17b0
[   97.979906][ T5852]  ? __pfx_process_scheduled_works+0x10/0x10
[   97.981761][ T5852]  worker_thread+0x8a0/0xda0
[   97.983197][ T5852]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   97.985140][ T5852]  ? __kthread_parkme+0x7b/0x200
[   97.986673][ T5852]  kthread+0x711/0x8a0
[   97.987953][ T5852]  ? __pfx_worker_thread+0x10/0x10
[   97.989557][ T5852]  ? __pfx_kthread+0x10/0x10
[   97.991007][ T5852]  ? _raw_spin_unlock_irq+0x23/0x50
[   97.992616][ T5852]  ? lockdep_hardirqs_on+0x9c/0x150
[   97.994238][ T5852]  ? __pfx_kthread+0x10/0x10
[   97.995670][ T5852]  ret_from_fork+0x3fc/0x770
[   97.997100][ T5852]  ? __pfx_ret_from_fork+0x10/0x10
[   97.998694][ T5852]  ? __switch_to_asm+0x39/0x70
[   98.000188][ T5852]  ? __switch_to_asm+0x33/0x70
[   98.001671][ T5852]  ? __pfx_kthread+0x10/0x10
[   98.003104][ T5852]  ret_from_fork_asm+0x1a/0x30
[   98.004606][ T5852]  </TASK>
[   98.006162][ T5852] Kernel Offset: disabled
[   98.007504][ T5852] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:58:54  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b4451b RBX=1ffff11026cc7f59 RCX=ffff888026b60000 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90003d8f7e0 RSP=ffffc90003d8f660
R8 =ffffffff8fa07bf7 R9 =1ffffffff1f40f7e R10=dffffc0000000000 R11=fffffbfff1f40f7f
R12=ffff88813663fac8 R13=dffffc0000000000 R14=ffff88804b03b180 R15=0000000000000001
RIP=ffffffff81b44503 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c29a646 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fb2cbb87498 00007fb2cbb87470 XMM03=00007fb2cbb874a8 00007fb2cbb874a0
XMM04=00007fb2cc6ed100 00007fb2cbb87460 XMM05=00007fb2cbb87478 00007fb2cbb874c0
XMM06=00007fb2cbb874b8 00007fb2cbb874b0 XMM07=00007fb2cbb874a8 00007fb2cbb874a0
XMM08=0000000000000000 00007fb2cba12ee7 XMM09=0000000000000000 00007fb2cba12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002f RBX=000000000000002f RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900041de890
R8 =ffff888107ca8237 R9 =1ffff11020f95046 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=ffffffff99a9592f R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c34e05a CR3=00000000263f6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f94dc012e53
XMM06=0000000000000000 00007f94dc012e4d XMM07=0000000000000000 00007f94dc012e61
XMM08=0000000000000000 00007f94dc012ee7 XMM09=0000000000000000 00007f94dc012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
