last executing test programs:

1.987600349s ago: executing program 1 (id=1987):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000f8eaf056688b3e140000340000003400000002000000000000000500000d000000000a000000050000000600000002000000090000000500000006000000010000000c000000010000000000"], &(0x7f0000000100)=""/141, 0x4e, 0x8d, 0x1, 0x7}, 0x28)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmmsg$inet6(r2, &(0x7f0000005400)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}, {{&(0x7f0000000280)={0xa, 0x4e21, 0x7fffffff, @empty, 0x40}, 0x1c, 0x0, 0x0, &(0x7f0000005540)=ANY=[@ANYBLOB="8000000000"], 0x180}}], 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.controllers\x00', 0x0, 0x0)
setsockopt$packet_int(r3, 0x107, 0x13, &(0x7f00000002c0)=0x8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x7e}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)
r4 = socket$igmp6(0xa, 0x3, 0x2)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @remote})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000a00", @ANYRES32=r7, @ANYBLOB="e8001a80e4000a8014000700"], 0x15c}}, 0x0)
write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r8, 0x84, 0x16, &(0x7f0000000040)={0x4, [0x0, 0x2, 0x7, 0x8000]}, &(0x7f00000001c0)=0xc)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x0)

1.890753993s ago: executing program 1 (id=1989):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}})
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x89}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00'})
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000000), 0x10)
bind$l2tp6(r2, &(0x7f0000000180)={0xa, 0x0, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x2}, 0x20)
setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000040), 0x4)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r7, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r8 = socket$netlink(0x10, 0x3, 0x4)
writev(r8, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)
r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cgroup.freeze\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xfffffffffffffff8}], {0x95, 0x0, 0x74}}, &(0x7f0000000200)='syzkaller\x00', 0x8, 0xc6, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6c000000000201040000000000000000020000050400028014000180080001000000000008000200ac1e00010c0002800500010000000000300003"], 0x6c}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x8000})

1.078675563s ago: executing program 0 (id=1996):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000006c0)=@can_delroute={0x5c, 0x19, 0x1, 0x70bd2b, 0x25dfdbfb, {0x1d, 0x1, 0x2}, [@CGW_MOD_SET={0x15, 0x4, {{{0x0, 0x0, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "57edbd6a8a11a77f"}}}, @CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x0, 0x0, 0x1}, 0x7, 0x3, 0x0, 0x0, "baf9232db0eb5549"}, 0xd5e5c9746c3e78da}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x2, 0x1, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "d7fef8638777ccd1"}, 0x3}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) (async)
sendmsg$nl_route(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000006c0)=@can_delroute={0x5c, 0x19, 0x1, 0x70bd2b, 0x25dfdbfb, {0x1d, 0x1, 0x2}, [@CGW_MOD_SET={0x15, 0x4, {{{0x0, 0x0, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "57edbd6a8a11a77f"}}}, @CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x0, 0x0, 0x1}, 0x7, 0x3, 0x0, 0x0, "baf9232db0eb5549"}, 0xd5e5c9746c3e78da}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x2, 0x1, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "d7fef8638777ccd1"}, 0x3}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)

1.078617883s ago: executing program 0 (id=1997):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000001240)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000f982c00fe8000000012ffffc5520000000000aaff0200000000000000000000000000013a00000000000000020090780000d93f640000000f081120ff020000000000000000000000000001fe8000000000000000000000000000125d02000000000000070f55b5d747d5ce5853e308cdbcf10ddd0000000000000016e3000000000000c20400000000040100c204000000400710000000040204c806000000000000000002f6471c193e445fffa682333b6ea5d9758e49d1f56a2cacf058c91036aa2a98b0af004e6f5acbbab33a8a5a9112f348b1a0089ddf5d100402cf846849a5c61cd7554140293b1191985ab08825ff716bc3ec7c318469d1e246d1c2b6f9ac2da9fa05bbc052fd2c1e07394a280e009667ed6f989d69942944973c6d558feda3d1c3358d50dff7bdd2c1fb8021ade354c814396f3fc7c17209d79e6c4952e91a6ec461a7cc945887c3bce622f5449d7b817758d7db37c9b2d74a1e7f0e05c28fce1ed8803f1e214667d299c1bd9653c497bea87774d74ebc16b76bee5c7e6ba19f460cafc8a531b56ea9d086e7f82153806b9840ec4fa711abb32a8728e81b51406040e0c274c260aa9b0b468d88f95b045258ddd448a48b987951e70d75bba7371694f1fb2b1957b4954fb807f86d7c7781697c2304a26e879a066a81d9b4f9ad82632a90632f737b44dc95d5b56a4acfdca287e039c5ebe808b5d585eda8c1543dbc5bf1b6bfc52c5ff2a947bce2327ccfeccfc2ba9df17ea126da5c4bbb54018d4f8277939acd67cd26ce4173968cfb747b74d61eb69503dea36f616de641ed0755b2e37f14dc9a8d86bab92acdfcbb93bed1d4344f2fd9c539d5fda77cbae2bedb79e05fc03e64e253b03bd8ac170e54ee380314727c60a3bc1d689b989710dd0f9a418f90637db3aae7034a9b83e8c843ba835c6a500ae43e840688d0801a882ffb94b7a77bd2314217aac52d296d169395c0b3dc7339a389354e1e4ff0746e6b2e3fc0149a36e75eafc20d51812e984faeecb52ad9b89288bacf21c152290ff2f6781dc761a3e50d88a8b4da3e65782fa959d583c718cf64d09d330c381ae123bea01e7d25eb8f8be911f3928237e3878e505be36bb6852903dff1e77be22ccf3b3e1c8658a5b92c816c6f3f0306a196ec62d5a39ecf36528f18e639b26351b6bc9d1230482e5d8e2c9561de5204d98487364c50f7236c503db3665876f6c04f7f23d1606d36120f62e3fd3de4a7525678e3748905d5a14fa840297c7dda43e13e18fad1453d5c24ddcb4bef61ab494d4f620201993b1b20f339ec6409474a6f104edbe42e0df14633c9a40352f773600b335e6a7ec6f0b0511c6d55fb484696d3b3e2fa4346d26446cba1e2e7ae1de5df058e7c2b52a1d6bb2d2daff1c73a4718541d6b9882891870b3f17442bdc250de45202f7314cd6c3670c3061b9ea658f21e1c362d622316f158968f118a72bef80745a9159f3c77985ecd9bca98ccd482b96ab39701053e30fb4d6d5efc4ba8f33fe18b0df2ab24ad5b2169ed8569cc264f91481fe3accc27448231088f05d996f562fd1950e43313193d23338fc134753ef5127d57161597f99598d546e290123ac1c3df0f5ded6cad9f523e71f7d5ce0b7d41f0d2fc6f911bd6b578f156b7b85dcf90d423e1cb854bb18ddc6801fc30ce76df9c27c1d5d91e06e9209d061b43449d0abdf346c644db465ee610d3ed406af49cce6119a1ec2ac9846350367f99e7255e5be602f0cce16439f3c5beb7276f96f2f9dffc88da05c8b197b90bf4ca75be6d767dc10d1ff883728fcaecbde596ed9b01a456e417fb9ded7431323b19a6fa8f6fd0ec596410a887037ff6a0feb81ce0dffdfdec39a5b04ec962e87bc038e4436b2a8ac00e51bca0976eef42211107422ff30034cc62355fcf65b51325fcd25861ee487c695b51ba4be9b3c47ab47388e9a8dcce4507acbf5b16164f85d12161c8038019f589e0117a02161dcf2fc01968983bde59dceda258e008e337a3af1c1127258b8877558918caa71355ca8d17be32b10d61e72a0391b6ed88327d1f6d030877fe893f777de0e0ec863f15a50b40d003a9a941182a0639674bd0b4f4f9716fb1c2e115a6465fa731759793b86a9bb70ae0bb18d0c5e53c120d192a71302d15fff0c2c76ad1f9e1281c42a659ed7b67c4f4d7c3fcd56a022bf8f043006c61f254a80184519935bbc805eefba13ed54234322506f28f362065d6a68c35473280d4b8196754a11604a901cfdea47dc6f442fa73ffc6fe5e59bece8741407a57fd5f36a5906951fe75bea732413200bb85053ad500ea6245bea8abccbf5e8927261f752c12a2765827ea9908f084b862ce41b11443f73f0ec6aa095db1bbce0b14bce8397b45da28c2ac2f33c8ecce00bdf34cd00aa95d181ea33e08b7c8a768a365c4279e0b5d9352eb62c628909cc4191e0ff81fd84cc4c371ffc000d8841a9ebe70574993579cfd0e35574ef6e4cc6edf42deb8cb1e38b55fead366238d8d7d83902c6da5ad2ee63843db90090d57eeebd90ec9b08a6ffffd6c60e0b017e0c22d08cf1e22e2e63df06b62e5e0cfcd7b9441d2ca09b4e96c3b61ed1459fc24d83301148940e554f4d78c453c7e2f262f09aebee218ec5a22f874768e4c1afa870262f2f67155c94b17a36475dd421eaee27632427ede8330b1d74d2cd1a2d0a7de694a7d87ede13b5ea664e89f3d872512581adc606cd841a2abd2ed34efe3ec8e4f03d1e38fadfd08cb1b65f4eac10c48894b6fda1440ddd5d22b06214dbd483a5da821c4f447cce31df27c40b14f4471abccd35e6673aaa17133e78a589f45331399d9305360dae0402e811a411d557c184c44ebec37a4e146d8076a070cf1f967ba3341e4e8e0c8b4b4617ee2bf3e8ae478567137641b6f6bc1fafd0d15cfed74198646906b5b853c8206ebf1e7e46bd74ae848281c4d89c02057de523e7e3e75567811685c1be1d2f5a57ff5b32fb8ef19e44f25226701f1b6b66cac452620cb7529b411cd833e3b1ad07bc781be7cda26eeccdb57f44308e765e13f357356e3fb83dcb4994b369fd3ee6aa6e405da03703c0dbd0e47110533992fd2be5bde2cbf6f7e777082427189766afbe426e6014ec9d041e96bcc900d5bdf4be72142ed1ab4c1d88afe8408145e06ddd3c2820f5d928309b3ef77afdd500568d76eb99ebd6f4ab78d5e43aa61b8a0ec27e1f6475691183e19f9e43ef1e94f2656da3eb693921f13aee4d4140fc4d56ac5ff3ec97163915a028c1ed16c7d08e6862503b18283b30489507e35945197c22733dee593f1d20a53dc5a463d5b8a058fa555c220de3fe5252a83e10f163babc01ec11c2e2197491ebb06b43919320c7237c0e55cbf927e0b5aaadd81c0c4c49a30ff2f9426b32311cbf09e1bcbe75c89aec74cf848d1b2194760a6edc734aebac9b429ae0438c620d4ad23b42deb8f7f1806ee8db02261b1e6d35742b1c85602c8099c0ed85cd89969f7b9ffd5906483e788d9f8c01e998c000f3005ea9efef9ca977530999344093bd6d234e500d784b22ccc8de58065451196dc977d8e8c8deac7d47b1ddc23f82f09159796a883d8b530fa193a20c53c22c5ffa3e5d411329f6489266ea75ff184b7ff1b301293b3ff5de6eb3658d826e6aa114eac2e572bf7d0d085e1e927af2bc1b21d1eaa37075a4778bec44521e5341c89c7589ca85b0cbda1060bca778906705be8791e479cb9867b4f6f06802ae76fba15b8fbf14bfd1b393bcef6f7997ac66bd87fcdda9387a519b5dbb61f7f970772a406a7ce40f48511344070ed00a20880fdcc19732df83f0ba1bf6c94e201a7a2c833239ebf380720d3ddd644c8b3d78a0eae5d0d7d22937fc5c3e9295cd7a412897b9c1123ffc1aec8c49c768ed008f795e62ad47251ad92f90d4d2c903fdba9c19f8ce5dd5eb69c099ba28eac5717c975c7504ce86b168744f9944ca63ba1938c02918ca9bfb77fc4e97c093108b3d35b8330bc32758c7f3ee746315e758ccb5e220de655350eba786e400bc89e958862541506c6e4958d3fd0987686f2d6236abd0bd118fea29e09d6025f1ac9730e72177ef28399c25134261f785b5e1b7f20bde4e347da83f8dfe0c9080d48b9dc371d9e81174faf9ebcefd3804718b05bbd6f41f40e726d390b87e60afbdadd45cd2f0c4d7495b6a6f074259518838317973877d991ef156d2d39098b50e8b6e1bbfb4096d5801d64e0655be19f7390594ad273f83e7c5128a579e6faf44c76bfdd70d726c0ea4cb9f69976b5beee76f5bec995e49d26795c9731d36d013d628fd7ac2f0bfde44c434d2bfc547480ae597b3e1e5214f108255fa0d22eb69df4a1691c6614743298af40e283090a4039b8bdf9822a86caeabd18d12c506d3448c1b15efa929881029ca0f8d4861d5f7a2d06f0e1a2f18db910ab1bf391a690086eb91341e38649f8bbd8299c3e81e0c816f34629b191e722e9bfdb8610fd135d36b0335198e2a4c06e2f37b9efeeb85a07896674c979e720347fa61782ac09cacd7967a7484e55ea2bfd50a9cb3e1863a59e6ad867593237bdb2baebaf9c88df6b91b5801393186a64dd33ba3472c0a3cb99b7ed8c93f1b95832d75df45c65df69d818ad0680e39606045c996691fcbf1bc69b3f171a46fc81fa66877758c76f73c1d83cc3dddd321b1c03c6b56fa9e02bc3fa4bef43050420202370c5074c0abd08d94c9b75a871cee948ca2e055ab07e1c062e8a1435e06073dc5911d91237ce9fe8cdf47a345de4ca65febc8f48de09603e44d7f14e1e0c37428680dd3428f0f4563dc90e0714fe0a40689acc472394704b9feba33ec9bca45533cd4635b3249a24025c271e6661d0060de48689debb58be19a6cef15f39dd6f42828d8440bc5b9e6d3aae0f745f05181c9d74832c358b8438bf46f0f4f302ffafc395b226d5bd1c5d5b011c846be3d133470db70800297699c8ee17104945a73cc77c2c9cdae9383904dc428f76480558a40c0dc19cd9190dbb78ed1da18eea6694406f428c4ad3e8b4add1ececf520fc9ffbdbde06ac39b2ceb2f24b6054268f179d258a9b260490216f6169e5867c050f3898a555907bd18b18c6d11748cf43bf7b7b1a8eeef32cee7560eed7faea9218ff4f08f69835cd6b1af390f4159ed300faf2d8b5b5904a42bb3e926b383496fb018c8da32e13a952bb172d749edc6e1e38c1e88db1d75f141d3bed099f275e3d0e7fed711d1c4e882612dc7f33fc567a19ce4a901a5350b128d08eff31b1f660e108b146ac3d415ec86820207bf9a9c32d7df1e648cc68bf093faccc1c9e3e31a45ec81a1ce6ceef43240543476ae1305a6beeb8337a0e7c6dae864081fe962b7fd63326415e01b2ebfc770f1c5f8704add7da3a0380625c1162191af137b6a5ada314e0f7233b41e6e58f9ea7e1cf9927da4770bc2d4c45e71d5728930f5a02d740f124521490231229b99cbce370627517017e6d3d82526faecdd573e135d5bc3b96e1292e0b473471e2e93e8162eadf6fc2caced5f9aa494d0eadf8dc5442a9da1d9caf007f8e47c05eb38fa8f99e480c49957c7bae1efb2ce516bd690b7379e83f0493df617449fd9c61e6f9393750464e8d59eb10c8bc8400000000000000d53354e0f167b1d8f8ed2a0790c6f7186919d562ebcbf5ab386bcb3bccfa4810bdf23b865805d881913061601c6d062a0afafb2d8029b14156e1bf1962254baab789c7acb900f0e8a7d15a9498e0c99f8c5fc746ae32aa8bbd9fb1b25f23375c8249c37af0049534162eef64aa2db3ce602d"], 0xfce)

961.03113ms ago: executing program 0 (id=1998):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="10149b000014020028bd7000fcdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x880)
r2 = socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x2b4, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x2a0, 0x1, [@m_csum={0xbc, 0x14, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x2, 0x2, 0x1000, 0x8}, 0x52}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x8, 0x1, 0xa}, 0x38}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x80, 0xffffffffffffffff, 0x48fe, 0x2}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xfffffffa, 0xffffffffffffffff, 0xd49, 0x100}, 0x78}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x3e5, 0x4, 0x3, 0x1}, 0x21}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_csum={0x30, 0x19, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x1b0, 0x1b, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x4, 0x0, 0x87}, @multicast1, @dev={0xac, 0x14, 0x14, 0xf}, 0xffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x8, 0xffffffffffffffff, 0x6, 0x7}, @loopback, @broadcast, 0x80, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x5, 0x5, 0xa7, 0xffff0001}, @broadcast, @multicast1, 0xffffffff}}]}, {0x10d, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x21f6, 0x4)
sendmmsg$inet(r4, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800)
recvfrom(r4, &(0x7f0000000200)=""/131, 0x83, 0x2000, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000008c0)={0x24, r5, 0x78967656d0a78869, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x24}}, 0x4004000)
r6 = socket(0x10, 0x803, 0x0)
sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
bind$alg(r2, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'caif0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x8}, {0x6}}}, 0x24}}, 0x0)
r9 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', <r10=>0x0, 0x29, 0x0, 0x0, 0x6c, 0x0, @remote, @private0, 0x8, 0x80, 0xfffffffc, 0xffffff00}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r10, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}})
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r9, 0x84, 0x74, &(0x7f0000000000)=""/85, &(0x7f0000000080)=0x55)

960.349645ms ago: executing program 1 (id=1999):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)="d80000001e0001054e81f782060000000000000006a67c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a50254cca9e00360db798262f3d40fad95667e006dcdff11a49b1328d9dd74977efd563951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a9295", 0xd8}], 0x1}, 0x4008850)

951.167119ms ago: executing program 1 (id=2000):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6, 0xc}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x401}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c810}, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
r3 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x400c5)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0)

881.512229ms ago: executing program 1 (id=2001):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000080)=0x2, 0x4)
connect$unix(r0, &(0x7f0000000500)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000067b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r4 = accept4(r1, 0x0, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), r4)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010027bd70eafddbdf25e0000000"], 0x14}, 0x1, 0x0, 0x0, 0x2081}, 0x20004080)
close(r0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x5, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r12=>0x0}, &(0x7f00000004c0)=0x27)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r12, 0x7}, 0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000180)={r12, @in6={{0xa, 0x4e21, 0x5, @local, 0x7}}, 0x3ff, 0x8}, &(0x7f0000000280)=0x90)
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x30b529, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))

880.733124ms ago: executing program 0 (id=2003):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private0}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_PORT={0x6}]}, 0x4c}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x300, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd27, 0x0, 0x2, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c"], 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000008c0)={'gretap0\x00', &(0x7f0000000840)={'gre0\x00', <r5=>0x0, 0x7, 0x8000, 0x7, 0x0, {{0xd, 0x4, 0x0, 0x8, 0x34, 0x66, 0x0, 0x3, 0x2f, 0x0, @empty, @rand_addr=0x64010101, {[@noop, @timestamp={0x44, 0x14, 0x49, 0x0, 0x4, [0x67, 0x2, 0x40, 0xa5aabed]}, @rr={0x7, 0xb, 0xfd, [@multicast2, @remote]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000980)={'syztnl1\x00', &(0x7f0000000900)={'syztnl2\x00', r5, 0x70e, 0x20, 0x1ff, 0x2, {{0x14, 0x4, 0x1, 0x4, 0x50, 0x64, 0x0, 0xe, 0x2f, 0x0, @local, @private=0xa010102, {[@ssrr={0x89, 0x27, 0xf2, [@broadcast, @rand_addr=0x64010100, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @private=0xa010101, @local, @dev={0xac, 0x14, 0x14, 0x1b}, @multicast2]}, @rr={0x7, 0xf, 0x36, [@empty, @loopback, @dev={0xac, 0x14, 0x14, 0x2e}]}, @ra={0x94, 0x4}]}}}}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x2, {@ip4=@rand_addr=0x64010100, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000780)="741be45d42f0fede992e91367726b1a6", 0x10)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000005000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x1, 0x7880, 0x3, 0x0, {{0xc, 0x4, 0x2, 0x7, 0x30, 0x64, 0x0, 0x2, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @dev={0xac, 0x14, 0x14, 0x38}, {[@timestamp={0x44, 0x1c, 0x1f, 0x0, 0x1, [0x0, 0x5, 0x1, 0x0, 0xa, 0x9]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vcan0\x00'})
ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000800)=@buf={0x57, &(0x7f0000000a40)="3101008b414d5d5b21750db1f721513ce3b3426dee652da016342317284360b833d5ccf7e833c736316558a6b1aad99a5196883d7ffcf90a0cf4c2f9d40e84c0b365d97f444c1c9fe9569d5cddf4599f709f2ee2b99c1d"})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000000740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000d80)={0x14, r8, 0x400, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x24040040)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

878.990572ms ago: executing program 0 (id=2005):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x70, 0x1, [@m_vlan={0x6c, 0x1f, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x30, 0x6, "d45ef76e1c69e28432ee95f3875eb26dd3cbde6aede0077232f3e3b4a9f36467cc536eb2ba094462031cafa5"}, {0xc, 0x7, {0x1, 0xe31e6296640b7e8f}}, {0xc}}}]}]}, 0x84}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
getsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, 0xffffffffffffffff, &(0x7f0000000700)=0x12)
r3 = socket$inet6(0xa, 0x802, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000001740)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmsg$nl_route_sched_retired(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004280)=@newtaction={0x14, 0x30, 0x800, 0x70bd25, 0x25dfdbfb}, 0x14}}, 0x4000000)
read$alg(r5, &(0x7f0000000a00)=""/4087, 0xff7)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18)
connect$inet6(r3, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000018000100000000000000000002008000000100090000000006001500030000000c001680080006d3a614142a"], 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)

821.204828ms ago: executing program 0 (id=2006):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}})
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x89}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00'})
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000000), 0x10)
bind$l2tp6(r2, &(0x7f0000000180)={0xa, 0x0, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x2}, 0x20)
setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000040), 0x4)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r7, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r8 = socket$netlink(0x10, 0x3, 0x4)
writev(r8, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)
r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cgroup.freeze\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xfffffffffffffff8}], {0x95, 0x0, 0x74}}, &(0x7f0000000200)='syzkaller\x00', 0x8, 0xc6, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6c000000000201040000000000000000020000050400028014000180080001000000000008000200ac1e00010c0002800500010000000000300003"], 0x6c}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x8000})

760.832384ms ago: executing program 2 (id=2007):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x41f, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x220, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}], {0x14}}, 0x7c}}, 0x0)

760.617778ms ago: executing program 2 (id=2008):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x300, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "7f36c525"}]}]}}}}}}}, 0x0)

701.561971ms ago: executing program 2 (id=2009):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0xb300}, 0x200001}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000006080)=""/4073, 0xfe9}, {&(0x7f0000000240)=""/103, 0x67}, {&(0x7f0000000040)=""/113, 0x71}, {&(0x7f0000000140)=""/55, 0x37}, {&(0x7f0000000340)=""/107, 0x6b}, {&(0x7f0000000b40)=""/111, 0x6f}, {&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f00000001c0)=""/54, 0x36}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0x20008}, {{0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000003e00)=""/4085, 0xff5}, 0x9}, {{&(0x7f0000000dc0)=@generic, 0x80, &(0x7f0000001400)=[{&(0x7f0000000e40)=""/223, 0xdf}, {&(0x7f0000000fc0)=""/166, 0xa6}, {&(0x7f0000001100)=""/212, 0xd4}, {&(0x7f0000001200)=""/108, 0x6c}, {&(0x7f0000001280)=""/134, 0x86}, {&(0x7f0000001340)=""/79, 0x4f}, {&(0x7f00000013c0)=""/57, 0x39}], 0x7, &(0x7f00000006c0)=""/183, 0xb7}, 0x9}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000015c0)=""/27, 0x1b}, {&(0x7f0000001640)=""/96, 0x60}, {&(0x7f00000016c0)=""/218, 0xda}], 0x3, &(0x7f0000001800)=""/222, 0xde}, 0x4}, {{&(0x7f0000001900)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000001980)=[{&(0x7f0000002a40)=""/143, 0x8f}], 0x1, &(0x7f0000004e00)=""/181, 0xb5}, 0xb68d}, {{&(0x7f0000004ec0)=@generic, 0x80, &(0x7f0000005180)=[{&(0x7f0000004f40)=""/179, 0xb3}, {&(0x7f0000005000)=""/235, 0xeb}, {&(0x7f0000005100)=""/124, 0x7c}, {&(0x7f00000019c0)=""/21, 0x15}], 0x4, &(0x7f00000051c0)=""/247, 0xf7}, 0x6}], 0xc, 0x40002000, 0x0)

700.876517ms ago: executing program 2 (id=2010):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet(r1, &(0x7f0000000d00)=[{{&(0x7f0000000c80)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000c00)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x640100fe}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='[', 0x1}], 0x1}}], 0x2, 0x4000)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0xfffff801, 0x5}, &(0x7f0000000100)=0xc) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10001}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)

651.032319ms ago: executing program 2 (id=2011):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r1 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000080)=0x6)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001000000000000000000"], 0x7c}}, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f00000000c0)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmmsg(r3, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084)
writev(r3, &(0x7f0000000140)=[{&(0x7f0000001380)="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", 0x5eb}], 0x1)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$int_in(r7, 0x5452, &(0x7f0000000180)=0x401)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r8, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0)
ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f0000000000)=0xffffffffffffffff)
connect$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x44b2dc689fd2c387, 0x0, 0x0, {0x8, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0)
recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000006080)=""/4073, 0xfe9}, {&(0x7f0000000240)=""/103, 0x67}, {&(0x7f0000000040)=""/113, 0x71}, {&(0x7f0000000140)=""/55, 0x37}, {&(0x7f0000000340)=""/107, 0x6b}, {&(0x7f0000000b40)=""/111, 0x6f}, {&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f00000001c0)=""/54, 0x36}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0x20008}, {{0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000003e00)=""/4085, 0xff5}, 0x9}, {{&(0x7f0000000dc0)=@generic, 0x80, &(0x7f0000001400)=[{&(0x7f0000000e40)=""/223, 0xdf}, {&(0x7f0000000fc0)=""/166, 0xa6}, {&(0x7f0000001100)=""/212, 0xd4}, {&(0x7f0000001200)=""/108, 0x6c}, {&(0x7f0000001280)=""/134, 0x86}, {&(0x7f0000001340)=""/79, 0x4f}, {&(0x7f00000013c0)=""/57, 0x39}], 0x7, &(0x7f00000006c0)=""/183, 0xb7}, 0x9}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000015c0)=""/27, 0x1b}, {&(0x7f0000001640)=""/96, 0x60}, {&(0x7f00000016c0)=""/218, 0xda}], 0x3, &(0x7f0000001800)=""/222, 0xde}, 0x4}, {{&(0x7f0000001900)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000001980)=[{&(0x7f0000002a40)=""/143, 0x8f}], 0x1, &(0x7f0000004e00)=""/181, 0xb5}, 0xb68d}, {{&(0x7f0000004ec0)=@generic, 0x80, &(0x7f0000005180)=[{&(0x7f0000004f40)=""/179, 0xb3}, {&(0x7f0000005000)=""/235, 0xeb}, {&(0x7f0000005100)=""/124, 0x7c}, {&(0x7f00000019c0)=""/21, 0x15}], 0x4, &(0x7f00000051c0)=""/247, 0xf7}, 0x6}], 0xc, 0x40002000, 0x0)

581.029924ms ago: executing program 2 (id=2012):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4088, 0xff8}, {&(0x7f0000000240)=""/103, 0x67}, {&(0x7f0000000040)=""/113, 0x71}, {&(0x7f0000000140)=""/55, 0x37}, {&(0x7f0000000340)=""/107, 0x6b}, {&(0x7f0000000b40)=""/111, 0x6f}, {&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f00000001c0)=""/54, 0x36}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0x20008}, {{0x0, 0x0, &(0x7f0000000d00), 0x0, &(0x7f0000002a00)=""/4085, 0xff5}, 0x9}, {{&(0x7f0000000dc0)=@generic, 0x80, &(0x7f0000001400)=[{&(0x7f0000000e40)=""/223, 0xdf}, {&(0x7f0000000fc0)=""/166, 0xa6}, {&(0x7f0000001100)=""/212, 0xd4}, {&(0x7f0000001200)=""/108, 0x6c}, {&(0x7f0000001280)=""/134, 0x86}, {&(0x7f0000001340)=""/79, 0x4f}, {&(0x7f00000013c0)=""/57, 0x39}], 0x7, &(0x7f00000014c0)=""/183, 0xb7}, 0x9}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000015c0)=""/27, 0x1b}, {&(0x7f0000001640)=""/96, 0x60}, {&(0x7f00000016c0)=""/218, 0xda}], 0x3, &(0x7f0000001800)=""/222, 0xde}, 0x4}, {{&(0x7f0000001900)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000001580), 0x0, &(0x7f0000004e00)=""/181, 0xb5}, 0xb68d}, {{&(0x7f0000004ec0)=@generic, 0x80, &(0x7f00000006c0)=[{&(0x7f0000004f40)=""/179, 0xb3}, {&(0x7f0000005000)=""/235, 0xeb}, {&(0x7f0000005100)=""/124, 0x7c}, {&(0x7f00000019c0)=""/21, 0x15}], 0x4, &(0x7f00000051c0)=""/247, 0xf7}, 0x6}], 0xc, 0x40002000, 0x0)

0s ago: executing program 1 (id=2013):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0xfce)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:31293' (ED25519) to the list of known hosts.
syzkaller login: [   48.022168][ T5815] cgroup: Unknown subsys name 'net'
[   48.107461][ T5815] cgroup: Unknown subsys name 'cpuset'
[   48.111159][ T5815] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.416349][ T5815] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   52.834466][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   52.837742][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   52.840696][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   52.843770][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   52.846613][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   52.910595][ T5210] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   52.915078][ T5210] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   52.918788][ T5210] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   52.934955][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   52.937890][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   52.940635][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   52.942958][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   52.946479][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   52.964802][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   52.971282][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.028137][ T5824] chnl_net:caif_netlink_parms(): no params data found
[   53.112255][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.114999][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.117462][ T5824] bridge_slave_0: entered allmulticast mode
[   53.120377][ T5824] bridge_slave_0: entered promiscuous mode
[   53.124184][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.126964][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.129281][ T5824] bridge_slave_1: entered allmulticast mode
[   53.132262][ T5824] bridge_slave_1: entered promiscuous mode
[   53.189646][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.194365][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.240775][ T5824] team0: Port device team_slave_0 added
[   53.244331][ T5824] team0: Port device team_slave_1 added
[   53.247299][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   53.273413][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.275782][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.283989][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.292807][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.295316][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.303505][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.307929][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   53.391434][ T5824] hsr_slave_0: entered promiscuous mode
[   53.393947][ T5824] hsr_slave_1: entered promiscuous mode
[   53.418391][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.420660][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.423039][ T5831] bridge_slave_0: entered allmulticast mode
[   53.426196][ T5831] bridge_slave_0: entered promiscuous mode
[   53.429502][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.431770][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.434216][ T5829] bridge_slave_0: entered allmulticast mode
[   53.438185][ T5829] bridge_slave_0: entered promiscuous mode
[   53.441265][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.443515][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.446177][ T5829] bridge_slave_1: entered allmulticast mode
[   53.448862][ T5829] bridge_slave_1: entered promiscuous mode
[   53.451521][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.453771][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.456547][ T5831] bridge_slave_1: entered allmulticast mode
[   53.459213][ T5831] bridge_slave_1: entered promiscuous mode
[   53.507753][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.520314][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.529440][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.544035][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.580521][ T5829] team0: Port device team_slave_0 added
[   53.590150][ T5829] team0: Port device team_slave_1 added
[   53.598622][ T5831] team0: Port device team_slave_0 added
[   53.613107][ T5831] team0: Port device team_slave_1 added
[   53.632149][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.634309][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.642611][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.657786][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.660373][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.670270][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.678902][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.681169][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.690138][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.698324][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.700892][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.711938][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.761620][ T5829] hsr_slave_0: entered promiscuous mode
[   53.763968][ T5829] hsr_slave_1: entered promiscuous mode
[   53.767202][ T5829] debugfs: 'hsr0' already exists in 'hsr'
[   53.769037][ T5829] Cannot create hsr debugfs directory
[   53.778592][ T5831] hsr_slave_0: entered promiscuous mode
[   53.780998][ T5831] hsr_slave_1: entered promiscuous mode
[   53.783720][ T5831] debugfs: 'hsr0' already exists in 'hsr'
[   53.788572][ T5831] Cannot create hsr debugfs directory
[   53.832298][ T5824] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   53.862034][ T5824] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   53.877553][ T5824] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   53.887876][ T5824] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   53.958430][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.960763][ T5824] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.963374][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.965994][ T5824] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.977318][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   53.986075][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   53.998548][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.010123][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.033592][  T166] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.037511][  T166] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.057094][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.061938][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.071189][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.077806][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.117692][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.141239][ T5824] 8021q: adding VLAN 0 to HW filter on device team0
[   54.149440][  T166] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.151967][  T166] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.164362][  T166] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.166820][  T166] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.181610][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.199702][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   54.209422][  T166] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.211685][  T166] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.223108][  T166] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.225540][  T166] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.256859][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.293617][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   54.302771][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.305395][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.327233][  T166] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.329593][  T166] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.347012][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.406541][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.432493][ T5824] veth0_vlan: entered promiscuous mode
[   54.453183][ T5829] veth0_vlan: entered promiscuous mode
[   54.459663][ T5824] veth1_vlan: entered promiscuous mode
[   54.466121][ T5829] veth1_vlan: entered promiscuous mode
[   54.491816][ T5824] veth0_macvtap: entered promiscuous mode
[   54.500238][ T5829] veth0_macvtap: entered promiscuous mode
[   54.510419][ T5824] veth1_macvtap: entered promiscuous mode
[   54.516670][ T5829] veth1_macvtap: entered promiscuous mode
[   54.532891][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.538196][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.548379][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.551500][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.562374][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.570363][ T5854] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.579791][ T5854] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.586866][ T5854] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.589674][ T5854] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.598730][ T5854] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.611052][ T5854] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.614451][ T5854] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.620196][ T5854] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.656030][ T5831] veth0_vlan: entered promiscuous mode
[   54.678044][  T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.680478][ T5831] veth1_vlan: entered promiscuous mode
[   54.682737][  T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.710299][  T166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.713338][  T166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.717101][   T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.721699][   T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.747742][   T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.748378][ T5831] veth0_macvtap: entered promiscuous mode
[   54.750349][   T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.754478][ T5831] veth1_macvtap: entered promiscuous mode
[   54.768704][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.776129][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.783071][ T5854] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.786567][ T5854] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.789491][ T5854] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.795946][ T5854] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.801636][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   54.870131][ T5890] ieee802154 phy0 wpan0: encryption failed: -22
[   54.872611][ T5890] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1'.
[   54.875779][  T166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.883939][  T166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.905374][ T5827] Bluetooth: hci0: command tx timeout
[   54.910430][ T5890] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.913262][ T5890] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.957952][ T5890] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   54.963121][ T5890] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   54.984794][ T5827] Bluetooth: hci2: command tx timeout
[   54.984970][ T5835] Bluetooth: hci1: command tx timeout
[   55.025006][ T5843] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.037019][   T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.039538][ T5843] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.042391][ T5843] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.047412][   T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.050873][ T5854] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.157384][ T5902] nftables ruleset with unbound chain
[   55.182864][ T5898] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4'.
[   55.199016][ T5905] syz.2.7 uses obsolete (PF_INET,SOCK_PACKET)
[   55.237620][ T5907] bridge0: port 3(erspan0) entered blocking state
[   55.239890][ T5907] bridge0: port 3(erspan0) entered disabled state
[   55.245550][ T5907] erspan0: entered allmulticast mode
[   55.255636][ T5907] erspan0: entered promiscuous mode
[   55.270247][ T5907] netlink: 786 bytes leftover after parsing attributes in process `syz.0.8'.
[   55.273648][ T5907] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[   55.450334][ T5928] ieee802154 phy0 wpan0: encryption failed: -22
[   55.452531][ T5928] netlink: 196 bytes leftover after parsing attributes in process `syz.1.12'.
[   55.490663][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.493165][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.534350][ T5928] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   55.540260][ T5928] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   55.596324][ T5854] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.603302][ T5854] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.609762][ T5854] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.612674][ T5854] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   55.821636][ T5945] smc: net device bond0 applied user defined pnetid SYZ2
[   55.830042][ T5941] netlink: 140 bytes leftover after parsing attributes in process `syz.0.16'.
[   55.896399][ T5950] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.684417][ T5958] ieee802154 phy0 wpan0: encryption failed: -22
[   56.687248][ T5958] netlink: 196 bytes leftover after parsing attributes in process `syz.2.22'.
[   56.716973][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.720245][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.766987][ T5958] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   56.772704][ T5958] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   56.838895][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   56.844688][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   56.847560][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   56.850469][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   56.985073][ T5835] Bluetooth: hci0: command tx timeout
[   57.064701][ T5827] Bluetooth: hci1: command tx timeout
[   57.066511][ T5835] Bluetooth: hci2: command tx timeout
[   57.111524][ T5973] netlink: 140 bytes leftover after parsing attributes in process `syz.2.26'.
[   57.310922][ T5984] netlink: 'syz.2.34': attribute type 1 has an invalid length.
[   57.700413][ T6001] netlink: 'syz.0.41': attribute type 4 has an invalid length.
[   57.703012][ T6001] netlink: 236 bytes leftover after parsing attributes in process `syz.0.41'.
[   58.059490][ T6014] netlink: 14 bytes leftover after parsing attributes in process `syz.1.46'.
[   58.127980][ T6014] smc: removing net device bond0 with user defined pnetid SYZ2
[   58.136169][ T6014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   58.151127][ T6014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   58.158750][ T6014] bond0 (unregistering): Released all slaves
[   58.488317][ T6043] openvswitch: netlink: IPv6 tunnel dst address is zero
[   58.511424][ T6049] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   58.632056][ T6063] netlink: 44 bytes leftover after parsing attributes in process `syz.1.66'.
[   58.717107][ T6073] 8021q: adding VLAN 0 to HW filter on device bond1
[   58.719465][ T6073] Zero length message leads to an empty skb
[   58.738665][ T6073] tipc: Started in network mode
[   58.740894][ T6073] tipc: Node identity 7e0c1a44ad03, cluster identity 4711
[   58.743501][ T6073] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.750265][ T6073] syzkaller0: entered promiscuous mode
[   58.752463][ T6073] syzkaller0: entered allmulticast mode
[   58.777475][ T6073] tipc: Resetting bearer <eth:syzkaller0>
[   58.804382][ T6073] tipc: Resetting bearer <eth:syzkaller0>
[   58.814219][ T6073] tipc: Disabling bearer <eth:syzkaller0>
[   58.913153][ T6093] netlink: 'syz.0.76': attribute type 2 has an invalid length.
[   59.064993][ T5827] Bluetooth: hci0: command tx timeout
[   59.144726][ T5827] Bluetooth: hci1: command tx timeout
[   59.155451][ T5827] Bluetooth: hci2: command tx timeout
[   59.657474][ T6147] tipc: Started in network mode
[   59.659117][ T6147] tipc: Node identity 320e802e7df6, cluster identity 4711
[   59.661502][ T6147] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.663939][ T6147] syzkaller0: entered promiscuous mode
[   59.666681][ T6147] syzkaller0: entered allmulticast mode
[   59.673645][ T6146] tipc: Resetting bearer <eth:syzkaller0>
[   59.682211][ T6146] tipc: Disabling bearer <eth:syzkaller0>
[   59.941637][ T6163] Bluetooth: MGMT ver 1.23
[   59.971060][ T6170] netlink: 'syz.2.108': attribute type 4 has an invalid length.
[   59.973607][ T6170] __nla_validate_parse: 4 callbacks suppressed
[   59.973614][ T6170] netlink: 168 bytes leftover after parsing attributes in process `syz.2.108'.
[   60.050242][ T6175] vlan2: entered promiscuous mode
[   60.052474][ T6175] vlan2: entered allmulticast mode
[   60.055252][ T6175] hsr_slave_1: entered allmulticast mode
[   60.236573][ T6191] netlink: 192 bytes leftover after parsing attributes in process `syz.1.118'.
[   60.290205][ T6191] veth3: entered promiscuous mode
[   60.292678][ T6199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.120'.
[   60.472983][ T6215] netlink: 'syz.2.126': attribute type 2 has an invalid length.
[   60.477114][ T6215] netlink: 156 bytes leftover after parsing attributes in process `syz.2.126'.
[   60.479944][ T6217] warning: `syz.0.122' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   60.537998][ T6220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.127'.
[   60.613190][ T6225] syzkaller1: entered promiscuous mode
[   60.617487][ T6225] syzkaller1: entered allmulticast mode
[   60.750516][ T6230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.131'.
[   60.840762][ T6241] sctp: [Deprecated]: syz.1.134 (pid 6241) Use of int in max_burst socket option.
[   60.840762][ T6241] Use struct sctp_assoc_value instead
[   60.850970][ T6241] netlink: 'syz.1.134': attribute type 8 has an invalid length.
[   61.078746][ T6255] bridge_slave_0: left allmulticast mode
[   61.084010][ T6255] bridge_slave_0: left promiscuous mode
[   61.088151][ T6255] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.096618][ T6255] bridge_slave_1: left allmulticast mode
[   61.099053][ T6255] bridge_slave_1: left promiscuous mode
[   61.101580][ T6255] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.128419][ T6255] team0: Port device team_slave_0 removed
[   61.137511][ T6255] team0: Port device team_slave_1 removed
[   61.140011][ T6255] batman_adv: batadv0: Removing interface: batadv_slave_0
[   61.144692][ T5827] Bluetooth: hci0: command tx timeout
[   61.147175][ T6255] batman_adv: batadv0: Removing interface: batadv_slave_1
[   61.178870][ T6259] netlink: 24 bytes leftover after parsing attributes in process `syz.2.140'.
[   61.224950][ T5827] Bluetooth: hci2: command tx timeout
[   61.227668][ T5835] Bluetooth: hci1: command tx timeout
[   61.408093][ T6279] netlink: 24 bytes leftover after parsing attributes in process `syz.2.148'.
[   61.496693][ T6290] netlink: 'syz.2.152': attribute type 11 has an invalid length.
[   61.546328][ T6299] netlink: 129616 bytes leftover after parsing attributes in process `syz.2.154'.
[   61.670219][ T6317] netlink: 116 bytes leftover after parsing attributes in process `syz.1.159'.
[   61.895751][ T6343] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   61.898233][ T6343] syzkaller0: entered promiscuous mode
[   61.900099][ T6343] syzkaller0: entered allmulticast mode
[   61.905757][ T6343] tipc: Resetting bearer <eth:syzkaller0>
[   62.068189][ T6359] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[   62.142509][ T6363] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   62.198624][ T6367] netlink: 'syz.2.178': attribute type 25 has an invalid length.
[   62.424276][ T6401] netlink: 'syz.0.190': attribute type 2 has an invalid length.
[   62.431089][ T6401] netlink: 'syz.0.190': attribute type 2 has an invalid length.
[   62.895391][   T47] tipc: Node number set to 1341685806
[   62.949592][ T6341] tipc: Resetting bearer <eth:syzkaller0>
[   62.996695][ T6341] tipc: Disabling bearer <eth:syzkaller0>
[   63.225446][ T6434] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   65.614458][ T6442] __nla_validate_parse: 7 callbacks suppressed
[   65.614468][ T6442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.200'.
[   65.626074][ T6442] netlink: 24 bytes leftover after parsing attributes in process `syz.2.200'.
[   65.658388][ T6451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.202'.
[   65.703847][ T6461] netlink: 52 bytes leftover after parsing attributes in process `syz.1.205'.
[   65.723111][ T6461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.205'.
[   65.973136][ T6491] netlink: 68 bytes leftover after parsing attributes in process `syz.1.216'.
[   66.028886][ T6497] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[   66.040079][ T6499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.220'.
[   66.195115][ T6511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.226'.
[   66.202412][ T6511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.226'.
[   66.239828][ T6517] netlink: 56 bytes leftover after parsing attributes in process `syz.1.228'.
[   66.360072][ T6535] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.366511][ T6535] syzkaller0: entered promiscuous mode
[   66.368799][ T6535] syzkaller0: entered allmulticast mode
[   66.395430][ T6534] tipc: Resetting bearer <eth:syzkaller0>
[   66.403465][ T6534] tipc: Disabling bearer <eth:syzkaller0>
[   66.490970][ T6542] netlink: 'syz.2.238': attribute type 32 has an invalid length.
[   66.778556][ T6558] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.780728][ T6603] bpq0: entered promiscuous mode
[   67.812516][ T6605] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[   68.834268][ T6648] netlink: 'syz.0.277': attribute type 3 has an invalid length.
[   69.008084][ T6663] netlink: 'syz.1.282': attribute type 4 has an invalid length.
[   69.179904][ T6670] C: renamed from team_slave_0
[   69.183380][ T6670] netlink: 'syz.0.286': attribute type 1 has an invalid length.
[   69.187444][ T6670] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   69.198273][ T6670] IPVS: set_ctl: invalid protocol: 43 10.1.1.1:20001
[   69.847680][ T6691] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   69.852173][ T6694] bpq0: left promiscuous mode
[   70.579205][ T6750] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[   70.628511][ T6753] __nla_validate_parse: 43 callbacks suppressed
[   70.628526][ T6753] netlink: 264 bytes leftover after parsing attributes in process `syz.2.313'.
[   70.636121][ T6753] netlink: 56 bytes leftover after parsing attributes in process `syz.2.313'.
[   70.829914][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   70.832092][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.158746][ T6743] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   71.180382][ T6795] netlink: 24 bytes leftover after parsing attributes in process `syz.0.329'.
[   71.183384][ T6795] netlink: 'syz.0.329': attribute type 1 has an invalid length.
[   71.186915][ T6795] netlink: 'syz.0.329': attribute type 2 has an invalid length.
[   71.189651][ T6795] netlink: 16 bytes leftover after parsing attributes in process `syz.0.329'.
[   71.215311][ T6801] syzkaller1: entered promiscuous mode
[   71.217262][ T6801] syzkaller1: entered allmulticast mode
[   71.228986][ T6801] netlink: 16 bytes leftover after parsing attributes in process `syz.0.330'.
[   71.335234][ T6814] netlink: 216 bytes leftover after parsing attributes in process `syz.1.334'.
[   71.338042][ T6814] netlink: 24 bytes leftover after parsing attributes in process `syz.1.334'.
[   71.340935][ T6814] netlink: 16 bytes leftover after parsing attributes in process `syz.1.334'.
[   71.360576][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.334'.
[   71.487297][ T6829] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[   71.492406][ T6829] netlink: 20 bytes leftover after parsing attributes in process `syz.1.342'.
[   71.653652][ T6853] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   71.810974][ T6868] netlink: 'syz.1.358': attribute type 1 has an invalid length.
[   71.829716][ T6868] smc: adding net device bond0 with user defined pnetid SYZ2
[   71.837132][ T6868] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.851819][ T6868] bond0: (slave bridge2): making interface the new active one
[   71.855527][ T6868] bond0: (slave bridge2): Enslaving as an active interface with an up link
[   72.355501][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout
[   72.902155][ T6910] bridge1: entered promiscuous mode
[   72.999656][ T6914] IPv6: sit1: Disabled Multicast RS
[   73.230328][ T6931] netlink: 'syz.2.382': attribute type 1 has an invalid length.
[   73.233970][ T6931] trusted_key: syz.2.382 sent an empty control message without MSG_MORE.
[   73.424324][ T6950] netlink: 'syz.2.389': attribute type 1 has an invalid length.
[   73.442012][ T6950] 8021q: adding VLAN 0 to HW filter on device bond1
[   73.632017][ T6976] netlink: 'syz.1.398': attribute type 10 has an invalid length.
[   73.640161][ T6976] team0: Port device geneve0 added
[   73.642430][ T5854] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.647401][ T5854] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.651203][ T5854] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.654295][ T5854] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.709870][ T6980] netlink: 'syz.1.400': attribute type 1 has an invalid length.
[   73.712545][ T6980] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.871971][ T5854] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   73.876940][ T5854] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   73.880365][ T5854] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   73.887909][ T5854] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   73.963235][ T7005] 8021q: VLANs not supported on wg0
[   74.007553][ T7011] veth0_to_team: entered promiscuous mode
[   74.010192][ T7011] veth0_to_team: entered allmulticast mode
[   74.341895][ T7036] netlink: 'syz.1.420': attribute type 30 has an invalid length.
[   74.360902][ T7036] netlink: 'syz.1.420': attribute type 30 has an invalid length.
[   74.367148][ T5854] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   74.371546][ T5854] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   74.383101][ T5854] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   74.387667][ T5854] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   74.398973][ T7036] netlink: 'syz.1.420': attribute type 30 has an invalid length.
[   74.833562][ T7063] netlink: 'syz.2.428': attribute type 39 has an invalid length.
[   75.051140][ T7071] netlink: 'syz.0.432': attribute type 142 has an invalid length.
[   75.280436][ T7090] netlink: 'syz.2.440': attribute type 1 has an invalid length.
[   75.311769][ T7090] bond2: entered promiscuous mode
[   75.314420][ T7090] 8021q: adding VLAN 0 to HW filter on device bond2
[   75.335580][ T7090] 8021q: adding VLAN 0 to HW filter on device bond2
[   75.338914][ T7090] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address
[   75.343487][ T7090] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[   75.351568][ T7090] bond2: (slave wireguard0): making interface the new active one
[   75.354250][ T7090] wireguard0: entered promiscuous mode
[   75.357385][ T7090] bond2: (slave wireguard0): Enslaving as an active interface with an up link
[   75.362911][ T7090] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   75.366196][ T7090] IPv6: NLM_F_CREATE should be set when creating new route
[   75.369279][ T7090] IPv6: NLM_F_CREATE should be set when creating new route
[   75.374875][ T7090] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   75.387904][ T7090] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address
[   75.397060][ T7090] bond2: (slave wireguard1): Enslaving as a backup interface with an up link
[   75.472920][ T7112] netlink: 'syz.1.445': attribute type 1 has an invalid length.
[   75.614244][ T7118] netlink: 'syz.1.448': attribute type 20 has an invalid length.
[   75.656571][ T7118] __nla_validate_parse: 24 callbacks suppressed
[   75.656586][ T7118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.448'.
[   75.661846][ T7118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.448'.
[   75.666235][ T7118] netlink: 'syz.1.448': attribute type 20 has an invalid length.
[   75.756603][ T7124] netlink: 'syz.1.450': attribute type 10 has an invalid length.
[   75.773155][ T7125] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[   76.032517][ T7139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.456'.
[   76.218983][ T7156] netlink: 216 bytes leftover after parsing attributes in process `syz.2.462'.
[   76.578998][ T7185] !: renamed from dummy0
[   76.794347][ T7213] veth1: entered promiscuous mode
[   76.797934][ T7213] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[   77.018671][ T7224] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   77.093648][ T7236] netlink: 40 bytes leftover after parsing attributes in process `syz.1.486'.
[   77.200522][ T7246] ipvlan2: entered promiscuous mode
[   77.202666][ T7246] bridge0: port 1(ipvlan2) entered blocking state
[   77.206399][ T7246] bridge0: port 1(ipvlan2) entered disabled state
[   77.209205][ T7246] ipvlan2: entered allmulticast mode
[   77.211460][ T7246] bridge0: entered allmulticast mode
[   77.215796][ T7246] ipvlan2: left allmulticast mode
[   77.217496][ T7246] bridge0: left allmulticast mode
[   77.374724][ T7265] smc: removing net device bond0 with user defined pnetid SYZ2
[   77.377996][ T7265] bond0 (unregistering): (slave bridge2): Releasing active interface
[   77.382459][ T7265] bond0 (unregistering): Released all slaves
[   77.391349][ T7263] netlink: 36 bytes leftover after parsing attributes in process `syz.2.498'.
[   77.439717][ T7270] policy can only be matched on NF_INET_PRE_ROUTING
[   77.439729][ T7270] unable to load match
[   77.763846][ T7287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.508'.
[   77.813123][ T7289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.509'.
[   77.817056][ T7289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.509'.
[   77.943352][ T7296] syzkaller1: entered promiscuous mode
[   77.946361][ T7296] syzkaller1: entered allmulticast mode
[   78.008586][ T7305] erspan0: left allmulticast mode
[   78.010758][ T7305] erspan0: left promiscuous mode
[   78.012920][ T7305] bridge0: port 3(erspan0) entered disabled state
[   78.022511][ T7305] bridge_slave_0: left allmulticast mode
[   78.028198][ T7305] bridge_slave_0: left promiscuous mode
[   78.030384][ T7305] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.037584][ T7305] bridge_slave_1: left allmulticast mode
[   78.039650][ T7305] bridge_slave_1: left promiscuous mode
[   78.041993][ T7305] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.053312][ T7305] bond0: (slave bond_slave_0): Releasing backup interface
[   78.060185][ T7305] bond0: (slave bond_slave_1): Releasing backup interface
[   78.067397][ T7305] team0: Port device C removed
[   78.073074][ T7305] team0: Port device team_slave_1 removed
[   78.086005][ T7305] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.090001][ T7305] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.115509][ T7305] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   78.125266][ T7310] netlink: 16 bytes leftover after parsing attributes in process `syz.1.516'.
[   78.683065][ T7335] bond3: entered promiscuous mode
[   78.687368][ T7335] bond3: entered allmulticast mode
[   78.689910][ T7335] 8021q: adding VLAN 0 to HW filter on device bond3
[   78.698163][ T7335] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   78.772944][ T7341] bridge1: entered promiscuous mode
[   78.774986][ T7341] bridge1: entered allmulticast mode
[   78.777155][ T7341] bond3: (slave bridge1): Enslaving as a backup interface with an up link
[   78.785426][   T13] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   78.839539][   T10] cfg80211: failed to load regulatory.db
[   78.894979][ T5854] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   79.381068][ T7355] tap0: tun_chr_ioctl cmd 1074025677
[   79.383296][ T7355] tap0: linktype set to 769
[   79.492433][ T7343] validate_nla: 7 callbacks suppressed
[   79.492443][ T7343] netlink: 'syz.0.525': attribute type 12 has an invalid length.
[   79.567389][ T7360] syzkaller0: entered promiscuous mode
[   79.569288][ T7360] syzkaller0: entered allmulticast mode
[   79.583615][ T7360] nbd: must specify at least one socket
[   79.738324][ T7377] lo speed is unknown, defaulting to 1000
[   79.740424][ T7377] lo speed is unknown, defaulting to 1000
[   79.807078][ T7377] lo speed is unknown, defaulting to 1000
[   79.819501][ T7377] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   79.845738][ T7377] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   79.864026][ T7377] lo speed is unknown, defaulting to 1000
[   79.871352][ T7377] lo speed is unknown, defaulting to 1000
[   79.874209][ T7377] lo speed is unknown, defaulting to 1000
[   80.031572][ T7412] netlink: 'syz.1.548': attribute type 2 has an invalid length.
[   80.616237][ T7483] bridge_slave_1: default FDB implementation only supports local addresses
[   80.661910][ T7487] netlink: 'syz.1.578': attribute type 1 has an invalid length.
[   80.664455][ T7487] netlink: 'syz.1.578': attribute type 2 has an invalid length.
[   80.669470][ T7487] netlink: 'syz.1.578': attribute type 8 has an invalid length.
[   80.672003][ T7487] __nla_validate_parse: 7 callbacks suppressed
[   80.672009][ T7487] netlink: 1148 bytes leftover after parsing attributes in process `syz.1.578'.
[   80.679999][ T7487] netlink: 'syz.1.578': attribute type 1 has an invalid length.
[   80.750896][ T7492] netlink: 136 bytes leftover after parsing attributes in process `syz.1.580'.
[   80.753817][ T7492] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[   80.803848][ T7496] netlink: 830 bytes leftover after parsing attributes in process `syz.1.582'.
[   80.863432][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.582'.
[   80.868603][ T7496] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   80.871531][ T7496] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   81.304467][ T7542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.602'.
[   81.316292][ T7542] netlink: 'syz.2.602': attribute type 1 has an invalid length.
[   81.330038][ T7542] bond4: entered promiscuous mode
[   81.332126][ T7542] 8021q: adding VLAN 0 to HW filter on device bond4
[   81.342714][ T7542] 8021q: adding VLAN 0 to HW filter on device bond4
[   81.346420][ T7542] bond4: (slave wireguard2): The slave device specified does not support setting the MAC address
[   81.350095][ T7542] bond4: (slave wireguard2): Setting fail_over_mac to active for active-backup mode
[   81.355625][ T7542] bond4: (slave wireguard2): making interface the new active one
[   81.358477][ T7542] wireguard2: entered promiscuous mode
[   81.360978][ T7542] bond4: (slave wireguard2): Enslaving as an active interface with an up link
[   81.420540][ T7554] netlink: 'syz.2.604': attribute type 13 has an invalid length.
[   81.423261][ T7554] netlink: 'syz.2.604': attribute type 17 has an invalid length.
[   81.460652][ T7554] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.464020][ T7554] 8021q: adding VLAN 0 to HW filter on device team0
[   81.469215][ T7554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   81.478891][ T7556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.605'.
[   81.479592][ T7554] syz.2.604 (7554) used greatest stack depth: 19928 bytes left
[   81.713617][ T7577] netlink: 32 bytes leftover after parsing attributes in process `syz.0.612'.
[   81.718406][ T7579] netlink: 32 bytes leftover after parsing attributes in process `syz.0.612'.
[   81.759472][ T7581] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[   81.763930][ T7581] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[   81.871391][ T7589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.618'.
[   81.985642][ T7591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.618'.
[   82.200271][ T7595] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[   82.780277][ T7642] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   82.961506][ T7662] smc: adding net device bond0 with user defined pnetid SYZ2
[   82.972408][ T7662] smc: removing net device bond0 with user defined pnetid SYZ2
[   82.978167][ T7662] bond0 (unregistering): Released all slaves
[   83.019657][ T7680] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.021408][ T7672] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[   83.605874][ T7721] syz.2.660: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   83.613974][ T7721] CPU: 0 UID: 0 PID: 7721 Comm: syz.2.660 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba-dirty #0 PREEMPT(full) 
[   83.613993][ T7721] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   83.614001][ T7721] Call Trace:
[   83.614006][ T7721]  <TASK>
[   83.614012][ T7721]  dump_stack_lvl+0x189/0x250
[   83.614034][ T7721]  ? __pfx_dump_stack_lvl+0x10/0x10
[   83.614047][ T7721]  ? __pfx__printk+0x10/0x10
[   83.614085][ T7721]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   83.614100][ T7721]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   83.614116][ T7721]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   83.614132][ T7721]  warn_alloc+0x214/0x310
[   83.614145][ T7721]  ? stack_depot_save_flags+0x429/0x900
[   83.614160][ T7721]  ? __pfx_warn_alloc+0x10/0x10
[   83.614173][ T7721]  ? kasan_save_track+0x4f/0x80
[   83.614190][ T7721]  ? xskq_create+0x56/0x170
[   83.614207][ T7721]  ? xsk_init_queue+0xb0/0x110
[   83.614221][ T7721]  ? xsk_setsockopt+0x4dc/0x8d0
[   83.614235][ T7721]  ? do_sock_setsockopt+0x17c/0x1b0
[   83.614246][ T7721]  ? __x64_sys_setsockopt+0x13f/0x1b0
[   83.614257][ T7721]  ? do_syscall_64+0xfa/0x3b0
[   83.614273][ T7721]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.614291][ T7721]  __vmalloc_node_range_noprof+0x125/0x12f0
[   83.614327][ T7721]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   83.614341][ T7721]  ? xskq_create+0x56/0x170
[   83.614360][ T7721]  ? __kasan_kmalloc+0x93/0xb0
[   83.614379][ T7721]  vmalloc_user_noprof+0xad/0xf0
[   83.614392][ T7721]  ? xskq_create+0xbf/0x170
[   83.614408][ T7721]  xskq_create+0xbf/0x170
[   83.614426][ T7721]  xsk_init_queue+0xb0/0x110
[   83.614443][ T7721]  xsk_setsockopt+0x4dc/0x8d0
[   83.614460][ T7721]  ? __pfx_xsk_setsockopt+0x10/0x10
[   83.614475][ T7721]  ? __pfx_aa_sk_perm+0x10/0x10
[   83.614494][ T7721]  ? aa_sock_opt_perm+0x74/0x110
[   83.614512][ T7721]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   83.614527][ T7721]  ? __pfx_xsk_setsockopt+0x10/0x10
[   83.614543][ T7721]  do_sock_setsockopt+0x17c/0x1b0
[   83.614559][ T7721]  __x64_sys_setsockopt+0x13f/0x1b0
[   83.614575][ T7721]  do_syscall_64+0xfa/0x3b0
[   83.614591][ T7721]  ? lockdep_hardirqs_on+0x9c/0x150
[   83.614607][ T7721]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.614618][ T7721]  ? exc_page_fault+0x9f/0xf0
[   83.614634][ T7721]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.614646][ T7721] RIP: 0033:0x7fc140b8eb69
[   83.614657][ T7721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   83.614666][ T7721] RSP: 002b:00007fc14194d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   83.614679][ T7721] RAX: ffffffffffffffda RBX: 00007fc140db5fa0 RCX: 00007fc140b8eb69
[   83.614685][ T7721] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a
[   83.614690][ T7721] RBP: 00007fc140c11df1 R08: 0000000000000004 R09: 0000000000000000
[   83.614694][ T7721] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   83.614698][ T7721] R13: 0000000000000000 R14: 00007fc140db5fa0 R15: 00007fff22a65c58
[   83.614711][ T7721]  </TASK>
[   83.756072][ T7721] Mem-Info:
[   83.757407][ T7721] active_anon:4526 inactive_anon:0 isolated_anon:0
[   83.757407][ T7721]  active_file:1201 inactive_file:38217 isolated_file:0
[   83.757407][ T7721]  unevictable:1768 dirty:303 writeback:0
[   83.757407][ T7721]  slab_reclaimable:9616 slab_unreclaimable:66116
[   83.757407][ T7721]  mapped:18177 shmem:2445 pagetables:939
[   83.757407][ T7721]  sec_pagetables:0 bounce:0
[   83.757407][ T7721]  kernel_misc_reclaimable:0
[   83.757407][ T7721]  free:281092 free_pcp:22193 free_cma:0
[   83.799835][ T7721] Node 0 active_anon:11256kB inactive_anon:0kB active_file:3252kB inactive_file:9836kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34468kB dirty:624kB writeback:0kB shmem:4780kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3664kB pagetables:2056kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   83.818626][ T7721] Node 1 active_anon:6780kB inactive_anon:0kB active_file:1552kB inactive_file:143032kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38444kB dirty:588kB writeback:0kB shmem:5000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7860kB pagetables:1632kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   83.839905][ T7721] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   83.852550][ T7721] lowmem_reserve[]: 0 814 814 814 814
[   83.857970][ T7721] Node 0 DMA32 free:370192kB boost:0kB min:33720kB low:42148kB high:50576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11256kB inactive_anon:0kB active_file:3252kB inactive_file:9836kB unevictable:3536kB writepending:624kB present:1556484kB managed:834028kB mlocked:0kB bounce:0kB free_pcp:38504kB local_pcp:14408kB free_cma:0kB
[   83.871297][ T7724] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[   83.873523][ T7721] lowmem_reserve[]: 0 0 0 0 0
[   83.875927][ T7721] Node 1 DMA32 free:458616kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   83.890965][ T7729] 8021q: VLANs not supported on nlmon0
[   83.892929][ T7721] lowmem_reserve[]: 0 0 854 854 854
[   83.895628][ T7721] Node 1 Normal free:287884kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6780kB inactive_anon:0kB active_file:1552kB inactive_file:143032kB unevictable:3536kB writepending:588kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:41828kB local_pcp:27040kB free_cma:0kB
[   83.914895][ T7721] lowmem_reserve[]: 0 0 0 0 0
[   83.916674][ T7721] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   83.923009][ T7721] Node 0 DMA32: 240*4kB (ME) 96*8kB (UME) 69*16kB (UME) 42*32kB (ME) 68*64kB (UME) 59*128kB (UME) 23*256kB (UME) 12*512kB (UM) 8*1024kB (U) 1*2048kB (M) 81*4096kB (M) = 370128kB
[   83.931318][ T7721] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   83.940152][ T7721] Node 1 Normal: 501*4kB (ME) 155*8kB (UME) 360*16kB (UME) 220*32kB (UME) 45*64kB (UM) 29*128kB (UME) 10*256kB (UME) 13*512kB (UM) 10*1024kB (UM) 8*2048kB (UM) 56*4096kB (M) = 287852kB
[   83.947904][ T7721] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   83.951087][ T7721] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   83.954333][ T7721] 41863 total pagecache pages
[   83.958618][ T7721] 0 pages in swap cache
[   83.960252][ T7721] Free swap  = 124996kB
[   83.961808][ T7721] Total swap = 124996kB
[   83.963334][ T7721] 786301 pages RAM
[   83.966367][ T7721] 0 pages HighMem/MovableOnly
[   83.968130][ T7721] 240546 pages reserved
[   83.969798][ T7721] 0 pages cma reserved
[   84.014049][ T7740] lo speed is unknown, defaulting to 1000
[   84.337063][ T7771] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[   84.350947][ T7769] tipc: Disabling bearer <eth:syzkaller0>
[   84.433113][ T7777] batadv_slave_1: entered promiscuous mode
[   84.435905][ T7777] netlink: 'syz.0.682': attribute type 7 has an invalid length.
[   84.570446][ T7794] netlink: 'syz.0.690': attribute type 10 has an invalid length.
[   84.577711][ T7796] IPVS: Error connecting to the multicast addr
[   84.582260][ T7796] netlink: 'syz.2.692': attribute type 16 has an invalid length.
[   84.586977][ T7796] netlink: 'syz.2.692': attribute type 17 has an invalid length.
[   84.590949][ T7793] delete_channel: no stack
[   84.799090][ T7819] bridge2: entered promiscuous mode
[   84.800884][ T7819] bridge2: entered allmulticast mode
[   84.803735][ T7819] team0: Port device bridge2 added
[   84.931164][ T7819] infiniband syz1: set down
[   84.934016][ T7819] infiniband syz1: added macvlan1
[   84.953135][ T7819] RDS/IB: syz1: added
[   84.955613][ T7819] smc: adding ib device syz1 with port count 1
[   84.957788][ T7819] smc:    ib device syz1 port 1 has pnetid 
[   85.393728][ T7864] tls_set_device_offload_rx: netdev not found
[   85.404047][ T7869] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.421482][ T7869] tipc: Disabling bearer <eth:syzkaller0>
[   85.582211][ T7888] netlink: 'syz.0.722': attribute type 1 has an invalid length.
[   85.586371][ T7888] netlink: 'syz.0.722': attribute type 10 has an invalid length.
[   85.590482][ T7888] batman_adv: batadv0: Adding interface: team0
[   85.592782][ T7888] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.604143][ T7888] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[   85.627370][   T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   85.630362][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.633690][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[   85.638021][   T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   85.641306][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.648443][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[   85.652496][   T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   85.658229][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.662154][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[   85.684850][   T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   85.687834][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.690660][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[   85.801948][ T7899] netlink: 'syz.2.726': attribute type 1 has an invalid length.
[   85.804487][ T7899] netlink: 'syz.2.726': attribute type 1 has an invalid length.
[   85.809058][ T7899] __nla_validate_parse: 18 callbacks suppressed
[   85.809067][ T7899] netlink: 216 bytes leftover after parsing attributes in process `syz.2.726'.
[   85.880635][ T7920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.734'.
[   85.946211][ T5835] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   85.963370][ T7931] netlink: 'syz.1.738': attribute type 2 has an invalid length.
[   86.114306][ T7942] netlink: 24 bytes leftover after parsing attributes in process `syz.1.742'.
[   86.148778][ T7942] lo speed is unknown, defaulting to 1000
[   86.150559][ T7947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.744'.
[   86.198521][ T7950] netlink: 224 bytes leftover after parsing attributes in process `syz.1.742'.
[   86.223390][ T7950] netlink: 'syz.1.742': attribute type 1 has an invalid length.
[   86.248567][ T7950] smc: adding net device bond0 with user defined pnetid SYZ2
[   86.255934][ T7950] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.363186][ T7960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.748'.
[   86.516661][ T7977] netlink: 32 bytes leftover after parsing attributes in process `syz.0.752'.
[   86.672176][ T7988] netlink: 28 bytes leftover after parsing attributes in process `syz.1.756'.
[   86.766416][ T8004] netdevsim netdevsim0: Direct firmware load for .
[   86.766416][ T8004]  failed with error -2
[   86.770255][ T8004] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[   86.770255][ T8004] 
[   87.387045][ T8028] lo speed is unknown, defaulting to 1000
[   87.423427][ T8030] netlink: 'syz.2.772': attribute type 1 has an invalid length.
[   87.662060][ T8037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.774'.
[   87.662077][ T8045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.774'.
[   87.680221][ T8037] xfrm1: entered promiscuous mode
[   87.681887][ T8037] xfrm1: entered allmulticast mode
[   88.077538][ T8073] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   88.081332][ T8077] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   88.322400][ T8090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   88.328235][ T8090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   88.332264][ T8090] bond0 (unregistering): Released all slaves
[   88.349143][ T8096] @: renamed from bond_slave_0
[   88.360475][ T8102] syzkaller1: entered promiscuous mode
[   88.362476][ T8102] syzkaller1: entered allmulticast mode
[   88.644396][ T8137] xt_socket: unknown flags 0xd0
[   88.693880][ T8146] tipc: Can't bind to reserved service type 2
[   88.902629][ T8174] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[   88.957814][ T8178] sctp: [Deprecated]: syz.2.828 (pid 8178) Use of int in maxseg socket option.
[   88.957814][ T8178] Use struct sctp_assoc_value instead
[   89.860588][ T8205] validate_nla: 3 callbacks suppressed
[   89.860597][ T8205] netlink: 'syz.1.838': attribute type 6 has an invalid length.
[   90.141360][ T8243] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.143933][ T8243] syzkaller0: entered promiscuous mode
[   90.148609][ T8243] syzkaller0: entered allmulticast mode
[   90.278623][ T8242] tipc: Resetting bearer <eth:syzkaller0>
[   90.285575][ T8256] netlink: 'syz.2.860': attribute type 21 has an invalid length.
[   90.289133][ T8242] tipc: Disabling bearer <eth:syzkaller0>
[   90.297613][ T8256] netlink: 'syz.2.860': attribute type 5 has an invalid length.
[   90.300048][ T8256] netlink: 'syz.2.860': attribute type 6 has an invalid length.
[   90.377086][ T8268] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   90.473022][ T8268] netlink: 'syz.0.866': attribute type 39 has an invalid length.
[   90.646890][ T8305] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   90.653949][ T8305] bridge_slave_0: left allmulticast mode
[   90.656457][ T8305] bridge_slave_0: left promiscuous mode
[   90.658392][ T8305] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.661715][ T8305] bridge_slave_1: left allmulticast mode
[   90.663508][ T8305] bridge_slave_1: left promiscuous mode
[   90.667921][ T8305] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.673018][ T8305] team0: Port device team_slave_0 removed
[   90.677671][ T8305] team0: Port device team_slave_1 removed
[   90.679657][ T8305] batman_adv: batadv0: Removing interface: batadv_slave_0
[   90.682521][ T8305] batman_adv: batadv0: Removing interface: batadv_slave_1
[   90.694224][ T8305] bond2: (slave wireguard0): Releasing backup interface
[   90.697530][ T8305] wireguard0: left promiscuous mode
[   90.699386][ T8305] bond2: (slave wireguard1): making interface the new active one
[   90.702305][ T8305] wireguard1: entered promiscuous mode
[   90.707644][ T8305] bond2: (slave wireguard1): Releasing backup interface
[   90.709991][ T8305] wireguard1: left promiscuous mode
[   90.713089][ T8305] bond3: (slave bridge1): Removing an active aggregator
[   90.716230][ T8305] bond3: (slave bridge1): Releasing backup interface
[   90.718638][ T8305] bridge1: left promiscuous mode
[   90.720281][ T8305] bridge1: left allmulticast mode
[   90.722572][ T8305] bond4: (slave wireguard2): Releasing backup interface
[   90.725213][ T8305] wireguard2: left promiscuous mode
[   90.729540][ T8305] team0: Port device bridge2 removed
[   90.768498][ T8305] netlink: 'syz.2.878': attribute type 10 has an invalid length.
[   90.773370][ T8305] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[   90.778785][ T8305] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   90.782250][ T8305] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   90.995399][ T8331] macsec0: entered promiscuous mode
[   90.997225][ T8331] team0: entered promiscuous mode
[   90.999548][ T8331] geneve0: entered promiscuous mode
[   91.223600][ T8352] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[   91.453597][ T8376] netlink: 'syz.0.903': attribute type 10 has an invalid length.
[   91.457841][ T8376] __nla_validate_parse: 16 callbacks suppressed
[   91.458970][ T8376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.903'.
[   91.653813][ T8396] netlink: ct family unspecified
[   91.658473][ T8396] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.741672][ T8404] netlink: 'syz.2.916': attribute type 2 has an invalid length.
[   91.744125][ T8404] netlink: 116 bytes leftover after parsing attributes in process `syz.2.916'.
[   91.822439][ T8413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.920'.
[   91.830524][ T8413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.920'.
[   91.841328][ T8413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.920'.
[   91.844255][ T8413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.920'.
[   91.860986][ T8413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.920'.
[   91.867818][ T8413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.920'.
[   91.875123][ T8413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.920'.
[   91.877926][ T8413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.920'.
[   92.009358][ T8431] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.041737][ T8433] netlink: 'syz.0.928': attribute type 30 has an invalid length.
[   92.051604][ T5854] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   92.051660][ T8433] netlink: 'syz.0.928': attribute type 30 has an invalid length.
[   92.054439][ T5854] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   92.066729][ T5854] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   92.074883][ T5854] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   92.130028][ T8444] tipc: Started in network mode
[   92.132101][ T8444] tipc: Node identity d6c993cbcc72, cluster identity 4711
[   92.145118][ T8444] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.150144][ T8444] syzkaller0: entered promiscuous mode
[   92.152227][ T8444] syzkaller0: entered allmulticast mode
[   92.169200][ T8444] tipc: Resetting bearer <eth:syzkaller0>
[   92.176429][ T8439] tipc: Resetting bearer <eth:syzkaller0>
[   92.193893][ T8439] tipc: Disabling bearer <eth:syzkaller0>
[   92.203942][ T8454] sock: sock_timestamping_bind_phc: sock not bind to device
[   92.218728][ T8450] macvtap0: entered allmulticast mode
[   92.220653][ T8450] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check.
[   92.771898][ T8497] 8021q: VLANs not supported on ip_vti0
[   93.250036][ T8549] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   93.638715][ T8590] geneve2: entered promiscuous mode
[   93.641508][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.645905][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.649114][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.652126][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.781732][ T8600] openvswitch: netlink: IP tunnel attribute has 4174 unknown bytes.
[   93.829975][ T8611] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   93.832460][ T8611] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.941292][ T8616] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.984828][ T8616] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.044450][ T8616] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.101371][ T8616] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.168953][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.180244][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.192713][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.205586][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.351567][ T8646] bond2: entered promiscuous mode
[   94.353428][ T8646] 8021q: adding VLAN 0 to HW filter on device bond2
[   94.637764][ T8661] lo speed is unknown, defaulting to 1000
[   94.684169][ T8665] bridge4: entered promiscuous mode
[   94.689888][ T8665] bridge4: entered allmulticast mode
[   95.260829][ T8699] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   95.319923][ T8714] validate_nla: 7 callbacks suppressed
[   95.319933][ T8714] netlink: 'syz.0.1030': attribute type 5 has an invalid length.
[   95.625432][ T8754] netlink: 'syz.1.1044': attribute type 1 has an invalid length.
[   95.642636][ T8754] 8021q: adding VLAN 0 to HW filter on device bond1
[   95.652513][ T8754] 8021q: adding VLAN 0 to HW filter on device bond1
[   95.654831][ T8754] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   95.658846][ T8754] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   95.700632][ T8760] netlink: 'syz.2.1046': attribute type 21 has an invalid length.
[   95.708606][ T8759] bond1: (slave bridge3): Enslaving as an active interface with a down link
[   95.712115][ T8760] netlink: 'syz.2.1046': attribute type 5 has an invalid length.
[   95.715935][ T8760] netlink: 'syz.2.1046': attribute type 6 has an invalid length.
[   95.781054][ T8767] netlink: 'syz.2.1048': attribute type 14 has an invalid length.
[   95.942421][ T8782] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   96.053921][ T8791] lo speed is unknown, defaulting to 1000
[   96.058860][ T8792] lo speed is unknown, defaulting to 1000
[   96.233398][ T8805] netlink: 'syz.2.1062': attribute type 21 has an invalid length.
[   96.245682][ T8805] netlink: 'syz.2.1062': attribute type 1 has an invalid length.
[   96.660200][ T8827] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.663509][ T8827] syzkaller0: entered promiscuous mode
[   96.669195][ T8827] syzkaller0: entered allmulticast mode
[   96.683188][ T8827] tipc: Resetting bearer <eth:syzkaller0>
[   96.688359][ T8826] tipc: Resetting bearer <eth:syzkaller0>
[   96.698843][ T8826] tipc: Disabling bearer <eth:syzkaller0>
[   97.027770][ T8864] netlink: 'syz.2.1084': attribute type 1 has an invalid length.
[   97.266508][ T8897] macvtap1: entered promiscuous mode
[   97.268381][ T8897] batadv0: entered promiscuous mode
[   97.271637][ T8897] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   97.278817][ T8897] batadv0: left promiscuous mode
[   97.293648][ T8899] batman_adv: batadv0: Removing interface: team0
[   97.298361][ T8899] team0: Port device sit3 added
[   97.330553][ T8888] nbd: must specify an index to disconnect
[   97.386349][ T8909] netlink: 'syz.2.1100': attribute type 6 has an invalid length.
[   97.498426][ T8926] __nla_validate_parse: 153 callbacks suppressed
[   97.498435][ T8926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1107'.
[   97.504290][   T33] audit: type=1800 audit(1753993541.323:2): pid=8926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1107" name="memory.events" dev="tmpfs" ino=1853 res=0 errno=0
[   97.538591][ T8932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1108'.
[   97.589367][ T8937] smc: net device bond0 applied user defined pnetid SYZ2
[   97.621572][ T8943] lo speed is unknown, defaulting to 1000
[   97.731145][ T8948] netlink: 788 bytes leftover after parsing attributes in process `syz.0.1116'.
[   98.036193][ T8972] netlink: 171256 bytes leftover after parsing attributes in process `syz.0.1124'.
[   98.078209][ T8977] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1126'.
[   98.081219][ T8977] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1126'.
[   98.309980][ T9001] syzkaller0: entered promiscuous mode
[   98.311895][ T9001] syzkaller0: entered allmulticast mode
[   98.421946][ T9011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1136'.
[   98.676761][ T9037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1148'.
[   98.728522][ T9041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1150'.
[   98.802848][ T9053] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1154'.
[   98.871178][ T9062] unsupported nla_type 52263
[  100.343212][ T9208] validate_nla: 1 callbacks suppressed
[  100.343222][ T9208] netlink: 'syz.0.1215': attribute type 1 has an invalid length.
[  100.492196][ T9222] netlink: 'syz.1.1221': attribute type 142 has an invalid length.
[  101.022985][   T47] IPVS: starting estimator thread 0...
[  101.029282][ T9260] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  101.067646][ T9271] netlink: 'syz.2.1242': attribute type 2 has an invalid length.
[  101.073357][   T47] IPVS: starting estimator thread 0...
[  101.149758][ T9270] IPVS: using max 76 ests per chain, 182400 per kthread
[  101.174817][ T9272] IPVS: using max 79 ests per chain, 189600 per kthread
[  101.339622][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  101.343823][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  101.361465][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  101.364327][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  101.553009][ T9329] gtp0: entered promiscuous mode
[  101.566902][ T9329] netlink: 'syz.0.1265': attribute type 1 has an invalid length.
[  102.763172][ T9415] __nla_validate_parse: 19 callbacks suppressed
[  102.763181][ T9415] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1293'.
[  102.763654][ T9416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1294'.
[  102.769088][ T9415] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1293'.
[  102.780628][ T9415] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1293'.
[  102.797750][ T9415] openvswitch: netlink: Message has 8 unknown bytes.
[  102.839854][ T9422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1298'.
[  103.398007][ T9468] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.403521][ T9468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1310'.
[  103.407992][ T9468] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1310'.
[  103.418388][ T9468] vlan3: entered allmulticast mode
[  103.420392][ T9468] veth1: entered allmulticast mode
[  103.560386][ T9475] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1312'.
[  103.586221][ T9480] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1313'.
[  103.619540][ T9482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1314'.
[  103.912104][ T9497] netlink: 'syz.0.1321': attribute type 42 has an invalid length.
[  104.050526][ T9506] bridge0: port 1(macsec0) entered blocking state
[  104.053863][ T9506] bridge0: port 1(macsec0) entered disabled state
[  104.057276][ T9506] macsec0: entered allmulticast mode
[  104.060449][ T9506] macsec0: entered promiscuous mode
[  104.102240][ T9509] team0 (unregistering): left promiscuous mode
[  104.105468][ T9509] geneve0: left promiscuous mode
[  104.108473][ T9509] team0 (unregistering): Port device geneve0 removed
[  104.174469][ T9520] netlink: 'syz.1.1330': attribute type 1 has an invalid length.
[  104.302060][ T9524] syzkaller0: entered promiscuous mode
[  104.304075][ T9524] syzkaller0: entered allmulticast mode
[  104.840743][ T9553] batadv_slave_1: entered promiscuous mode
[  105.068692][ T5827] Bluetooth: hci2: command 0x0405 tx timeout
[  105.978020][ T9588] netlink: 'syz.2.1352': attribute type 15 has an invalid length.
[  105.981833][ T9588] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  106.766115][ T9603] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  108.210946][ T9650] __nla_validate_parse: 47 callbacks suppressed
[  108.210957][ T9650] netlink: 264 bytes leftover after parsing attributes in process `syz.0.1375'.
[  108.217419][ T9650] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1375'.
[  108.250096][ T9652] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  108.287773][ T9656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1379'.
[  108.326487][ T9658] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  108.388354][ T9658] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  108.432093][ T9660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1380'.
[  108.476979][ T9658] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  108.553560][ T9673] IPv6: NLM_F_CREATE should be specified when creating new route
[  108.556875][ T9658] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  108.637067][ T5688] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  108.645330][ T5688] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  108.663335][ T5688] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  108.665372][ T9688] siw: device registration error -23
[  108.681139][ T5688] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  108.787049][ T9690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1388'.
[  108.947652][ T9707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1395'.
[  108.952320][ T9707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1395'.
[  108.956519][ T9707] macsec0: left allmulticast mode
[  108.958684][ T9707] macsec0: left promiscuous mode
[  108.961524][ T9707] bridge0: port 1(macsec0) entered disabled state
[  109.122348][ T9727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1402'.
[  109.130541][ T9727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1402'.
[  109.202029][ T9737] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.302940][ T9750] syzkaller1: entered promiscuous mode
[  109.312900][ T9750] syzkaller1: entered allmulticast mode
[  109.412415][ T9759] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1415'.
[  110.247465][ T9800] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  110.250061][ T9800] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  110.346190][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.353034][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.365683][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.373240][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.488875][ T9827] sctp: [Deprecated]: syz.1.1441 (pid 9827) Use of int in maxseg socket option.
[  110.488875][ T9827] Use struct sctp_assoc_value instead
[  110.496977][ T9827] sctp: [Deprecated]: syz.1.1441 (pid 9827) Use of int in maxseg socket option.
[  110.496977][ T9827] Use struct sctp_assoc_value instead
[  110.501719][ T9827] sctp: [Deprecated]: syz.1.1441 (pid 9827) Use of int in maxseg socket option.
[  110.501719][ T9827] Use struct sctp_assoc_value instead
[  110.508858][ T9827] sctp: [Deprecated]: syz.1.1441 (pid 9827) Use of int in maxseg socket option.
[  110.508858][ T9827] Use struct sctp_assoc_value instead
[  110.513458][ T9827] sctp: [Deprecated]: syz.1.1441 (pid 9827) Use of int in maxseg socket option.
[  110.513458][ T9827] Use struct sctp_assoc_value instead
[  110.520312][ T9827] sctp: [Deprecated]: syz.1.1441 (pid 9827) Use of int in maxseg socket option.
[  110.520312][ T9827] Use struct sctp_assoc_value instead
[  110.526299][ T9827] sctp: [Deprecated]: syz.1.1441 (pid 9827) Use of int in maxseg socket option.
[  110.526299][ T9827] Use struct sctp_assoc_value instead
[  110.530954][ T9827] sctp: [Deprecated]: syz.1.1441 (pid 9827) Use of int in maxseg socket option.
[  110.530954][ T9827] Use struct sctp_assoc_value instead
[  110.536396][ T9827] sctp: [Deprecated]: syz.1.1441 (pid 9827) Use of int in maxseg socket option.
[  110.536396][ T9827] Use struct sctp_assoc_value instead
[  110.540855][ T9827] sctp: [Deprecated]: syz.1.1441 (pid 9827) Use of int in maxseg socket option.
[  110.540855][ T9827] Use struct sctp_assoc_value instead
[  111.064658][ T5827] Bluetooth: hci2: command 0x0405 tx timeout
[  111.111649][ T9876] netlink: 'syz.2.1462': attribute type 11 has an invalid length.
[  111.173861][ T9883] openvswitch: netlink: Tunnel attr 16370 out of range max 16
[  112.860799][ T9945] netlink: 'syz.0.1488': attribute type 13 has an invalid length.
[  112.863619][ T9945] netlink: 'syz.0.1488': attribute type 17 has an invalid length.
[  112.901626][ T9945] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.908311][ T9945] 8021q: adding VLAN 0 to HW filter on device team0
[  112.918377][ T9945] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.958399][ T9945] batadv_slave_1: left promiscuous mode
[  112.968564][ T9945] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  112.972994][ T9945] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  112.978744][ T9945] 8021q: adding VLAN 0 to HW filter on device hsr0
[  112.981981][ T9945] veth1_vlan: left promiscuous mode
[  112.985154][ T9945] veth0_vlan: left promiscuous mode
[  112.987417][ T9945] veth0_vlan: entered promiscuous mode
[  112.991348][ T9945] veth1_vlan: entered promiscuous mode
[  112.998768][ T9945] veth1_macvtap: left promiscuous mode
[  113.001724][ T9945] veth0_macvtap: left promiscuous mode
[  113.004473][ T9945] veth0_macvtap: entered promiscuous mode
[  113.006923][ T9945] veth0_macvtap: entered allmulticast mode
[  113.008883][ T9945] macvtap0: left allmulticast mode
[  113.010546][ T9945] veth0_macvtap: left allmulticast mode
[  113.016939][ T9945] veth1_macvtap: entered promiscuous mode
[  113.025160][ T9945] bridge1: left promiscuous mode
[  113.032623][ T9945] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[  113.038001][ T5287] lo speed is unknown, defaulting to 1000
[  113.044713][ T5287] syz2: Port: 1 Link ACTIVE
[  113.289304][ T9948] lo speed is unknown, defaulting to 1000
[  113.638712][ T9945] syz.0.1488 (9945) used greatest stack depth: 18944 bytes left
[  113.742576][ T9963] netlink: 'syz.0.1494': attribute type 5 has an invalid length.
[  113.746212][ T9963] netlink: 'syz.0.1494': attribute type 7 has an invalid length.
[  113.755787][ T9963] : entered promiscuous mode
[  113.760105][ T9963] netlink: 'syz.0.1494': attribute type 1 has an invalid length.
[  114.301071][ T9971] __nla_validate_parse: 6 callbacks suppressed
[  114.301081][ T9971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1498'.
[  114.307428][ T9971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1498'.
[  114.310426][ T9971] netlink: 'syz.1.1498': attribute type 15 has an invalid length.
[  114.511901][ T9991] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1506'.
[  114.518185][ T9991] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1506'.
[  114.702557][T10006] netlink: 'syz.2.1512': attribute type 1 has an invalid length.
[  114.839080][T10002] bond2: left promiscuous mode
[  114.841401][T10002] bridge4: left promiscuous mode
[  114.843875][T10002] bridge4: left allmulticast mode
[  114.848721][T10002] gtp0: left promiscuous mode
[  114.855009][T10002] vlan3: left allmulticast mode
[  114.857189][T10002] veth1: left allmulticast mode
[  114.860487][  T793] lo speed is unknown, defaulting to 1000
[  114.862743][  T793] syz2: Port: 1 Link DOWN
[  114.891399][T10010] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address
[  114.897022][T10010] bond0: (slave vxcan3): Error -95 calling set_mac_address
[  114.909812][T10012] gretap1: entered promiscuous mode
[  114.915331][T10012] bond0: (slave gretap1): making interface the new active one
[  114.918976][T10012] bond0: (slave gretap1): Enslaving as an active interface with an up link
[  114.922730][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  114.928562][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.932467][T10015] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  114.940877][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  114.944494][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.948636][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  114.952213][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  114.957879][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  114.961242][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.216775][T10034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1519'.
[  115.324229][T10040] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1523'.
[  115.439244][T10049] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1525'.
[  115.443452][T10049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1525'.
[  115.479057][T10051] bond0: entered promiscuous mode
[  115.481464][T10051] batadv0: entered promiscuous mode
[  115.486203][T10051] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  115.489610][T10051] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  115.493003][T10051] hsr1: entered allmulticast mode
[  115.495035][T10051] bond0: entered allmulticast mode
[  115.496872][T10051] gretap1: entered allmulticast mode
[  115.498669][T10051] batadv0: entered allmulticast mode
[  115.500751][T10051] 8021q: adding VLAN 0 to HW filter on device hsr1
[  115.505743][T10051] bond0: left promiscuous mode
[  115.515926][T10051] batadv0: left promiscuous mode
[  115.679103][T10059] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1529'.
[  115.780574][T10069] netlink: 'syz.2.1533': attribute type 11 has an invalid length.
[  115.789068][T10069] netlink: 'syz.2.1533': attribute type 1 has an invalid length.
[  115.801834][T10069] bond5: entered promiscuous mode
[  115.804100][T10069] 8021q: adding VLAN 0 to HW filter on device bond5
[  115.852296][T10069] bond5: (slave bridge0): making interface the new active one
[  115.856058][T10069] bridge0: entered promiscuous mode
[  115.859286][T10069] bond5: (slave bridge0): Enslaving as an active interface with an up link
[  115.905401][T10080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1537'.
[  116.112015][T10093] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.116037][T10093] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[  116.318583][T10098] validate_nla: 2 callbacks suppressed
[  116.318593][T10098] netlink: 'syz.2.1545': attribute type 4 has an invalid length.
[  116.935879][T10089] syz.1.1542 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  116.943412][T10089] CPU: 1 UID: 0 PID: 10089 Comm: syz.1.1542 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba-dirty #0 PREEMPT(full) 
[  116.943425][T10089] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  116.943429][T10089] Call Trace:
[  116.943433][T10089]  <TASK>
[  116.943437][T10089]  dump_stack_lvl+0x189/0x250
[  116.943450][T10089]  ? __pfx_dump_stack_lvl+0x10/0x10
[  116.943458][T10089]  ? __pfx__printk+0x10/0x10
[  116.943473][T10089]  dump_header+0xd3/0x480
[  116.943484][T10089]  oom_kill_process+0x387/0x920
[  116.943494][T10089]  out_of_memory+0xf09/0x12a0
[  116.943507][T10089]  ? __pfx_out_of_memory+0x10/0x10
[  116.943518][T10089]  mem_cgroup_out_of_memory+0x145/0x240
[  116.943527][T10089]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  116.943540][T10089]  ? _raw_spin_unlock+0x28/0x50
[  116.943548][T10089]  ? memcg1_oom_prepare+0x37f/0x450
[  116.943561][T10089]  try_charge_memcg+0xdff/0x1290
[  116.943574][T10089]  ? __pfx_try_charge_memcg+0x10/0x10
[  116.943588][T10089]  charge_memcg+0x9f/0x180
[  116.943599][T10089]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  116.943610][T10089]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  116.943622][T10089]  __read_swap_cache_async+0x28c/0x510
[  116.943636][T10089]  swap_cluster_readahead+0x305/0x5f0
[  116.943647][T10089]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  116.943668][T10089]  ? get_vma_policy+0x27c/0x3c0
[  116.943707][T10089]  swapin_readahead+0x17d/0xb50
[  116.943717][T10089]  ? __pfx_filemap_get_entry+0x10/0x10
[  116.943729][T10089]  ? __pfx_swapin_readahead+0x10/0x10
[  116.943739][T10089]  ? __filemap_get_folio+0x9a6/0xaf0
[  116.943750][T10089]  ? swap_cache_get_folio+0xae/0x3b0
[  116.943760][T10089]  do_swap_page+0x525/0x5ac0
[  116.943772][T10089]  ? __lock_acquire+0xab9/0xd20
[  116.943805][T10089]  ? do_swap_page+0x184/0x5ac0
[  116.943813][T10089]  ? __pfx_do_swap_page+0x10/0x10
[  116.943824][T10089]  ? __pfx_default_wake_function+0x10/0x10
[  116.943834][T10089]  ? ___pte_offset_map+0x21f/0x2c0
[  116.943846][T10089]  ? pte_offset_map_rw_nolock+0xea/0x160
[  116.943857][T10089]  __handle_mm_fault+0xf3e/0x5620
[  116.943866][T10089]  ? __lock_acquire+0xab9/0xd20
[  116.943883][T10089]  ? __pfx___handle_mm_fault+0x10/0x10
[  116.943893][T10089]  ? lock_vma_under_rcu+0xf8/0x710
[  116.943904][T10089]  ? lock_vma_under_rcu+0xf8/0x710
[  116.943911][T10089]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  116.943920][T10089]  handle_mm_fault+0x40a/0x8e0
[  116.943935][T10089]  do_user_addr_fault+0xa81/0x1390
[  116.943948][T10089]  ? rcu_is_watching+0x15/0xb0
[  116.943959][T10089]  ? trace_page_fault_user+0x84/0x1e0
[  116.943971][T10089]  exc_page_fault+0x76/0xf0
[  116.943982][T10089]  asm_exc_page_fault+0x26/0x30
[  116.943988][T10089] RIP: 0033:0x7f0998d8eac6
[  116.943996][T10089] Code: fb e8 9e 03 02 00 85 c0 b8 00 00 00 00 48 0f 45 d8 48 89 d8 5b c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 83 ec 28 31 f6 <64> 48 8b 04 25 28 00 00 00 48 89 44 24 18 31 c0 89 f8 48 69 c0 83
[  116.944002][T10089] RSP: 002b:00007fff06f78f40 EFLAGS: 00010246
[  116.944009][T10089] RAX: 000000000001c81f RBX: 00007f0998fb5fa0 RCX: 000000000001c520
[  116.944014][T10089] RDX: 00000000000002ff RSI: 0000000000000000 RDI: 00000000000003e8
[  116.944019][T10089] RBP: 00007f0998fb7ba0 R08: 000000002dbbfef6 R09: 7fffffffffffffff
[  116.944023][T10089] R10: 3fffffffffffffff R11: 0000000000000293 R12: 000000000001c81f
[  116.944028][T10089] R13: 00007f0998fb6080 R14: ffffffffffffffff R15: 00007fff06f79080
[  116.944040][T10089]  </TASK>
[  116.944122][T10089] memory: usage 307200kB, limit 307200kB, failcnt 270
[  117.071906][T10089] memory+swap: usage 301408kB, limit 9007199254740988kB, failcnt 0
[  117.074355][T10089] kmem: usage 300328kB, limit 9007199254740988kB, failcnt 0
[  117.077013][T10089] Memory cgroup stats for /syz1:
[  117.077132][T10089] cache 4096
[  117.079751][T10089] rss 0
[  117.080638][T10089] rss_huge 0
[  117.081916][T10089] shmem 0
[  117.083126][T10089] mapped_file 0
[  117.085632][T10089] dirty 0
[  117.086929][T10089] writeback 0
[  117.088326][T10089] workingset_refault_anon 6
[  117.115103][T10089] workingset_refault_file 0
[  117.117427][T10089] swap 192512
[  117.122767][T10089] swapcached 24576
[  117.126292][T10089] pgpgin 40928
[  117.127457][T10089] pgpgout 40921
[  117.128727][T10089] pgfault 84368
[  117.129883][T10089] pgmajfault 11
[  117.131023][T10089] inactive_anon 24576
[  117.132322][T10089] active_anon 0
[  117.133458][T10089] inactive_file 4096
[  117.135789][T10089] active_file 0
[  117.137098][T10089] unevictable 0
[  117.138235][T10089] hierarchical_memory_limit 314572800
[  117.140263][T10089] hierarchical_memsw_limit 9223372036854771712
[  117.142300][T10089] total_cache 4096
[  117.143566][T10089] total_rss 0
[  117.145794][T10089] total_rss_huge 0
[  117.147018][T10089] total_shmem 0
[  117.149094][T10089] total_mapped_file 0
[  117.150461][T10089] total_dirty 0
[  117.151586][T10089] total_writeback 0
[  117.152820][T10089] total_workingset_refault_anon 6
[  117.154428][T10089] total_workingset_refault_file 0
[  117.156783][T10089] total_swap 192512
[  117.158021][T10089] total_swapcached 24576
[  117.159398][T10089] total_pgpgin 40928
[  117.160774][T10089] total_pgpgout 40921
[  117.162046][T10089] total_pgfault 84368
[  117.163323][T10089] total_pgmajfault 11
[  117.165997][T10089] total_inactive_anon 24576
[  117.167508][T10089] total_active_anon 0
[  117.168816][T10089] total_inactive_file 4096
[  117.170230][T10089] total_active_file 0
[  117.171604][T10089] total_unevictable 0
[  117.172913][T10089] anon_cost 0
[  117.174014][T10089] file_cost 0
[  117.175878][T10089] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1542,pid=10089,uid=0
[  117.180717][T10089] Memory cgroup out of memory: Killed process 10089 (syz.1.1542) total-vm:101888kB, anon-rss:1076kB, file-rss:23320kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  117.922620][T10121] netlink: 'syz.0.1552': attribute type 9 has an invalid length.
[  117.927392][T10121] netlink: 'syz.0.1552': attribute type 9 has an invalid length.
[  118.132927][T10136] netlink: 'syz.0.1557': attribute type 4 has an invalid length.
[  118.158464][T10138] syzkaller1: tun_chr_ioctl cmd 1074025672
[  118.160374][T10138] syzkaller1: ignored: set checksum disabled
[  118.165416][T10138] net veth1_virt_wifi : renamed from virt_wifi0
[  118.949342][T10177] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  119.431636][T10202] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  119.596182][T10215] __nla_validate_parse: 11 callbacks suppressed
[  119.596192][T10215] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1591'.
[  119.732827][T10224] pimreg: entered allmulticast mode
[  119.750506][T10224] pimreg: left allmulticast mode
[  120.279140][T10250] bridge4: entered allmulticast mode
[  120.310071][T10252] netlink: 'syz.1.1603': attribute type 1 has an invalid length.
[  120.371827][T10253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1603'.
[  120.470766][T10258] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1605'.
[  120.516025][T10260] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1606'.
[  120.756917][T10269] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1610'.
[  120.763312][T10269] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1610'.
[  120.768123][T10269] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1610'.
[  120.771536][T10269] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1610'.
[  120.777062][T10269] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  120.781316][T10269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1610'.
[  120.785184][T10269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1610'.
[  121.036030][T10291] siw: device registration error -23
[  121.536160][T10303] netlink: 'syz.0.1623': attribute type 1 has an invalid length.
[  121.559785][T10303] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  121.564133][T10303] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  121.610404][T10311] gretap1: entered promiscuous mode
[  121.841913][T10325] 8021q: VLANs not supported on vcan0
[  121.863008][T10325] siw: device registration error -23
[  121.901255][T10331] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  121.924016][T10330] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  121.939835][T10334] netlink: 'syz.2.1633': attribute type 29 has an invalid length.
[  121.988280][T10334] Driver unsupported XDP return value 0 on prog  (id 487) dev N/A, expect packet loss!
[  122.153490][T10353] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  122.172366][T10352] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  122.189654][T10355] 8021q: VLANs not supported on vcan0
[  122.200538][T10355] siw: device registration error -23
[  122.802738][T10384] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  122.823350][T10383] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  122.981807][T10394] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  123.009883][T10393] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  123.023016][T10396] netlink: 'syz.2.1665': attribute type 1 has an invalid length.
[  123.035607][T10398] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003
[  123.047404][T10396] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  123.051553][T10396] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  123.981655][T10417] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  123.996163][T10416] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  124.254696][T10441] netlink: 'syz.1.1674': attribute type 23 has an invalid length.
[  124.316738][T10446] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  124.330429][T10445] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  124.450947][T10452] bond1: (slave bridge3): Releasing active interface
[  124.457740][T10450] netlink: 'syz.1.1678': attribute type 10 has an invalid length.
[  124.459825][T10452] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  124.463952][T10450] netlink: 'syz.1.1678': attribute type 10 has an invalid length.
[  124.464170][T10452] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  124.468889][T10450] netlink: 'syz.1.1678': attribute type 10 has an invalid length.
[  124.473773][T10450] netlink: 'syz.1.1678': attribute type 10 has an invalid length.
[  124.477013][T10450] netlink: 'syz.1.1678': attribute type 10 has an invalid length.
[  124.479750][T10450] netlink: 'syz.1.1678': attribute type 10 has an invalid length.
[  124.687123][T10454] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  124.710311][T10453] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  124.873281][T10458] __nla_validate_parse: 19 callbacks suppressed
[  124.873294][T10458] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1682'.
[  124.968892][T10470] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  124.986874][T10468] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  125.169354][T10478] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  125.184903][T10477] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  125.341879][T10480] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1689'.
[  125.349029][ T5843] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  125.351861][ T5843] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  125.354897][ T5843] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  125.357723][ T5843] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  125.490749][T10496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1696'.
[  125.493742][T10496] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1696'.
[  125.499194][T10496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1696'.
[  125.502500][T10496] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1696'.
[  125.502954][T10498] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  125.521311][T10497] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  125.572361][T10500] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.590983][T10500] syzkaller0: entered promiscuous mode
[  125.593059][T10500] syzkaller0: entered allmulticast mode
[  125.608827][T10501] tipc: Resetting bearer <eth:syzkaller0>
[  125.613579][T10499] tipc: Resetting bearer <eth:syzkaller0>
[  125.623357][T10499] tipc: Disabling bearer <eth:syzkaller0>
[  125.843769][T10526] tipc: New replicast peer: 255.255.255.255
[  125.849162][T10526] tipc: Enabled bearer <udp:syz2>, priority 10
[  125.873561][T10526] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1706'.
[  125.878161][T10526] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1706'.
[  126.098932][T10548] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  126.254324][T10554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1718'.
[  126.275711][T10554] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  126.280006][T10554] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  126.320559][T10554] macvlan2: entered promiscuous mode
[  126.322335][T10554] macvlan2: entered allmulticast mode
[  126.324229][T10554] bond3: (slave macvlan2): Error -98 calling set_mac_address
[  126.756134][T10577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1724'.
[  126.935503][T10583] syzkaller0: tun_chr_ioctl cmd 1074025677
[  126.939841][T10583] syzkaller0: linktype set to 1
[  126.965084][T10013] tipc: Node number set to 448500683
[  126.993831][T10587] smc_pnet_add_by_ndev: 7 callbacks suppressed
[  126.993840][T10587] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  127.009075][T10586] smc_pnet_remove_by_ndev: 6 callbacks suppressed
[  127.009085][T10586] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  127.539490][T10574] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  127.632559][T10603] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  127.658401][T10600] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  127.727162][T10616] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  127.752108][T10615] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  127.759887][T10618] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  127.766049][T10620] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  127.778240][T10617] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  127.814277][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.817027][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.908829][T10635] sctp: [Deprecated]: syz.0.1747 (pid 10635) Use of struct sctp_assoc_value in delayed_ack socket option.
[  127.908829][T10635] Use struct sctp_sack_info instead
[  127.988346][T10643] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  128.000711][T10642] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  128.598506][T10619] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  128.672838][T10660] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  128.684061][T10659] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  128.789726][T10664] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  128.806922][T10663] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  128.981597][T10680] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  129.068844][T10688] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  129.093775][T10687] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  129.480244][T10725] sctp: [Deprecated]: syz.1.1780 (pid 10725) Use of int in max_burst socket option.
[  129.480244][T10725] Use struct sctp_assoc_value instead
[  129.581612][T10727] netlink: del zone limit has 4 unknown bytes
[  129.636779][T10735] sctp: [Deprecated]: syz.1.1782 (pid 10735) Use of int in max_burst socket option deprecated.
[  129.636779][T10735] Use struct sctp_assoc_value instead
[  129.642297][T10735] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  129.986857][T10758] __nla_validate_parse: 16 callbacks suppressed
[  129.986868][T10758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1793'.
[  130.082974][T10764] IPVS: set_ctl: invalid protocol: 12 172.30.9.3:20003
[  130.154330][T10773] validate_nla: 62 callbacks suppressed
[  130.154346][T10773] netlink: 'syz.1.1795': attribute type 6 has an invalid length.
[  130.231386][T10779] netlink: 'syz.1.1797': attribute type 2 has an invalid length.
[  130.375837][T10794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1803'.
[  130.389475][T10794] 8021q: adding VLAN 0 to HW filter on device bond4
[  130.397818][T10794] 8021q: adding VLAN 0 to HW filter on device batadv1
[  130.401887][T10794] bond4: (slave batadv1): Enslaving as an active interface with an up link
[  130.536288][T10804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1806'.
[  130.705291][T10810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1810'.
[  130.917555][T10833] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1815'.
[  130.957585][T10835] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1816'.
[  130.982341][T10837] netlink: 'syz.0.1817': attribute type 1 has an invalid length.
[  131.026720][T10839] veth0_to_bond: entered allmulticast mode
[  131.135572][T10858] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1825'.
[  131.261902][T10873] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  131.356805][T10886] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1834'.
[  131.376178][T10886] pim6reg1: entered promiscuous mode
[  131.379727][T10886] pim6reg1: entered allmulticast mode
[  131.382764][T10886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1834'.
[  131.506024][T10890] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1835'.
[  131.718596][T10907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  132.266377][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.498077][T10920] netlink: 'syz.0.1845': attribute type 1 has an invalid length.
[  132.687145][T10933] smc_pnet_add_by_ndev: 13 callbacks suppressed
[  132.687153][T10933] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  132.703134][T10932] smc_pnet_remove_by_ndev: 14 callbacks suppressed
[  132.703146][T10932] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  132.736509][T10938] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  132.862214][T10947] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  132.879747][T10946] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  133.133697][T10958] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  133.156974][T10957] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  133.280210][T10967] netlink: 'syz.2.1862': attribute type 15 has an invalid length.
[  133.366814][T10974] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  133.369226][T10974] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.572443][T10937] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  133.651626][T10988] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.743265][T10991] netlink: 'syz.1.1870': attribute type 9 has an invalid length.
[  133.903183][T10998] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  133.918539][T10997] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  133.963071][T11005] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  134.194277][T11020] pim6reg: entered allmulticast mode
[  134.199770][T11020] pim6reg: left allmulticast mode
[  134.438631][T11039] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  134.453808][T11037] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  134.629517][T11057] netlink: 'syz.2.1895': attribute type 10 has an invalid length.
[  134.636010][T11057] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  134.640188][T11057] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  134.644145][T11057] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  134.663524][T11052] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  134.666090][T11052] IPv6: NLM_F_CREATE should be set when creating new route
[  134.668379][T11052] IPv6: NLM_F_CREATE should be set when creating new route
[  134.670695][T11052] IPv6: NLM_F_CREATE should be set when creating new route
[  134.759739][T11067] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  134.772903][T11066] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  134.796596][T11004] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  134.860036][T11069] lo speed is unknown, defaulting to 1000
[  135.055528][T11085] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  135.068441][T11084] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  135.198494][T11091] __nla_validate_parse: 28 callbacks suppressed
[  135.198504][T11091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1907'.
[  135.253064][T11095] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  135.282511][T11094] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  135.420784][T11105] netlink: 'syz.1.1911': attribute type 11 has an invalid length.
[  135.424024][T11105] netlink: 'syz.1.1911': attribute type 12 has an invalid length.
[  135.427842][T11105] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1911'.
[  135.437629][T11105] : renamed from batadv_slave_1
[  135.651366][T11119] netlink: 'syz.1.1916': attribute type 1 has an invalid length.
[  135.654773][T11119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1916'.
[  135.680509][T11119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1916'.
[  136.067210][T11145] netlink: 'syz.0.1926': attribute type 1 has an invalid length.
[  136.083117][T11145] 8021q: adding VLAN 0 to HW filter on device bond4
[  136.195040][T11159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1930'.
[  136.199450][T11159] netlink: 'syz.1.1930': attribute type 10 has an invalid length.
[  136.448929][T11167] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1934'.
[  136.500350][T11171] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  136.642450][T11186] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1941'.
[  136.654251][T11186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1941'.
[  136.980480][T11205] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  136.981771][T11212] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1950'.
[  137.172049][T11225] netlink: 'syz.2.1957': attribute type 10 has an invalid length.
[  137.179114][T11225] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1957'.
[  137.311351][T11236] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.315774][T11236] syzkaller0: entered promiscuous mode
[  137.318170][T11236] syzkaller0: entered allmulticast mode
[  137.329836][T11240] sctp: [Deprecated]: syz.2.1963 (pid 11240) Use of int in max_burst socket option.
[  137.329836][T11240] Use struct sctp_assoc_value instead
[  137.338143][T11236] tipc: Resetting bearer <eth:syzkaller0>
[  137.344057][T11235] tipc: Resetting bearer <eth:syzkaller0>
[  137.353062][T11235] tipc: Disabling bearer <eth:syzkaller0>
[  137.487750][T11252] netlink: 'syz.2.1967': attribute type 15 has an invalid length.
[  137.535164][T11257] pim6reg9: entered allmulticast mode
[  137.598451][T11264] lo speed is unknown, defaulting to 1000
[  137.754257][T11275] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.759041][T11275] syzkaller0: entered promiscuous mode
[  137.760990][T11275] syzkaller0: entered allmulticast mode
[  137.777554][T11275] sch_fq: defrate 257 ignored.
[  137.805250][T11275] tipc: Resetting bearer <eth:syzkaller0>
[  137.809590][T11273] tipc: Resetting bearer <eth:syzkaller0>
[  137.819887][T11273] tipc: Disabling bearer <eth:syzkaller0>
[  137.919272][T11279] smc_pnet_add_by_ndev: 9 callbacks suppressed
[  137.919284][T11279] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  137.934905][T11278] smc_pnet_remove_by_ndev: 9 callbacks suppressed
[  137.934914][T11278] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  138.083332][T11285] netlink: 'syz.1.1979': attribute type 1 has an invalid length.
[  138.086995][T11285] netlink: 'syz.1.1979': attribute type 2 has an invalid length.
[  138.095009][T11285] IPv6: sit3: Disabled Multicast RS
[  138.097151][T11285] sit3: entered allmulticast mode
[  138.128435][T11287] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  138.140147][T11286] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  138.543541][T11302] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  138.552741][T11302] syzkaller1: entered allmulticast mode
[  138.589292][T11301] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  138.617171][T11305] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  138.634403][T11304] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  138.655315][T11307] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  138.797903][T11313] netlink: 'syz.2.1991': attribute type 12 has an invalid length.
[  139.470048][T11330] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  139.483929][T11329] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  139.497170][T11306] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  139.699863][T11353] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  139.768174][T11360] netlink: zone id is out of range
[  139.770539][T11360] netlink: get zone limit has 8 unknown bytes
[  139.831833][T11366] netlink: 'syz.2.2010': attribute type 1 has an invalid length.
[  140.509253][T11374] smc: adding net device syzkaller1 with user defined pnetid SYZ2
[  140.520801][T11373] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  140.538532][T11352] smc: removing net device syzkaller1 with user defined pnetid SYZ2
[  140.619445][T11379] ==================================================================
[  140.622151][T11379] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x44cd/0x5400
[  140.624742][T11379] Read of size 1 at addr ffff888123a7c330 by task syz.1.2015/11379
[  140.628091][T11379] 
[  140.628909][T11379] CPU: 1 UID: 0 PID: 11379 Comm: syz.1.2015 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba-dirty #0 PREEMPT(full) 
[  140.628919][T11379] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  140.628924][T11379] Call Trace:
[  140.628928][T11379]  <TASK>
[  140.628932][T11379]  dump_stack_lvl+0x189/0x250
[  140.628944][T11379]  ? __kasan_check_byte+0x12/0x40
[  140.628956][T11379]  ? __pfx_dump_stack_lvl+0x10/0x10
[  140.628963][T11379]  ? lock_release+0x4b/0x3e0
[  140.628974][T11379]  ? __virt_addr_valid+0x4a5/0x5c0
[  140.628984][T11379]  print_report+0xca/0x240
[  140.628995][T11379]  ? xfrm_state_find+0x44cd/0x5400
[  140.629002][T11379]  kasan_report+0x118/0x150
[  140.629014][T11379]  ? xfrm_state_find+0x44cd/0x5400
[  140.629021][T11379]  xfrm_state_find+0x44cd/0x5400
[  140.629029][T11379]  ? __pfx___find_rr_leaf+0x10/0x10
[  140.629040][T11379]  ? __pfx_fib6_node_lookup+0x10/0x10
[  140.629049][T11379]  ? xfrm_state_find+0x1da/0x5400
[  140.629056][T11379]  ? __pfx_xfrm_state_find+0x10/0x10
[  140.629062][T11379]  ? __rt6_find_exception_rcu+0x127/0x4c0
[  140.629074][T11379]  ? __pfx___rt6_find_exception_rcu+0x10/0x10
[  140.629085][T11379]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  140.629096][T11379]  ? ip6_pol_route+0x162/0x1180
[  140.629105][T11379]  ? __pfx_ip6_pol_route+0x10/0x10
[  140.629113][T11379]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  140.629121][T11379]  ? __lock_acquire+0xab9/0xd20
[  140.629135][T11379]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  140.629146][T11379]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  140.629156][T11379]  ? xfrm_expand_policies+0x41f/0x6a0
[  140.629166][T11379]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  140.629174][T11379]  ? __pfx_ip6_dst_lookup_tail+0x10/0x10
[  140.629184][T11379]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  140.629192][T11379]  ? txopt_get+0x335/0x3f0
[  140.629203][T11379]  ? __pfx_txopt_get+0x10/0x10
[  140.629212][T11379]  ? aa_label_sk_perm+0x413/0x560
[  140.629221][T11379]  xfrm_lookup_route+0x3c/0x1c0
[  140.629230][T11379]  rawv6_sendmsg+0xdab/0x1820
[  140.629242][T11379]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  140.629253][T11379]  ? finish_task_switch+0x266/0x950
[  140.629264][T11379]  ? __schedule+0x1755/0x4d30
[  140.629273][T11379]  ? __pfx_aa_sk_perm+0x10/0x10
[  140.629282][T11379]  ? sock_rps_record_flow+0x19/0x410
[  140.629292][T11379]  ? inet_sendmsg+0x2f4/0x370
[  140.629300][T11379]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  140.629309][T11379]  __sock_sendmsg+0x19c/0x270
[  140.629319][T11379]  ____sys_sendmsg+0x52d/0x830
[  140.629327][T11379]  ? __pfx_____sys_sendmsg+0x10/0x10
[  140.629336][T11379]  ? import_iovec+0x74/0xa0
[  140.629346][T11379]  ___sys_sendmsg+0x21f/0x2a0
[  140.629353][T11379]  ? __pfx____sys_sendmsg+0x10/0x10
[  140.629366][T11379]  ? __fget_files+0x2a/0x420
[  140.629372][T11379]  ? __fget_files+0x3a0/0x420
[  140.629380][T11379]  __sys_sendmmsg+0x227/0x430
[  140.629388][T11379]  ? __pfx___sys_sendmmsg+0x10/0x10
[  140.629394][T11379]  ? do_futex+0x395/0x420
[  140.629408][T11379]  ? rcu_is_watching+0x15/0xb0
[  140.629420][T11379]  __x64_sys_sendmmsg+0xa0/0xc0
[  140.629429][T11379]  do_syscall_64+0xfa/0x3b0
[  140.629439][T11379]  ? lockdep_hardirqs_on+0x9c/0x150
[  140.629448][T11379]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.629456][T11379]  ? exc_page_fault+0x9f/0xf0
[  140.629465][T11379]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.629472][T11379] RIP: 0033:0x7f0998d8eb69
[  140.629480][T11379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  140.629487][T11379] RSP: 002b:00007f0999b7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  140.629496][T11379] RAX: ffffffffffffffda RBX: 00007f0998fb5fa0 RCX: 00007f0998d8eb69
[  140.629501][T11379] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000008
[  140.629506][T11379] RBP: 00007f0998e11df1 R08: 0000000000000000 R09: 0000000000000000
[  140.629510][T11379] R10: 000000000000ffe0 R11: 0000000000000246 R12: 0000000000000000
[  140.629514][T11379] R13: 0000000000000000 R14: 00007f0998fb5fa0 R15: 00007fff06f78e08
[  140.629522][T11379]  </TASK>
[  140.629525][T11379] 
[  140.760247][T11379] Allocated by task 6656:
[  140.761690][T11379]  kasan_save_track+0x3e/0x80
[  140.763203][T11379]  __kasan_slab_alloc+0x6c/0x80
[  140.764784][T11379]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  140.766538][T11379]  xfrm_state_alloc+0x24/0x2f0
[  140.768090][T11379]  __find_acq_core+0x8a7/0x1c00
[  140.769686][T11379]  xfrm_find_acq+0x78/0xa0
[  140.771143][T11379]  xfrm_alloc_userspi+0x6b3/0xc90
[  140.772781][T11379]  xfrm_user_rcv_msg+0x7a3/0xab0
[  140.774346][T11379]  netlink_rcv_skb+0x208/0x470
[  140.775909][T11379]  xfrm_netlink_rcv+0x79/0x90
[  140.777422][T11379]  netlink_unicast+0x82f/0x9e0
[  140.778955][T11379]  netlink_sendmsg+0x805/0xb30
[  140.780500][T11379]  __sock_sendmsg+0x21c/0x270
[  140.782041][T11379]  ____sys_sendmsg+0x505/0x830
[  140.783672][T11379]  ___sys_sendmsg+0x21f/0x2a0
[  140.785254][T11379]  __x64_sys_sendmsg+0x19b/0x260
[  140.786888][T11379]  do_syscall_64+0xfa/0x3b0
[  140.788402][T11379]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.790323][T11379] 
[  140.791129][T11379] Freed by task 47:
[  140.792435][T11379]  kasan_save_track+0x3e/0x80
[  140.794046][T11379]  kasan_save_free_info+0x46/0x50
[  140.795759][T11379]  __kasan_slab_free+0x62/0x70
[  140.797385][T11379]  kmem_cache_free+0x18f/0x400
[  140.799029][T11379]  xfrm_state_gc_task+0x518/0x6a0
[  140.800667][T11379]  process_scheduled_works+0xae1/0x17b0
[  140.802465][T11379]  worker_thread+0x8a0/0xda0
[  140.804043][T11379]  kthread+0x711/0x8a0
[  140.805377][T11379]  ret_from_fork+0x3fc/0x770
[  140.806885][T11379]  ret_from_fork_asm+0x1a/0x30
[  140.808417][T11379] 
[  140.809286][T11379] The buggy address belongs to the object at ffff888123a7c000
[  140.809286][T11379]  which belongs to the cache xfrm_state of size 928
[  140.813687][T11379] The buggy address is located 816 bytes inside of
[  140.813687][T11379]  freed 928-byte region [ffff888123a7c000, ffff888123a7c3a0)
[  140.818065][T11379] 
[  140.818861][T11379] The buggy address belongs to the physical page:
[  140.820912][T11379] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888123a7c480 pfn:0x123a7c
[  140.824144][T11379] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  140.826811][T11379] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  140.829260][T11379] page_type: f5(slab)
[  140.830563][T11379] raw: 057ff00000000040 ffff88801af868c0 dead000000000122 0000000000000000
[  140.833305][T11379] raw: ffff888123a7c480 00000000800e000a 00000000f5000000 0000000000000000
[  140.836029][T11379] head: 057ff00000000040 ffff88801af868c0 dead000000000122 0000000000000000
[  140.838881][T11379] head: ffff888123a7c480 00000000800e000a 00000000f5000000 0000000000000000
[  140.841621][T11379] head: 057ff00000000002 ffffea00048e9f01 00000000ffffffff 00000000ffffffff
[  140.844362][T11379] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  140.847214][T11379] page dumped because: kasan: bad access detected
[  140.849368][T11379] page_owner tracks the page as allocated
[  140.851290][T11379] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6656, tgid 6655 (syz.1.282), ts 68946285133, free_ts 68266892655
[  140.857402][T11379]  post_alloc_hook+0x240/0x2a0
[  140.859003][T11379]  get_page_from_freelist+0x21e4/0x22c0
[  140.860810][T11379]  __alloc_frozen_pages_noprof+0x181/0x370
[  140.862690][T11379]  alloc_pages_mpol+0x232/0x4a0
[  140.864303][T11379]  allocate_slab+0x8a/0x3b0
[  140.865812][T11379]  ___slab_alloc+0xbfc/0x1480
[  140.867320][T11379]  kmem_cache_alloc_noprof+0x283/0x3c0
[  140.869054][T11379]  xfrm_state_alloc+0x24/0x2f0
[  140.870603][T11379]  __find_acq_core+0x8a7/0x1c00
[  140.872180][T11379]  xfrm_find_acq+0x78/0xa0
[  140.873664][T11379]  xfrm_alloc_userspi+0x6b3/0xc90
[  140.875286][T11379]  xfrm_user_rcv_msg+0x7a3/0xab0
[  140.876913][T11379]  netlink_rcv_skb+0x208/0x470
[  140.878493][T11379]  xfrm_netlink_rcv+0x79/0x90
[  140.880031][T11379]  netlink_unicast+0x82f/0x9e0
[  140.881588][T11379]  netlink_sendmsg+0x805/0xb30
[  140.883148][T11379] page last free pid 6642 tgid 6642 stack trace:
[  140.885215][T11379]  __free_frozen_pages+0xc71/0xe70
[  140.886966][T11379]  __slab_free+0x326/0x400
[  140.888410][T11379]  qlist_free_all+0x97/0x140
[  140.889904][T11379]  kasan_quarantine_reduce+0x148/0x160
[  140.891684][T11379]  __kasan_slab_alloc+0x22/0x80
[  140.893499][T11379]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  140.895309][T11379]  getname_flags+0xb8/0x540
[  140.896856][T11379]  __x64_sys_symlinkat+0x7a/0xb0
[  140.898530][T11379]  do_syscall_64+0xfa/0x3b0
[  140.900081][T11379]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.901994][T11379] 
[  140.902782][T11379] Memory state around the buggy address:
[  140.904563][T11379]  ffff888123a7c200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  140.907221][T11379]  ffff888123a7c280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  140.909796][T11379] >ffff888123a7c300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  140.912356][T11379]                                      ^
[  140.914161][T11379]  ffff888123a7c380: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  140.916712][T11379]  ffff888123a7c400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  140.919335][T11379] ==================================================================
[  140.922274][T11379] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  140.924673][T11379] CPU: 1 UID: 0 PID: 11379 Comm: syz.1.2015 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba-dirty #0 PREEMPT(full) 
[  140.928494][T11379] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  140.931708][T11379] Call Trace:
[  140.932813][T11379]  <TASK>
[  140.933796][T11379]  dump_stack_lvl+0x99/0x250
[  140.935322][T11379]  ? __asan_memcpy+0x40/0x70
[  140.936854][T11379]  ? __pfx_dump_stack_lvl+0x10/0x10
[  140.938553][T11379]  ? __pfx__printk+0x10/0x10
[  140.940102][T11379]  panic+0x2db/0x790
[  140.941406][T11379]  ? __pfx_panic+0x10/0x10
[  140.942867][T11379]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  140.944795][T11379]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  140.946811][T11379]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  140.948917][T11379]  ? print_memory_metadata+0x314/0x400
[  140.950712][T11379]  ? xfrm_state_find+0x44cd/0x5400
[  140.952409][T11379]  check_panic_on_warn+0x89/0xb0
[  140.954042][T11379]  ? xfrm_state_find+0x44cd/0x5400
[  140.955749][T11379]  end_report+0x78/0x160
[  140.957186][T11379]  kasan_report+0x129/0x150
[  140.958716][T11379]  ? xfrm_state_find+0x44cd/0x5400
[  140.960343][T11379]  xfrm_state_find+0x44cd/0x5400
[  140.962058][T11379]  ? __pfx___find_rr_leaf+0x10/0x10
[  140.963814][T11379]  ? __pfx_fib6_node_lookup+0x10/0x10
[  140.965957][T11379]  ? xfrm_state_find+0x1da/0x5400
[  140.968123][T11379]  ? __pfx_xfrm_state_find+0x10/0x10
[  140.970422][T11379]  ? __rt6_find_exception_rcu+0x127/0x4c0
[  140.972806][T11379]  ? __pfx___rt6_find_exception_rcu+0x10/0x10
[  140.975094][T11379]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  140.977659][T11379]  ? ip6_pol_route+0x162/0x1180
[  140.979621][T11379]  ? __pfx_ip6_pol_route+0x10/0x10
[  140.981691][T11379]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  140.984457][T11379]  ? __lock_acquire+0xab9/0xd20
[  140.986541][T11379]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  140.988775][T11379]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  140.990976][T11379]  ? xfrm_expand_policies+0x41f/0x6a0
[  140.992974][T11379]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  140.994837][T11379]  ? __pfx_ip6_dst_lookup_tail+0x10/0x10
[  140.996820][T11379]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  140.999231][T11379]  ? txopt_get+0x335/0x3f0
[  141.001166][T11379]  ? __pfx_txopt_get+0x10/0x10
[  141.003199][T11379]  ? aa_label_sk_perm+0x413/0x560
[  141.005303][T11379]  xfrm_lookup_route+0x3c/0x1c0
[  141.007386][T11379]  rawv6_sendmsg+0xdab/0x1820
[  141.009377][T11379]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  141.011308][T11379]  ? finish_task_switch+0x266/0x950
[  141.013112][T11379]  ? __schedule+0x1755/0x4d30
[  141.015062][T11379]  ? __pfx_aa_sk_perm+0x10/0x10
[  141.017109][T11379]  ? sock_rps_record_flow+0x19/0x410
[  141.019368][T11379]  ? inet_sendmsg+0x2f4/0x370
[  141.021439][T11379]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  141.023682][T11379]  __sock_sendmsg+0x19c/0x270
[  141.025536][T11379]  ____sys_sendmsg+0x52d/0x830
[  141.027332][T11379]  ? __pfx_____sys_sendmsg+0x10/0x10
[  141.029302][T11379]  ? import_iovec+0x74/0xa0
[  141.031314][T11379]  ___sys_sendmsg+0x21f/0x2a0
[  141.033357][T11379]  ? __pfx____sys_sendmsg+0x10/0x10
[  141.035544][T11379]  ? __fget_files+0x2a/0x420
[  141.037494][T11379]  ? __fget_files+0x3a0/0x420
[  141.039516][T11379]  __sys_sendmmsg+0x227/0x430
[  141.041537][T11379]  ? __pfx___sys_sendmmsg+0x10/0x10
[  141.043598][T11379]  ? do_futex+0x395/0x420
[  141.045490][T11379]  ? rcu_is_watching+0x15/0xb0
[  141.047648][T11379]  __x64_sys_sendmmsg+0xa0/0xc0
[  141.049744][T11379]  do_syscall_64+0xfa/0x3b0
[  141.051736][T11379]  ? lockdep_hardirqs_on+0x9c/0x150
[  141.053916][T11379]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.056479][T11379]  ? exc_page_fault+0x9f/0xf0
[  141.058508][T11379]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.060989][T11379] RIP: 0033:0x7f0998d8eb69
[  141.062893][T11379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  141.070872][T11379] RSP: 002b:00007f0999b7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  141.073916][T11379] RAX: ffffffffffffffda RBX: 00007f0998fb5fa0 RCX: 00007f0998d8eb69
[  141.076735][T11379] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000008
[  141.079843][T11379] RBP: 00007f0998e11df1 R08: 0000000000000000 R09: 0000000000000000
[  141.082829][T11379] R10: 000000000000ffe0 R11: 0000000000000246 R12: 0000000000000000
[  141.085995][T11379] R13: 0000000000000000 R14: 00007f0998fb5fa0 R15: 00007fff06f78e08
[  141.088920][T11379]  </TASK>
[  141.090686][T11379] Kernel Offset: disabled
[  141.092104][T11379] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:26:24  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b4451b RBX=1ffff11026cc7f59 RCX=ffff888108705640 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900065af4c0 RSP=ffffc900065af340
R8 =ffffffff8fa07af7 R9 =1ffffffff1f40f5e R10=dffffc0000000000 R11=fffffbfff1f40f5f
R12=ffff88813663fac8 R13=dffffc0000000000 R14=ffff88804b03b180 R15=0000000000000001
RIP=ffffffff81b44503 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0998d25d70 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fc140d87498 00007fc140d87470 XMM03=00007fc140d874a8 00007fc140d874a0
XMM04=00007fc1418ed100 00007fc140d87460 XMM05=00007fc140d87478 00007fc140d874c0
XMM06=00007fc140d874b8 00007fc140d874b0 XMM07=00007fc140d874a8 00007fc140d874a0
XMM08=0000000000000000 00007fc140c12eab XMM09=0000000000000000 00007fc140c12f89
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001100 RDI=0000000000001101 RBP=00000000000003f8 RSP=ffffc900035ae810
R8 =ffff88801f5f0237 R9 =1ffff11003ebe046 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=ffffffff99a9591f R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0999b7e6c0 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2d73d2 CR3=0000000025136000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f0998f87498 00007f0998f87470 XMM03=00007f0998f874a8 00007f0998f874a0
XMM04=00007f0999aed100 00007f0998f87460 XMM05=00007f0998f87478 00007f0998f874c0
XMM06=00007f0998f874b8 00007f0998f874b0 XMM07=00007f0998f874a8 00007f0998f874a0
XMM08=0000000000000000 00007f0998e12eab XMM09=0000000000000000 00007f0998e12f89
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
