last executing test programs:

1.125010605s ago: executing program 0 (id=1765):
pipe(&(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000140)="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"/297, 0x3accf8d5)
close(r0)
close(0x4)

996.620928ms ago: executing program 0 (id=1770):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r1 = socket(0x11, 0x4, 0x9)
bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r1}, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0x8, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES16=r1], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3, 0x10000000}, 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000480)={r0, r0, 0x0, 0xe8, &(0x7f0000001500)="96e4a967062324a5c6a3b718f1b99882778892166f94c00ee248e9c79e38488b8d94b6edbb5ce27cb07730cb87c59f6e7d14b7a03ef9f1a356f01d7946b07abefa28140d46d39c7f56c452a19fee24accf23861621d211b7a2a769a7bc8c2ece0881ea8a7310d26b879fa15c3df7f2e339a15c971ee914f4788c9052b0afdce2972ec6a19f2f88f2f31960eed3bda6e9b78b25244dea9fefa779416b3e62ee58416a31d17f9abda1d323367683d974ba1ec35df355aa2dfe6a4c8e4427e617495ec2f458ae2c94e8e91f31b065792d0bb74d0356c2e078292ec23b0ddf02dcd4549ed5204f595761", 0x10, 0xa, 0xd1, 0x8, 0x5cb, 0x3, 0x7, 'syz1\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r4 = socket$xdp(0x2c, 0x3, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x2329000, 0x800}, 0x20)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r7=>0x0})
bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r6, 0x1, 0x6, 0x0, 0x0)
sendmsg$inet(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000200)="1479c369caf28b0c600d5d976b000089bdbf4075277f938a9d8616c6bf", 0x1d}], 0x2}, 0x4048081)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @dev={0xac, 0x14, 0x14, 0x2c}}, @info_reply={0xd, 0x0, 0x0, 0xfffe}}}}}, 0x0)
bind$can_j1939(r6, &(0x7f0000000140)={0x1d, r7, 0x2, {0x2, 0x0, 0x4}, 0x2}, 0x18)
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r7, {0xfffd, 0xffeb}, {0xa, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x56, 0x0, 0x1}, 0x28)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-aesni)\x00'}, 0x58)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
recvmmsg(r9, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)

676.441457ms ago: executing program 2 (id=1783):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})

676.079087ms ago: executing program 2 (id=1784):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_deladdr={0x2c, 0x15, 0x1, 0x70bd27, 0x25dfdbec, {0x2, 0x18, 0x4, 0xff, r2}, [@IFA_LABEL={0x14, 0x3, 'lo\x00'}]}, 0x2c}}, 0x880)

606.873725ms ago: executing program 2 (id=1785):
r0 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000700)=ANY=[@ANYBLOB="03000000000000000a004e230100000cff010000000000000000000000000001f8ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a0080010000000200000000000000000000000000000001"], 0x110)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108)

606.665517ms ago: executing program 2 (id=1786):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_DESC={0x4}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}]}, @NFT_MSG_DELCHAIN={0xac, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'erspan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_vlan\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x48337fa3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x59a9e12d}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xb6ae12d}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x101, 0x0, 0x0, {0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWSET={0x1e0, 0x9, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_EXPRESSIONS={0x1a8, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x50, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x9}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0xf}]}}}, {0x68, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x5c, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CMP_DATA={0x40, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x62}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}}}, {0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x3c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x12}]}}}, {0x14, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}, {0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x2c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x23}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x1e}]}}}]}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x6}}}, 0x370}, 0x1, 0x0, 0x0, 0x800}, 0xc0)

522.820562ms ago: executing program 2 (id=1787):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b0000000000000000030500000000000008000a"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0)

460.366885ms ago: executing program 2 (id=1789):
socket$l2tp(0x2, 0x2, 0x73)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e20, @loopback}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
writev(r0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff})
setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0)
setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "ce5190117d83ce0e", "c0c675c754ef0488c3584517bedd0b73", "cbd8797a", "18233d567df6ba22"}, 0x28)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x8, 0x3f9a, 0x0, 0x8000000010001, 0x3}, 0x0, 0x0)
close(r2)

397.311671ms ago: executing program 1 (id=1791):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4)
shutdown(r0, 0x1)
setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4)
recvmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/18, 0x12}, 0x3}], 0x1, 0x2300, 0x0)

397.080103ms ago: executing program 1 (id=1792):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x2000000, 0x20, 0x0, &(0x7f0000000080)="5cdd3086ddff006633c9bbac88a8861c00dffd0013dd00000000000000008100", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

297.296041ms ago: executing program 1 (id=1793):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_ifreq(r0, 0x8994, &(0x7f0000000000)={'bond0\x00', @ifru_mtu=0x140000})

297.024162ms ago: executing program 1 (id=1794):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x2, 0x3}, {0x3, 0x0, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014)

128.913387ms ago: executing program 1 (id=1795):
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[{0x10, 0x29, 0x39}], 0x10}}], 0x1, 0x4000000)

114.798944ms ago: executing program 0 (id=1796):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000340)={0x2, 0x4e21, @private=0xa010100}, 0x6, &(0x7f0000000680)=[{&(0x7f00000005c0)="6e08ca8f06c693e9beebc6c69b227d61b44d868e37d11ad3010317a311b33339a7841df02549eba33462f605fbc9b7", 0x2f}, {&(0x7f0000000600)="a39de010338530", 0x7}, {&(0x7f0000000740)="7aeefbeda1da7f18bc167559a82617e690181a6d732dc20b8c82eaa306dee94454b15ce15b244222a4668eb73ec90f63b69de9b22272edf0504d6bdb20365830a4a55ac5f9d1272064c0d541d77464eed967565bb6f6be8c5129aa4f5fef7df3fecd54d168f2deb0bf8aeb7e2cb1c76b6dd07943f23bf9abca9d18c4d2a4ad851af00b6da9a68d2fb9629bc033f56b90", 0x90}, {&(0x7f00000008c0)="5e2b5f580d8b8dd6c96e35d71e29c4173c1ad4987cdd160ea4fb318fc77c393a2ebd1ec2ec676c646e49239061e2514bdb60f6aac10c4216a758238928", 0x36}], 0x4, &(0x7f0000000840)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x435}}], 0x30}, 0xc000)

113.919843ms ago: executing program 1 (id=1797):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c)
sendto$inet6(r0, &(0x7f00000000c0)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x8, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x8, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xc60, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x200}, 0x1c)
recvmmsg(r0, &(0x7f0000005900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=""/58, 0x3a}, 0x80}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40010003, 0x0)

56.258939ms ago: executing program 0 (id=1798):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911028000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x4f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)

56.060502ms ago: executing program 0 (id=1799):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, 0x0, 0x0)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x60}}, 0x20000000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2033}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x30b, 0x5, 0x8, 0x7, 0x2e, @broadcast}, 0x10)

0s ago: executing program 0 (id=1800):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000180)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0xff72}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:12810' (ED25519) to the list of known hosts.
syzkaller login: [   40.684714][ T5747] cgroup: Unknown subsys name 'net'
[   40.768307][ T5747] cgroup: Unknown subsys name 'cpuset'
[   40.780793][ T5747] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.110511][ T5747] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   49.509193][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   49.596201][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   49.739566][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.741942][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.744298][ T5846] bridge_slave_0: entered allmulticast mode
[   49.756245][ T5846] bridge_slave_0: entered promiscuous mode
[   49.767128][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.769482][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.771848][ T5846] bridge_slave_1: entered allmulticast mode
[   49.774549][ T5846] bridge_slave_1: entered promiscuous mode
[   49.876429][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   49.888292][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   49.949372][ T5846] team0: Port device team_slave_0 added
[   49.954217][ T5846] team0: Port device team_slave_1 added
[   49.998331][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   50.000666][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.021488][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   50.050816][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   50.053312][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   50.062504][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   50.122647][ T5846] hsr_slave_0: entered promiscuous mode
[   50.131229][ T5846] hsr_slave_1: entered promiscuous mode
[   50.347517][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   50.352865][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   50.358309][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   50.362426][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   50.380880][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.383295][ T5846] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.386079][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.388441][ T5846] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.418569][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   50.427833][ T1087] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.430977][ T1087] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.441104][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   50.448120][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.450512][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   50.456391][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.458763][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   50.546005][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   50.569085][ T5846] veth0_vlan: entered promiscuous mode
[   50.574410][ T5846] veth1_vlan: entered promiscuous mode
[   50.589747][ T5846] veth0_macvtap: entered promiscuous mode
[   50.593555][ T5846] veth1_macvtap: entered promiscuous mode
[   50.602370][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   50.609523][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   50.617336][ T5845] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.621896][ T5845] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.625104][ T5845] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.628755][ T5845] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.386643][ T5211] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   51.392157][ T5211] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   51.394965][ T5211] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   51.398118][ T5211] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   51.400976][ T5211] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   51.507799][ T5211] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   51.510560][ T5211] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   51.513221][ T5211] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   51.516812][ T5211] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   51.519656][ T5211] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   51.523825][ T5895] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   51.527705][ T5895] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   51.530534][ T5895] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   51.536106][ T5895] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   51.538595][ T5895] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   51.550391][ T5894] chnl_net:caif_netlink_parms(): no params data found
[   51.570203][ T5845] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.643274][ T5845] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.657581][ T5894] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.660039][ T5894] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.662392][ T5894] bridge_slave_0: entered allmulticast mode
[   51.665158][ T5894] bridge_slave_0: entered promiscuous mode
[   51.668946][ T5894] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.671320][ T5894] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.673703][ T5894] bridge_slave_1: entered allmulticast mode
[   51.676525][ T5894] bridge_slave_1: entered promiscuous mode
[   51.695918][ T5845] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.724266][ T5894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.732599][ T5894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   51.763721][ T5894] team0: Port device team_slave_0 added
[   51.771919][ T5894] team0: Port device team_slave_1 added
[   51.791234][ T5894] batman_adv: batadv0: Adding interface: batadv_slave_0
[   51.793475][ T5894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   51.801923][ T5894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   51.817865][ T5894] batman_adv: batadv0: Adding interface: batadv_slave_1
[   51.820309][ T5894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   51.829101][ T5894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   51.901202][ T5900] chnl_net:caif_netlink_parms(): no params data found
[   51.909633][ T5894] hsr_slave_0: entered promiscuous mode
[   51.911870][ T5894] hsr_slave_1: entered promiscuous mode
[   51.914371][ T5894] debugfs: 'hsr0' already exists in 'hsr'
[   51.916494][ T5894] Cannot create hsr debugfs directory
[   51.993026][ T5899] chnl_net:caif_netlink_parms(): no params data found
[   52.022645][ T5900] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.024992][ T5900] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.027427][ T5900] bridge_slave_0: entered allmulticast mode
[   52.030074][ T5900] bridge_slave_0: entered promiscuous mode
[   52.046699][ T5900] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.048966][ T5900] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.051229][ T5900] bridge_slave_1: entered allmulticast mode
[   52.053942][ T5900] bridge_slave_1: entered promiscuous mode
[   52.108799][ T5900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.123780][ T5900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.181849][ T5900] team0: Port device team_slave_0 added
[   52.185765][ T5900] team0: Port device team_slave_1 added
[   52.187769][ T5899] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.190045][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.192375][ T5899] bridge_slave_0: entered allmulticast mode
[   52.195002][ T5899] bridge_slave_0: entered promiscuous mode
[   52.217694][ T5900] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.219897][ T5900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.230193][ T5900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.233965][ T5899] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.236931][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.239305][ T5899] bridge_slave_1: entered allmulticast mode
[   52.242624][ T5899] bridge_slave_1: entered promiscuous mode
[   52.252628][ T5900] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.255197][ T5900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.264647][ T5900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.308739][ T5899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.314700][ T5900] hsr_slave_0: entered promiscuous mode
[   52.317473][ T5900] hsr_slave_1: entered promiscuous mode
[   52.319763][ T5900] debugfs: 'hsr0' already exists in 'hsr'
[   52.321641][ T5900] Cannot create hsr debugfs directory
[   52.324835][ T5899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.352224][ T5894] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   52.372261][ T5894] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   52.378821][ T5894] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   52.385022][ T5899] team0: Port device team_slave_0 added
[   52.401790][ T5894] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   52.407646][ T5899] team0: Port device team_slave_1 added
[   52.450979][ T5899] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.453304][ T5899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.462276][ T5899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.466894][ T5899] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.469101][ T5899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.477291][ T5899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.534894][ T5899] hsr_slave_0: entered promiscuous mode
[   52.537626][ T5899] hsr_slave_1: entered promiscuous mode
[   52.539765][ T5899] debugfs: 'hsr0' already exists in 'hsr'
[   52.541687][ T5899] Cannot create hsr debugfs directory
[   52.544639][ T5894] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.547364][ T5894] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.550039][ T5894] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.552584][ T5894] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.626323][ T1087] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.629051][ T1087] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.660989][ T5894] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.670374][ T5894] 8021q: adding VLAN 0 to HW filter on device team0
[   52.678095][ T3561] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.680733][ T3561] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.686794][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.689081][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.703873][ T5845] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.803042][ T5894] 8021q: adding VLAN 0 to HW filter on device batadv0
[   52.828982][ T5894] veth0_vlan: entered promiscuous mode
[   52.834131][ T5894] veth1_vlan: entered promiscuous mode
[   52.850600][ T5894] veth0_macvtap: entered promiscuous mode
[   52.854422][ T5894] veth1_macvtap: entered promiscuous mode
[   52.864225][ T5894] batman_adv: batadv0: Interface activated: batadv_slave_0
[   52.870551][ T5894] batman_adv: batadv0: Interface activated: batadv_slave_1
[   52.878470][ T5922] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   52.881949][ T5871] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   52.885991][ T5871] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.891208][ T5871] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   52.944163][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.947067][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   52.968760][ T3561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   52.971585][ T3561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   53.192786][ T5947] netlink: 20 bytes leftover after parsing attributes in process `syz.2.31'.
[   53.305930][ T5951] warning: `syz.2.33' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   53.370324][ T5955] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   53.486668][   T54] Bluetooth: hci0: command tx timeout
[   53.550920][ T5965] syz.2.40 uses obsolete (PF_INET,SOCK_PACKET)
[   53.565958][ T5905] Bluetooth: hci2: command tx timeout
[   53.567894][   T54] Bluetooth: hci1: command tx timeout
[   54.362320][ T5845] bridge_slave_1: left allmulticast mode
[   54.366313][ T5845] bridge_slave_1: left promiscuous mode
[   54.369226][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.378070][ T5845] bridge_slave_0: left allmulticast mode
[   54.380549][ T5845] bridge_slave_0: left promiscuous mode
[   54.382968][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.589746][ T5845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   54.602988][ T5845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   54.612815][ T5845] bond0 (unregistering): Released all slaves
[   54.733199][ T5845] hsr_slave_0: left promiscuous mode
[   54.743662][ T5845] hsr_slave_1: left promiscuous mode
[   54.756341][ T5845] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   54.758878][ T5845] batman_adv: batadv0: Removing interface: batadv_slave_0
[   54.763173][ T5845] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   54.767898][ T5845] batman_adv: batadv0: Removing interface: batadv_slave_1
[   54.782239][ T5845] veth1_macvtap: left promiscuous mode
[   54.784321][ T5845] veth0_macvtap: left promiscuous mode
[   54.786973][ T5845] veth1_vlan: left promiscuous mode
[   54.789014][ T5845] veth0_vlan: left promiscuous mode
[   55.012436][ T5845] team0 (unregistering): Port device team_slave_1 removed
[   55.030337][ T5845] team0 (unregistering): Port device team_slave_0 removed
[   55.233966][ T5993] netlink: 'syz.2.47': attribute type 2 has an invalid length.
[   55.239779][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.47'.
[   55.368091][ T5899] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.382575][ T5899] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.397345][ T5899] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.408845][ T5899] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.517284][ T6018] netlink: 40 bytes leftover after parsing attributes in process `syz.2.53'.
[   55.518487][ T5900] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.538874][ T5900] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.552323][ T5900] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.562715][ T5900] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.571391][   T54] Bluetooth: hci0: command tx timeout
[   55.645793][   T54] Bluetooth: hci1: command tx timeout
[   55.647682][   T54] Bluetooth: hci2: command tx timeout
[   55.649283][ T5899] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.678800][ T5899] 8021q: adding VLAN 0 to HW filter on device team0
[   55.717450][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.719878][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.723873][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.726346][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.752887][ T5900] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.774443][ T6037] netlink: zone id is out of range
[   55.776908][ T5900] 8021q: adding VLAN 0 to HW filter on device team0
[   55.781797][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.784321][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.793441][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.796068][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.810689][ T6037] netlink: zone id is out of range
[   55.812523][ T6037] netlink: zone id is out of range
[   55.814380][ T6037] netlink: zone id is out of range
[   55.823926][ T6037] netlink: zone id is out of range
[   55.844667][ T6037] netlink: zone id is out of range
[   55.851032][ T6037] netlink: zone id is out of range
[   55.852883][ T6037] netlink: zone id is out of range
[   55.857672][ T6037] netlink: zone id is out of range
[   55.859969][ T6037] netlink: zone id is out of range
[   55.881085][ T5899] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.928254][ T5899] veth0_vlan: entered promiscuous mode
[   55.946965][ T5899] veth1_vlan: entered promiscuous mode
[   55.971509][ T5900] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.019400][ T5899] veth0_macvtap: entered promiscuous mode
[   56.033671][ T5899] veth1_macvtap: entered promiscuous mode
[   56.044971][ T5899] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.055183][ T5899] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.074645][ T5922] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.079273][ T5922] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.082079][ T5922] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.084918][ T5922] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.114512][ T5900] veth0_vlan: entered promiscuous mode
[   56.165268][ T5900] veth1_vlan: entered promiscuous mode
[   56.180693][ T5900] veth0_macvtap: entered promiscuous mode
[   56.181722][ T2281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.184883][ T5900] veth1_macvtap: entered promiscuous mode
[   56.185224][ T2281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.206666][ T2281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.215982][ T2281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.220136][ T5900] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.233326][ T5900] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.246790][ T5922] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.254212][ T5922] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.288449][ T5922] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.296282][ T5922] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.343844][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.349769][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.353453][ T6066] netlink: 24 bytes leftover after parsing attributes in process `syz.0.64'.
[   56.380486][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.386052][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.656656][ T6074] block nbd0: server does not support multiple connections per device.
[   56.660922][ T6074] block nbd0: shutting down sockets
[   56.737988][ T6087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.72'.
[   56.741808][ T6087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.72'.
[   56.886041][ T6100] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.894327][ T6102] netlink: 16 bytes leftover after parsing attributes in process `syz.0.79'.
[   56.901065][ T6102] netlink: 64 bytes leftover after parsing attributes in process `syz.0.79'.
[   56.904805][ T6102] tipc: Invalid UDP bearer configuration
[   56.904834][ T6102] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[   57.051026][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'.
[   57.082318][ T6117] netlink: 'syz.2.86': attribute type 39 has an invalid length.
[   57.189224][ T6132] netlink: 'syz.1.90': attribute type 1 has an invalid length.
[   57.291479][ T6143] netlink: 336 bytes leftover after parsing attributes in process `syz.0.95'.
[   57.463493][ T6163] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.502353][ T6169] netlink: 'syz.2.105': attribute type 5 has an invalid length.
[   57.506965][ T6168] tipc: Started in network mode
[   57.508736][ T6168] tipc: Node identity 026d92cb0873, cluster identity 4711
[   57.511203][ T6168] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   57.517514][ T6169] geneve2: entered promiscuous mode
[   57.519410][ T6169] geneve2: entered allmulticast mode
[   57.523049][ T6168] syzkaller0: entered promiscuous mode
[   57.525020][ T6168] syzkaller0: entered allmulticast mode
[   57.528497][   T13] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   57.531866][   T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   57.535263][   T13] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[   57.547761][ T6163] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.551094][ T6163] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   57.562723][ T6168] tipc: Resetting bearer <eth:syzkaller0>
[   57.566855][ T6167] tipc: Resetting bearer <eth:syzkaller0>
[   57.572254][ T6167] tipc: Disabling bearer <eth:syzkaller0>
[   57.603140][ T6163] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.606747][ T6163] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   57.656550][   T54] Bluetooth: hci0: command tx timeout
[   57.710506][ T6163] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.715007][ T6163] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   57.735935][   T54] Bluetooth: hci2: command tx timeout
[   57.738455][ T5906] Bluetooth: hci1: command tx timeout
[   57.779492][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   57.783240][   T13] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   57.803355][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   57.808103][   T13] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   57.811693][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   57.814507][   T13] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   57.826628][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   57.829312][   T13] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   57.906209][ T6175] Zero length message leads to an empty skb
[   57.991304][ T6183] tipc: Started in network mode
[   57.993015][ T6183] tipc: Node identity e0000001, cluster identity 4711
[   57.995284][ T6183] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   58.650409][ T6212] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96
[   58.693622][ T6216] Bluetooth: MGMT ver 1.23
[   58.769589][ T6222] Illegal XDP return value 4294967282 on prog  (id 21) dev N/A, expect packet loss!
[   58.838939][ T6224] __nla_validate_parse: 3 callbacks suppressed
[   58.838950][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.131'.
[   59.014526][ T6240] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.139'.
[   59.728096][   T54] Bluetooth: hci0: command tx timeout
[   59.805870][   T54] Bluetooth: hci1: command tx timeout
[   59.807741][   T54] Bluetooth: hci2: command 0x0419 tx timeout
[   60.094302][ T6291] netlink: 'syz.0.159': attribute type 3 has an invalid length.
[   60.153488][ T6295] netlink: 'syz.0.161': attribute type 15 has an invalid length.
[   60.191095][ T6297] netlink: 'syz.0.162': attribute type 10 has an invalid length.
[   60.198012][ T6297] 8021q: adding VLAN 0 to HW filter on device team0
[   60.202029][ T6297] bond0: (slave team0): Enslaving as an active interface with an up link
[   60.374915][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.169'.
[   60.398386][ T6313] netlink: 52 bytes leftover after parsing attributes in process `syz.0.170'.
[   60.570800][ T6325] trusted_key: syz.0.176 sent an empty control message without MSG_MORE.
[   61.524081][ T6370] hsr0: entered promiscuous mode
[   61.525921][ T6370] hsr0: entered allmulticast mode
[   61.527755][ T6370] hsr_slave_0: entered allmulticast mode
[   61.529722][ T6370] hsr_slave_1: entered allmulticast mode
[   61.554880][ T6372] netlink: 40 bytes leftover after parsing attributes in process `syz.2.194'.
[   61.721056][ T6391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.202'.
[   61.728356][ T6391] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.731237][ T6391] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.776183][ T6394] netlink: 'syz.2.203': attribute type 30 has an invalid length.
[   61.794886][ T6386] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[   61.922792][ T6409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.210'.
[   62.001811][ T6413] pim6reg1: entered allmulticast mode
[   62.082901][ T6425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.218'.
[   62.086125][ T6425] netlink: 28 bytes leftover after parsing attributes in process `syz.2.218'.
[   62.088996][ T6425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.218'.
[   62.100129][ T6425] netlink: 'syz.2.218': attribute type 6 has an invalid length.
[   62.148937][ T6424] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.152081][ T6424] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.160275][ T6432] netlink: 'syz.2.221': attribute type 64 has an invalid length.
[   62.201065][ T6424] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.206808][ T6424] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.370246][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.373236][   T13] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   62.377162][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.380144][   T13] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   62.383896][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.394065][   T13] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   62.397395][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.400316][   T13] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   62.917532][ T6501] netlink: 'syz.2.249': attribute type 4 has an invalid length.
[   63.470614][    T9] IPVS: starting estimator thread 0...
[   63.559212][ T6514] IPVS: using max 79 ests per chain, 189600 per kthread
[   63.926268][ T6544] syzkaller1: entered promiscuous mode
[   63.928572][ T6544] syzkaller1: entered allmulticast mode
[   64.160546][ T6556] __nla_validate_parse: 3 callbacks suppressed
[   64.160556][ T6556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.274'.
[   64.174823][ T5922] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   64.177014][ T6556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.274'.
[   64.178064][ T5922] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   64.183813][ T5922] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   64.191605][ T5922] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   64.222649][ T6562] netlink: 16 bytes leftover after parsing attributes in process `syz.1.277'.
[   64.411670][ T6585] netlink: 'syz.1.288': attribute type 5 has an invalid length.
[   64.514967][ T6603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.297'.
[   64.663899][ T6624] netlink: 'syz.0.308': attribute type 29 has an invalid length.
[   64.668719][ T6624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.308'.
[   64.694593][ T6629] netlink: 132 bytes leftover after parsing attributes in process `syz.0.310'.
[   64.882625][ T6663] netlink: 12 bytes leftover after parsing attributes in process `syz.2.325'.
[   64.889452][ T6663] netlink: 36 bytes leftover after parsing attributes in process `syz.2.325'.
[   64.897913][ T6663] bridge0: port 3(vlan0) entered blocking state
[   64.900393][ T6663] bridge0: port 3(vlan0) entered disabled state
[   64.902756][ T6663] vlan0: entered allmulticast mode
[   64.904516][ T6663] bridge0: entered allmulticast mode
[   64.924424][ T6663] vlan0: left allmulticast mode
[   64.930144][ T6663] bridge0: left allmulticast mode
[   65.213263][ T6694] infiniband syz0: set down
[   65.214941][ T6694] infiniband syz0: added ipvlan1
[   65.254429][ T6694] RDS/IB: syz0: added
[   65.256978][ T6694] smc: adding ib device syz0 with port count 1
[   65.259168][ T6694] smc:    ib device syz0 port 1 has pnetid 
[   65.715662][ T6719] syzkaller0: entered allmulticast mode
[   66.263252][ T6750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.357'.
[   66.270529][ T6750] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.273245][ T6750] syzkaller0: entered promiscuous mode
[   66.275108][ T6750] syzkaller0: entered allmulticast mode
[   66.282047][ T6742] tipc: Resetting bearer <eth:syzkaller0>
[   66.305845][ T6742] tipc: Disabling bearer <eth:syzkaller0>
[   66.311838][ T6752] netlink: 32 bytes leftover after parsing attributes in process `syz.1.360'.
[   66.886072][ T6820] infiniband syz1: set active
[   66.888010][ T6820] infiniband syz1: added batadv_slave_1
[   66.904716][ T6820] RDS/IB: syz1: added
[   66.906633][ T6820] smc: adding ib device syz1 with port count 1
[   66.908611][ T6820] smc:    ib device syz1 port 1 has pnetid 
[   67.624043][ T6848] netlink: 'syz.2.403': attribute type 31 has an invalid length.
[   67.631278][ T6843] block nbd1: server does not support multiple connections per device.
[   67.634075][ T6843] block nbd1: shutting down sockets
[   67.921816][ T6871] netlink: 'syz.0.413': attribute type 29 has an invalid length.
[   67.925192][ T6871] netlink: 'syz.0.413': attribute type 29 has an invalid length.
[   68.227288][ T6903] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.236200][ T6903] syzkaller0: entered promiscuous mode
[   68.238972][ T6903] syzkaller0: entered allmulticast mode
[   68.253468][ T6903] tipc: Resetting bearer <eth:syzkaller0>
[   68.257866][ T6902] tipc: Resetting bearer <eth:syzkaller0>
[   68.264838][ T6902] tipc: Disabling bearer <eth:syzkaller0>
[   68.276360][ T5888] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   68.681725][ T6946] team_slave_0: entered promiscuous mode
[   68.683724][ T6946] team_slave_1: entered promiscuous mode
[   68.688699][ T6946] team_slave_0: left promiscuous mode
[   68.690576][ T6946] team_slave_1: left promiscuous mode
[   68.824866][ T6962] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ1
[   68.950541][ T6975] netlink: 'syz.2.462': attribute type 13 has an invalid length.
[   68.955233][ T6975] netlink: 'syz.2.462': attribute type 17 has an invalid length.
[   69.009679][ T6975] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.012017][ T6975] bridge0: port 2(bridge_slave_1) entered listening state
[   69.014499][ T6975] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.016858][ T6975] bridge0: port 1(bridge_slave_0) entered listening state
[   69.036954][ T6975] net_ratelimit: 4 callbacks suppressed
[   69.036958][ T6975] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   69.167791][ T5888] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   69.245587][   T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   69.312094][ T7001] netlink: 'syz.1.475': attribute type 83 has an invalid length.
[   69.767772][ T7027] block nbd1: server does not support multiple connections per device.
[   69.771033][ T7027] block nbd1: shutting down sockets
[   69.911124][ T7058] __nla_validate_parse: 8 callbacks suppressed
[   69.911134][ T7058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.501'.
[   69.946272][ T7060] netlink: 'syz.1.503': attribute type 1 has an invalid length.
[   69.949017][ T7060] netlink: 'syz.1.503': attribute type 4 has an invalid length.
[   69.952359][ T7060] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.503'.
[   70.074195][ T7076] netlink: 'syz.1.511': attribute type 2 has an invalid length.
[   70.246663][ T7097] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.521'.
[   70.286083][ T5922] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   70.289143][ T5922] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   70.358641][ T7108] netlink: 36 bytes leftover after parsing attributes in process `syz.2.523'.
[   70.361541][ T7108] netlink: 16 bytes leftover after parsing attributes in process `syz.2.523'.
[   70.365857][ T7108] netlink: 36 bytes leftover after parsing attributes in process `syz.2.523'.
[   70.370227][ T7108] netlink: 36 bytes leftover after parsing attributes in process `syz.2.523'.
[   70.467317][  T788] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   70.901082][ T7146] netlink: 'syz.2.544': attribute type 1 has an invalid length.
[   70.921672][ T7146] 8021q: adding VLAN 0 to HW filter on device bond2
[   70.938316][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.160900][ T7166] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.553'.
[   71.453112][ T7192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.566'.
[   71.588315][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.576'.
[   71.648701][ T5888] IPVS: starting estimator thread 0...
[   71.745515][ T7222] IPVS: using max 80 ests per chain, 192000 per kthread
[   73.350136][ T7308] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   73.367826][  T789] cfg80211: failed to load regulatory.db
[   73.820237][ T5922] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[   74.055559][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   74.911805][ T7387] validate_nla: 4 callbacks suppressed
[   74.911816][ T7387] netlink: 'syz.0.650': attribute type 7 has an invalid length.
[   74.919233][ T7387] __nla_validate_parse: 4 callbacks suppressed
[   74.919605][ T7387] netlink: 28 bytes leftover after parsing attributes in process `syz.0.650'.
[   74.932014][ T7387] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   75.244791][ T7415] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.248456][ T7414] tipc: Resetting bearer <eth:syzkaller0>
[   75.307151][ T7421] netlink: 16 bytes leftover after parsing attributes in process `syz.2.664'.
[   76.059071][ T7414] tipc: Disabling bearer <eth:syzkaller0>
[   76.602996][ T7461] netlink: 'syz.2.679': attribute type 23 has an invalid length.
[   76.845934][ T5905] Bluetooth: hci2: command 0x0419 tx timeout
[   77.039201][ T7468] netlink: 24 bytes leftover after parsing attributes in process `syz.0.681'.
[   77.121018][ T7474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.685'.
[   77.176630][ T7480] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   77.494386][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.705'.
[   78.318591][ T7567] netlink: 28 bytes leftover after parsing attributes in process `syz.1.727'.
[   78.383799][ T7573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.730'.
[   78.537869][ T7585] syz_tun: entered allmulticast mode
[   78.544144][ T7585] syz_tun: left allmulticast mode
[   78.575557][ T7588] netlink: 16 bytes leftover after parsing attributes in process `syz.1.737'.
[   78.582832][ T7588] netlink: 120 bytes leftover after parsing attributes in process `syz.1.737'.
[   78.596547][ T7588] netlink: 16 bytes leftover after parsing attributes in process `syz.1.737'.
[   78.925602][ T5905] Bluetooth: hci2: command 0x0419 tx timeout
[   79.010485][ T7619] 8021q: adding VLAN 0 to HW filter on device bond3
[   79.028122][ T7619] bond_slave_0: entered promiscuous mode
[   79.030210][ T7619] bond_slave_1: entered promiscuous mode
[   79.034093][ T7619] 8021q: adding VLAN 0 to HW filter on device macvlan0
[   79.039983][ T7619] bond3: (slave macvlan0): Enslaving as a backup interface with an up link
[   79.092315][ T7619] bridge_slave_0: left allmulticast mode
[   79.094336][ T7619] bridge_slave_0: left promiscuous mode
[   79.097635][ T7619] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.102099][ T7619] bridge_slave_1: left allmulticast mode
[   79.104077][ T7619] bridge_slave_1: left promiscuous mode
[   79.106892][ T7619] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.112177][ T7619] bond0: (slave bond_slave_0): Releasing backup interface
[   79.115453][ T7619] bond_slave_0: left promiscuous mode
[   79.122115][ T7619] bond0: (slave bond_slave_1): Releasing backup interface
[   79.126987][ T7619] bond_slave_1: left promiscuous mode
[   79.133308][ T7619] team0: Port device team_slave_0 removed
[   79.140790][ T7619] team0: Port device team_slave_1 removed
[   79.143321][ T7619] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.149106][ T7619] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.152889][ T7619] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.155297][ T7619] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.163165][ T7619] bond3: (slave macvlan0): Removing an active aggregator
[   79.168155][ T7619] bond3: (slave macvlan0): Releasing backup interface
[   79.243971][ T7625] netlink: 'syz.2.751': attribute type 3 has an invalid length.
[   79.470204][ T7645] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   79.476194][ T7645] macvtap1: entered allmulticast mode
[   79.480437][ T7645] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   79.576905][ T7663] netlink: 'syz.1.770': attribute type 12 has an invalid length.
[   79.587490][ T7663] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   79.590075][ T7663] IPv6: NLM_F_CREATE should be set when creating new route
[   79.592512][ T7663] IPv6: NLM_F_CREATE should be set when creating new route
[   79.795435][ T7684] bond0: (slave team0): Releasing backup interface
[   79.798659][ T7684] bridge_slave_0: left allmulticast mode
[   79.800527][ T7684] bridge_slave_0: left promiscuous mode
[   79.802475][ T7684] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.820740][ T7684] bridge_slave_1: left allmulticast mode
[   79.822678][ T7684] bridge_slave_1: left promiscuous mode
[   79.824598][ T7684] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.829628][ T7684] bond0: (slave bond_slave_0): Releasing backup interface
[   79.834827][ T7684] bond0: (slave bond_slave_1): Releasing backup interface
[   79.848067][ T7684] team0: Port device team_slave_0 removed
[   79.851168][ T7684] team0: Port device team_slave_1 removed
[   79.853368][ T7684] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.863227][ T7684] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.895809][ T5888] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   79.928727][ T7684] team0: Mode changed to "activebackup"
[   80.477302][ T5888] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   80.878305][ T7744] netlink: 'syz.1.800': attribute type 2 has an invalid length.
[   80.884923][ T7744] __nla_validate_parse: 10 callbacks suppressed
[   80.885018][ T7744] netlink: 240 bytes leftover after parsing attributes in process `syz.1.800'.
[   80.977570][ T7746] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[   80.980681][ T7746] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   81.383176][ T7774] netlink: 80 bytes leftover after parsing attributes in process `syz.2.819'.
[   81.471071][ T7784] gretap1: entered promiscuous mode
[   81.473077][ T7784] gretap1: entered allmulticast mode
[   81.506740][ T7789] netlink: 'syz.0.827': attribute type 10 has an invalid length.
[   81.509668][ T7789] veth0_vlan: left promiscuous mode
[   81.512048][ T7789] veth0_vlan: entered promiscuous mode
[   81.516960][ T7789] team0: Device veth0_vlan failed to register rx_handler
[   81.649675][ T7800] tipc: Started in network mode
[   81.651873][ T7800] tipc: Node identity da427be7f245, cluster identity 4711
[   81.655169][ T7800] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.659543][ T7800] syzkaller0: entered promiscuous mode
[   81.662058][ T7800] syzkaller0: entered allmulticast mode
[   81.680142][ T7800] tipc: Resetting bearer <eth:syzkaller0>
[   81.688726][ T7799] tipc: Resetting bearer <eth:syzkaller0>
[   81.697858][ T7799] tipc: Disabling bearer <eth:syzkaller0>
[   81.805467][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   81.811388][ T7815] netlink: 224 bytes leftover after parsing attributes in process `syz.0.838'.
[   82.202098][ T7841] netlink: 188 bytes leftover after parsing attributes in process `syz.0.845'.
[   82.313880][ T7849] netlink: 348 bytes leftover after parsing attributes in process `syz.0.849'.
[   83.155087][ T7952] netlink: 'syz.1.885': attribute type 83 has an invalid length.
[   83.884734][ T8018] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.889123][ T8018] syzkaller0: entered promiscuous mode
[   83.891537][ T8018] syzkaller0: entered allmulticast mode
[   83.922331][ T8018] tipc: Resetting bearer <eth:syzkaller0>
[   83.950077][ T8017] tipc: Resetting bearer <eth:syzkaller0>
[   83.961534][ T8017] tipc: Disabling bearer <eth:syzkaller0>
[   84.762788][ T8040] netlink: 'syz.1.896': attribute type 1 has an invalid length.
[   84.772947][ T8041] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.778686][ T8041] syzkaller0: entered promiscuous mode
[   84.780545][ T8041] syzkaller0: entered allmulticast mode
[   84.795051][ T8041] tipc: Resetting bearer <eth:syzkaller0>
[   84.798833][ T8039] tipc: Resetting bearer <eth:syzkaller0>
[   84.806377][ T8039] tipc: Disabling bearer <eth:syzkaller0>
[   84.872082][ T8047] tap0: tun_chr_ioctl cmd 35108
[   84.887474][ T8042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.028545][ T8056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.903'.
[   85.117472][ T8067] netlink: 28 bytes leftover after parsing attributes in process `syz.0.908'.
[   85.120771][ T8067] netlink: 28 bytes leftover after parsing attributes in process `syz.0.908'.
[   85.173777][ T8073] netlink: 172 bytes leftover after parsing attributes in process `syz.0.911'.
[   85.229650][ T8078] tipc: Invalid UDP bearer configuration
[   85.229677][ T8078] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   85.336908][ T8092] netlink: 'syz.2.920': attribute type 3 has an invalid length.
[   85.448574][ T8106] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   85.451906][ T8106] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   85.466631][ T8110] bridge3: entered allmulticast mode
[   85.500436][ T8106] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   85.504686][ T8106] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   85.550227][ T8106] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   85.553469][ T8106] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   85.609311][ T8106] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   85.614775][ T8106] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[   85.687315][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   85.691267][   T13] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   85.698149][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   85.700871][   T13] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   85.712607][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   85.716074][   T13] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   85.722537][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   85.725259][   T13] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   86.460333][ T8158] netlink: 16 bytes leftover after parsing attributes in process `syz.1.950'.
[   86.464034][ T8158] netlink: 'syz.1.950': attribute type 1 has an invalid length.
[   86.579305][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.957'.
[   86.911789][ T8196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.965'.
[   87.077085][ T8201] netlink: 24 bytes leftover after parsing attributes in process `syz.1.967'.
[   87.700173][ T8219] syzkaller0: entered promiscuous mode
[   87.701929][ T8219] syzkaller0: entered allmulticast mode
[   88.436363][ T8232] syzkaller0: entered promiscuous mode
[   88.438158][ T8232] syzkaller0: entered allmulticast mode
[   88.686543][ T5906] Bluetooth: hci2: command 0x0419 tx timeout
[   88.701968][ T8265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.993'.
[   88.713615][ T8265] smc: removing ib device syz1
[   89.764960][ T8315] netlink: 'syz.1.1013': attribute type 13 has an invalid length.
[   90.227161][ T8331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1020'.
[   90.230052][ T8331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1020'.
[   90.239515][ T8331] netlink: 'syz.1.1020': attribute type 3 has an invalid length.
[   90.307992][ T8337] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1023'.
[   90.395474][ T8344] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1026'.
[   90.499731][ T8352] veth0_to_bond: entered allmulticast mode
[   90.724911][ T8385] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1045'.
[   90.758198][ T8374] netlink: 'syz.1.1040': attribute type 4 has an invalid length.
[   90.898601][ T8404] netlink: 'syz.2.1052': attribute type 10 has an invalid length.
[   90.932520][ T8404] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   91.513010][ T8448] __nla_validate_parse: 4 callbacks suppressed
[   91.513019][ T8448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1071'.
[   91.611306][ T8454] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   91.638568][ T8454] netlink: 'syz.1.1074': attribute type 4 has an invalid length.
[   91.641255][ T8454] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1074'.
[   91.829462][ T8488] netlink: 'syz.0.1090': attribute type 1 has an invalid length.
[   91.832141][ T8488] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1090'.
[   92.103964][ T8517] vlan2: entered promiscuous mode
[   92.106124][ T8517] team0: entered promiscuous mode
[   92.292353][ T8549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1115'.
[   92.296570][ T8549] netlink: 'syz.0.1115': attribute type 30 has an invalid length.
[   92.299253][ T8549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1115'.
[   92.316409][ T8550] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1111'.
[   92.426242][ T8568] netlink: 'syz.2.1124': attribute type 1 has an invalid length.
[   92.442605][ T8568] 8021q: adding VLAN 0 to HW filter on device bond4
[   92.464520][ T8568] bond4: (slave veth3): Enslaving as an active interface with a down link
[   92.481571][ T8568] vlan0: entered allmulticast mode
[   92.483474][ T8568] veth1: entered allmulticast mode
[   92.486751][ T8568] veth1: entered promiscuous mode
[   92.488988][ T8568] veth1: left promiscuous mode
[   92.492606][ T8568] bond4: (slave vlan0): making interface the new active one
[   92.495891][ T8568] veth1: entered promiscuous mode
[   92.497954][ T8568] vlan0: entered promiscuous mode
[   92.499901][ T8568] bond4: (slave vlan0): Enslaving as an active interface with an up link
[   92.509258][ T8567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.649715][ T8574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1126'.
[   92.697565][ T8578] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1128'.
[   93.119467][ T8620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1148'.
[   93.127464][ T8621] netlink: 'syz.2.1149': attribute type 4 has an invalid length.
[   93.183816][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   93.189389][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   93.205714][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   93.213935][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   93.420159][ T8662] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1170'.
[   94.371551][ T8738] netlink: 'syz.0.1203': attribute type 1 has an invalid length.
[   94.376013][ T8738] netlink: 'syz.0.1203': attribute type 11 has an invalid length.
[   94.387440][ T8738] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   94.597964][ T8761] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2
[   94.600884][ T8761] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0
[   95.139905][ T8809] openvswitch: netlink: push_nsh: missing base or metadata attributes
[   95.142716][ T8809] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.400089][ T8827] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.421424][ T8827] syzkaller0: entered promiscuous mode
[   95.423351][ T8827] syzkaller0: entered allmulticast mode
[   95.433948][ T8827] tipc: Resetting bearer <eth:syzkaller0>
[   95.444393][ T8826] tipc: Resetting bearer <eth:syzkaller0>
[   95.520184][ T8830] IPVS: Scheduler module ip_vs_sip not found
[   95.522885][ T8830] IPVS: length: 8 != 446622349272
[   96.175124][ T8826] tipc: Disabling bearer <eth:syzkaller0>
[   96.181526][ T8843] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[   96.242322][ T8851] veth6: entered promiscuous mode
[   96.244139][ T8851] veth6: entered allmulticast mode
[   96.364937][ T8868] netlink: 'syz.2.1264': attribute type 1 has an invalid length.
[   96.378276][ T8868] bond5 (unregistering): Released all slaves
[   96.986905][ T8894] __nla_validate_parse: 16 callbacks suppressed
[   96.986917][ T8894] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1275'.
[   97.018909][ T8898] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1277'.
[   97.104204][ T8912] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1283'.
[   97.175460][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   97.283315][ T8940] hsr0: entered promiscuous mode
[   97.285088][ T8940] hsr0: entered allmulticast mode
[   97.287398][ T8940] hsr_slave_0: entered allmulticast mode
[   97.291598][ T8940] hsr_slave_1: entered allmulticast mode
[   97.342352][ T8950] netlink: 'syz.0.1297': attribute type 10 has an invalid length.
[   97.349921][ T8950] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   97.698650][ T9006] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1316'.
[   98.123741][ T9051] lo: entered allmulticast mode
[   98.126887][ T9049] lo: left allmulticast mode
[   98.285250][ T9066] netlink: 'syz.1.1343': attribute type 1 has an invalid length.
[   98.314191][ T9066] 8021q: adding VLAN 0 to HW filter on device bond1
[   98.324454][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1344'.
[   98.339475][ T9066] bond1: (slave veth5): Enslaving as an active interface with a down link
[   98.351376][ T9065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   98.978941][ T9075] netlink: 'syz.0.1346': attribute type 1 has an invalid length.
[   98.981642][ T9075] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1346'.
[   99.041520][ T9080] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1346'.
[   99.359126][ T9094] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1354'.
[   99.367435][ T9094] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1354'.
[   99.387096][ T9092] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   99.710087][ T9116] netlink: 'syz.1.1364': attribute type 12 has an invalid length.
[   99.712896][ T9116] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.1364'.
[   99.858383][ T9130] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   99.978752][ T9139] macsec1: entered allmulticast mode
[   99.980661][ T9139] ip6gretap0: entered allmulticast mode
[   99.983808][ T9139] ip6gretap0: left allmulticast mode
[  100.312584][ T9098] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  100.340609][ T9154] pimreg: tun_chr_ioctl cmd 2147767506
[  100.450508][ T9160] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.600214][ T9176] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.044884][ T9217] pim6reg: entered allmulticast mode
[  101.210438][ T9231] geneve3: entered promiscuous mode
[  101.212310][ T9231] geneve3: entered allmulticast mode
[  101.827574][ T9240] netlink: 'syz.1.1415': attribute type 3 has an invalid length.
[  102.012325][ T9257] __nla_validate_parse: 2 callbacks suppressed
[  102.012335][ T9257] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1423'.
[  102.018520][ T9257] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  102.141379][ T9268] tipc: Cannot configure node identity twice
[  102.583442][ T9336] netlink: 'syz.0.1460': attribute type 1 has an invalid length.
[  102.588196][ T9336] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1460'.
[  102.809909][ T9365] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1474'.
[  102.812855][ T9365] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1474'.
[  102.880815][ T9368] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  103.108715][ T9389] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1486'.
[  103.151765][ T9393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1488'.
[  103.204888][ T9397] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1490'.
[  103.330471][ T9409] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1496'.
[  103.378311][ T9411] netlink: 'syz.2.1497': attribute type 1 has an invalid length.
[  103.456644][ T9415] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1499'.
[  103.625667][ T5871] vlan0: left promiscuous mode
[  103.886772][ T9425] netlink: 'syz.0.1503': attribute type 7 has an invalid length.
[  103.994300][ T9429] netlink: 'syz.1.1505': attribute type 12 has an invalid length.
[  104.190190][ T9443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1512'.
[  104.612593][ T9467] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  104.616292][ T9467] gretap1: entered promiscuous mode
[  104.618105][ T9467] gretap1: entered allmulticast mode
[  106.290907][ T9552] vxcan1 speed is unknown, defaulting to 1000
[  106.293604][ T9552] vxcan1 speed is unknown, defaulting to 1000
[  106.298843][ T9552] vxcan1 speed is unknown, defaulting to 1000
[  106.413575][ T9552] infiniband syz2: set active
[  106.415239][ T9552] infiniband syz2: added vxcan1
[  106.419425][   T24] vxcan1 speed is unknown, defaulting to 1000
[  106.442203][ T9552] RDS/IB: syz2: added
[  106.443701][ T9552] smc: adding ib device syz2 with port count 1
[  106.445965][ T9552] smc:    ib device syz2 port 1 has pnetid 
[  106.448485][ T9552] vxcan1 speed is unknown, defaulting to 1000
[  106.465430][   T24] vxcan1 speed is unknown, defaulting to 1000
[  106.546978][ T9552] vxcan1 speed is unknown, defaulting to 1000
[  106.647684][ T9552] vxcan1 speed is unknown, defaulting to 1000
[  107.164196][ T9667] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.190360][ T9667] syzkaller0: entered promiscuous mode
[  107.192210][ T9667] syzkaller0: entered allmulticast mode
[  107.200065][ T9667] tipc: Resetting bearer <eth:syzkaller0>
[  107.204684][ T9666] tipc: Resetting bearer <eth:syzkaller0>
[  107.227744][ T9675] sctp: [Deprecated]: syz.2.1619 (pid 9675) Use of int in max_burst socket option.
[  107.227744][ T9675] Use struct sctp_assoc_value instead
[  107.714585][ T9689] netlink: 'syz.2.1623': attribute type 1 has an invalid length.
[  107.960278][ T9666] tipc: Disabling bearer <eth:syzkaller0>
[  108.221232][ T9707] netlink: 'syz.1.1629': attribute type 21 has an invalid length.
[  108.223914][ T9707] __nla_validate_parse: 6 callbacks suppressed
[  108.223921][ T9707] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1629'.
[  108.224256][ T9694] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1625'.
[  108.232366][ T9707] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.235078][ T9707] syzkaller0: entered promiscuous mode
[  108.239540][ T9707] syzkaller0: entered allmulticast mode
[  108.291983][ T9707] tipc: Resetting bearer <eth:syzkaller0>
[  108.310103][ T9705] tipc: Resetting bearer <eth:syzkaller0>
[  108.320959][ T9705] tipc: Disabling bearer <eth:syzkaller0>
[  108.880007][ T9760] netlink: 'syz.0.1654': attribute type 10 has an invalid length.
[  108.882860][ T9760] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1654'.
[  108.890931][ T9760] batman_adv: batadv0: Adding interface: virt_wifi0
[  108.893134][ T9760] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.903663][ T9760] batman_adv: batadv0: Interface activated: virt_wifi0
[  108.932270][ T9764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1656'.
[  109.164136][ T9786] netlink: 'syz.1.1667': attribute type 2 has an invalid length.
[  109.168013][ T9786] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1667'.
[  109.304638][ T9801] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  109.327927][ T9801] bridge_slave_0: left allmulticast mode
[  109.329788][ T9801] bridge_slave_0: left promiscuous mode
[  109.331690][ T9801] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.349401][ T9801] bridge_slave_1: left allmulticast mode
[  109.351299][ T9801] bridge_slave_1: left promiscuous mode
[  109.353396][ T9801] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.363485][ T9801] bond0: (slave bond_slave_0): Releasing backup interface
[  109.382125][ T9801] bond0: (slave bond_slave_1): Releasing backup interface
[  109.415039][ T9801] team0: Port device team_slave_0 removed
[  109.431374][ T9807] netlink: 'syz.1.1674': attribute type 10 has an invalid length.
[  109.433924][ T9801] team0: Port device team_slave_1 removed
[  109.444088][ T9801] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  109.447005][ T9801] batman_adv: batadv0: Removing interface: batadv_slave_0
[  109.454564][ T9801] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  109.464550][ T9801] batman_adv: batadv0: Removing interface: batadv_slave_1
[  109.485171][ T9801] bond1: (slave veth5): Releasing active interface
[  109.503402][ T9807] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  109.544060][ T9807] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.563925][ T9807] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  109.572213][ T9808] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  109.576019][ T9808] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  110.611844][ T9823] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1681'.
[  111.772379][ T9877] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  111.777129][ T9877] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.844334][ T9877] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  111.848503][ T9877] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.855559][ T9891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1712'.
[  111.929629][ T9877] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  111.933199][ T9877] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.983951][ T9877] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  111.988438][ T9877] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.077571][ T5877] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  112.080766][ T5877] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  112.097203][ T5877] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  112.099971][ T5877] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  112.106831][ T9910] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1719'.
[  112.110903][ T5877] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  112.113568][ T5877] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.116641][ T5877] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  112.119355][ T5877] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.247640][ T9922] netlink: 'syz.1.1724': attribute type 1 has an invalid length.
[  112.271490][ T9926] netlink: 'syz.2.1725': attribute type 1 has an invalid length.
[  112.274063][ T9926] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1725'.
[  112.279744][ T9922] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  112.279965][ T9926] netlink: 'syz.2.1725': attribute type 2 has an invalid length.
[  112.284521][ T9922] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  112.286276][ T9926] netlink: 'syz.2.1725': attribute type 1 has an invalid length.
[  112.398695][ T9931] gretap2: entered promiscuous mode
[  112.403241][ T9931] bond2: (slave gretap2): making interface the new active one
[  112.407123][ T9931] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  112.464441][ T9941] delete_channel: no stack
[  112.620980][ T9957] netlink: 'syz.1.1740': attribute type 1 has an invalid length.
[  112.650576][ T9959] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1741'.
[  112.656957][ T9959] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  112.684852][ T9959] gretap1: left promiscuous mode
[  112.692127][ T5922] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  112.694968][ T5922] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  112.701648][ T5922] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  112.704444][ T5922] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  112.708687][ T5922] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  112.711460][ T5922] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  112.732204][ T5922] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  112.735104][ T5922] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  112.788816][ T9973] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.794613][ T9973] syzkaller0: entered promiscuous mode
[  112.800146][ T9973] syzkaller0: entered allmulticast mode
[  112.830195][ T9973] tipc: Resetting bearer <eth:syzkaller0>
[  112.833572][ T9972] tipc: Resetting bearer <eth:syzkaller0>
[  112.853198][ T9972] tipc: Disabling bearer <eth:syzkaller0>
[  112.961752][T10000] netlink: 'syz.0.1761': attribute type 83 has an invalid length.
[  113.019444][T10011] netlink: 'syz.2.1767': attribute type 1 has an invalid length.
[  113.033913][T10011] 8021q: adding VLAN 0 to HW filter on device bond5
[  113.047098][T10011] bond5: (slave gretap2): making interface the new active one
[  113.050515][T10011] bond5: (slave gretap2): Enslaving as an active interface with an up link
[  113.069042][T10011] syz.2.1767 (10011) used greatest stack depth: 18072 bytes left
[  113.224162][T10030] netlink: 'syz.2.1775': attribute type 6 has an invalid length.
[  113.239643][   T33] audit: type=1800 audit(1754569286.200:2): pid=10032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1776" name="blkio.bfq.time_recursive" dev="tmpfs" ino=3047 res=0 errno=0
[  113.265832][T10035] bridge0: entered allmulticast mode
[  113.450039][T10040] vxcan1 speed is unknown, defaulting to 1000
[  114.047263][T10089] rdma_rxe: rxe_newlink: failed to add lo
[  114.069463][T10089] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.072482][T10089] 8021q: adding VLAN 0 to HW filter on device team0
[  114.078947][T10089] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  114.157015][T10094] ==================================================================
[  114.159608][T10094] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  114.162004][T10094] Read of size 4 at addr ffff88802eb052c4 by task syz.0.1801/10094
[  114.165265][T10094] 
[  114.166097][T10094] CPU: 0 UID: 0 PID: 10094 Comm: syz.0.1801 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10-dirty #0 PREEMPT(full) 
[  114.166114][T10094] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  114.166121][T10094] Call Trace:
[  114.166127][T10094]  <TASK>
[  114.166132][T10094]  dump_stack_lvl+0x189/0x250
[  114.166148][T10094]  ? __kasan_check_byte+0x12/0x40
[  114.166166][T10094]  ? __pfx_dump_stack_lvl+0x10/0x10
[  114.166176][T10094]  ? lock_release+0x4b/0x3e0
[  114.166191][T10094]  ? __virt_addr_valid+0x4a5/0x5c0
[  114.166203][T10094]  print_report+0xca/0x240
[  114.166216][T10094]  ? xfrm_alloc_spi+0x570/0xf30
[  114.166226][T10094]  kasan_report+0x118/0x150
[  114.166241][T10094]  ? xfrm_alloc_spi+0x570/0xf30
[  114.166253][T10094]  xfrm_alloc_spi+0x570/0xf30
[  114.166263][T10094]  ? xfrm_alloc_spi+0x2a0/0xf30
[  114.166274][T10094]  ? __local_bh_enable_ip+0xec/0x1c0
[  114.166292][T10094]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  114.166303][T10094]  ? xfrm_find_acq+0x87/0xa0
[  114.166315][T10094]  pfkey_getspi+0x7a8/0xee0
[  114.166325][T10094]  pfkey_sendmsg+0xbfe/0x1090
[  114.166334][T10094]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  114.166349][T10094]  ? aa_sock_msg_perm+0x94/0x160
[  114.166359][T10094]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  114.166368][T10094]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  114.166378][T10094]  __sock_sendmsg+0x21c/0x270
[  114.166390][T10094]  ____sys_sendmsg+0x505/0x830
[  114.166399][T10094]  ? __pfx_____sys_sendmsg+0x10/0x10
[  114.166407][T10094]  ? import_iovec+0x74/0xa0
[  114.166419][T10094]  ___sys_sendmsg+0x21f/0x2a0
[  114.166427][T10094]  ? __pfx____sys_sendmsg+0x10/0x10
[  114.166440][T10094]  ? __fget_files+0x2a/0x420
[  114.166448][T10094]  ? __fget_files+0x3a0/0x420
[  114.166455][T10094]  __x64_sys_sendmsg+0x19b/0x260
[  114.166463][T10094]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  114.166472][T10094]  ? rcu_is_watching+0x15/0xb0
[  114.166483][T10094]  ? do_syscall_64+0xbe/0x3b0
[  114.166495][T10094]  do_syscall_64+0xfa/0x3b0
[  114.166504][T10094]  ? lockdep_hardirqs_on+0x9c/0x150
[  114.166513][T10094]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.166520][T10094]  ? exc_page_fault+0x9f/0xf0
[  114.166538][T10094]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.166546][T10094] RIP: 0033:0x7fc6d798ebe9
[  114.166554][T10094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  114.166562][T10094] RSP: 002b:00007fc6d8775038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  114.166571][T10094] RAX: ffffffffffffffda RBX: 00007fc6d7bb5fa0 RCX: 00007fc6d798ebe9
[  114.166578][T10094] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[  114.166583][T10094] RBP: 00007fc6d7a11e19 R08: 0000000000000000 R09: 0000000000000000
[  114.166587][T10094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  114.166592][T10094] R13: 00007fc6d7bb6038 R14: 00007fc6d7bb5fa0 R15: 00007ffc4a1bc468
[  114.166600][T10094]  </TASK>
[  114.166603][T10094] 
[  114.262809][T10094] Allocated by task 7807:
[  114.264245][T10094]  kasan_save_track+0x3e/0x80
[  114.265816][T10094]  __kasan_slab_alloc+0x6c/0x80
[  114.267413][T10094]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  114.269201][T10094]  xfrm_state_alloc+0x24/0x2f0
[  114.270905][T10094]  __find_acq_core+0x8a7/0x1c00
[  114.272534][T10094]  xfrm_find_acq+0x78/0xa0
[  114.274050][T10094]  xfrm_alloc_userspi+0x6b3/0xc90
[  114.275721][T10094]  xfrm_user_rcv_msg+0x7a3/0xab0
[  114.277362][T10094]  netlink_rcv_skb+0x208/0x470
[  114.278961][T10094]  xfrm_netlink_rcv+0x79/0x90
[  114.280841][T10094]  netlink_unicast+0x82f/0x9e0
[  114.282523][T10094]  netlink_sendmsg+0x805/0xb30
[  114.284118][T10094]  __sock_sendmsg+0x21c/0x270
[  114.285783][T10094]  ____sys_sendmsg+0x505/0x830
[  114.287388][T10094]  ___sys_sendmsg+0x21f/0x2a0
[  114.289232][T10094]  __x64_sys_sendmsg+0x19b/0x260
[  114.290945][T10094]  do_syscall_64+0xfa/0x3b0
[  114.292460][T10094]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.294455][T10094] 
[  114.295256][T10094] Freed by task 789:
[  114.296552][T10094]  kasan_save_track+0x3e/0x80
[  114.298112][T10094]  kasan_save_free_info+0x46/0x50
[  114.299837][T10094]  __kasan_slab_free+0x62/0x70
[  114.301411][T10094]  kmem_cache_free+0x18f/0x400
[  114.303047][T10094]  xfrm_state_gc_task+0x518/0x6a0
[  114.304676][T10094]  process_scheduled_works+0xae1/0x17b0
[  114.306508][T10094]  worker_thread+0x8a0/0xda0
[  114.308297][T10094]  kthread+0x711/0x8a0
[  114.309715][T10094]  ret_from_fork+0x3fc/0x770
[  114.311293][T10094]  ret_from_fork_asm+0x1a/0x30
[  114.313121][T10094] 
[  114.314063][T10094] The buggy address belongs to the object at ffff88802eb05200
[  114.314063][T10094]  which belongs to the cache xfrm_state of size 928
[  114.318515][T10094] The buggy address is located 196 bytes inside of
[  114.318515][T10094]  freed 928-byte region [ffff88802eb05200, ffff88802eb055a0)
[  114.322853][T10094] 
[  114.323667][T10094] The buggy address belongs to the physical page:
[  114.326005][T10094] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802eb05b00 pfn:0x2eb04
[  114.329655][T10094] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  114.332675][T10094] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  114.335637][T10094] page_type: f5(slab)
[  114.336976][T10094] raw: 00fff00000000040 ffff888104b53c80 dead000000000122 0000000000000000
[  114.339631][T10094] raw: ffff88802eb05b00 00000000800e000c 00000000f5000000 0000000000000000
[  114.342304][T10094] head: 00fff00000000040 ffff888104b53c80 dead000000000122 0000000000000000
[  114.345015][T10094] head: ffff88802eb05b00 00000000800e000c 00000000f5000000 0000000000000000
[  114.347684][T10094] head: 00fff00000000002 ffffea0000bac101 00000000ffffffff 00000000ffffffff
[  114.350521][T10094] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  114.353306][T10094] page dumped because: kasan: bad access detected
[  114.355312][T10094] page_owner tracks the page as allocated
[  114.357062][T10094] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6275, tgid 6274 (syz.1.151), ts 59524573722, free_ts 55141319165
[  114.362823][T10094]  post_alloc_hook+0x240/0x2a0
[  114.364526][T10094]  get_page_from_freelist+0x21e4/0x22c0
[  114.366506][T10094]  __alloc_frozen_pages_noprof+0x181/0x370
[  114.368345][T10094]  alloc_pages_mpol+0x232/0x4a0
[  114.369983][T10094]  allocate_slab+0x8a/0x3b0
[  114.371605][T10094]  ___slab_alloc+0xbfc/0x1480
[  114.373294][T10094]  kmem_cache_alloc_noprof+0x283/0x3c0
[  114.375104][T10094]  xfrm_state_alloc+0x24/0x2f0
[  114.376693][T10094]  xfrm_add_sa+0x17d1/0x4070
[  114.378247][T10094]  xfrm_user_rcv_msg+0x7a3/0xab0
[  114.379899][T10094]  netlink_rcv_skb+0x208/0x470
[  114.381485][T10094]  xfrm_netlink_rcv+0x79/0x90
[  114.382966][T10094]  netlink_unicast+0x82f/0x9e0
[  114.384548][T10094]  netlink_sendmsg+0x805/0xb30
[  114.386075][T10094]  __sock_sendmsg+0x21c/0x270
[  114.387576][T10094]  ____sys_sendmsg+0x505/0x830
[  114.389095][T10094] page last free pid 5845 tgid 5845 stack trace:
[  114.391098][T10094]  __free_frozen_pages+0xc71/0xe70
[  114.392799][T10094]  __put_partials+0x161/0x1c0
[  114.394356][T10094]  put_cpu_partial+0x17c/0x250
[  114.395967][T10094]  __slab_free+0x2f7/0x400
[  114.397450][T10094]  qlist_free_all+0x97/0x140
[  114.398987][T10094]  kasan_quarantine_reduce+0x148/0x160
[  114.400685][T10094]  __kasan_slab_alloc+0x22/0x80
[  114.402285][T10094]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  114.404218][T10094]  __alloc_skb+0x112/0x2d0
[  114.405653][T10094]  rtmsg_ifa+0xf8/0x1f0
[  114.407027][T10094]  __inet_del_ifa+0x869/0x1040
[  114.408612][T10094]  inetdev_event+0x632/0x15b0
[  114.410176][T10094]  notifier_call_chain+0x1b6/0x3e0
[  114.411894][T10094]  unregister_netdevice_many_notify+0x14d7/0x1ff0
[  114.414030][T10094]  default_device_exit_batch+0x819/0x890
[  114.415917][T10094]  ops_undo_list+0x525/0x990
[  114.417512][T10094] 
[  114.418319][T10094] Memory state around the buggy address:
[  114.420130][T10094]  ffff88802eb05180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  114.422658][T10094]  ffff88802eb05200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  114.425164][T10094] >ffff88802eb05280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  114.427738][T10094]                                            ^
[  114.429753][T10094]  ffff88802eb05300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  114.432491][T10094]  ffff88802eb05380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  114.435122][T10094] ==================================================================
[  114.437815][T10094] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  114.440369][T10094] CPU: 0 UID: 0 PID: 10094 Comm: syz.0.1801 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10-dirty #0 PREEMPT(full) 
[  114.444348][T10094] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  114.447661][T10094] Call Trace:
[  114.448808][T10094]  <TASK>
[  114.449802][T10094]  dump_stack_lvl+0x99/0x250
[  114.451331][T10094]  ? __asan_memcpy+0x40/0x70
[  114.452844][T10094]  ? __pfx_dump_stack_lvl+0x10/0x10
[  114.454487][T10094]  ? __pfx__printk+0x10/0x10
[  114.455989][T10094]  panic+0x2db/0x790
[  114.457232][T10094]  ? __pfx_panic+0x10/0x10
[  114.458665][T10094]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  114.460517][T10094]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  114.462380][T10094]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  114.464371][T10094]  ? print_memory_metadata+0x314/0x400
[  114.466078][T10094]  ? xfrm_alloc_spi+0x570/0xf30
[  114.467606][T10094]  check_panic_on_warn+0x89/0xb0
[  114.469172][T10094]  ? xfrm_alloc_spi+0x570/0xf30
[  114.470737][T10094]  end_report+0x78/0x160
[  114.472080][T10094]  kasan_report+0x129/0x150
[  114.473536][T10094]  ? xfrm_alloc_spi+0x570/0xf30
[  114.475225][T10094]  xfrm_alloc_spi+0x570/0xf30
[  114.476800][T10094]  ? xfrm_alloc_spi+0x2a0/0xf30
[  114.478408][T10094]  ? __local_bh_enable_ip+0xec/0x1c0
[  114.480155][T10094]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  114.481893][T10094]  ? xfrm_find_acq+0x87/0xa0
[  114.483432][T10094]  pfkey_getspi+0x7a8/0xee0
[  114.484918][T10094]  pfkey_sendmsg+0xbfe/0x1090
[  114.486492][T10094]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  114.488214][T10094]  ? aa_sock_msg_perm+0x94/0x160
[  114.489823][T10094]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  114.491518][T10094]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  114.493176][T10094]  __sock_sendmsg+0x21c/0x270
[  114.494700][T10094]  ____sys_sendmsg+0x505/0x830
[  114.496396][T10094]  ? __pfx_____sys_sendmsg+0x10/0x10
[  114.498183][T10094]  ? import_iovec+0x74/0xa0
[  114.499931][T10094]  ___sys_sendmsg+0x21f/0x2a0
[  114.501679][T10094]  ? __pfx____sys_sendmsg+0x10/0x10
[  114.503486][T10094]  ? __fget_files+0x2a/0x420
[  114.505107][T10094]  ? __fget_files+0x3a0/0x420
[  114.506708][T10094]  __x64_sys_sendmsg+0x19b/0x260
[  114.508347][T10094]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  114.510163][T10094]  ? rcu_is_watching+0x15/0xb0
[  114.511778][T10094]  ? do_syscall_64+0xbe/0x3b0
[  114.513357][T10094]  do_syscall_64+0xfa/0x3b0
[  114.514878][T10094]  ? lockdep_hardirqs_on+0x9c/0x150
[  114.516588][T10094]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.518588][T10094]  ? exc_page_fault+0x9f/0xf0
[  114.520149][T10094]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.522074][T10094] RIP: 0033:0x7fc6d798ebe9
[  114.523500][T10094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  114.529733][T10094] RSP: 002b:00007fc6d8775038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  114.532486][T10094] RAX: ffffffffffffffda RBX: 00007fc6d7bb5fa0 RCX: 00007fc6d798ebe9
[  114.535119][T10094] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[  114.537689][T10094] RBP: 00007fc6d7a11e19 R08: 0000000000000000 R09: 0000000000000000
[  114.540279][T10094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  114.542839][T10094] R13: 00007fc6d7bb6038 R14: 00007fc6d7bb5fa0 R15: 00007ffc4a1bc468
[  114.545437][T10094]  </TASK>
[  114.547217][T10094] Kernel Offset: disabled
[  114.548648][T10094] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:21:27  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000ff9 RDI=0000000000000ffa RBP=00000000000003f8 RSP=ffffc90002a2eeb0
R8 =ffff888106470237 R9 =1ffff11020c8e046 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=ffffffff99a95913 R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc6d87756c0 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000180 CR3=0000000028c8c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fc6d7b87498 00007fc6d7b87470 XMM03=00007fc6d7b874a8 00007fc6d7b874a0
XMM04=00007fc6d86ed100 00007fc6d7b87460 XMM05=00007fc6d7b87478 00007fc6d7b874c0
XMM06=00007fc6d7b874b8 00007fc6d7b874b0 XMM07=00007fc6d7b874a8 00007fc6d7b874a0
XMM08=0000000000000000 00007fc6d7a12ee7 XMM09=0000000000000000 00007fc6d7a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=e30e6fd3134f1500 RBX=ffffffff81969b18 RCX=e30e6fd3134f1500 RDX=0000000000000001
RSI=ffffffff8d9792cd RDI=ffffffff8be30a00 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa07bf0 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001e000
RIP=ffffffff8b6fc4f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc6d7baf320 CR3=0000000028c8c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fc6d7b87498 00007fc6d7b87470 XMM03=00007fc6d7b874a8 00007fc6d7b874a0
XMM04=00007fc6d86ed100 00007fc6d7b87460 XMM05=00007fc6d7b87478 00007fc6d7b874c0
XMM06=00007fc6d7b874b8 00007fc6d7b874b0 XMM07=00007fc6d7b874a8 00007fc6d7b874a0
XMM08=0000000000000000 00007fc6d7a12ee7 XMM09=0000000000000000 00007fc6d7a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
