last executing test programs:

1.198865697s ago: executing program 0 (id=1279):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x3b, @rand_addr=0x64010102, 0x5, 0x3, 'sh\x00', 0x1, 0x7, 0x70}, 0x2c)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000140)={0x0, 0x1, [@random="512c626c1527"]})
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic-generic,pcbc(fcrypt-generic))\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000180)="0400b4c7", 0x4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES64=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x800)
pipe(&(0x7f0000000740)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7) (async)
r8 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r8, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000001b80)="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", 0x585}], 0x1, &(0x7f0000001a00)=ANY=[@ANYRES16=r4], 0x10b8}, 0x0) (async)
tee(r0, r2, 0x2, 0x8) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x16, &(0x7f0000001880)=ANY=[@ANYBLOB="486a0d9aed1800000003000000000000000100e30018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000084381000080000001838000005000000000000000000000018450000080000000000000000000000181b0000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x9, 0x37, &(0x7f0000000300)=""/55, 0x41100, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000340)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000380)=[r5, r6, r5], &(0x7f0000000580)=[{0x0, 0x3, 0x100}, {0x3, 0x2}, {0x0, 0x1, 0x4}, {0x1, 0x2, 0x7, 0xa}, {0x0, 0x1, 0x0, 0x1}, {0x5, 0x4, 0xf, 0x7}, {0x2, 0x3, 0x8, 0xc}, {0x6, 0x3, 0x7, 0x5}, {0x3, 0x4, 0xa, 0x2}], 0x10, 0x2}, 0x94) (async)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
ioctl$INCFS_IOC_FILL_BLOCKS(r4, 0x80106720, &(0x7f0000001840)={0x5, &(0x7f0000001780)=[{0x0, 0x2, &(0x7f00000003c0)="96b4", 0x1}, {0x3, 0x35, &(0x7f0000000500)="0b4914e57ee077fd45b1bf5f06a0879860bdcc2554adc7648ecac7bc55b660ba88035f929c6c98d11423853306d96ec53e42c0013c"}, {0x9, 0x0, &(0x7f0000000740), 0x0, 0x1}, {0x1000, 0x1000, &(0x7f0000000780)="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"}, {0x400, 0x1000, &(0x7f00000022c0)="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", 0x0, 0x1}]}) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x20004800}, 0x20)
socket(0x400000000010, 0x3, 0x0) (async)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

978.671611ms ago: executing program 0 (id=1283):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071109f000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'caif0\x00', <r3=>0x0})
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x200000d0}, 0x41)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x10) (async)
r4 = socket$netlink(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', <r6=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r5, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000101000038"], 0xd0}, 0x1, 0x0, 0x0, 0x20000800}, 0x24044880)
socket(0x10, 0x3, 0x0) (async)
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg2\x00'})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x2f, 0x9, 0x3, 0x9, 0x41, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x700, 0x10, 0xce5c, 0x69}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000003c0)) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000003c0))
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000400)={0x0, @dev, @private}, &(0x7f0000000440)=0xc)
socket$inet(0x10, 0x3, 0x0) (async)
r9 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', <r10=>0x0})
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r10, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x32}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x5c}]}}]}, 0x4c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0))

918.194431ms ago: executing program 2 (id=1287):
connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32, @ANYBLOB="080004000001"], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0)

917.882165ms ago: executing program 1 (id=1288):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10)
r1 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r1, &(0x7f0000001600)={&(0x7f0000000680)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @multicast1}}}], 0x20}, 0x8000)
close(r1)
sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884)
socket(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) (async)
socket$kcm(0xa, 0x2, 0x88) (async)
sendmsg$inet(r1, &(0x7f0000001600)={&(0x7f0000000680)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @multicast1}}}], 0x20}, 0x8000) (async)
close(r1) (async)
sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884) (async)

917.214781ms ago: executing program 2 (id=1289):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_COMMENT={0x9, 0x1a, 'syz1\x00'}]}]}, 0x44}, 0x1, 0x0, 0x60000000, 0x10040047}, 0x240008c4)

868.925285ms ago: executing program 2 (id=1290):
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x36}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1]}, @cipso={0x86, 0x6}]}}}}}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000006d00673c25bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="9881040004680200180034801400351e64756d6d7930000000000000000000001400030069705f76746930"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x36}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000006d00673c25bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="9881040004680200180034801400351e64756d6d7930000000000000000000001400030069705f76746930"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)

868.745181ms ago: executing program 1 (id=1291):
socket(0x10, 0x803, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r1, 0x91dabd4b569e2c23, 0x70bd28, 0x25dfdbfc, {{}, {0x0, 0x4108}, {0x14, 0x18, {0x3, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x3000000, 0x0, 0x10}, 0x4000000)

868.08561ms ago: executing program 0 (id=1292):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x404, 0x9}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r0, 0x15b4}, 0x50)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x6f}, 0xc)
recvmmsg(r2, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x4986beeb32c9c15e, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x4, 0x13, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x7, 0x0, 0x9, 0x6, 0x0, 0xfffffffffffffffc}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00'}, 0x94)

809.403494ms ago: executing program 1 (id=1293):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e23, @empty}}, 0x80, 0x0}, 0x4049080)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b000a", 0x35}], 0x1}, 0x80) (async, rerun: 64)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) (async, rerun: 64)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'rose0\x00', <r3=>0x0}) (async)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) (async, rerun: 64)
r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0)

809.1931ms ago: executing program 2 (id=1294):
r0 = socket(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000020601020001000000000000000000000900020073797a3100000000050004000000000011000300686173683a6e65742c6e657400000000050005000b0000000500010006"], 0x4c}}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff5b, &(0x7f0000000180)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f90224fc6028000e000a73e300053582c137153e370248018000f01700d1bd", 0x33fe0}, {&(0x7f00000000c0)="e65966d9188ad11c012b2b38e5b00bc32907f017da962d06fe5aedef2e9220d4f9cdc48bfa555f3a02197a06246ef88735d933ca7aa32166c0f169455365b3d0e25e2384ec85eb0dc60de5f5eafcbbb7163bd36ea1cb3d8f30b0bae3ae2c434a991afb2369e33b33f11c393b88b2296923b775053bd19596e8cc6953d7984f021ac62f3315c748e2070c322aa5f7bb6f23b79d5dcf67d6d944a57f1c098fd31ced16dbee99df3587371789ac2701ee296eb48c047980d330dd39b74b"}], 0x1}, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000003180)=@req3={0x801000, 0xfffff4e7, 0x1000, 0x3a, 0x178, 0xf84, 0x3}, 0x1c)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000005e40)={'netdevsim0\x00', &(0x7f0000000300)=@ethtool_test={0x1a, 0x2, 0x6, 0x7, [0x8, 0x81, 0x0, 0x2, 0x0, 0x4, 0xff]}})
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000040)={'wlan1\x00', @broadcast})
ioctl(r6, 0x8b32, &(0x7f0000000040))
r7 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000200)='io.pressure\x00', 0x2, 0x0)
ppoll(&(0x7f0000000240)=[{r4, 0xf020}, {r0, 0xa3e0f80a76fea984}, {r2, 0x2201}, {r7, 0x101}], 0x4, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f00000002c0)={[0x5]}, 0x8)
unshare(0x2c020400)
connect$pppl2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2, 0x0, 0x2000000, 0x2}}, 0x2e)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x0, 0x2e, 0x0, 0xffffffff, 0x3}, 0x28)

749.18706ms ago: executing program 0 (id=1295):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000240)='vcan0\x00') (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdf25140000000c000780080002000040"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10) (async)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000000080), 0x10) (async)
sendmsg$can_bcm(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "15b4013a41a0ab29"}}, 0x38}}, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@empty, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001b, @multicast1}, {0x0, 0x17c1, 0xfffffffffffffdc5}}}}}, 0x0) (async)
close(r6)
r7 = socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast})
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x140) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES32], 0x84}}, 0x0) (async)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000126b00000000000003000000850000001800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000020b70200000000000085000000860000009500000000000000f8fb5205d6570b2d5678da15819a1ada59a06aff9e641882bff79fa6f9de52cfffb80db9763716cd99b22bacb443396cc0ad37596fb76b51f3b488fd8d212ed557c86c762aebec9427f8281b10338565c8aecb23edf3d2e5a8e824fcc1084747339656b12138c1eede9aae1c3015643c0dadf0ca8a5a21955498277a583b3b78fd354fa836bb1e9210f899e751a54c712f0b574bf2b0d3553a093b0d109999eb8b13530f7cee2ac2d52ca45daaab0ed616ae988000894889fa1d5f46fe5c"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async)
ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f00000000c0)) (async)
r9 = socket$netlink(0x10, 0x3, 0x0) (async)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_int(r10, &(0x7f0000000540)='cpuset.mem_exclusive\x00', 0x2, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f00000022c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @notrack={{0xc}, @void}}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2e}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELSETELEM={0x12d8, 0xe, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x12c4, 0x3, 0x0, 0x1, [{0x12c0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x852}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_DATA={0x1258, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x54, 0x1, "e929aa192bca68afbc43652a4e85f1a00228bb68655fb58591e6f2f3dac8e7206da36d681550ea1ba8e3807d098ce94e1bff84666da4391a2367b4ef5cceb77d7c971a6470c592b7268f3c6c3f5cefb8"}, @NFTA_DATA_VALUE={0x3a, 0x1, "3bd8e2d2054f8a25bbbaa79e2f2b8a0b73b32e2b39ae9b969077c10d44e38fb8b28f02dad53f90ba731b3120b7ed00e28d35a122f8e1"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xe3, 0x1, "64348bebd5920e48e8a2f9b82b1b2aefd62a958c48c676e734ce74dcc6de4d2d76b4945b0fc4a6cac469007cfae2163c111c44bdac9fed38bf4ad28cc67eae41544cfc3756f40899ece9da806c8f156206345bd7fa289a667ad9a01a27d1b68cc498a4a902ad26a4a4f5f2a0dc8bb2911fc52a297a5c9e9dc196eeb7c05eae3625131234b8778772bc73451bb726ce8c9d3e1b2220290664024000be853884251c9f97b009b5393b30919596881c65e76b99b4618913b3634172024ba0c6008df57daf438579389d90644126ac7def5d0ec38c708034bc9e2dd39134e89ffd"}, @NFTA_DATA_VALUE={0xbf, 0x1, "f070e76201b6f43460c5859c8e25ae6ac8f0de7c09d07706443bbebc8625157806f63cc5988f1ca6a839baeaefc5129ea1561b511a5040b07507038fd5b74b527850542bbae0f4c08a66347edbfd7a760990d851210e0c6380e740a12950fc73afa6e5938462f4289024b6958b52bc007673ec034fb3be0ae75b3990808a5f55024b5ad321e87dfd8f67bca12a870690fbf087fac52029f55ec96148c8370778da5d8b5f5798e93995d55717fc024fedc8f1cb38d919b55c01254c"}]}, @NFTA_SET_ELEM_USERDATA={0x4c, 0x6, 0x1, 0x0, "527cf2f12e3efc15bced944737e3abb768a3dcd8ddb5d09544cd8c547c621f85d82c9a25b8a0901d3918a8e42fbe2e76563400746410cab231f485d01ed74610540f3e75894cead8"}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x135c}, 0x1, 0x0, 0x0, 0x10}, 0x50) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYRES8=r7, @ANYRESOCT=r10, @ANYBLOB="010000000000000000ef02000000400001802c0004001400010002000000ac05140f00000000000000001400020002000000ffffffff00000000000000000d00010075648f27b0dcf44f70"], 0x54}, 0x1, 0x0, 0x0, 0x4000801}, 0x8010) (async)
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="44000000100003050300000000000000000000000c52e03ab42f741020b497453688f7354bb7b478c0b213c70866900dec3edace456f3fbf684a57be5b0fb4c540aea65866fdcd2196ba44b7643c8c108b651b1641b9a84385da787f6c0e300a68d8eea16708d7a8fca8824f2d339dcd07b21b5e1a9bb34f1768c88d572d9a45e667e6f1f495f2b4ba36b35864cf4af0362b0c39b5ad10cbecc40979a145dad7f35220541400"/178, @ANYRES32=0x0, @ANYBLOB="15010000000001002400128009000100626f6e64000000001400028008000300060000000800040000000000"], 0x44}}, 0x28000000) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

677.668952ms ago: executing program 2 (id=1296):
connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32, @ANYBLOB="080004000001"], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0)

73.389758ms ago: executing program 2 (id=1297):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448cb, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000380)={0x9, 0x5, 0x4, 0x7f, 0x3, 0x0, [{0x7, 0xb13b, 0x3, '\x00', 0xc}, {0x1000, 0x6, 0x3, '\x00', 0x100e}, {0x10001, 0x4, 0x10, '\x00', 0x100}]})
bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
socket$inet(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4)
r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup=r3, 0x5, 0x1, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0]}, 0x40)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r2, @ANYBLOB="0000000000000000890000000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94)
write(r1, &(0x7f0000000040)="05000000010000", 0x7)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001600)=""/4098, 0x1002}, {&(0x7f0000000140)=""/185, 0xb9}], 0x2}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x6, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x6d}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x4, 0x12}, {0x65, 0x0, 0x6, 0x9}}, [@printk={@ld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x4, 0x0, 0x3, 0x9}, {}, {}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

73.200939ms ago: executing program 1 (id=1298):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_COMMENT={0x9, 0x1a, 'syz1\x00'}]}]}, 0x44}, 0x1, 0x0, 0x10000000000, 0x10040047}, 0x240008c4)

4.79231ms ago: executing program 1 (id=1299):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f00000052c0)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000ec0)=""/133, 0x85}, {&(0x7f0000006080)=""/4074, 0xfea}, {&(0x7f0000000240)=""/103, 0x67}, {&(0x7f0000000040)=""/113, 0x71}, {&(0x7f0000000140)=""/55, 0x37}, {&(0x7f0000000340)=""/107, 0x6b}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f0000000e00)=""/188, 0xbc}, {&(0x7f00000001c0)=""/54, 0x36}], 0x9}, 0x4db}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000780)=""/131, 0x83}, {&(0x7f0000000840)=""/158, 0x9e}, {&(0x7f0000000900)=""/220, 0xdc}, {&(0x7f0000000a00)=""/11, 0xb}, {&(0x7f0000000a40)=""/80, 0x50}, {&(0x7f0000000b40)=""/97, 0x61}, {&(0x7f0000000bc0)=""/123, 0x7b}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/171, 0xab}], 0x9, 0x0, 0x0, 0x6c0e}, 0xf}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004e00)=""/166, 0xa6}, 0xb68d}], 0x9, 0x40002000, 0x0)

4.636942ms ago: executing program 0 (id=1300):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x91, 0x2}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x6, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0xa, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x81}, @call={0x85, 0x0, 0x0, 0x8f}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000080)='GPL\x00', 0x9, 0x15, &(0x7f00000000c0)=""/21, 0x40f00, 0x45, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000100)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xb, 0x8f89, 0x400}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[r1, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94)

1.943924ms ago: executing program 1 (id=1301):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d5, 0x32}, 0x0, @in6=@loopback, 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0xffffffff, 0xfffffff9}}, 0xe8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x8822d55593a2179}, 0xc)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x7600)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={<r5=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x74, &(0x7f0000000240)={r5, 0x2, 0x30, 0xa5f}, &(0x7f0000000080)=0x18)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x2, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15010000200000002400128009000100626f6eb7b0d842aa9546c254a6305c1d606400000000140002800500010006000000050011000b000000d0efad1427"], 0x44}}, 0x28000001)

0s ago: executing program 0 (id=1302):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000740)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0xfffffff8, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c)
setsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
pread64(r2, &(0x7f0000000480)=""/61, 0x3d, 0x7fffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r3)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x28, r4, 0x1, 0x80000, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x28}}, 0x40000)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', <r8=>0x0})
r9 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', <r10=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01d5d3bd700003dcdf250100000008000100", @ANYRES32=r8, @ANYBLOB="44000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000700000008000600", @ANYRES32=r10, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x400}, 0x4040014)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r12)
ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000700)={'wpan0\x00', <r14=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEV(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="030027bd7000fddbdf251b00000010002e800c000400000000000000000008000300", @ANYRES32=r14], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0)
ioctl$SIOCRSACCEPT(r9, 0x89e3)
sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r4, @ANYBLOB="120826bd7000fedbdf2509000800050005006600000005000500280000003c0001800500020002000000080007002277cded1ec80ac1968edf64fe60cdae2884ecd99d664deed1ababaa76dbd4484ed81e0cbccd032e293f3dee8dc6031c026a63b6b2a1e6aa0ab8e6d558aa3a9da7f1278717a23e846720d65e054c15d00bb81ff2218eb3fbcd060edf6757567ec702aa0d3abe692a28672aabad6b210a7cc85af6b2f2ec0e67140c7941876fb51ff90ce18a2045c8a03123d3727e9cf6f53eba49c67444e387b3cd9b22bd", @ANYRES32=0x0, @ANYBLOB="08000300e00000010800060002000000080006001000000008000300e000000208000300ac1e00010500050005000000080002000600000008000300080000002800018014000400fe88000000000000000000000000000108000700", @ANYRES32=r10, @ANYBLOB="0500020002000000"], 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000840)
sendmsg$NFT_BATCH(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r14], 0x7c}, 0x1, 0x0, 0x0, 0x20004041}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1000000}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40040)
pipe(&(0x7f0000000080)={<r15=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r15}, 0x0, &(0x7f00000002c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYRESDEC=r15], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r15, 0xc0096616, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:45793' (ED25519) to the list of known hosts.
syzkaller login: [   48.697370][ T5807] cgroup: Unknown subsys name 'net'
[   48.816456][ T5807] cgroup: Unknown subsys name 'cpuset'
[   48.826129][ T5807] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.141388][ T5807] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.521080][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.524121][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.526748][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.529971][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.533962][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.537045][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.558027][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.561758][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.564965][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.568027][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.574084][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.582386][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.585314][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.588853][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.591562][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.749008][ T5820] chnl_net:caif_netlink_parms(): no params data found
[   53.853489][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.856122][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.859376][ T5820] bridge_slave_0: entered allmulticast mode
[   53.864300][ T5820] bridge_slave_0: entered promiscuous mode
[   53.877250][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.879744][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.882821][ T5820] bridge_slave_1: entered allmulticast mode
[   53.885567][ T5820] bridge_slave_1: entered promiscuous mode
[   53.923860][ T5824] chnl_net:caif_netlink_parms(): no params data found
[   53.959551][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.978122][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.996695][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   54.021412][ T5820] team0: Port device team_slave_0 added
[   54.042440][ T5820] team0: Port device team_slave_1 added
[   54.044668][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.047825][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.050211][ T5824] bridge_slave_0: entered allmulticast mode
[   54.053167][ T5824] bridge_slave_0: entered promiscuous mode
[   54.079195][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.082050][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.084744][ T5824] bridge_slave_1: entered allmulticast mode
[   54.088257][ T5824] bridge_slave_1: entered promiscuous mode
[   54.128554][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.131500][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.143514][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.156979][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.161245][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.165097][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.175796][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.188479][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.198695][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.201902][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.204326][ T5828] bridge_slave_0: entered allmulticast mode
[   54.207056][ T5828] bridge_slave_0: entered promiscuous mode
[   54.230990][ T5824] team0: Port device team_slave_0 added
[   54.233699][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.236121][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.238518][ T5828] bridge_slave_1: entered allmulticast mode
[   54.241266][ T5828] bridge_slave_1: entered promiscuous mode
[   54.252174][ T5824] team0: Port device team_slave_1 added
[   54.293923][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.300694][ T5820] hsr_slave_0: entered promiscuous mode
[   54.303495][ T5820] hsr_slave_1: entered promiscuous mode
[   54.307795][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.336957][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.339391][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.349896][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.375495][ T5828] team0: Port device team_slave_0 added
[   54.378672][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.383640][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.395117][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.413988][ T5828] team0: Port device team_slave_1 added
[   54.471517][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.474000][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.485339][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.509561][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.512086][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.523246][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.533061][ T5824] hsr_slave_0: entered promiscuous mode
[   54.535423][ T5824] hsr_slave_1: entered promiscuous mode
[   54.537745][ T5824] debugfs: 'hsr0' already exists in 'hsr'
[   54.539699][ T5824] Cannot create hsr debugfs directory
[   54.606815][ T5828] hsr_slave_0: entered promiscuous mode
[   54.609357][ T5828] hsr_slave_1: entered promiscuous mode
[   54.611853][ T5828] debugfs: 'hsr0' already exists in 'hsr'
[   54.613739][ T5828] Cannot create hsr debugfs directory
[   54.683039][ T5820] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.689341][ T5820] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.702942][ T5820] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.719777][ T5820] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.790987][ T5824] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.804139][ T5824] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.814112][ T5824] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.819252][ T5824] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.850861][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.856804][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.862989][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.867723][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.929203][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.954871][ T5820] 8021q: adding VLAN 0 to HW filter on device team0
[   54.963051][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.966009][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.978039][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.980953][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.987383][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.006319][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.019641][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   55.031203][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.034153][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.046907][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.049929][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.056834][ T5824] 8021q: adding VLAN 0 to HW filter on device team0
[   55.067988][ T5820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.076828][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.079677][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.104383][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.107462][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.130351][ T5824] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   55.135080][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.217826][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.267386][ T5820] veth0_vlan: entered promiscuous mode
[   55.277434][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.282898][ T5820] veth1_vlan: entered promiscuous mode
[   55.290275][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.320162][ T5820] veth0_macvtap: entered promiscuous mode
[   55.329809][ T5828] veth0_vlan: entered promiscuous mode
[   55.335394][ T5820] veth1_macvtap: entered promiscuous mode
[   55.341273][ T5824] veth0_vlan: entered promiscuous mode
[   55.344825][ T5828] veth1_vlan: entered promiscuous mode
[   55.358933][ T5824] veth1_vlan: entered promiscuous mode
[   55.363417][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.370158][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.383640][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.389220][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.402815][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.411273][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.428102][ T5828] veth0_macvtap: entered promiscuous mode
[   55.432368][ T5824] veth0_macvtap: entered promiscuous mode
[   55.439086][ T5828] veth1_macvtap: entered promiscuous mode
[   55.449469][ T5824] veth1_macvtap: entered promiscuous mode
[   55.459030][ T3026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.465068][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.467788][ T3026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.477701][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.486271][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.498012][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.508203][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.514331][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.517521][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.523875][ T3026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.526394][ T3026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.531280][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.534539][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.537425][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.540289][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.551505][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.617378][ T5820] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.622955][ T5827] Bluetooth: hci2: command tx timeout
[   55.624909][ T5827] Bluetooth: hci1: command tx timeout
[   55.626794][ T5827] Bluetooth: hci0: command tx timeout
[   55.627227][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.631159][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.652437][  T265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.655303][  T265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.668037][ T3026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.671508][ T3026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.690466][ T5887] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2'.
[   55.695565][  T265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.699077][  T265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.756966][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4'.
[   55.800945][ T5893] pim6reg: entered allmulticast mode
[   55.806923][ T5893] pim6reg: left allmulticast mode
[   55.822574][ T5896] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[   55.825874][ T5896] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[   55.830482][ T5896] Zero length message leads to an empty skb
[   55.994545][ T5914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12'.
[   56.004779][ T5914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12'.
[   56.011533][ T5914] netlink: 'syz.2.12': attribute type 1 has an invalid length.
[   56.044499][ T5920] netlink: 'syz.2.13': attribute type 1 has an invalid length.
[   56.170335][ T5933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20'.
[   56.202093][ T5937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21'.
[   56.208797][ T5936] nbd: nbd2 already in use
[   56.263786][ T5941] netlink: 20 bytes leftover after parsing attributes in process `syz.2.23'.
[   56.268096][ T5942] netlink: 'syz.1.21': attribute type 4 has an invalid length.
[   56.287684][ T5942] netlink: 'syz.1.21': attribute type 4 has an invalid length.
[   56.343974][ T5944] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.379154][ T5948] team0: No ports can be present during mode change
[   56.385504][ T5948] syz.2.25 uses obsolete (PF_INET,SOCK_PACKET)
[   56.388605][ T5948] syzkaller1: entered promiscuous mode
[   56.390444][ T5948] syzkaller1: entered allmulticast mode
[   56.393271][ T5948] syzkaller1: left promiscuous mode
[   56.395208][ T5948] syzkaller1: left allmulticast mode
[   56.398006][ T5948] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.623143][ T5952] netlink: 'syz.0.27': attribute type 1 has an invalid length.
[   56.753930][ T5952] 8021q: VLANs not supported on sit0
[   56.934400][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29'.
[   56.937740][    C0] vcan0: j1939_session_tx_dat: 0xffff88801f5e2800: queue data error: -100
[   56.940515][    C0] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found
[   56.943076][    C0] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found
[   56.945546][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   56.948090][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   56.950550][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   56.953067][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   56.955508][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   56.958047][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   56.960544][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   56.963069][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   56.965675][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   56.968220][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   56.970791][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   56.973409][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   56.975986][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   56.978496][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   56.981079][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   56.983696][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   56.986302][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   56.988838][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   56.991415][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   56.994054][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   56.996514][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   56.998956][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.001640][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.004205][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.006799][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.009340][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.011991][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.014522][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.017089][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.019641][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.022292][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.024828][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.027395][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.029917][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.032535][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.035067][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.037664][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.040219][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.042850][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.045390][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.047965][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.050589][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.053259][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.055790][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.058341][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.060928][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.063549][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.066046][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.068669][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.071259][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.073887][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.076376][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.079400][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.082700][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.085884][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.089026][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.092317][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.095332][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.098591][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.101825][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.105195][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.108317][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.111523][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.114751][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.117924][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.121059][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.124372][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.127485][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.130734][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.133946][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.136622][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.139150][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.141810][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.144343][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.146919][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.149433][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.152071][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.154613][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.157181][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.159711][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.162361][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.164881][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.167866][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.171065][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.173858][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.176693][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.179298][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.181957][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.184564][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.187131][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.190140][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.193000][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.195608][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.198195][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.200800][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.203433][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.206027][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.208584][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.211185][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.213843][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.216398][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.218962][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.221641][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.224190][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.226789][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.229347][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.232032][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.234592][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.237171][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.239729][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.242505][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.245078][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.248049][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.250587][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.253391][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.256465][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.259741][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.263059][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.266332][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.269531][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.272853][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.276040][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.279260][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.282543][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.285257][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   57.287806][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   57.415258][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31'.
[   57.441517][ T5971] netlink: 'syz.1.32': attribute type 3 has an invalid length.
[   57.687824][ T5992] netlink: 45 bytes leftover after parsing attributes in process `syz.2.39'.
[   57.701862][ T5826] Bluetooth: hci0: command tx timeout
[   57.703967][ T5826] Bluetooth: hci1: command tx timeout
[   57.707157][ T5827] Bluetooth: hci2: command tx timeout
[   57.767440][ T6002] team0: Device gtp1 is of different type
[   57.821850][ T6003] netlink: 'syz.2.41': attribute type 7 has an invalid length.
[   57.824362][ T6003] netlink: 'syz.2.41': attribute type 8 has an invalid length.
[   58.324910][ T6058] netlink: 'syz.1.58': attribute type 1 has an invalid length.
[   58.330929][ T6059] bond_slave_0: entered promiscuous mode
[   58.333004][ T6059] bond_slave_1: entered promiscuous mode
[   58.336315][ T6059] macsec1: entered allmulticast mode
[   58.338111][ T6059] bond0: entered allmulticast mode
[   58.339979][ T6059] bond_slave_0: entered allmulticast mode
[   58.342401][ T6059] bond_slave_1: entered allmulticast mode
[   58.346226][ T6059] bond0: left allmulticast mode
[   58.347895][ T6059] bond_slave_0: left allmulticast mode
[   58.349726][ T6059] bond_slave_1: left allmulticast mode
[   58.352046][ T6059] bond_slave_0: left promiscuous mode
[   58.353895][ T6059] bond_slave_1: left promiscuous mode
[   58.798170][ T6097] netlink: 'syz.1.71': attribute type 2 has an invalid length.
[   59.016702][ T6119] C: renamed from team_slave_0 (while UP)
[   59.020894][ T6119] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   59.081081][ T6126] sock: sock_set_timeout: `syz.0.77' (pid 6126) tries to set negative timeout
[   59.226889][ T6142] tipc: Started in network mode
[   59.229082][ T6142] tipc: Node identity , cluster identity 4711
[   59.231918][ T6142] tipc: Failed to obtain node identity
[   59.234473][ T6142] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   59.338268][ T6153] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   59.588077][ T6170] ip6gre1: entered promiscuous mode
[   59.771797][   T54] Bluetooth: hci2: command tx timeout
[   59.773131][ T5826] Bluetooth: hci1: command tx timeout
[   59.773788][   T54] Bluetooth: hci0: command tx timeout
[   60.139846][ T6197] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   60.190876][ T6202] sctp: [Deprecated]: syz.2.105 (pid 6202) Use of struct sctp_assoc_value in delayed_ack socket option.
[   60.190876][ T6202] Use struct sctp_sack_info instead
[   60.527270][   T24] IPVS: starting estimator thread 0...
[   60.533778][ T6224] syzkaller1: entered promiscuous mode
[   60.535627][ T6224] syzkaller1: entered allmulticast mode
[   60.621765][ T6226] IPVS: using max 79 ests per chain, 189600 per kthread
[   60.659604][ T6234] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[   60.663684][ T6234] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[   60.836567][ T6254] __nla_validate_parse: 17 callbacks suppressed
[   60.836576][ T6254] netlink: 14 bytes leftover after parsing attributes in process `syz.2.121'.
[   60.864468][ T6257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.123'.
[   61.097420][ T6277] validate_nla: 3 callbacks suppressed
[   61.097431][ T6277] netlink: 'syz.0.128': attribute type 2 has an invalid length.
[   61.246437][ T6284] netlink: 132 bytes leftover after parsing attributes in process `syz.0.131'.
[   61.251195][ T6284] warning: `syz.0.131' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   61.388155][ T6301] netlink: 'syz.0.135': attribute type 21 has an invalid length.
[   61.391202][ T6301] netlink: 128 bytes leftover after parsing attributes in process `syz.0.135'.
[   61.395446][ T6301] netlink: 'syz.0.135': attribute type 4 has an invalid length.
[   61.398628][ T6301] netlink: 'syz.0.135': attribute type 3 has an invalid length.
[   61.403436][ T6301] netlink: 3 bytes leftover after parsing attributes in process `syz.0.135'.
[   61.506443][ T6313] tap0: tun_chr_ioctl cmd 2147767521
[   61.720708][ T6324] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.723647][ T6324] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.772404][ T6324] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   61.777971][ T6324] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   61.841553][ T5852] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.845309][ T5852] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.849971][ T5852] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.854353][ T5826] Bluetooth: hci0: command tx timeout
[   61.854379][ T5827] Bluetooth: hci2: command tx timeout
[   61.856198][ T5826] Bluetooth: hci1: command tx timeout
[   61.860727][ T5852] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.905539][ T6324] syz.0.139 (6324) used greatest stack depth: 19832 bytes left
[   62.085836][ T1271] cfg80211: failed to load regulatory.db
[   62.168396][ T6346] netlink: 'syz.0.145': attribute type 4 has an invalid length.
[   62.390067][ T6363] netlink: 20 bytes leftover after parsing attributes in process `syz.0.151'.
[   62.407735][ T6373] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.410394][ T6373] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.417925][ T6373] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   62.454596][ T6377] IPVS: set_ctl: invalid protocol: 43 172.30.1.1:20004
[   62.499334][ T6380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.156'.
[   62.568019][ T6385] netlink: 276 bytes leftover after parsing attributes in process `syz.0.158'.
[   62.598047][ T6388] netlink: 'syz.1.160': attribute type 12 has an invalid length.
[   62.647656][ T6397] netlink: 276 bytes leftover after parsing attributes in process `syz.0.158'.
[   62.710372][ T6399] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.724192][ T6402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.163'.
[   62.764616][ T6399] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.785127][ T6407] netlink: 'syz.1.163': attribute type 10 has an invalid length.
[   62.799103][ T6407] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   62.815106][ T6407] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   62.821266][ T6407] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   62.835140][ T6399] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.876859][ T6399] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.887252][ T6414] gtp0: entered promiscuous mode
[   62.889078][ T6414] gtp0: entered allmulticast mode
[   62.924387][ T6417] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[   62.929458][ T6417] tipc: Started in network mode
[   62.931984][ T6417] tipc: Node identity 3af873d2443e, cluster identity 4711
[   62.934656][ T6417] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.937552][ T6417] syzkaller0: entered promiscuous mode
[   62.939484][ T6417] syzkaller0: entered allmulticast mode
[   62.957296][ T5852] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.960921][ T6416] tipc: Resetting bearer <eth:syzkaller0>
[   62.969988][ T6416] tipc: Disabling bearer <eth:syzkaller0>
[   62.980280][ T5852] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.987599][ T5852] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.995857][ T5852] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.931817][ T5826] Bluetooth: hci2: command tx timeout
[   64.189445][ T6460] netlink: 'syz.0.186': attribute type 4 has an invalid length.
[   64.195565][ T6460] netlink: 'syz.0.186': attribute type 4 has an invalid length.
[   64.336064][ T6466] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   64.339541][ T6470] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   64.385683][ T6474] netlink: 'syz.0.190': attribute type 16 has an invalid length.
[   65.314433][ T6554] syzkaller0: entered promiscuous mode
[   65.316859][ T6554] syzkaller0: entered allmulticast mode
[   66.800053][ T6589] validate_nla: 2 callbacks suppressed
[   66.800062][ T6589] netlink: 'syz.0.235': attribute type 1 has an invalid length.
[   66.807055][ T6589] netlink: 'syz.0.235': attribute type 1 has an invalid length.
[   66.826153][ T6591] bridge0: port 3(ipvlan2) entered blocking state
[   66.828503][ T6591] bridge0: port 3(ipvlan2) entered disabled state
[   66.830682][ T6591] ipvlan2: entered allmulticast mode
[   66.832599][ T6591] bridge0: entered allmulticast mode
[   66.835497][ T6591] ipvlan2: left allmulticast mode
[   66.837223][ T6591] bridge0: left allmulticast mode
[   66.886629][ T6599] __nla_validate_parse: 49 callbacks suppressed
[   66.886639][ T6599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.237'.
[   66.987268][ T6609] netlink: 92 bytes leftover after parsing attributes in process `syz.0.242'.
[   67.008766][ T6611] tipc: Started in network mode
[   67.010382][ T6611] tipc: Node identity 3a91993da30a, cluster identity 4711
[   67.013000][ T6611] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.016913][ T6611] syzkaller0: entered promiscuous mode
[   67.019374][ T6611] syzkaller0: entered allmulticast mode
[   67.033384][ T6611] tipc: Resetting bearer <eth:syzkaller0>
[   67.036423][ T6611] netlink: 'syz.1.243': attribute type 2 has an invalid length.
[   67.043108][ T6610] tipc: Resetting bearer <eth:syzkaller0>
[   67.065125][ T6610] tipc: Disabling bearer <eth:syzkaller0>
[   67.072671][ T6615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.245'.
[   67.090143][ T6615] 8021q: adding VLAN 0 to HW filter on device bond1
[   67.160474][ T6623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.247'.
[   67.163562][ T6623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.247'.
[   67.166490][ T6623] netlink: 'syz.1.247': attribute type 12 has an invalid length.
[   67.309407][ T6636] netlink: 16 bytes leftover after parsing attributes in process `syz.0.253'.
[   67.316788][ T6636] netlink: 40 bytes leftover after parsing attributes in process `syz.0.253'.
[   67.329886][ T6638] netlink: 92 bytes leftover after parsing attributes in process `syz.2.254'.
[   67.463499][ T6654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.260'.
[   67.544994][ T6661] netlink: 16 bytes leftover after parsing attributes in process `syz.2.263'.
[   67.884888][ T6696] syzkaller0: entered promiscuous mode
[   67.888249][ T6696] syzkaller0: entered allmulticast mode
[   67.982196][ T6705] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.072221][ T6712] tipc: Started in network mode
[   68.074272][ T6712] tipc: Node identity 3a135b000eaf, cluster identity 4711
[   68.077293][ T6712] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.081411][ T6712] syzkaller0: entered promiscuous mode
[   68.083917][ T6712] syzkaller0: entered allmulticast mode
[   68.100279][ T6712] tipc: Resetting bearer <eth:syzkaller0>
[   68.110993][ T6711] tipc: Resetting bearer <eth:syzkaller0>
[   68.126330][ T6711] tipc: Disabling bearer <eth:syzkaller0>
[   68.359570][ T6736] netlink: 'syz.0.294': attribute type 14 has an invalid length.
[   68.528262][ T6756] netlink: 'syz.0.301': attribute type 1 has an invalid length.
[   68.625227][ T6766] sctp: [Deprecated]: syz.2.306 (pid 6766) Use of struct sctp_assoc_value in delayed_ack socket option.
[   68.625227][ T6766] Use struct sctp_sack_info instead
[   69.248774][ T6825] netlink: 'syz.2.321': attribute type 2 has an invalid length.
[   69.253872][ T6825] syzkaller1: entered allmulticast mode
[   69.257821][ T6825] netlink: 'syz.2.321': attribute type 21 has an invalid length.
[   69.260832][ T6825] IPv6: NLM_F_CREATE should be specified when creating new route
[   69.266340][ T6825] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   69.269232][ T6825] IPv6: NLM_F_CREATE should be set when creating new route
[   69.272137][ T6825] IPv6: NLM_F_CREATE should be set when creating new route
[   69.274805][ T6825] IPv6: NLM_F_CREATE should be set when creating new route
[   69.455731][ T6835] netlink: 'syz.0.328': attribute type 1 has an invalid length.
[   69.459335][ T6835] netlink: 'syz.0.328': attribute type 2 has an invalid length.
[   69.463305][ T6835] @: renamed from veth0_vlan
[   69.564166][ T6841] 8021q: adding VLAN 0 to HW filter on device bond2
[   70.897631][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.013946][ T6906] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   71.028929][ T6906] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   71.060208][ T6906] : entered promiscuous mode
[   71.288127][ T6926] Bluetooth: MGMT ver 1.23
[   72.000623][ T6978] __nla_validate_parse: 25 callbacks suppressed
[   72.000639][ T6978] netlink: 36 bytes leftover after parsing attributes in process `syz.2.382'.
[   72.007740][ T6978] netlink: 16 bytes leftover after parsing attributes in process `syz.2.382'.
[   72.010921][ T6978] netlink: 36 bytes leftover after parsing attributes in process `syz.2.382'.
[   72.015776][ T6978] netlink: 36 bytes leftover after parsing attributes in process `syz.2.382'.
[   72.078636][ T6982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.385'.
[   72.083282][ T6982] validate_nla: 1 callbacks suppressed
[   72.083291][ T6982] netlink: 'syz.2.385': attribute type 2 has an invalid length.
[   72.087713][ T6982] netlink: 'syz.2.385': attribute type 1 has an invalid length.
[   72.090223][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.385'.
[   72.110371][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.386'.
[   72.123285][ T6986] netlink: 92 bytes leftover after parsing attributes in process `syz.0.384'.
[   72.203981][ T6997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.391'.
[   72.236906][ T6997] team0: Port device team_slave_0 removed
[   72.309896][ T6995] netlink: 36 bytes leftover after parsing attributes in process `syz.2.390'.
[   74.197174][ T7024] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.199959][ T7024] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.208230][ T7024] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.211134][ T7024] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.253223][ T7027] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   74.270311][ T7027] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   74.384177][ T7041] netlink: 'syz.0.406': attribute type 83 has an invalid length.
[   74.538352][ T7063] batadv_slave_1: entered promiscuous mode
[   74.579858][ T7065] batadv_slave_1: left promiscuous mode
[   74.584155][ T7061] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.587407][ T7061] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.593161][ T7061] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.596272][ T7061] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.859599][ T7089] syz.2.421 (7089) used greatest stack depth: 18808 bytes left
[   74.903015][ T7094] veth1_macvtap: left promiscuous mode
[   74.914523][ T7094] macsec0: entered allmulticast mode
[   74.973811][ T7105] Illegal XDP return value 4294967274 on prog  (id 67) dev N/A, expect packet loss!
[   74.998646][ T7102] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.002976][ T7102] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.237067][ T7121] block nbd0: Receive control failed (result -32)
[   75.282037][ T7128] netlink: 'syz.0.437': attribute type 9 has an invalid length.
[   75.888184][ T7163] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[   75.928914][ T7170] netlink: 'syz.0.450': attribute type 1 has an invalid length.
[   76.037064][ T5852] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   76.040030][ T5852] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   76.043616][ T5852] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   76.045612][ T7185] netlink: 'syz.2.456': attribute type 8 has an invalid length.
[   76.046618][ T5852] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   76.631108][ T7230] 8021q: VLANs not supported on xfrm0
[   77.008884][ T7265] __nla_validate_parse: 30 callbacks suppressed
[   77.008894][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.483'.
[   77.017762][ T7267] netlink: 732 bytes leftover after parsing attributes in process `syz.2.484'.
[   77.020682][ T7267] netlink: 732 bytes leftover after parsing attributes in process `syz.2.484'.
[   77.066185][ T7265] syzkaller0: entered promiscuous mode
[   77.068289][ T7265] syzkaller0: entered allmulticast mode
[   77.125283][ T7279] netlink: 'syz.2.488': attribute type 11 has an invalid length.
[   77.776200][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.490'.
[   77.778984][ T7287] netlink: 84 bytes leftover after parsing attributes in process `syz.2.490'.
[   77.867675][ T7299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.495'.
[   77.920587][ T7304] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[   77.995445][ T7319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.501'.
[   77.998484][ T7319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.501'.
[   78.002522][ T7319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.501'.
[   78.005629][ T7319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.501'.
[   78.184657][ T7339] macsec1: entered promiscuous mode
[   78.186759][ T7339] macvlan1: entered promiscuous mode
[   78.191058][ T7339] macvlan1: left promiscuous mode
[   78.207442][ T7343] netlink: 'syz.0.510': attribute type 2 has an invalid length.
[   78.298735][ T7349] : entered promiscuous mode
[   78.469800][ T7363] netlink: 'syz.0.517': attribute type 13 has an invalid length.
[   78.479993][ T5852] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   78.480040][ T7363] netlink: 'syz.0.517': attribute type 13 has an invalid length.
[   78.486897][ T5852] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   78.491486][ T5852] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   78.500541][ T5852] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   79.534138][ T7392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.611497][ T7402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   80.111049][ T7449] ip6erspan0: entered allmulticast mode
[   81.727324][ T7513] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.748883][ T7514] tipc: Disabling bearer <eth:syzkaller0>
[   81.926006][ T7536] IPVS: set_ctl: invalid protocol: 4 172.20.20.68:20003
[   82.058738][ T7553] __nla_validate_parse: 99 callbacks suppressed
[   82.058754][ T7553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.582'.
[   82.190534][ T7564] netlink: 20 bytes leftover after parsing attributes in process `syz.0.579'.
[   82.446814][ T7580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.590'.
[   82.451258][ T7582] netlink: 36 bytes leftover after parsing attributes in process `syz.1.590'.
[   82.457529][ T7580] netlink: 36 bytes leftover after parsing attributes in process `syz.1.590'.
[   82.599757][ T7589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.594'.
[   82.618061][ T7591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.595'.
[   82.626624][ T7591] netlink: 384 bytes leftover after parsing attributes in process `syz.1.595'.
[   82.664661][ T7595] netlink: 40 bytes leftover after parsing attributes in process `syz.1.597'.
[   82.710146][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.599'.
[   82.838979][ T7613] netlink: 'syz.1.604': attribute type 3 has an invalid length.
[   82.889077][ T7619] syzkaller0: entered promiscuous mode
[   82.894071][ T7619] syzkaller0: entered allmulticast mode
[   83.177555][ T7654] geneve2: entered promiscuous mode
[   83.297539][ T7662] pim6reg1: entered promiscuous mode
[   83.299776][ T7662] pim6reg1: entered allmulticast mode
[   83.427192][ T7672] netlink: 'syz.0.624': attribute type 1 has an invalid length.
[   84.595855][ T7725] af_packet: tpacket_rcv: packet too big, clamped from 240 to 4294967272. macoff=96
[   85.006869][ T7756] lo: entered allmulticast mode
[   85.445936][ T7796] syzkaller1: entered promiscuous mode
[   85.447886][ T7796] syzkaller1: entered allmulticast mode
[   86.569684][ T7856] netlink: 'syz.2.686': attribute type 11 has an invalid length.
[   86.989295][ T7876] syzkaller1: entered promiscuous mode
[   86.993256][ T7876] syzkaller1: entered allmulticast mode
[   87.140180][ T7890] netlink: 'syz.1.700': attribute type 5 has an invalid length.
[   87.143207][ T7890] __nla_validate_parse: 20 callbacks suppressed
[   87.143215][ T7890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.700'.
[   87.148426][ T7890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.700'.
[   87.201293][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.702'.
[   87.396456][ T7909] bridge_slave_0: left allmulticast mode
[   87.398748][ T7909] bridge_slave_0: left promiscuous mode
[   87.400853][ T7909] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.406266][ T7909] bridge_slave_1: left allmulticast mode
[   87.408247][ T7909] bridge_slave_1: left promiscuous mode
[   87.410329][ T7909] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.416784][ T7909] bond0: (slave bond_slave_0): Releasing backup interface
[   87.423015][ T7909] bond0: (slave bond_slave_1): Releasing backup interface
[   87.435337][ T7909] team0: Port device team_slave_0 removed
[   87.441138][ T7909] team0: Port device team_slave_1 removed
[   87.453368][ T7910] netlink: 'syz.1.707': attribute type 32 has an invalid length.
[   87.500860][ T7909] netlink: 32 bytes leftover after parsing attributes in process `syz.2.704'.
[   87.781322][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.714'.
[   88.089792][ T7955] netlink: 'syz.1.720': attribute type 10 has an invalid length.
[   88.108046][ T7955] team0: Port device dummy0 added
[   88.121830][ T7955] netlink: 'syz.1.720': attribute type 10 has an invalid length.
[   88.134059][ T7955] team0: Port device dummy0 removed
[   88.139587][ T7955] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   88.179939][ T7959] syzkaller0: create flow: hash 1932124280 index 1
[   88.195389][   T13] syzkaller0: tun_net_xmit 76
[   88.197699][   T13] syzkaller0: tun_net_xmit 48
[   88.221890][   T24] syzkaller0: tun_net_xmit 76
[   88.227341][ T7961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.723'.
[   88.231439][ T7961] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   88.234936][ T7961] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.241249][ T7961] netlink: 104 bytes leftover after parsing attributes in process `syz.2.723'.
[   88.580251][ T7971] netlink: 92 bytes leftover after parsing attributes in process `syz.2.727'.
[   88.686137][ T7976] tipc: Enabling <ib:lo> not permitted
[   88.688019][ T7976] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[   88.831784][   T24] syzkaller0: tun_net_xmit 76
[   88.923495][ T7953] syzkaller0: delete flow: hash 1932124280 index 1
[   89.655759][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.733'.
[   89.975662][ T8015] netlink: 16 bytes leftover after parsing attributes in process `syz.0.742'.
[   90.687844][ T8050] netlink: 'syz.2.751': attribute type 4 has an invalid length.
[   91.953927][ T8119] netlink: 'syz.2.775': attribute type 11 has an invalid length.
[   92.403209][ T8154] __nla_validate_parse: 50 callbacks suppressed
[   92.403239][ T8154] netlink: 96 bytes leftover after parsing attributes in process `syz.2.785'.
[   92.908328][ T8173] netlink: 676 bytes leftover after parsing attributes in process `syz.0.790'.
[   92.914524][ T8173] netlink: 676 bytes leftover after parsing attributes in process `syz.0.790'.
[   92.924361][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.791'.
[   92.933332][ T8173] netlink: 16 bytes leftover after parsing attributes in process `syz.0.790'.
[   92.996504][ T8181] netlink: 36 bytes leftover after parsing attributes in process `syz.0.794'.
[   93.181907][ T8196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.800'.
[   93.185639][ T8194] netlink: 830 bytes leftover after parsing attributes in process `syz.2.799'.
[   93.209553][ T8199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.801'.
[   93.305235][ T8208] netlink: 'syz.1.804': attribute type 2 has an invalid length.
[   93.376419][ T8214] netlink: 'syz.1.806': attribute type 1 has an invalid length.
[   93.379233][ T8214] netlink: 228 bytes leftover after parsing attributes in process `syz.1.806'.
[   93.592710][ T8227] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   93.600294][ T8227] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   94.252828][ T8267] syzkaller1: entered promiscuous mode
[   94.255047][ T8267] syzkaller1: entered allmulticast mode
[   94.260681][ T8267] openvswitch: netlink: Message has 5 unknown bytes.
[   95.289030][ T8362] : renamed from wg2 (while UP)
[   95.440977][ T8378] vlan2: entered allmulticast mode
[   95.612742][ T8392] tap0: tun_chr_ioctl cmd 1074025678
[   95.614971][ T8392] tap0: group set to 0
[   95.917210][ T8423] netlink: 'syz.2.884': attribute type 1 has an invalid length.
[   95.937606][ T8423] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   95.952988][ T5836] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   95.953735][ T8423] 8021q: adding VLAN 0 to HW filter on device bond1
[   95.970610][ T8423] veth3: entered promiscuous mode
[   95.975228][ T8423] bond1: (slave veth3): Enslaving as a backup interface with a down link
[   95.989667][ T8423] bond1: (slave ip6gretap1): Removing an active aggregator
[   95.994691][ T8423] bond1: (slave ip6gretap1): Releasing backup interface
[   95.997812][ T8423] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 36:98:2c:31:f9:68 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   96.009165][ T8423] bond1: (slave veth3): Releasing backup interface
[   96.485869][ T8492] netlink: 'syz.1.908': attribute type 83 has an invalid length.
[   96.582589][ T8502] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   96.933311][ T8555] netlink: 'syz.2.931': attribute type 2 has an invalid length.
[   97.054133][ T8572] IPVS: set_ctl: invalid protocol: 4 172.20.20.68:20003
[   97.241503][ T8593] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[   97.245261][ T8593] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.249712][ T8593] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20001
[   97.654647][ T8616] netlink: 'syz.0.951': attribute type 1 has an invalid length.
[   97.713225][ T8620] __nla_validate_parse: 40 callbacks suppressed
[   97.713237][ T8620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.952'.
[   97.779832][ T8633] netlink: 'syz.0.956': attribute type 10 has an invalid length.
[   97.786445][ T8633] netlink: 'syz.0.956': attribute type 10 has an invalid length.
[   97.791377][ T8633] netlink: 'syz.0.956': attribute type 10 has an invalid length.
[   97.802859][ T8633] netlink: 'syz.0.956': attribute type 10 has an invalid length.
[   97.805997][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.957'.
[   97.880017][ T8638] netlink: 16 bytes leftover after parsing attributes in process `syz.2.958'.
[   97.963350][ T8653] netlink: 92 bytes leftover after parsing attributes in process `syz.2.964'.
[   97.970759][ T8653] netlink: 76 bytes leftover after parsing attributes in process `syz.2.964'.
[   98.123843][ T8671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.972'.
[   98.186414][ T8664] netlink: 104 bytes leftover after parsing attributes in process `syz.2.969'.
[   98.230608][ T8685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.974'.
[   98.256492][ T8685] netlink: 1032 bytes leftover after parsing attributes in process `syz.0.974'.
[   98.347826][ T8703] netlink: 16 bytes leftover after parsing attributes in process `syz.1.981'.
[   98.415884][ T8714] validate_nla: 30 callbacks suppressed
[   98.415893][ T8714] netlink: 'syz.2.986': attribute type 1 has an invalid length.
[   98.464466][ T8721] netlink: zone id is out of range
[   98.466302][ T8721] netlink: zone id is out of range
[   98.473170][ T8721] netlink: zone id is out of range
[   98.475284][ T8721] netlink: zone id is out of range
[   98.678702][ T8741] infiniband syz2: set down
[   98.680473][ T8741] infiniband syz2: added syzkaller0
[   98.702554][ T8741] RDS/IB: syz2: added
[   98.704191][ T8741] smc: adding ib device syz2 with port count 1
[   98.706348][ T8741] smc:    ib device syz2 port 1 has pnetid 
[   99.043658][   T27] smc: removing ib device syz2
[   99.358949][ T8781] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.361408][ T8781] syzkaller0: entered promiscuous mode
[   99.363478][ T8781] syzkaller0: entered allmulticast mode
[   99.466372][ T8780] tipc: Resetting bearer <eth:syzkaller0>
[   99.475827][ T8780] tipc: Disabling bearer <eth:syzkaller0>
[   99.479427][ T8791] netlink: 'syz.2.1012': attribute type 10 has an invalid length.
[   99.486114][ T8791] syz_tun: entered promiscuous mode
[   99.496745][ T8791] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   99.597486][ T8797] sctp: [Deprecated]: syz.1.1014 (pid 8797) Use of int in max_burst socket option.
[   99.597486][ T8797] Use struct sctp_assoc_value instead
[   99.616424][ T8797] tipc: Cannot configure node identity twice
[   99.933164][ T8832] netlink: 'syz.1.1027': attribute type 1 has an invalid length.
[   99.954660][ T8832] bridge0: port 3(vlan2) entered blocking state
[   99.957309][ T8832] bridge0: port 3(vlan2) entered disabled state
[   99.959849][ T8832] vlan2: entered allmulticast mode
[   99.971473][ T8832] bridge0: entered allmulticast mode
[   99.978477][ T8832] vlan2: left allmulticast mode
[   99.980792][ T8832] bridge0: left allmulticast mode
[  100.087384][ T8840] batadv_slave_0: entered promiscuous mode
[  100.354497][ T8841] batadv_slave_0: left promiscuous mode
[  100.624675][ T8858] syzkaller0: entered allmulticast mode
[  100.630668][ T8858] syzkaller0 (unregistering): left allmulticast mode
[  101.615631][ T8949] netlink: 'syz.1.1057': attribute type 21 has an invalid length.
[  101.618183][ T8949] netlink: 'syz.1.1057': attribute type 5 has an invalid length.
[  101.859611][ T8984] netlink: 'syz.1.1067': attribute type 6 has an invalid length.
[  101.867025][ T8984] netlink: 'syz.1.1067': attribute type 6 has an invalid length.
[  101.872118][ T8984] netlink: 'syz.1.1067': attribute type 6 has an invalid length.
[  101.872378][ T8988] netlink: 'syz.1.1067': attribute type 6 has an invalid length.
[  102.973908][ T9028] __nla_validate_parse: 22 callbacks suppressed
[  102.973970][ T9028] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1078'.
[  103.027105][ T9046] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1087'.
[  103.078779][ T9056] Bluetooth: MGMT ver 1.23
[  103.088906][ T9057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1090'.
[  103.220310][ T9071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1095'.
[  103.397884][ T9099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1105'.
[  103.499127][ T9107] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1108'.
[  103.571355][ T9119] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  103.579862][ T9123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1113'.
[  103.613573][ T9125] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.617913][ T9125] team0: Port device batadv0 added
[  103.662351][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1116'.
[  103.709339][ T9137] netlink: 'syz.0.1117': attribute type 10 has an invalid length.
[  103.712891][ T9137] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1117'.
[  103.716219][ T9137] dummy0: entered promiscuous mode
[  103.719492][ T9137] bridge0: port 3(dummy0) entered blocking state
[  103.722480][ T9137] bridge0: port 3(dummy0) entered disabled state
[  103.724678][ T9137] dummy0: entered allmulticast mode
[  104.036506][ T9163] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.039509][ T9163] team0: Port device batadv0 added
[  104.134701][ T9183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1131'.
[  104.278561][ T9196] netlink: 'syz.0.1136': attribute type 1 has an invalid length.
[  104.415123][ T9212] netlink: 'syz.0.1142': attribute type 1 has an invalid length.
[  104.420412][ T9207] bond0: Unable to set up delay as MII monitoring is disabled
[  104.800465][ T9269] netlink: 'syz.2.1164': attribute type 1 has an invalid length.
[  104.838119][ T9269] bond2: entered promiscuous mode
[  104.840105][ T9269] 8021q: adding VLAN 0 to HW filter on device bond2
[  104.855973][ T9264] 8021q: adding VLAN 0 to HW filter on device bond2
[  104.858775][ T9264] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address
[  104.864764][ T9264] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  104.875614][ T9264] bond2: (slave wireguard0): making interface the new active one
[  104.878737][ T9264] wireguard0: entered promiscuous mode
[  104.881440][ T9264] bond2: (slave wireguard0): Enslaving as an active interface with an up link
[  104.887115][ T9274] net_ratelimit: 9 callbacks suppressed
[  104.887123][ T9274] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  104.907097][ T9274] openvswitch: netlink: Actions may not be safe on all matching packets
[  104.963064][ T9284] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20000
[  105.122286][ T9302] netlink: 'syz.1.1178': attribute type 32 has an invalid length.
[  105.135435][ T9305] bridge0: port 4(macvlan3) entered blocking state
[  105.137670][ T9305] bridge0: port 4(macvlan3) entered disabled state
[  105.139785][ T9305] macvlan3: entered allmulticast mode
[  105.142046][ T9305] bridge0: entered allmulticast mode
[  105.144857][ T9305] macvlan3: left allmulticast mode
[  105.146577][ T9305] bridge0: left allmulticast mode
[  105.355300][ T9326] netlink: 'syz.1.1185': attribute type 9 has an invalid length.
[  106.034633][ T9376] pim6reg0: tun_chr_ioctl cmd 1074025673
[  106.614217][ T9400] syz.0.1209 uses old SIOCAX25GETINFO
[  106.824778][ T9417] vlan2: entered promiscuous mode
[  106.826988][ T9417] vlan2: entered allmulticast mode
[  106.829018][ T9417] hsr_slave_1: entered allmulticast mode
[  107.174557][ T9430] netlink: 'syz.0.1223': attribute type 3 has an invalid length.
[  107.453767][ T9450] sctp: [Deprecated]: syz.1.1228 (pid 9450) Use of struct sctp_assoc_value in delayed_ack socket option.
[  107.453767][ T9450] Use struct sctp_sack_info instead
[  107.662656][ T9466] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.668432][ T9466] syzkaller0: entered promiscuous mode
[  107.670237][ T9466] syzkaller0: entered allmulticast mode
[  107.681040][ T9460] tipc: Resetting bearer <eth:syzkaller0>
[  107.685344][ T9459] tipc: Resetting bearer <eth:syzkaller0>
[  107.693788][ T9459] tipc: Disabling bearer <eth:syzkaller0>
[  107.746913][ T9476] netlink: 'syz.2.1234': attribute type 21 has an invalid length.
[  107.749678][ T9476] netlink: 'syz.2.1234': attribute type 1 has an invalid length.
[  108.013310][ T9503] __nla_validate_parse: 20 callbacks suppressed
[  108.013320][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1243'.
[  108.070164][ T9509] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1247'.
[  108.074025][ T9510] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1247'.
[  108.242788][ T9533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1257'.
[  108.284694][ T9537] veth1_to_bond: entered allmulticast mode
[  108.292728][ T9536] veth1_to_bond: left allmulticast mode
[  108.379620][ T9547] 8021q: adding VLAN 0 to HW filter on device macvtap0
[  108.384388][ T9547] team0: Device macvtap0 is already an upper device of the team interface
[  108.713887][ T9596] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  108.761428][ T9600] IPVS: set_ctl: invalid protocol: 59 100.1.1.2:5
[  108.769575][ T9600] syzkaller0: entered promiscuous mode
[  108.771522][ T9600] syzkaller0: entered allmulticast mode
[  108.849029][ T9608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1281'.
[  108.864717][ T9608] netlink: 'syz.1.1281': attribute type 9 has an invalid length.
[  108.869686][ T9608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1281'.
[  108.878636][ T9608] hsr0: entered promiscuous mode
[  108.880716][ T9611] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1282'.
[  108.882457][ T9608] macvlan2: entered promiscuous mode
[  108.886678][ T9608] macvlan2: entered allmulticast mode
[  108.889219][ T9608] hsr0: entered allmulticast mode
[  108.890999][ T9608] hsr_slave_0: entered allmulticast mode
[  108.893147][ T9608] hsr_slave_1: entered allmulticast mode
[  108.904104][ T9611] IPv6: sit1: Disabled Multicast RS
[  108.906914][ T9611] sit1: entered allmulticast mode
[  108.971137][ T9620] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1283'.
[  108.992861][ T9616] netlink: 'syz.0.1283': attribute type 3 has an invalid length.
[  108.995528][ T9626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1287'.
[  108.998690][ T9620] netlink: 'syz.0.1283': attribute type 3 has an invalid length.
[  109.110674][ T9639] netlink: 'syz.1.1293': attribute type 2 has an invalid length.
[  109.118318][ T9639] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1293'.
[  109.123787][ T9639] netlink: 'syz.1.1293': attribute type 2 has an invalid length.
[  109.126371][ T9639] netlink: 'syz.1.1293': attribute type 2 has an invalid length.
[  109.191393][ T9650] syzkaller0: entered promiscuous mode
[  109.195444][ T9650] syzkaller0: entered allmulticast mode
[  109.957955][ T9659] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[  109.966496][ T9667] ==================================================================
[  109.969575][ T9667] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  109.972721][ T9667] Read of size 1 at addr ffff88810e760330 by task syz.1.1301/9667
[  109.976586][ T9667] 
[  109.977585][ T9667] CPU: 0 UID: 0 PID: 9667 Comm: syz.1.1301 Not tainted 6.16.0-syzkaller-06620-gae633388cae3-dirty #0 PREEMPT(full) 
[  109.977600][ T9667] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  109.977607][ T9667] Call Trace:
[  109.977613][ T9667]  <TASK>
[  109.977618][ T9667]  dump_stack_lvl+0x189/0x250
[  109.977632][ T9667]  ? __kasan_check_byte+0x12/0x40
[  109.977650][ T9667]  ? __pfx_dump_stack_lvl+0x10/0x10
[  109.977658][ T9667]  ? lock_release+0x4b/0x3e0
[  109.977670][ T9667]  ? __virt_addr_valid+0x4a5/0x5c0
[  109.977680][ T9667]  print_report+0xca/0x240
[  109.977691][ T9667]  ? xfrm_state_find+0x2cf2/0x5400
[  109.977698][ T9667]  kasan_report+0x118/0x150
[  109.977710][ T9667]  ? xfrm_state_find+0x2cf2/0x5400
[  109.977718][ T9667]  xfrm_state_find+0x2cf2/0x5400
[  109.977724][ T9667]  ? __lock_acquire+0xab9/0xd20
[  109.977737][ T9667]  ? xfrm_state_find+0x1da/0x5400
[  109.977744][ T9667]  ? __pfx_xfrm_state_find+0x10/0x10
[  109.977751][ T9667]  ? __lock_acquire+0xab9/0xd20
[  109.977761][ T9667]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  109.977775][ T9667]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  109.977784][ T9667]  ? __lock_acquire+0xab9/0xd20
[  109.977796][ T9667]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  109.977805][ T9667]  ? rt_set_nexthop+0x693/0xa80
[  109.977816][ T9667]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  109.977825][ T9667]  ? xfrm_expand_policies+0x41f/0x6a0
[  109.977834][ T9667]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  109.977844][ T9667]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  109.977854][ T9667]  xfrm_lookup_route+0x3c/0x1c0
[  109.977862][ T9667]  udp_sendmsg+0x142e/0x2170
[  109.977874][ T9667]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  109.977882][ T9667]  ? __pfx_udp_sendmsg+0x10/0x10
[  109.977891][ T9667]  ? lockdep_hardirqs_on+0x9c/0x150
[  109.977902][ T9667]  ? rcu_is_watching+0x15/0xb0
[  109.977912][ T9667]  ? trace_sched_exit_tp+0x38/0x120
[  109.977922][ T9667]  ? __pfx_aa_sk_perm+0x10/0x10
[  109.977930][ T9667]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  109.977941][ T9667]  ? sock_rps_record_flow+0x19/0x410
[  109.977950][ T9667]  ? inet_sendmsg+0x29c/0x370
[  109.977984][ T9667]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  109.977999][ T9667]  __sock_sendmsg+0x19c/0x270
[  109.978009][ T9667]  ____sys_sendmsg+0x52d/0x830
[  109.978018][ T9667]  ? __pfx_____sys_sendmsg+0x10/0x10
[  109.978027][ T9667]  ? import_iovec+0x74/0xa0
[  109.978038][ T9667]  ___sys_sendmsg+0x21f/0x2a0
[  109.978046][ T9667]  ? __pfx____sys_sendmsg+0x10/0x10
[  109.978060][ T9667]  ? __fget_files+0x2a/0x420
[  109.978067][ T9667]  ? __fget_files+0x3a0/0x420
[  109.978076][ T9667]  __sys_sendmmsg+0x227/0x430
[  109.978085][ T9667]  ? __pfx___sys_sendmmsg+0x10/0x10
[  109.978091][ T9667]  ? do_futex+0x333/0x420
[  109.978101][ T9667]  ? __sys_bind+0x33b/0x3e0
[  109.978113][ T9667]  ? rcu_is_watching+0x15/0xb0
[  109.978125][ T9667]  __x64_sys_sendmmsg+0xa0/0xc0
[  109.978132][ T9667]  do_syscall_64+0xfa/0x3b0
[  109.978142][ T9667]  ? lockdep_hardirqs_on+0x9c/0x150
[  109.978151][ T9667]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.978157][ T9667]  ? exc_page_fault+0x9f/0xf0
[  109.978167][ T9667]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.978173][ T9667] RIP: 0033:0x7f6d5318ebe9
[  109.978181][ T9667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  109.978187][ T9667] RSP: 002b:00007f6d53f45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  109.978195][ T9667] RAX: ffffffffffffffda RBX: 00007f6d533b5fa0 RCX: 00007f6d5318ebe9
[  109.978201][ T9667] RDX: 0400000000000077 RSI: 0000200000000180 RDI: 0000000000000003
[  109.978206][ T9667] RBP: 00007f6d53211e19 R08: 0000000000000000 R09: 0000000000000000
[  109.978210][ T9667] R10: 0000000000007600 R11: 0000000000000246 R12: 0000000000000000
[  109.978214][ T9667] R13: 00007f6d533b6038 R14: 00007f6d533b5fa0 R15: 00007ffd011e0cf8
[  109.978222][ T9667]  </TASK>
[  109.978225][ T9667] 
[  110.130120][ T9667] Allocated by task 7060:
[  110.131877][ T9667]  kasan_save_track+0x3e/0x80
[  110.133781][ T9667]  __kasan_slab_alloc+0x6c/0x80
[  110.135681][ T9667]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  110.137881][ T9667]  xfrm_state_alloc+0x24/0x2f0
[  110.139862][ T9667]  __find_acq_core+0x8a7/0x1c00
[  110.141837][ T9667]  xfrm_find_acq+0x78/0xa0
[  110.143666][ T9667]  xfrm_alloc_userspi+0x6b3/0xc90
[  110.145709][ T9667]  xfrm_user_rcv_msg+0x7a3/0xab0
[  110.147715][ T9667]  netlink_rcv_skb+0x208/0x470
[  110.149671][ T9667]  xfrm_netlink_rcv+0x79/0x90
[  110.151593][ T9667]  netlink_unicast+0x82f/0x9e0
[  110.153556][ T9667]  netlink_sendmsg+0x805/0xb30
[  110.155499][ T9667]  __sock_sendmsg+0x21c/0x270
[  110.157346][ T9667]  ____sys_sendmsg+0x505/0x830
[  110.159208][ T9667]  ___sys_sendmsg+0x21f/0x2a0
[  110.161089][ T9667]  __x64_sys_sendmsg+0x19b/0x260
[  110.163088][ T9667]  do_syscall_64+0xfa/0x3b0
[  110.164936][ T9667]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.167368][ T9667] 
[  110.168350][ T9667] Freed by task 24:
[  110.169907][ T9667]  kasan_save_track+0x3e/0x80
[  110.171824][ T9667]  kasan_save_free_info+0x46/0x50
[  110.173876][ T9667]  __kasan_slab_free+0x62/0x70
[  110.175820][ T9667]  kmem_cache_free+0x18f/0x400
[  110.177773][ T9667]  xfrm_state_gc_task+0x518/0x6a0
[  110.179829][ T9667]  process_scheduled_works+0xae1/0x17b0
[  110.182088][ T9667]  worker_thread+0x8a0/0xda0
[  110.183984][ T9667]  kthread+0x711/0x8a0
[  110.185635][ T9667]  ret_from_fork+0x3fc/0x770
[  110.187555][ T9667]  ret_from_fork_asm+0x1a/0x30
[  110.189521][ T9667] 
[  110.190515][ T9667] The buggy address belongs to the object at ffff88810e760000
[  110.190515][ T9667]  which belongs to the cache xfrm_state of size 928
[  110.196037][ T9667] The buggy address is located 816 bytes inside of
[  110.196037][ T9667]  freed 928-byte region [ffff88810e760000, ffff88810e7603a0)
[  110.201503][ T9667] 
[  110.202502][ T9667] The buggy address belongs to the physical page:
[  110.205069][ T9667] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88810e760000 pfn:0x10e760
[  110.209083][ T9667] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  110.212141][ T9667] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  110.215137][ T9667] page_type: f5(slab)
[  110.216754][ T9667] raw: 057ff00000000040 ffff888104e3c640 dead000000000122 0000000000000000
[  110.220216][ T9667] raw: ffff88810e760000 00000000800e000c 00000000f5000000 0000000000000000
[  110.223597][ T9667] head: 057ff00000000040 ffff888104e3c640 dead000000000122 0000000000000000
[  110.227062][ T9667] head: ffff88810e760000 00000000800e000c 00000000f5000000 0000000000000000
[  110.230502][ T9667] head: 057ff00000000002 ffffea000439d801 00000000ffffffff 00000000ffffffff
[  110.233976][ T9667] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  110.237365][ T9667] page dumped because: kasan: bad access detected
[  110.239925][ T9667] page_owner tracks the page as allocated
[  110.242242][ T9667] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7060, tgid 7059 (syz.1.412), ts 74497422218, free_ts 66262515141
[  110.249221][ T9667]  post_alloc_hook+0x240/0x2a0
[  110.251184][ T9667]  get_page_from_freelist+0x21e4/0x22c0
[  110.253413][ T9667]  __alloc_frozen_pages_noprof+0x181/0x370
[  110.255768][ T9667]  alloc_pages_mpol+0x232/0x4a0
[  110.257759][ T9667]  allocate_slab+0x8a/0x3b0
[  110.259620][ T9667]  ___slab_alloc+0xbfc/0x1480
[  110.261530][ T9667]  kmem_cache_alloc_noprof+0x283/0x3c0
[  110.263749][ T9667]  xfrm_state_alloc+0x24/0x2f0
[  110.265616][ T9667]  __find_acq_core+0x8a7/0x1c00
[  110.267545][ T9667]  xfrm_find_acq+0x78/0xa0
[  110.269330][ T9667]  xfrm_alloc_userspi+0x6b3/0xc90
[  110.271312][ T9667]  xfrm_user_rcv_msg+0x7a3/0xab0
[  110.273340][ T9667]  netlink_rcv_skb+0x208/0x470
[  110.275304][ T9667]  xfrm_netlink_rcv+0x79/0x90
[  110.277200][ T9667]  netlink_unicast+0x82f/0x9e0
[  110.279095][ T9667]  netlink_sendmsg+0x805/0xb30
[  110.281017][ T9667] page last free pid 24 tgid 24 stack trace:
[  110.283363][ T9667]  __free_frozen_pages+0xc71/0xe70
[  110.285381][ T9667]  __put_partials+0x161/0x1c0
[  110.287240][ T9667]  put_cpu_partial+0x17c/0x250
[  110.289129][ T9667]  __slab_free+0x2f7/0x400
[  110.290976][ T9667]  qlist_free_all+0x97/0x140
[  110.292861][ T9667]  kasan_quarantine_reduce+0x148/0x160
[  110.295090][ T9667]  __kasan_slab_alloc+0x22/0x80
[  110.297037][ T9667]  __kmalloc_cache_noprof+0x1be/0x3d0
[  110.299230][ T9667]  nsim_fib_event_work+0x1174/0x3180
[  110.301377][ T9667]  process_scheduled_works+0xae1/0x17b0
[  110.303619][ T9667]  worker_thread+0x8a0/0xda0
[  110.305480][ T9667]  kthread+0x711/0x8a0
[  110.307065][ T9667]  ret_from_fork+0x3fc/0x770
[  110.308849][ T9667]  ret_from_fork_asm+0x1a/0x30
[  110.310709][ T9667] 
[  110.311648][ T9667] Memory state around the buggy address:
[  110.313825][ T9667]  ffff88810e760200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  110.316815][ T9667]  ffff88810e760280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  110.319668][ T9667] >ffff88810e760300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  110.322515][ T9667]                                      ^
[  110.324262][ T9667]  ffff88810e760380: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  110.327027][ T9667]  ffff88810e760400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  110.330080][ T9667] ==================================================================
[  110.340219][ T9667] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  110.342611][ T9667] CPU: 0 UID: 0 PID: 9667 Comm: syz.1.1301 Not tainted 6.16.0-syzkaller-06620-gae633388cae3-dirty #0 PREEMPT(full) 
[  110.346671][ T9667] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  110.349787][ T9667] Call Trace:
[  110.350853][ T9667]  <TASK>
[  110.351878][ T9667]  dump_stack_lvl+0x99/0x250
[  110.353684][ T9667]  ? __asan_memcpy+0x40/0x70
[  110.355450][ T9667]  ? __pfx_dump_stack_lvl+0x10/0x10
[  110.357448][ T9667]  ? __pfx__printk+0x10/0x10
[  110.359091][ T9667]  panic+0x2db/0x790
[  110.360390][ T9667]  ? __pfx_panic+0x10/0x10
[  110.362042][ T9667]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  110.364155][ T9667]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  110.366545][ T9667]  ? print_memory_metadata+0x314/0x400
[  110.368590][ T9667]  ? xfrm_state_find+0x2cf2/0x5400
[  110.370286][ T9667]  check_panic_on_warn+0x89/0xb0
[  110.372127][ T9667]  ? xfrm_state_find+0x2cf2/0x5400
[  110.373924][ T9667]  end_report+0x78/0x160
[  110.375296][ T9667]  kasan_report+0x129/0x150
[  110.376762][ T9667]  ? xfrm_state_find+0x2cf2/0x5400
[  110.378644][ T9667]  xfrm_state_find+0x2cf2/0x5400
[  110.380680][ T9667]  ? __lock_acquire+0xab9/0xd20
[  110.382304][ T9667]  ? xfrm_state_find+0x1da/0x5400
[  110.383879][ T9667]  ? __pfx_xfrm_state_find+0x10/0x10
[  110.385592][ T9667]  ? __lock_acquire+0xab9/0xd20
[  110.387133][ T9667]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  110.389073][ T9667]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  110.391136][ T9667]  ? __lock_acquire+0xab9/0xd20
[  110.393038][ T9667]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  110.395158][ T9667]  ? rt_set_nexthop+0x693/0xa80
[  110.397067][ T9667]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  110.399181][ T9667]  ? xfrm_expand_policies+0x41f/0x6a0
[  110.401380][ T9667]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  110.403396][ T9667]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  110.405481][ T9667]  xfrm_lookup_route+0x3c/0x1c0
[  110.407382][ T9667]  udp_sendmsg+0x142e/0x2170
[  110.409219][ T9667]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  110.411397][ T9667]  ? __pfx_udp_sendmsg+0x10/0x10
[  110.413410][ T9667]  ? lockdep_hardirqs_on+0x9c/0x150
[  110.415485][ T9667]  ? rcu_is_watching+0x15/0xb0
[  110.417355][ T9667]  ? trace_sched_exit_tp+0x38/0x120
[  110.419478][ T9667]  ? __pfx_aa_sk_perm+0x10/0x10
[  110.421336][ T9667]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  110.423810][ T9667]  ? sock_rps_record_flow+0x19/0x410
[  110.425932][ T9667]  ? inet_sendmsg+0x29c/0x370
[  110.427794][ T9667]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  110.429904][ T9667]  __sock_sendmsg+0x19c/0x270
[  110.431779][ T9667]  ____sys_sendmsg+0x52d/0x830
[  110.433689][ T9667]  ? __pfx_____sys_sendmsg+0x10/0x10
[  110.435831][ T9667]  ? import_iovec+0x74/0xa0
[  110.437706][ T9667]  ___sys_sendmsg+0x21f/0x2a0
[  110.439633][ T9667]  ? __pfx____sys_sendmsg+0x10/0x10
[  110.441764][ T9667]  ? __fget_files+0x2a/0x420
[  110.443665][ T9667]  ? __fget_files+0x3a0/0x420
[  110.445575][ T9667]  __sys_sendmmsg+0x227/0x430
[  110.447501][ T9667]  ? __pfx___sys_sendmmsg+0x10/0x10
[  110.449603][ T9667]  ? do_futex+0x333/0x420
[  110.451359][ T9667]  ? __sys_bind+0x33b/0x3e0
[  110.453148][ T9667]  ? rcu_is_watching+0x15/0xb0
[  110.455100][ T9667]  __x64_sys_sendmmsg+0xa0/0xc0
[  110.457038][ T9667]  do_syscall_64+0xfa/0x3b0
[  110.458824][ T9667]  ? lockdep_hardirqs_on+0x9c/0x150
[  110.460886][ T9667]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.463309][ T9667]  ? exc_page_fault+0x9f/0xf0
[  110.465174][ T9667]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.467504][ T9667] RIP: 0033:0x7f6d5318ebe9
[  110.469341][ T9667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  110.477114][ T9667] RSP: 002b:00007f6d53f45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  110.480481][ T9667] RAX: ffffffffffffffda RBX: 00007f6d533b5fa0 RCX: 00007f6d5318ebe9
[  110.483689][ T9667] RDX: 0400000000000077 RSI: 0000200000000180 RDI: 0000000000000003
[  110.486895][ T9667] RBP: 00007f6d53211e19 R08: 0000000000000000 R09: 0000000000000000
[  110.490095][ T9667] R10: 0000000000007600 R11: 0000000000000246 R12: 0000000000000000
[  110.493031][ T9667] R13: 00007f6d533b6038 R14: 00007f6d533b5fa0 R15: 00007ffd011e0cf8
[  110.495688][ T9667]  </TASK>
[  110.497448][ T9667] Kernel Offset: disabled
[  110.499026][ T9667] Rebooting in 86400 seconds..

VM DIAGNOSIS:
00:55:21  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000e8d RDI=0000000000000e8e RBP=00000000000003f8 RSP=ffffc90004f3e7b0
R8 =ffff888020710237 R9 =1ffff110040e2046 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=ffffffff99a95904 R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f6d53f456c0 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2e3469 CR3=000000010e70a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f6d53387498 00007f6d53387470 XMM03=00007f6d533874a8 00007f6d533874a0
XMM04=00007f6d53eed100 00007f6d53387460 XMM05=00007f6d53387478 00007f6d533874c0
XMM06=00007f6d533874b8 00007f6d533874b0 XMM07=00007f6d533874a8 00007f6d533874a0
XMM08=0000000000000000 00007f6d53212ee7 XMM09=0000000000000000 00007f6d53212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffffffff8e8da3a0 RCX=0000000000080000 RDX=0000000000000000
RSI=0000000000000001 RDI=ffffffff8e8da3a0 RBP=0000000000000000 RSP=ffffc90006917ad0
R8 =0000000000000000 R9 =ffffffff820b4db0 R10=ffffc90006917b80 R11=fffff52000d22f77
R12=dffffc0000000000 R13=1ffffffff1d1b474 R14=0000000000000001 R15=ffff88801f6b95e4
RIP=ffffffff84fa6064 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc8027336c0 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc801974c40 CR3=000000002b30c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007fc8026ed100 00007fc801b87460 XMM05=00007fc801b87478 00007fc801b874c0
XMM06=00007fc801b874b8 00007fc801b874b0 XMM07=00007fc801b874a8 00007fc801b874a0
XMM08=0000000000000000 00007fc801a12ee7 XMM09=0000000000000000 00007fc801a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
