last executing test programs:

1.201707814s ago: executing program 1 (id=2771):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80), 0x80800, 0x0)
unshare(0x24060400)
shutdown(0xffffffffffffffff, 0x2)
ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, 0x0)

1.141875285s ago: executing program 1 (id=2772):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$alg(0x26, 0x5, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x8000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

529.230765ms ago: executing program 2 (id=2802):
syz_emit_ethernet(0xda, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x5, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @broadcast, @loopback, @multicast2]}, @cipso={0x86, 0x48, 0xffffffffffffffff, [{0x2, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x6, 0xb, "f7d11634eea26b75af"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0x11, "ccf0294e2a3bdb4aa40b249e8e0c1a"}]}, @timestamp={0x44, 0x14, 0x56, 0x0, 0x0, [0x0, 0x0, 0xfffffffe, 0x0]}]}}}}}}}, 0x0)

479.943791ms ago: executing program 0 (id=2803):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socket(0x11, 0x4, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x5}, 0x94)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
connect$unix(r2, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x56, 0x0, 0x1}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6)
recvmmsg(r3, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @rose}, [@rose, @default, @bcast, @rose, @remote, @null, @bcast, @netrom]}, &(0x7f00000002c0)=0x48, 0x800)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000040), 0xfffffceb)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
unshare(0x62040200)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)

479.689825ms ago: executing program 2 (id=2804):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000240), &(0x7f0000000280)=0x8)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
socket(0x11, 0x800000003, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
r4 = socket(0x40000000015, 0x805, 0x0)
getsockopt(r4, 0x114, 0x2718, 0x0, &(0x7f00000000c0))
connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r3, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0xa5}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f00000007c0)="f2e659a0b00d26c2ee15bbdf21c625bd1e67dee03c0d5862d425c076b8577bb0b50607802b1c3ab21a39c9eb5b6ca033319be5ed6e5d21f0f39fee6a8c98dc0bc39a76bf896971072aec737f00aee7ead58ba42e1f7efe0c445b1d1d5de272c3d774e063c4ade85dd1cf6c8c85472590721bb64c154d689cec735b3ac1b8f96dedff166668803830d4d5", 0x8a}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0x53}, {&(0x7f0000000580)="b8a2f681134502fe2f602543e7bf1919be9eb6378d8fc15ac1699c0c424dc215b3ec95771fb5a5fa942353cba2caf2acea06b89d8425f97404638b33f24a9b32ab61cd414aa8acaa07ba1b0ea45b2361f8442e6af44fa5e9f10de0aa6dc5d9a9a43a20771650db53f5432f5abd100417", 0x70}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)}, {&(0x7f0000000340)}, {&(0x7f0000000880)="87141af223663a746046bdc339de81564cdbc76b336cf021dc7c2550b78b77295a37c903f475800f412569837c24ddf6b71979c1b606045926349dcd37c3077cb901d70a559c57ff65222c60c7bb8241d643c290505f", 0x56}, {&(0x7f0000000900)="11e08017bdf05fba2a819e173635d3d3e587f540a7622b34ab1069b87bf90bd82a92f94be0630ec07478c68309574d4fb0b1cb100d7d7a2461a1b6ec9df5e794356055d324ef4b72a433640925616bb2bd694ad8453d43bbbb91f97aa18dd52c9372c785e178180fe94fe7cac6ac486e131d1da39a4bab332c8a634ea393612b1be8d2b7d6dece01f6d5891bcf73f2d902c003facf086a1d84c11781cbb3ec57798068f71764c936cd63", 0xaa}, {&(0x7f00000009c0)="c71924d7ea9bc5971a0c58640e8be19cab192cbcc2e315e72c441a5b0c0bb0fa1728e32d3bd7cd210bc2e5abeba55e9d8626bc0e11a884d140c83c4d40f46ea66a5bdab9888ffe03d639b5c19ae7243b451e6572bacf66051d51b9fb2f22ca8b69f8a53f890035bcb884820df6246909e21fda8c820c1a3a1b678ebfdf", 0x7d}], 0x5}}], 0x4, 0x4000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)

361.348676ms ago: executing program 2 (id=2805):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000080)=@ethtool_wolinfo={0x6, 0x400d, 0x1, "cfd97a10c24a"}})

360.999606ms ago: executing program 2 (id=2806):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

322.877267ms ago: executing program 2 (id=2807):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4)

231.942734ms ago: executing program 1 (id=2808):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8)
close(r3)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc)

231.722636ms ago: executing program 1 (id=2809):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000140)=@framed={{}, [@printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r0}, 0x18)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

137.526525ms ago: executing program 0 (id=2810):
setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000300)={{0xa, 0x4e22, 0x4, @private0, 0x45}, {0xa, 0x4e23, 0xc83, @local, 0x1}, 0x0, {[0x4, 0x5, 0x10, 0x10001, 0xfffff800, 0x8, 0x3, 0xffffffff]}}, 0x5c)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c0002800c00018008000100030000000c0001800800"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800)

78.171673ms ago: executing program 1 (id=2811):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x70bd2b, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, @in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x0, @empty}}, @sadb_address={0x5, 0x7, 0x0, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}, @sadb_x_sec_ctx={0x1}]}, 0xa8}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000ffffff0a00000008000300", @ANYRES32=r5, @ANYBLOB="2c005080050002000600000009000a"], 0x48}}, 0x40)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r6, 0x8995, &(0x7f0000000580)={'ip6gretap0\x00', @ifru_settings={0x81, 0x1, @fr_pvc=0x0}})
sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000005780)={0x970, 0x0, 0x8, 0x70bd2c, 0x25dfdbf8, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x55}}}}, [@NL80211_ATTR_PROBE_RESP={0x4d2, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0xbe, 0x91, "d4b700fa4d54d7cec84a671127f6c673b6cd09b224dec077d511b727d0c1f0ccc866550a392ee412aaba20aa5ea1bcd8111ce553aae2e466f35df337a04d89dd95eae094e49ed1809022ea2923fd86fd2c798f85df5ac78b1f337ce4a17699d8aa6713e139f81285a5f24861a7adab78c03e6e3bb6f6547de7b870b8019fd1195e59405784e4535835df29a32db3d6c1a6aec2f548aa0ff177f81735257d0923b8ed757b2627f4a53a29b100feb9e720793f0f2c7ec51d39892f"}, @NL80211_ATTR_PROBE_RESP={0x3b3, 0x91, "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"}]}, 0x970}, 0x1, 0x0, 0x0, 0x20000840}, 0x44)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="791298000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002000000760300000ee60060bf050000000000003c650000000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e80100008000000000887a5ad103649afa17690884f800031e03a6d1bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f37ca363f601ae899a56715a0a62a26a0f6a5480a55c22fe394ae0000000000000000000000000000437d57defb79ea000500000000000000000000f014a4a318ba48d35ae9f438000000000000db894b62a614cb1fdd46619c5d2200000000000700000000000000000000006dcd2f421400f69947e4f26e099c9e8369080663c909b7e7c87e3b5e8e5a6df77c8f7338cd5a85f211a41b5d529d4243e47d7ab0d5991756b59d363ba30b18fc2ff189a4e8db38ab97c6a125e2785619e84c6a2b50f0e3ff83ef5149aff43dc899fdebdc2c496e6bdd4dd4d21f06fe133f4444272c5f0839ad663100452a6c6b6421f7e89a33b339401eee2cd466ab2a93a1ee7fb8a9e455ba1c6e17b02a1cd7bf35d36cf5b2a0f063469ae0d0b9fc042b48e98626eb0f9754d8cbbefa3079fe63063047baff09e9aaf7600000fba9a88db9ebef86f7cb522a784bb6d37e5f802757a15c6735138b493db9df53440a63fc565a0b190a710ae1e6807cbeb415ac841e94b706974160a60a14e571274f333d23186143b95514c79b50994cb39cda343bda8f01cf8ec7cdfdace0289e83ce50a57d69bfecfaf69fe7ff5b0375a47d3eb57b41d8a0589b82a1cf1149ba3f21ea2b65433321eb1a6f04ecc713c2b26d27baa49e54c2babec86335b9f418b5a5eb997bc9dd65197124b9aa80fc4aa8defb986bf05c41b919886bb81ecd3d24cf9ecc7004000000000000002c70d32f5d55ef2a2cf7560cb2884f46a92b3c25550f73e407fc5d514b2b7a6b690e290e676266addb7d96e723dec9c418eec8c48dffb6f432b4d5fef16e4f0051ba7efc690022c3f62b37cb5682d8bfdfc637ad3bf089ef0117bcd395322fcfb8e8e0a6e2babceb5f289b1d991770681192bcd0b584c3497e455f30ab918a690514a87a7d8e1d5f169a4e680e9c390071d26f2e0e26fc062f2785f14c0404fe01fb4000000000000000577dcb1698a9021a36d73ed03651c1937b2c84046023a1a0a87b208e33ad2d7c2892b176877264e1d699b7401eb917b289f6f67060fda0fa44b54bd87517a2bf09dba7209e41db4288b61bda5960952c45e5c55f2cd68bf9c6ff33e46109584bf42e8696ef1876564fef6f24cbbed0db8ab7fda1ffcc8c9fd4ab2cbe8f8df8e5535b12a942a948eacdaf308d48932064cfc3329da74f6f3e4409d6764a29680e312bf1a0143180e6493c9201ea916e6c9b2566c558ad88d9f7c0aebf82f5807eecefa97ada9bbd9e478e5d7748ee188bc719ca7a73dce5b6758a767c4c6b7572ab25eb2d73986379d5685cb438fe7091d097cc8f33fc0f83dee76603d6580f1c8fc4c37efd305ccc5a25678180425718bb9344e60dda8dae2677bb602d29aa0810616a2fdbca7020d72291b592b84223e2522ee01f5bdaa0fc4eb8d71d948a2baccf3ea2aa79d4d9069d8c0000000000000000000000321cd67859b4567badee56f158406f08683bdc5ffe2dedc916000c71f922fa2dfead7535999436a4aeb908781893479319b8b55e00d90ae6f09f06be2a0fc0bc17bef53331208112a0132350c0c5dd4607547079acc9471300dea6ae01742dccdae69f932cef80bca1bfcb57b9c852cf8358a580044772a80f20de36f707385380155be8907029d039a1d1447fc06b7020221e0d439f3f47edcf12f913dc8b6389a540340ae37804728ea65352e630c2e90424d58d72fdc1b28403e1dc7aad238b81df3b2d4166d656c6a9c73554bdf4f7312a4c0271e0eb45b4a596b7fa928ac3683f09fdaca46226c1df2c6c866cb4412d17d3d52c38cf0f7bd3b0eea2d4e06d061bb1b7c8c52f37f4036932d00028abd4527f5649bd60df638596fd639d7b16860033754ab13419429e5e39f290751ab6bd9392aef5519cd8c16e1f1cb1f225cc84a1a62497c1e436142fe28048a2b4d133905814a1808bc5b3e45eaa9eaebd946bee806968aeeb5a9eed87eba3d25d0b412a1b4cf2d419a58b09fc275c4395a0bd332eb538321465043e5967dd22459d0f52190a37f93ab823431a81fa6f54de61637fd473e19a6f567fead100e7d8cac149b66ebe9973af846146c62065a64854ed21e8b6f6fbe78474b753915a42efcb7da8ad18bacff8d69e0af1ca1f8174530a21820738412b100b54ee9b4a0dc22d5fe1cadecaea73fbfad087b19ce53177488d230539c5174f572a539d9d7c42698aa82bccf030ad393f25c10baa17e919f647d0e31877b7a6c1d8d86583f884a0c1da07b9b6dced06cdeb0094aa635a82f233b5993926b8970a0840ba116a7d20a40efb3bd03c4bdf380a2510a0a1ea69811ded68943c71218b42783b38959753978f222e1396b9b36dee2ce205122a000577cab29f48bff4f88c417e6bf5fb430d925596f29aca8677ca5a113aeaa5e0252ca17244d6c76e78ff1bbd81a71c4dfc72431d7f1126f8bdbf4056ee0f58a1bf83d53b1de07489541182dc4ee0f573c25b6c15dad930bc7a770b5a4f407d7a879db7185f15f80100000000000000739cc97db66ec6b925955d9a591808947fdd8d484ad27353230a449fdf87fc46c73b852fec931cfb6718acf3315bf5e577d00beb77c5514bc05d576a81345a03ad7aae74c5d2b77d45718348aed4fcbcd1441ff31b8f038824a989a9446a4a69367b228b3d174230b7320fc4d3c03368db573816dd0c04e65d6f8ce48283e76abdddbb965e0b2568e93c9cc5494a55421793f562c50c53f876cbde93c5cc7a3099c99d9775af010ba093f8a13b771782a3cfb24fbde6ef763e20c613164ab014d1906c4e098f1431b6b2886a155c4bac2911d7ee6a646f5913205ebd175e68975b93c330e4f9131788026b3b7cd5b6452c9e17452ac70000000000000000000000c71185f72436640fd4294fc3da230f9065095be47d7a848df12316c3c8b184fe110b061987fd79cf7d83443e69d08e2e839ae4fbe26ef7764f4870ef3bd0ec12eb45f60ca10dbfe329271f0bc93b28798e982e0dd32fc14bd4313c63b2dbb568f33fb45acad2dc7f438ea162c0709c0bbe1ea13e1e47399286e8143f400d7adf5f69e455706626814ee49274667f47769293451fd49885a152b8d2cf18febc7993f4a93893c6c7b7e46a230359ef2443e6bb9f50bb0faa5eaafd3ed6d551600c46b58a29fd7ccbbb0616f0be27302b683eccd742791d97f4a1daa0447f004426fd09b67d926f51525da63987bc73af35b28277879089b89fff6edab2fa1caf660a46a1a9f09e2d095b1c4be95c7c33dc81857f580e36c0a78d94dd879ee18de4a6475858d2ded2e3427ae007cc6f8e5e99aa146667f71ad83f3ddcf5db2dc396d7da499b65cd98125f20c284fc84d6a70be1de44b49c82022225292199c75cc26beab98dce4c331ed722f01d0d6314a72416814a565f4d90a5f8a255810f23541082f4b06f451e4724cd882f4d589600000000005854ca490d7df9cc293547c9a51aecc7a92f417f6a4d327737f1b198252358832dbe43507844a0cc112af4ce457c173fa64174ffd5ab9501eeb85508ebb60e169c0736c5960f2fe08735d6a7aa7c1f4a6433e77d3e547bbe6cf5b5d93a491ab4bba1ea7a1e6f37618b1d74cff3630d85a210092211be1ec12a30891eef590b19cdde055d626818c64e1c56b8918f33441a64b54946571b7bc70fb065d3bb1647f6f989ab8159e6d1cfa6c0ec7329d7d2263ca22144bf17d8692f03b592bd0f610096094da096233984e95b9a8216a6e60a104ae0bb5f77ac70b4390ea2cb6f6c40c928fae489f447240a25fd0a5bd9d5b6cd2a98f8804862922c11229c4e45c765e4d3348af3d3aadd5cc24b39437f1ea2df0000000000000000000000000022b90d93a267f3af4e02606f0ce6c2ffc404b575a09d6e625f3248689005eb4a9c8df3c67e6b2b759cab3a7bedf1b927cd8ba6d13b3e7d7279515e3d6d20"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r8 = socket$rxrpc(0x21, 0x2, 0xa)
connect$rxrpc(r8, &(0x7f0000000280)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x1, @mcast1, 0x7}}, 0x24)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r9, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4)
syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @empty, @empty, [], "8029335287b7a081"}}}}}}}, 0x0)
recvmmsg(r9, &(0x7f0000003180)=[{{&(0x7f00000002c0)=@nl, 0x80, &(0x7f0000000d00)=[{&(0x7f00000004c0)=""/246, 0xf6}], 0x1, &(0x7f0000000d80)=""/241, 0xf1}, 0x7}], 0x1, 0x2000, 0x0)
accept4$x25(r7, &(0x7f00000001c0), &(0x7f0000000200)=0x12, 0x800)

78.026325ms ago: executing program 0 (id=2812):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94)

77.860855ms ago: executing program 0 (id=2813):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'gretap0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x23, "4372070025f7f2bf568d00000000ffffffff000000586c9a7affa71b5e223700000000"}})

70.424796ms ago: executing program 0 (id=2814):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20020000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_emit_ethernet(0xbe, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000e86dd6000000000880600fe8000000000000000000000000000bbfe8000000000000000000000000000aa01004e32", @ANYRES32=0x41424344, @ANYBLOB="5002001190"], 0x0)

360.173µs ago: executing program 0 (id=2815):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000400)=0x1, 0x4)
recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/17, 0x11}, 0xfffffffe}], 0x1, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

145.456µs ago: executing program 1 (id=2816):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
r2 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x36, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11}}}}}}}, 0x0)

0s ago: executing program 2 (id=2817):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:19214' (ED25519) to the list of known hosts.
syzkaller login: [   40.656549][ T5786] cgroup: Unknown subsys name 'net'
[   40.800165][ T5786] cgroup: Unknown subsys name 'cpuset'
[   40.808885][ T5786] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   41.899549][ T5786] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   44.688157][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   44.691329][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   44.693948][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   44.696670][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   44.699286][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   44.720198][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   44.723117][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   44.726010][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   44.730414][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   44.733804][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   44.751719][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   44.755023][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   44.758079][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   44.760700][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   44.763374][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   44.803839][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   44.849016][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.851520][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.854091][ T5840] bridge_slave_0: entered allmulticast mode
[   44.856387][ T5840] bridge_slave_0: entered promiscuous mode
[   44.865129][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.867370][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.869972][ T5840] bridge_slave_1: entered allmulticast mode
[   44.872183][ T5840] bridge_slave_1: entered promiscuous mode
[   44.909139][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   44.915031][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.920553][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   44.942287][ T5840] team0: Port device team_slave_0 added
[   44.944741][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   44.952676][ T5840] team0: Port device team_slave_1 added
[   44.977399][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   44.980227][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.988760][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.001032][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.003669][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.014089][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.021624][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.024263][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.026733][ T5845] bridge_slave_0: entered allmulticast mode
[   45.029569][ T5845] bridge_slave_0: entered promiscuous mode
[   45.044363][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.046754][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.049501][ T5845] bridge_slave_1: entered allmulticast mode
[   45.051897][ T5845] bridge_slave_1: entered promiscuous mode
[   45.059473][ T5840] hsr_slave_0: entered promiscuous mode
[   45.061605][ T5840] hsr_slave_1: entered promiscuous mode
[   45.063955][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.066318][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.069054][ T5847] bridge_slave_0: entered allmulticast mode
[   45.071395][ T5847] bridge_slave_0: entered promiscuous mode
[   45.081557][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.083887][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.086200][ T5847] bridge_slave_1: entered allmulticast mode
[   45.089113][ T5847] bridge_slave_1: entered promiscuous mode
[   45.092788][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.105930][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.124736][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.133584][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.136954][ T5845] team0: Port device team_slave_0 added
[   45.141547][ T5845] team0: Port device team_slave_1 added
[   45.162047][ T5847] team0: Port device team_slave_0 added
[   45.164254][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.166463][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.175952][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.182798][ T5847] team0: Port device team_slave_1 added
[   45.184930][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.187562][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.195995][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.212864][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.215409][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.224127][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.236643][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.239214][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.247285][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.269065][ T5847] hsr_slave_0: entered promiscuous mode
[   45.271443][ T5847] hsr_slave_1: entered promiscuous mode
[   45.273609][ T5847] debugfs: 'hsr0' already exists in 'hsr'
[   45.275743][ T5847] Cannot create hsr debugfs directory
[   45.279365][ T5845] hsr_slave_0: entered promiscuous mode
[   45.281595][ T5845] hsr_slave_1: entered promiscuous mode
[   45.283727][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   45.285682][ T5845] Cannot create hsr debugfs directory
[   45.323386][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   45.334204][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   45.343657][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   45.355128][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   45.396095][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.398689][ T5840] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.401281][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.403760][ T5840] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.430540][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   45.434582][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   45.439305][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   45.447566][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   45.467154][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   45.470675][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   45.479158][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   45.483253][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   45.488933][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.491720][ T5845] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.494586][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.496787][ T5845] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.513041][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.522965][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.525632][ T5847] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.528497][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.530799][ T5847] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.539315][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   45.542671][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.546015][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.552181][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.555359][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.559560][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.562658][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.572667][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.575078][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.586090][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.590009][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.592347][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.607041][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   45.618050][ T4349] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.620977][ T4349] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.630723][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.633159][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.648166][ T5845] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   45.651483][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   45.680698][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.689794][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   45.695163][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.697525][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.709310][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.711633][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.730191][ T5847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   45.750972][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.755190][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.785709][ T5845] veth0_vlan: entered promiscuous mode
[   45.791269][ T5840] veth0_vlan: entered promiscuous mode
[   45.797671][ T5845] veth1_vlan: entered promiscuous mode
[   45.803303][ T5840] veth1_vlan: entered promiscuous mode
[   45.806407][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.832307][ T5845] veth0_macvtap: entered promiscuous mode
[   45.835017][ T5847] veth0_vlan: entered promiscuous mode
[   45.837169][ T5840] veth0_macvtap: entered promiscuous mode
[   45.841281][ T5845] veth1_macvtap: entered promiscuous mode
[   45.845149][ T5840] veth1_macvtap: entered promiscuous mode
[   45.851058][ T5847] veth1_vlan: entered promiscuous mode
[   45.859954][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.862980][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.873151][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.876514][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.886315][ T5891] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.890810][ T5891] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.898558][ T5891] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.902357][ T5891] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.910725][ T5847] veth0_macvtap: entered promiscuous mode
[   45.914821][ T5891] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.919264][ T5891] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.925651][ T5847] veth1_macvtap: entered promiscuous mode
[   45.929858][ T5891] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.933395][ T5891] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.954691][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.972217][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.984045][  T736] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.985920][ T5891] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.989924][  T736] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.991355][ T5891] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.000051][ T5891] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.007090][  T736] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.011022][  T736] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.013837][ T5891] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.030439][ T4349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.034566][ T4349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.042930][  T736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.047220][  T736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.049471][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.056180][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.064608][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   46.069451][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.069462][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.148948][ T5917] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   46.152293][ T5917] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.154724][ T5917] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.241996][ T5922] warning: `syz.1.8' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   46.728558][ T5236] Bluetooth: hci0: command tx timeout
[   46.747036][ T5967] block nbd0: not configured, cannot reconfigure
[   46.816654][ T5236] Bluetooth: hci2: command tx timeout
[   46.818985][ T5236] Bluetooth: hci1: command tx timeout
[   47.040663][ T5995] Driver unsupported XDP return value 0 on prog  (id 5) dev N/A, expect packet loss!
[   47.178906][ T6020] IPv6: addrconf: prefix option has invalid lifetime
[   47.228888][ T6026] netlink: 28 bytes leftover after parsing attributes in process `syz.1.39'.
[   47.229137][ T6027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.40'.
[   47.232289][ T6026] netlink: 28 bytes leftover after parsing attributes in process `syz.1.39'.
[   47.250324][ T6026] netlink: 'syz.1.39': attribute type 4 has an invalid length.
[   47.485045][ T6035] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.072146][ T6040] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[   48.430617][ T6075] syz.0.60 uses obsolete (PF_INET,SOCK_PACKET)
[   48.521168][ T6079] netlink: 'syz.0.62': attribute type 1 has an invalid length.
[   48.579786][ T6035] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.818254][ T5236] Bluetooth: hci0: command tx timeout
[   48.888054][ T5236] Bluetooth: hci2: command tx timeout
[   48.898065][ T5236] Bluetooth: hci1: command tx timeout
[   49.174974][ T6035] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.258658][ T6035] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.306173][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.320451][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.323509][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.333698][ T6152] netlink: 20 bytes leftover after parsing attributes in process `syz.0.98'.
[   49.337219][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.470945][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.96'.
[   49.756678][ T6197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.111'.
[   49.855265][ T6202] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.925775][ T6211] vlan0: entered promiscuous mode
[   50.594096][ T6243] netlink: 'syz.0.130': attribute type 1 has an invalid length.
[   50.602434][ T6243] 8021q: adding VLAN 0 to HW filter on device bond1
[   50.609579][ T6243] bond1: (slave ip6gretap1): making interface the new active one
[   50.612847][ T6243] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[   50.625108][ T6243] veth3: entered promiscuous mode
[   50.630816][ T6243] bond1: (slave veth3): Enslaving as an active interface with a down link
[   50.635576][ T6243] erspan0: entered allmulticast mode
[   50.641633][ T6243] bond1: (slave erspan0): Enslaving as an active interface with an up link
[   50.667324][ T6246] netlink: 20 bytes leftover after parsing attributes in process `syz.0.131'.
[   50.671306][ T6246] netlink: 36 bytes leftover after parsing attributes in process `syz.0.131'.
[   50.720810][ T6250] netlink: 'syz.0.133': attribute type 1 has an invalid length.
[   50.822341][ T6262] openvswitch: netlink: IP tunnel dst address not specified
[   50.859504][ T6268] Bluetooth: MGMT ver 1.23
[   50.888001][ T5236] Bluetooth: hci0: command tx timeout
[   50.968131][ T5236] Bluetooth: hci2: command tx timeout
[   50.968988][ T5848] Bluetooth: hci1: command tx timeout
[   50.994752][ T6280] ieee802154 phy0 wpan0: encryption failed: -22
[   51.092071][ T6288] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   52.115037][ T6330] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1
[   52.584865][ T6364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.183'.
[   52.733613][ T6372] netlink: 24 bytes leftover after parsing attributes in process `syz.1.187'.
[   52.777214][ T6374] macvtap1: entered promiscuous mode
[   52.781247][ T6374] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[   52.787398][ T6374] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[   52.910461][ T6384] syzkaller1: entered promiscuous mode
[   52.912383][ T6384] syzkaller1: entered allmulticast mode
[   52.977915][ T5848] Bluetooth: hci0: command tx timeout
[   53.047940][ T5848] Bluetooth: hci1: command tx timeout
[   53.048039][ T5236] Bluetooth: hci2: command tx timeout
[   53.222408][ T6417] netlink: 'syz.1.208': attribute type 1 has an invalid length.
[   53.231489][ T6417] netlink: 'syz.1.208': attribute type 3 has an invalid length.
[   53.234589][ T6417] netlink: 224 bytes leftover after parsing attributes in process `syz.1.208'.
[   53.244774][ T6420] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[   53.254934][ T6420] Zero length message leads to an empty skb
[   53.267780][ T6420] Bluetooth: MGMT ver 1.23
[   53.276981][ T6420] netlink: 16 bytes leftover after parsing attributes in process `syz.0.210'.
[   53.281595][ T6420] netlink: 16 bytes leftover after parsing attributes in process `syz.0.210'.
[   53.329032][ T6429] netlink: 'syz.0.214': attribute type 4 has an invalid length.
[   53.331817][ T6429] netlink: 152 bytes leftover after parsing attributes in process `syz.0.214'.
[   53.353979][ T6429] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   53.475702][ T6459] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.227'.
[   53.621238][ T6486] ieee802154 phy0 wpan0: encryption failed: -22
[   53.661881][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.243'.
[   53.987568][ T6523] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   54.050474][ T6529] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.083409][ T6529] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.126058][ T6529] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.182852][ T6529] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.240936][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.247722][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.254600][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.261949][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.366098][ T6542] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   54.373986][ T6542] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.376796][ T6542] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.524489][ T6540] syzkaller1: entered allmulticast mode
[   54.727736][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.285'.
[   54.771938][ T6591] batadv_slave_1: entered promiscuous mode
[   54.774216][ T6590] batadv_slave_1: left promiscuous mode
[   54.882879][ T6607] netlink: 5 bytes leftover after parsing attributes in process `syz.0.296'.
[   55.288411][ T5236] Bluetooth: hci2: Opcode 0x0401 failed: -110
[   55.300378][ T5236] Bluetooth: hci2: command 0x0401 tx timeout
[   55.326875][ T6632] netlink: 'syz.2.307': attribute type 1 has an invalid length.
[   55.465489][ T6641] !: renamed from dummy0 (while UP)
[   56.523458][ T6695] netlink: 'syz.2.339': attribute type 1 has an invalid length.
[   56.619645][ T6709] pim6reg1: entered promiscuous mode
[   56.621840][ T6709] pim6reg1: entered allmulticast mode
[   57.378092][ T6762] block nbd0: server does not support multiple connections per device.
[   57.381682][ T6762] block nbd0: shutting down sockets
[   57.465627][ T6730] Set syz1 is full, maxelem 65536 reached
[   57.601885][ T6782] tipc: Started in network mode
[   57.603509][ T6782] tipc: Node identity b245ca93c8a6, cluster identity 4711
[   57.605823][ T6782] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   57.643685][ T6782] syzkaller0: entered promiscuous mode
[   57.646029][ T6782] syzkaller0: entered allmulticast mode
[   57.649301][ T6782] tipc: Resetting bearer <eth:syzkaller0>
[   57.656833][ T6781] tipc: Resetting bearer <eth:syzkaller0>
[   57.711455][ T6781] tipc: Disabling bearer <eth:syzkaller0>
[   57.720558][ T6786] tipc: Started in network mode
[   57.722692][ T6786] tipc: Node identity 5ec9e4dcd9e7, cluster identity 4711
[   57.725740][ T6786] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   57.732209][ T6786] syzkaller0: entered promiscuous mode
[   57.734314][ T6786] syzkaller0: entered allmulticast mode
[   57.746785][ T6786] tipc: Resetting bearer <eth:syzkaller0>
[   57.752782][ T6785] tipc: Resetting bearer <eth:syzkaller0>
[   57.759885][ T6785] tipc: Disabling bearer <eth:syzkaller0>
[   57.887340][ T6803] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.922696][ T6803] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.974072][ T6803] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.031260][ T6803] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.082814][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.085870][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.094606][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.099760][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.550495][ T6843] __nla_validate_parse: 5 callbacks suppressed
[   58.550507][ T6843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.409'.
[   58.556503][ T6843] bridge_slave_1: left allmulticast mode
[   58.559464][ T6843] bridge_slave_1: left promiscuous mode
[   58.561481][ T6843] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.564584][ T6843] bridge_slave_0: left allmulticast mode
[   58.566541][ T6843] bridge_slave_0: left promiscuous mode
[   58.569142][ T6843] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.914152][ T6829] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   59.062253][ T6876] netlink: 'syz.2.424': attribute type 5 has an invalid length.
[   59.252461][ T6899] netlink: 28 bytes leftover after parsing attributes in process `syz.2.433'.
[   59.256587][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.433'.
[   59.424391][ T6924] syzkaller1: entered promiscuous mode
[   59.426787][ T6924] syzkaller1: entered allmulticast mode
[   59.654820][ T6957] netlink: 'syz.1.458': attribute type 12 has an invalid length.
[   59.766142][ T6976] netlink: 24 bytes leftover after parsing attributes in process `syz.0.466'.
[   59.809405][ T6972] netlink: 88 bytes leftover after parsing attributes in process `syz.2.465'.
[   59.838180][ T6986] geneve2: entered promiscuous mode
[   60.119052][ T7009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.479'.
[   60.765284][ T7052] netlink: 'syz.1.499': attribute type 2 has an invalid length.
[   60.770489][ T7052] netlink: 224 bytes leftover after parsing attributes in process `syz.1.499'.
[   61.095925][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.507'.
[   61.136863][ T7073] netlink: 44 bytes leftover after parsing attributes in process `syz.2.508'.
[   61.175142][ T7078] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   61.264083][ T7081] bond0: (slave bond_slave_0): Releasing backup interface
[   61.270398][ T7081] bond0: (slave bond_slave_1): Releasing backup interface
[   61.278543][ T7081] team0: Port device team_slave_0 removed
[   61.283885][ T7081] team0: Port device team_slave_1 removed
[   61.286844][ T7081] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   61.293404][ T7081] batman_adv: batadv0: Removing interface: batadv_slave_0
[   61.297339][ T7081] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   61.301716][ T7081] batman_adv: batadv0: Removing interface: batadv_slave_1
[   61.386631][ T7081] netlink: 'syz.2.511': attribute type 10 has an invalid length.
[   61.391363][ T7081] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.394228][ T7081] bond0: (slave wlan1): Opening slave failed
[   62.044879][   T47] cfg80211: failed to load regulatory.db
[   62.105708][ T7117] tipc: Started in network mode
[   62.107958][ T7117] tipc: Node identity 2ebbb50a768f, cluster identity 4711
[   62.111036][ T7117] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.114145][ T7117] syzkaller0: entered promiscuous mode
[   62.116264][ T7117] syzkaller0: entered allmulticast mode
[   62.122695][ T7117] tipc: Resetting bearer <eth:syzkaller0>
[   62.125651][ T7116] tipc: Resetting bearer <eth:syzkaller0>
[   62.128877][ T7116] tipc: Disabling bearer <eth:syzkaller0>
[   62.319058][ T7141] netlink: 'syz.2.537': attribute type 14 has an invalid length.
[   62.535355][ T7166] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.539409][ T7166] syzkaller0: entered promiscuous mode
[   62.541899][ T7166] syzkaller0: entered allmulticast mode
[   62.546158][ T7166] tipc: Resetting bearer <eth:syzkaller0>
[   62.549031][ T7165] tipc: Resetting bearer <eth:syzkaller0>
[   62.552345][ T7165] tipc: Disabling bearer <eth:syzkaller0>
[   62.881943][ T7201] netlink: 'syz.0.564': attribute type 15 has an invalid length.
[   63.701987][ T7277] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[   64.321257][ T7325] syzkaller0: entered promiscuous mode
[   64.323386][ T7325] syzkaller0: entered allmulticast mode
[   64.455008][ T7333] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   64.475958][ T7333] bond1: entered promiscuous mode
[   64.477678][ T7333] bond1: entered allmulticast mode
[   64.481696][ T7333] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.507657][ T7339] bridge0: port 1(erspan0) entered blocking state
[   64.510164][ T7339] bridge0: port 1(erspan0) entered disabled state
[   64.512539][ T7339] erspan0: entered allmulticast mode
[   64.515254][ T7339] erspan0: entered promiscuous mode
[   64.525047][ T7339] bridge0: port 1(erspan0) entered blocking state
[   64.527920][ T7339] bridge0: port 1(erspan0) entered forwarding state
[   64.532566][   T33] audit: type=1800 audit(1756698916.188:2): pid=7342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.621" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1095 res=0 errno=0
[   64.536469][ T7339] erspan0: left allmulticast mode
[   64.543631][   T33] audit: type=1800 audit(1756698916.198:3): pid=7342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.621" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1095 res=0 errno=0
[   64.550969][ T7339] erspan0: left promiscuous mode
[   64.552754][ T7339] bridge0: port 1(erspan0) entered disabled state
[   64.581048][ T7344] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   64.936660][ T7377] netlink: 'syz.0.638': attribute type 28 has an invalid length.
[   65.142567][ T7406] netlink: 'syz.0.651': attribute type 1 has an invalid length.
[   65.162470][ T7408] lo speed is unknown, defaulting to 1000
[   65.164322][ T7408] lo speed is unknown, defaulting to 1000
[   65.166387][ T7408] lo speed is unknown, defaulting to 1000
[   65.170410][ T7408] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   65.174085][ T7408] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   65.180902][ T7408] lo speed is unknown, defaulting to 1000
[   65.183979][ T7408] lo speed is unknown, defaulting to 1000
[   65.186145][ T7408] lo speed is unknown, defaulting to 1000
[   65.191143][ T7408] netlink: 32 bytes leftover after parsing attributes in process `syz.0.652'.
[   65.194941][ T7408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.652'.
[   65.208074][ T7408] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.211838][ T7408] veth0_to_bridge: entered promiscuous mode
[   65.214406][ T7408] veth0_to_bridge: entered allmulticast mode
[   65.220490][ T7407] tipc: Disabling bearer <eth:syzkaller0>
[   65.593787][ T7444] ieee802154 phy0 wpan0: encryption failed: -22
[   65.650831][ T7451] netlink: 'syz.2.671': attribute type 13 has an invalid length.
[   65.786398][ T7476] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.791762][ T7476] syzkaller0: entered promiscuous mode
[   65.793673][ T7476] syzkaller0: entered allmulticast mode
[   65.803930][ T7476] tipc: Resetting bearer <eth:syzkaller0>
[   65.806334][ T7475] tipc: Resetting bearer <eth:syzkaller0>
[   65.811538][ T7475] tipc: Disabling bearer <eth:syzkaller0>
[   65.856837][ T7486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.687'.
[   66.362279][ T7570] erspan0: entered promiscuous mode
[   66.365104][ T7570] erspan0: left promiscuous mode
[   66.423209][ T7570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.725'.
[   66.535612][ T7593] netlink: 'syz.1.735': attribute type 1 has an invalid length.
[   66.599526][ T7602] netlink: 'syz.0.739': attribute type 1 has an invalid length.
[   66.602112][ T7602] netlink: 20 bytes leftover after parsing attributes in process `syz.0.739'.
[   66.605574][ T7602] netlink: 'syz.0.739': attribute type 1 has an invalid length.
[   66.609484][ T7602] netlink: 20 bytes leftover after parsing attributes in process `syz.0.739'.
[   66.615719][ T7602] netlink: 'syz.0.739': attribute type 1 has an invalid length.
[   66.622452][ T7602] netlink: 20 bytes leftover after parsing attributes in process `syz.0.739'.
[   66.626151][ T7602] netlink: 'syz.0.739': attribute type 1 has an invalid length.
[   66.633964][ T7602] netlink: 20 bytes leftover after parsing attributes in process `syz.0.739'.
[   66.637364][ T7602] netlink: 'syz.0.739': attribute type 1 has an invalid length.
[   66.641957][ T7602] netlink: 20 bytes leftover after parsing attributes in process `syz.0.739'.
[   66.648243][ T7602] netlink: 'syz.0.739': attribute type 1 has an invalid length.
[   66.652329][ T7602] netlink: 20 bytes leftover after parsing attributes in process `syz.0.739'.
[   66.816519][ T7612] bridge_slave_0: left allmulticast mode
[   66.830069][ T7612] bridge_slave_0: left promiscuous mode
[   66.832307][ T7612] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.836101][ T7612] bridge_slave_1: left allmulticast mode
[   66.838255][ T7612] bridge_slave_1: left promiscuous mode
[   66.840272][ T7612] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.854661][ T7612] bond0: (slave bond_slave_0): Releasing backup interface
[   66.860566][ T7612] bond0: (slave bond_slave_1): Releasing backup interface
[   66.873317][ T7612] team0: Port device team_slave_0 removed
[   66.880072][ T7612] team0: Port device team_slave_1 removed
[   66.883005][ T7612] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.886151][ T7612] batman_adv: batadv0: Removing interface: batadv_slave_0
[   66.891704][ T7612] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.894493][ T7612] batman_adv: batadv0: Removing interface: batadv_slave_1
[   66.960788][ T7612] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.965381][ T7612] bond0: (slave wlan1): Opening slave failed
[   66.984723][ T7612] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   66.989200][ T7612] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   67.540311][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   67.543218][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   67.546884][ T7612] syz.1.744 (7612) used greatest stack depth: 20128 bytes left
[   67.598009][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   67.601384][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   67.750006][ T7693] erspan0: left allmulticast mode
[   67.752928][ T7693] bond1: (slave erspan0): Releasing active interface
[   67.755757][ T7693] ip6gretap1: entered promiscuous mode
[   67.766496][ T7693] veth0_to_bridge: left allmulticast mode
[   67.772095][ T7693] bridge_slave_0: left allmulticast mode
[   67.774454][ T7693] bridge_slave_0: left promiscuous mode
[   67.776844][ T7693] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.782276][ T7693] bridge_slave_1: left allmulticast mode
[   67.784604][ T7693] bridge_slave_1: left promiscuous mode
[   67.786926][ T7693] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.795143][ T7693] bond0: (slave bond_slave_0): Releasing backup interface
[   67.816972][ T7693] bond0: (slave bond_slave_1): Releasing backup interface
[   67.843515][ T7693] team0: Port device team_slave_0 removed
[   67.860094][ T7693] team0: Port device team_slave_1 removed
[   67.867038][ T7693] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.876198][ T7693] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.881648][ T7693] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.884933][ T7693] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.893907][ T7693] bond1: (slave ip6gretap1): Releasing active interface
[   67.896915][ T7693] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 8a:db:d4:02:10:7d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   67.905540][ T7693] ip6gretap1: left promiscuous mode
[   67.915308][ T7693] bond1: (slave veth3): Releasing active interface
[   68.027843][ T7720] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[   68.051998][ T7722] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[   68.478754][ T7753] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   68.482955][ T7753] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.520749][ T7753] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   68.524370][ T7753] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.570409][ T7753] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   68.574540][ T7753] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.621312][ T7753] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   68.625521][ T7753] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.690817][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   68.693571][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.699807][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   68.702619][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.709854][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   68.712522][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.721469][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   68.724552][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.083394][ T7766] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.087645][ T7766] syzkaller0: entered promiscuous mode
[   69.090863][ T7766] syzkaller0: entered allmulticast mode
[   69.101466][ T7766] tipc: Resetting bearer <eth:syzkaller0>
[   69.105489][ T7765] tipc: Resetting bearer <eth:syzkaller0>
[   69.111313][ T5869] IPVS: starting estimator thread 0...
[   69.114000][ T7765] tipc: Disabling bearer <eth:syzkaller0>
[   69.211181][ T7771] IPVS: using max 135 ests per chain, 324000 per kthread
[   70.372640][ T7879] __nla_validate_parse: 88 callbacks suppressed
[   70.372655][ T7879] netlink: 40 bytes leftover after parsing attributes in process `syz.1.858'.
[   70.379017][ T7879] netlink: 40 bytes leftover after parsing attributes in process `syz.1.858'.
[   70.647655][   T33] audit: type=1800 audit(1756698922.298:4): pid=7906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.869" name="memory.events" dev="tmpfs" ino=1550 res=0 errno=0
[   70.655449][   T33] audit: type=1804 audit(1756698922.308:5): pid=7906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.869" name="/newroot/304/memory.events" dev="tmpfs" ino=1550 res=1 errno=0
[   70.897517][ T7916] team0: Mode changed to "activebackup"
[   71.061661][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.064261][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.382397][ T7950] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.387910][ T7950] syzkaller0: entered promiscuous mode
[   71.390412][ T7950] syzkaller0: entered allmulticast mode
[   71.405474][ T7950] tipc: Resetting bearer <eth:syzkaller0>
[   71.411387][ T7949] tipc: Resetting bearer <eth:syzkaller0>
[   71.415540][ T7949] tipc: Disabling bearer <eth:syzkaller0>
[   71.850512][ T7980] netlink: 24 bytes leftover after parsing attributes in process `syz.2.902'.
[   72.194580][ T8023] validate_nla: 74 callbacks suppressed
[   72.194589][ T8023] netlink: 'syz.2.922': attribute type 10 has an invalid length.
[   72.479168][ T8063] erspan0: entered promiscuous mode
[   72.482412][ T8063] erspan0: left promiscuous mode
[   72.575783][ T8075] netlink: 104 bytes leftover after parsing attributes in process `syz.2.943'.
[   72.655107][ T8083] syzkaller1: entered promiscuous mode
[   72.657186][ T8083] syzkaller1: entered allmulticast mode
[   73.055042][ T8131] netlink: 60 bytes leftover after parsing attributes in process `syz.0.970'.
[   73.059520][ T8131] netlink: 'syz.0.970': attribute type 3 has an invalid length.
[   73.093021][ T8136] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[   73.187958][ T8144] netlink: 36 bytes leftover after parsing attributes in process `syz.0.976'.
[   73.229983][ T8152] netlink: 'syz.0.980': attribute type 1 has an invalid length.
[   74.153108][ T8196] veth4: entered promiscuous mode
[   74.155171][ T8196] veth4: entered allmulticast mode
[   74.191461][ T8204] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.193981][ T8204] syzkaller0: entered promiscuous mode
[   74.196205][ T8204] syzkaller0: entered allmulticast mode
[   74.216585][ T8204] tipc: Resetting bearer <eth:syzkaller0>
[   74.223485][ T8203] tipc: Resetting bearer <eth:syzkaller0>
[   74.230176][ T8203] tipc: Disabling bearer <eth:syzkaller0>
[   74.418709][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1016'.
[   74.449193][ T8234] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1017'.
[   74.661858][ T8259] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1028'.
[   74.681572][ T8262] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1029'.
[   74.835640][ T8276] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   74.952727][ T8282] netlink: 'syz.2.1039': attribute type 9 has an invalid length.
[   75.268886][ T8322] veth1_to_bond: entered allmulticast mode
[   75.271951][ T8322] bond_slave_1: entered promiscuous mode
[   75.274618][ T8321] bond_slave_1: left promiscuous mode
[   75.277075][ T8321] veth1_to_bond: left allmulticast mode
[   75.400935][ T8342] netlink: 'syz.0.1067': attribute type 1 has an invalid length.
[   75.585747][ T8367] af_packet: tpacket_rcv: packet too big, clamped from 72 to 4294967272. macoff=96
[   75.641192][ T8373] netlink: 'syz.0.1082': attribute type 1 has an invalid length.
[   75.643694][ T8373] __nla_validate_parse: 1 callbacks suppressed
[   75.643700][ T8373] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1082'.
[   75.791608][ T8403] ieee802154 phy0 wpan0: encryption failed: -22
[   75.901644][ T8422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1102'.
[   76.154681][ T8435] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   76.744355][ T8454] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1120'.
[   76.748993][ T8454] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1120'.
[   77.088732][ T8456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1121'.
[   77.311918][ T8466] vlan0: left promiscuous mode
[   77.339853][ T8466] mac80211_hwsim hwsim3 wlan0: left promiscuous mode
[   77.347557][ T8466] bond1: left promiscuous mode
[   77.349597][ T8466] bond1: left allmulticast mode
[   77.359324][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.365113][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.376403][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.381973][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.593162][ T8499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1140'.
[   77.669272][ T8514] vlan2: entered promiscuous mode
[   77.671050][ T8514] bridge0: entered promiscuous mode
[   77.719591][ T8526] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.722346][ T8526] syzkaller0: entered promiscuous mode
[   77.724290][ T8526] syzkaller0: entered allmulticast mode
[   77.741645][ T8526] tipc: Resetting bearer <eth:syzkaller0>
[   77.744846][ T8523] tipc: Resetting bearer <eth:syzkaller0>
[   77.749939][ T8523] tipc: Disabling bearer <eth:syzkaller0>
[   77.889212][ T8545] netlink: 'syz.2.1156': attribute type 13 has an invalid length.
[   77.892577][ T8545] netlink: 'syz.2.1156': attribute type 17 has an invalid length.
[   77.927732][ T8545] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.932927][ T8545] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   78.006579][ T8559] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.011612][ T8559] syzkaller0: entered promiscuous mode
[   78.014268][ T8559] syzkaller0: entered allmulticast mode
[   78.021982][ T8559] tipc: Resetting bearer <eth:syzkaller0>
[   78.025509][ T8558] tipc: Resetting bearer <eth:syzkaller0>
[   78.032939][ T8558] tipc: Disabling bearer <eth:syzkaller0>
[   78.363613][ T8598] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.554111][ T8622] sctp: [Deprecated]: syz.2.1192 (pid 8622) Use of struct sctp_assoc_value in delayed_ack socket option.
[   78.554111][ T8622] Use struct sctp_sack_info instead
[   78.561799][ T8622] sctp: [Deprecated]: syz.2.1192 (pid 8622) Use of struct sctp_assoc_value in delayed_ack socket option.
[   78.561799][ T8622] Use struct sctp_sack_info instead
[   78.701656][ T8636] netlink: 'syz.0.1199': attribute type 1 has an invalid length.
[   78.878354][ T8658] netlink: 'syz.1.1209': attribute type 1 has an invalid length.
[   78.880924][ T8658] netlink: 'syz.1.1209': attribute type 1 has an invalid length.
[   78.917489][ T8652] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1206'.
[   78.932472][ T8652] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1206'.
[   78.967065][ T8658] netlink: 'syz.1.1209': attribute type 1 has an invalid length.
[   78.978745][ T8658] 8021q: adding VLAN 0 to HW filter on device bond2
[   78.999795][ T8658] bond2: (slave wlan0): Opening slave failed
[   79.025971][ T8658] vlan2: entered allmulticast mode
[   79.030077][ T8658] veth1: entered allmulticast mode
[   79.032816][ T8658] bond2: (slave vlan2): Opening slave failed
[   79.108925][ T8670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1214'.
[   79.112328][ T8670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1214'.
[   79.233210][ T8688] vlan2: entered promiscuous mode
[   79.235093][ T8688] syz_tun: entered promiscuous mode
[   79.464270][ T8706] gtp0: entered promiscuous mode
[   79.479372][ T8710] netlink: 'syz.0.1231': attribute type 3 has an invalid length.
[   79.580840][ T8724] netlink: 'syz.2.1238': attribute type 10 has an invalid length.
[   79.584439][ T8724] syz_tun: entered promiscuous mode
[   79.591952][ T8724] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   80.078718][ T8760] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.085175][ T8760] syzkaller0: entered promiscuous mode
[   80.087121][ T8760] syzkaller0: entered allmulticast mode
[   80.091831][ T8760] tipc: Resetting bearer <eth:syzkaller0>
[   80.094483][ T8759] tipc: Resetting bearer <eth:syzkaller0>
[   80.098370][ T8759] tipc: Disabling bearer <eth:syzkaller0>
[   80.537302][ T8800] trusted_key: syz.2.1271 sent an empty control message without MSG_MORE.
[   80.565919][ T8811] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.570609][ T8811] syzkaller0: entered promiscuous mode
[   80.572991][ T8811] syzkaller0: entered allmulticast mode
[   80.581344][ T8811] tipc: Resetting bearer <eth:syzkaller0>
[   80.585561][ T8810] tipc: Resetting bearer <eth:syzkaller0>
[   80.589904][ T8810] tipc: Disabling bearer <eth:syzkaller0>
[   81.097245][ T8828] __nla_validate_parse: 5 callbacks suppressed
[   81.097259][ T8828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1281'.
[   81.337737][ T8845] netlink: 'syz.1.1289': attribute type 10 has an invalid length.
[   81.493755][ T8862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1298'.
[   81.854106][   T33] audit: type=1800 audit(1756698933.508:6): pid=8884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1308" name="cgroup.controllers" dev="tmpfs" ino=2498 res=0 errno=0
[   81.995457][ T8940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   82.050514][ T8940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   82.105770][ T8940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   82.674862][ T8958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1340'.
[   83.016550][ T9012] netlink: 'syz.2.1365': attribute type 27 has an invalid length.
[   83.022651][ T9012] syz_tun: left promiscuous mode
[   83.026213][ T9012] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   83.250716][ T9056] syz.0.1380 uses old SIOCAX25GETINFO
[   83.456885][ T9083] sctp: [Deprecated]: syz.2.1393 (pid 9083) Use of int in max_burst socket option deprecated.
[   83.456885][ T9083] Use struct sctp_assoc_value instead
[   83.508251][ T9091] netlink: 'syz.0.1397': attribute type 7 has an invalid length.
[   83.663995][ T9105] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.667092][ T9105] syzkaller0: entered promiscuous mode
[   83.671496][ T9105] syzkaller0: entered allmulticast mode
[   83.679952][ T9105] tipc: Resetting bearer <eth:syzkaller0>
[   83.683143][ T9104] tipc: Resetting bearer <eth:syzkaller0>
[   83.687319][ T9104] tipc: Disabling bearer <eth:syzkaller0>
[   84.076533][ T9145] bond2: entered promiscuous mode
[   84.079370][ T9145] 8021q: adding VLAN 0 to HW filter on device bond2
[   84.106140][ T9149] ieee802154 phy0 wpan0: encryption failed: -90
[   84.113803][ T9143] team0: Mode changed to "loadbalance"
[   84.166235][ T9158] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1428'.
[   84.172469][ T9158] bond0 (unregistering): Released all slaves
[   84.241571][ T9168] netlink: 'syz.0.1432': attribute type 4 has an invalid length.
[   84.249128][ T9168] netlink: 'syz.0.1432': attribute type 4 has an invalid length.
[   84.347404][ T9184] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[   84.446618][ T9204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1446'.
[   84.899961][ T9261] netlink: 'syz.2.1474': attribute type 1 has an invalid length.
[   84.903241][ T9261] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.171334][ T9291] syzkaller1: entered promiscuous mode
[   85.173523][ T9291] syzkaller1: entered allmulticast mode
[   85.498959][ T9317] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1501'.
[   85.502288][ T9317] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1501'.
[   85.523291][ T9319] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   85.526194][ T9319] syzkaller0: entered promiscuous mode
[   85.529102][ T9319] syzkaller0: entered allmulticast mode
[   85.534387][ T9319] tipc: Resetting bearer <eth:syzkaller0>
[   85.549489][ T9318] tipc: Resetting bearer <eth:syzkaller0>
[   85.554926][ T9318] tipc: Disabling bearer <eth:syzkaller0>
[   86.069781][ T9391] syzkaller0: entered promiscuous mode
[   86.071847][ T9391] syzkaller0: entered allmulticast mode
[   86.077014][ T9391] macsec1: entered promiscuous mode
[   86.657327][ T5876] hid-generic 0005:07C0:0009.0001: unknown main item tag 0x0
[   86.663448][ T5876] hid-generic 0005:07C0:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[   87.258429][ T9469] netlink: 'syz.0.1566': attribute type 12 has an invalid length.
[   87.611757][ T9489] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.614704][ T9489] syzkaller0: entered promiscuous mode
[   87.616862][ T9489] syzkaller0: entered allmulticast mode
[   87.624003][ T9489] tipc: Resetting bearer <eth:syzkaller0>
[   87.631209][ T9488] tipc: Resetting bearer <eth:syzkaller0>
[   87.634828][ T9488] tipc: Disabling bearer <eth:syzkaller0>
[   87.873696][ T9505] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.877498][ T9505] syzkaller0: entered promiscuous mode
[   87.880026][ T9505] syzkaller0: entered allmulticast mode
[   87.886020][ T9505] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   87.893222][ T9505] tipc: Resetting bearer <eth:syzkaller0>
[   87.897515][ T9504] tipc: Resetting bearer <eth:syzkaller0>
[   87.905029][ T9504] tipc: Disabling bearer <eth:syzkaller0>
[   88.004723][ T9507] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1581'.
[   88.009103][ T9507] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1581'.
[   88.126214][ T9517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1586'.
[   88.129374][ T9517] netlink: 'syz.1.1586': attribute type 7 has an invalid length.
[   88.132243][ T9517] netlink: 'syz.1.1586': attribute type 8 has an invalid length.
[   88.134925][ T9517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1586'.
[   88.184437][ T9526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1589'.
[   88.541291][ T9533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1591'.
[   89.288456][ T9579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1612'.
[   89.291793][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[   89.293855][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.296323][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.298823][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.301248][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.303803][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.306207][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.308716][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.311118][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.313631][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.316210][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.318938][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.321570][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.324116][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.326652][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.329436][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.332238][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.335127][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.338134][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.341027][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.343609][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.346119][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.348865][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.351532][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.354264][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.356976][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.359784][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.362402][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.365547][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.368287][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.371103][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.373622][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.376363][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.379253][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.381754][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.384170][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.386634][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.389383][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.392065][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.394572][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.397096][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.399968][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.402541][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[   89.405387][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[   89.487123][ T9588] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1616'.
[   89.621165][ T9594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1619'.
[   89.732839][ T9604] netlink: 'syz.1.1624': attribute type 21 has an invalid length.
[   89.737576][ T9604] ipvlan2: entered promiscuous mode
[   89.740774][ T9604] bridge0: port 1(ipvlan2) entered blocking state
[   89.742974][ T9604] bridge0: port 1(ipvlan2) entered disabled state
[   89.745190][ T9604] ipvlan2: entered allmulticast mode
[   89.747348][ T9604] gretap0: entered allmulticast mode
[   89.751240][ T9604] ipvlan2: left allmulticast mode
[   89.753348][ T9604] gretap0: left allmulticast mode
[   90.847448][ T5876] IPVS: starting estimator thread 0...
[   90.863681][ T9711] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1674'.
[   90.947913][ T9707] IPVS: using max 137 ests per chain, 328800 per kthread
[   91.453023][ T9732] netlink: 'syz.0.1681': attribute type 10 has an invalid length.
[   91.836671][ T9759] netlink: 'syz.1.1694': attribute type 4 has an invalid length.
[   92.417402][ T9834] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   92.420932][ T9834] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.464624][ T9834] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   92.468649][ T9834] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.480685][ T9835] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   92.518383][ T9834] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   92.522475][ T9834] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.577762][ T9834] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   92.581943][ T9834] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.628443][ T5955] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   92.631836][ T5955] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.639449][ T5955] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   92.642794][ T5955] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.656439][ T5955] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   92.659817][ T5955] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.667187][ T5955] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   92.671581][ T5955] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.127617][ T9863] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[   93.155839][ T9869] netlink: 'syz.0.1740': attribute type 21 has an invalid length.
[   93.160084][ T9869] netlink: 'syz.0.1740': attribute type 1 has an invalid length.
[   93.162903][ T9869] __nla_validate_parse: 6 callbacks suppressed
[   93.162912][ T9869] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1740'.
[   93.264334][   T47] IPVS: starting estimator thread 0...
[   93.357934][ T9882] IPVS: using max 136 ests per chain, 326400 per kthread
[   93.427173][ T9901] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1753'.
[   93.431292][ T9901] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1753'.
[   93.687929][ T5848] Bluetooth: hci2: command 0x0401 tx timeout
[   93.988331][ T9870] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[   94.028570][ T9946] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1774'.
[   94.136052][ T9958] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1777'.
[   94.140817][ T9958] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1777'.
[   94.144848][ T9958] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1777'.
[   94.148961][ T9958] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1777'.
[   94.317726][ T9983] netlink: 'syz.1.1792': attribute type 3 has an invalid length.
[   94.422958][ T9997] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1799'.
[   94.506061][T10005] netlink: 'syz.1.1803': attribute type 1 has an invalid length.
[   94.625069][ T5876] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[   94.632447][ T5876] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[   94.638706][ T5876] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   94.794466][T10041] netlink: 'syz.0.1820': attribute type 9 has an invalid length.
[   94.798588][T10041] netlink: 'syz.0.1820': attribute type 7 has an invalid length.
[   94.801877][T10041] netlink: 'syz.0.1820': attribute type 8 has an invalid length.
[   94.816504][T10043] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.825060][T10043] syzkaller0: entered promiscuous mode
[   94.827027][T10043] syzkaller0: entered allmulticast mode
[   94.840054][T10043] tipc: Resetting bearer <eth:syzkaller0>
[   94.842954][T10042] tipc: Resetting bearer <eth:syzkaller0>
[   94.851603][T10042] tipc: Disabling bearer <eth:syzkaller0>
[   95.208020][ T5848] Bluetooth: hci0: command 0x0c20 tx timeout
[   95.218307][T10081] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   95.220513][T10081] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[   95.249870][T10081] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   95.283262][T10081] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   95.580269][T10114] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1853'.
[   95.770822][ T5848] Bluetooth: hci2: command 0x0401 tx timeout
[   95.773230][T10081] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   95.775242][T10081] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   95.821876][T10122] netlink: 'syz.0.1854': attribute type 1 has an invalid length.
[   96.011071][ T8136] IPVS: ip_vs_send_async error -101
[   97.437637][T10229] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun!
[   97.489256][T10231] tun0: tun_chr_ioctl cmd 1074812118
[   97.768293][T10249] netlink: 'syz.0.1911': attribute type 1 has an invalid length.
[   97.771610][T10249] netlink: 'syz.0.1911': attribute type 1 has an invalid length.
[   97.858781][T10249] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.863354][T10249] bond0: (slave wlan0): Opening slave failed
[   97.868938][T10249] vlan2: entered allmulticast mode
[   97.870844][T10249] veth1: entered allmulticast mode
[   97.875841][T10249] bond0: (slave vlan2): making interface the new active one
[   97.879189][T10249] bond0: (slave vlan2): Enslaving as an active interface with an up link
[   98.382844][T10319] __nla_validate_parse: 5 callbacks suppressed
[   98.382857][T10319] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1942'.
[   99.639253][T10366] veth0_to_bridge: left promiscuous mode
[   99.806006][T10366] veth3: left promiscuous mode
[   99.809659][T10366] veth4: left promiscuous mode
[   99.811307][T10366] veth4: left allmulticast mode
[   99.828507][T10366] bond2: left promiscuous mode
[   99.832920][T10366] vlan2: left allmulticast mode
[   99.834613][T10366] veth1: left allmulticast mode
[   99.836462][ T5955] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.839440][ T5955] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.842344][ T5955] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.845390][ T5955] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  100.167975][ T8136] IPVS: ip_vs_send_async error -101
[  100.209448][T10419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1981'.
[  100.347341][T10430] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1986'.
[  100.350987][T10430] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1986'.
[  100.353992][T10430] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1986'.
[  100.357023][T10430] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1986'.
[  100.424168][T10438] tipc: Enabled bearer <eth:ipvlan1>, priority 14
[  100.529966][T10449] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  100.533648][T10449] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  100.632654][T10446] validate_nla: 1 callbacks suppressed
[  100.632668][T10446] netlink: 'syz.2.1994': attribute type 13 has an invalid length.
[  100.640649][T10446] netlink: 'syz.2.1994': attribute type 17 has an invalid length.
[  100.656459][T10446] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  100.741172][T10446] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1994'.
[  100.745579][T10446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.802754][T10446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.855200][T10479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2006'.
[  100.872959][T10481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2007'.
[  101.465457][T10501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2016'.
[  101.537930][T10367] tipc: Node number set to 1479849226
[  101.812439][T10541] syzkaller0: entered promiscuous mode
[  101.814815][T10541] syzkaller0: entered allmulticast mode
[  101.821315][T10543] dvmrp8: entered allmulticast mode
[  101.825887][T10542] dvmrp8: left allmulticast mode
[  102.664539][T10613] netlink: 'syz.0.2067': attribute type 8 has an invalid length.
[  103.053144][T10665] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  103.056325][T10665] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  103.093553][T10671] netlink: 'syz.1.2093': attribute type 21 has an invalid length.
[  103.119077][T10668] v: renamed from veth1_vlan (while UP)
[  103.201179][T10689] dummy0: entered allmulticast mode
[  103.203275][T10683] "syz.2.2099" (10683) uses obsolete ecb(arc4) skcipher
[  103.205712][T10688] dummy0: left allmulticast mode
[  103.241252][T10698] dvmrp0: entered allmulticast mode
[  103.413996][T10720] netlink: 'syz.1.2116': attribute type 1 has an invalid length.
[  103.417714][T10720] __nla_validate_parse: 1 callbacks suppressed
[  103.417726][T10720] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2116'.
[  103.424487][T10720] netlink: 'syz.1.2116': attribute type 1 has an invalid length.
[  103.491501][T10729] IPVS: Error connecting to the multicast addr
[  105.701938][T10867] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2177'.
[  105.921927][T10886] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2185'.
[  105.943428][T10888] netlink: 'syz.0.2186': attribute type 16 has an invalid length.
[  105.946252][T10888] netlink: 'syz.0.2186': attribute type 17 has an invalid length.
[  106.347512][T10942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2212'.
[  106.704920][T10964] bond0: (slave syz_tun): Releasing backup interface
[  106.729814][T10964] rdma_op ffff8881259fb9f0 conn xmit_rdma 0000000000000000
[  106.734327][T10964] netlink: 'syz.2.2220': attribute type 10 has an invalid length.
[  106.923238][T10982] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  106.927734][T10982] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address
[  106.932336][T10982] bond0: (slave ipvlan1): Error -95 calling set_mac_address
[  107.025518][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  107.031623][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  107.036474][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  107.040321][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  107.083586][T11003] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2239'.
[  107.089869][T11003] bond0: entered promiscuous mode
[  107.092208][T11003] bond0: left promiscuous mode
[  107.239073][T11022] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2248'.
[  107.424553][T11044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2259'.
[  107.446425][T11050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2261'.
[  107.472114][T11050] bridge4: port 1(bond3) entered blocking state
[  107.474924][T11050] bridge4: port 1(bond3) entered disabled state
[  107.477589][T11050] bond3: entered allmulticast mode
[  107.481853][T11050] bond3: entered promiscuous mode
[  107.556505][T11059] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2265'.
[  107.641471][T11074] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2271'.
[  108.572971][T11105] __nla_validate_parse: 1 callbacks suppressed
[  108.572983][T11105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2284'.
[  108.608450][T11111] netlink: 'syz.2.2287': attribute type 16 has an invalid length.
[  108.611374][T11111] netlink: 'syz.2.2287': attribute type 3 has an invalid length.
[  108.614215][T11111] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.2287'.
[  108.640713][T11115] netlink: 'syz.0.2288': attribute type 13 has an invalid length.
[  108.644042][T11115] netlink: 'syz.0.2288': attribute type 17 has an invalid length.
[  108.646038][T11118] netlink: 'syz.1.2291': attribute type 6 has an invalid length.
[  108.647355][T11115] netlink: 'syz.0.2288': attribute type 27 has an invalid length.
[  108.650605][T11118] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2291'.
[  108.675273][T11121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2292'.
[  109.769422][T11171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2312'.
[  109.989183][T11206] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.991761][T11206] syzkaller0: entered promiscuous mode
[  109.993633][T11206] syzkaller0: entered allmulticast mode
[  110.000866][T11206] tipc: Resetting bearer <eth:syzkaller0>
[  110.003239][T11205] tipc: Resetting bearer <eth:syzkaller0>
[  110.006177][T11205] tipc: Disabling bearer <eth:syzkaller0>
[  110.112474][T11219] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2335'.
[  110.362992][T11248] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2349'.
[  110.384040][T11248] nbd: socks must be embedded in a SOCK_ITEM attr
[  110.691612][T11274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2359'.
[  110.694694][T11274] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2359'.
[  110.741385][T11272] team0: Mode changed to "activebackup"
[  110.818485][T11284] tipc: Enabled bearer <eth:macvtap0>, priority 10
[  110.861583][T11290] syzkaller1: entered promiscuous mode
[  110.864776][T11290] syzkaller1: entered allmulticast mode
[  111.265056][T11315] pim6reg1: entered promiscuous mode
[  111.266862][T11315] pim6reg1: entered allmulticast mode
[  111.284582][T11317] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  111.750991][T11387] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.753999][T11387] syzkaller0: entered promiscuous mode
[  111.755895][T11387] syzkaller0: entered allmulticast mode
[  111.760190][T11387] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  111.764655][T11387] tipc: Resetting bearer <eth:syzkaller0>
[  111.767708][T11386] tipc: Resetting bearer <eth:syzkaller0>
[  111.772020][T11386] tipc: Disabling bearer <eth:syzkaller0>
[  111.879636][T11393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2412'.
[  112.185660][T11431] netlink: 'syz.2.2425': attribute type 13 has an invalid length.
[  112.191074][T11431] netlink: 'syz.2.2425': attribute type 17 has an invalid length.
[  112.199775][T11431] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  112.288857][T11431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  112.366819][T11436] netlink: 'syz.0.2429': attribute type 1 has an invalid length.
[  112.779650][   T10] tipc: Node number set to 2061748883
[  112.966441][T11467] netlink: 'syz.1.2439': attribute type 9 has an invalid length.
[  113.633151][T11508] netlink: 'syz.2.2458': attribute type 10 has an invalid length.
[  113.639189][T11508] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  113.643436][T11508] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  114.098383][T11519] IPVS: Scheduler module ip_vs_sip not found
[  114.339855][T11552] __nla_validate_parse: 7 callbacks suppressed
[  114.339865][T11552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2478'.
[  114.932956][T11588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2491'.
[  115.062225][T11598] netlink: 'syz.2.2496': attribute type 7 has an invalid length.
[  115.065301][T11598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2496'.
[  115.077788][T11598] bridge2: port 1(bond2) entered blocking state
[  115.080576][T11598] bridge2: port 1(bond2) entered disabled state
[  115.083083][T11598] bond2: entered allmulticast mode
[  115.107521][T11601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2497'.
[  115.111374][T11601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2497'.
[  115.162571][T11606] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  115.188603][T11610] lo: entered allmulticast mode
[  115.190979][T11610] lo: left allmulticast mode
[  115.478514][T11649] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  115.483083][T11649] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  115.486832][T11649] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  116.353851][T11681] vlan1: entered allmulticast mode
[  116.355752][T11681] veth0_vlan: entered allmulticast mode
[  116.357618][T11681] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  116.509684][T11702] netlink: 'syz.2.2543': attribute type 4 has an invalid length.
[  116.734490][T11734] ieee802154 phy0 wpan0: encryption failed: -22
[  116.841558][T11757] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  116.873662][T11759] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.877009][T11759] syzkaller0: entered promiscuous mode
[  116.879654][T11759] syzkaller0: entered allmulticast mode
[  116.886288][T11759] tipc: Resetting bearer <eth:syzkaller0>
[  116.890308][T11758] tipc: Resetting bearer <eth:syzkaller0>
[  116.894558][T11758] tipc: Disabling bearer <eth:syzkaller0>
[  117.236517][T11787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2580'.
[  117.262717][T11789] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  117.669900][T11800] netlink: 'syz.1.2585': attribute type 1 has an invalid length.
[  118.070678][T11859] netlink: 'syz.0.2608': attribute type 12 has an invalid length.
[  118.116698][T11867] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  118.126936][T11870] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  118.155502][T11879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2618'.
[  118.194154][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.201638][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.207664][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.210710][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.235341][T11895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2627'.
[  118.240090][T11895] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  118.242647][T11895] team0: Device ipvlan3 is already an upper device of the team interface
[  118.366609][T11916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2635'.
[  118.461124][T11928] netlink: 'syz.2.2640': attribute type 39 has an invalid length.
[  118.466377][T11928] veth0_macvtap: left promiscuous mode
[  118.745989][T11950] netlink: 'syz.0.2650': attribute type 10 has an invalid length.
[  118.991330][T11978] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.993847][T11978] syzkaller0: entered promiscuous mode
[  118.995760][T11978] syzkaller0: entered allmulticast mode
[  119.000111][T11978] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) !
[  119.003308][T11978] tipc: Resetting bearer <eth:syzkaller0>
[  119.005663][T11977] tipc: Resetting bearer <eth:syzkaller0>
[  119.009081][T11977] tipc: Disabling bearer <eth:syzkaller0>
[  119.184700][T12005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2675'.
[  119.287942][ T5848] Bluetooth: hci0: command tx timeout
[  119.291012][   T95] IPVS: starting estimator thread 0...
[  119.341555][T12027] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  119.389223][T12021] IPVS: using max 138 ests per chain, 331200 per kthread
[  119.397457][T12035] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2687'.
[  119.563239][   T12] IPVS: stop unused estimator thread 0...
[  119.572125][T12059] syzkaller1: entered promiscuous mode
[  119.574447][T12059] syzkaller1: entered allmulticast mode
[  119.778440][T12070] ip6erspan0: entered promiscuous mode
[  119.964416][T12083] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  120.033672][T12085] syzkaller1: entered allmulticast mode
[  120.148044][T12090] netlink: zone id is out of range
[  120.150539][T12090] netlink: zone id is out of range
[  120.154126][T12090] netlink: zone id is out of range
[  120.166784][T12090] netlink: set zone limit has 4 unknown bytes
[  120.171027][T12090] netlink: del zone limit has 4 unknown bytes
[  120.528034][T12100] syzkaller1: entered promiscuous mode
[  120.530507][T12100] syzkaller1: entered allmulticast mode
[  120.694979][T12128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2727'.
[  120.700553][T12128] ip6gre0: Master is either lo or non-ether device
[  120.878056][T12160] netlink: 'syz.1.2742': attribute type 2 has an invalid length.
[  120.884365][T12162] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2743'.
[  120.911890][T12167] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2745'.
[  120.914884][T12167] bridge_slave_0: entered allmulticast mode
[  121.621349][T12204] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2760'.
[  121.624468][T12204] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2760'.
[  121.629709][T12204] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2760'.
[  121.633117][T12204] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2760'.
[  121.917191][T12230] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  122.217698][T12250] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2782'.
[  122.749684][T12312] syz.2.2807: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  122.760673][T12312] CPU: 1 UID: 0 PID: 12312 Comm: syz.2.2807 Not tainted syzkaller #0 PREEMPT(full) 
[  122.760690][T12312] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  122.760698][T12312] Call Trace:
[  122.760702][T12312]  <TASK>
[  122.760707][T12312]  dump_stack_lvl+0x189/0x250
[  122.760728][T12312]  ? __pfx_dump_stack_lvl+0x10/0x10
[  122.760743][T12312]  ? __pfx__printk+0x10/0x10
[  122.760759][T12312]  ? lock_release+0x4b/0x3e0
[  122.760779][T12312]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  122.760795][T12312]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  122.760809][T12312]  warn_alloc+0x214/0x310
[  122.760825][T12312]  ? stack_depot_save_flags+0x40/0x860
[  122.760843][T12312]  ? __pfx_warn_alloc+0x10/0x10
[  122.760860][T12312]  ? kasan_save_track+0x4f/0x80
[  122.760875][T12312]  ? xskq_create+0x56/0x170
[  122.760892][T12312]  ? xsk_init_queue+0xb0/0x110
[  122.760907][T12312]  ? xsk_setsockopt+0x4dc/0x8d0
[  122.760922][T12312]  ? do_sock_setsockopt+0x17c/0x1b0
[  122.760934][T12312]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  122.760946][T12312]  ? do_syscall_64+0xfa/0x3b0
[  122.760957][T12312]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.760972][T12312]  __vmalloc_node_range_noprof+0x125/0x12f0
[  122.760996][T12312]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  122.761014][T12312]  ? xsk_setsockopt+0x462/0x8d0
[  122.761028][T12312]  ? __kasan_kmalloc+0x93/0xb0
[  122.761045][T12312]  vmalloc_user_noprof+0xad/0xf0
[  122.761061][T12312]  ? xskq_create+0xbf/0x170
[  122.761078][T12312]  xskq_create+0xbf/0x170
[  122.761095][T12312]  xsk_init_queue+0xb0/0x110
[  122.761111][T12312]  xsk_setsockopt+0x4dc/0x8d0
[  122.761136][T12312]  ? __pfx_xsk_setsockopt+0x10/0x10
[  122.761153][T12312]  ? __pfx_aa_sk_perm+0x10/0x10
[  122.761169][T12312]  ? lock_release+0x4b/0x3e0
[  122.761186][T12312]  ? aa_sock_opt_perm+0xff/0x1b0
[  122.761197][T12312]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  122.761210][T12312]  ? __pfx_xsk_setsockopt+0x10/0x10
[  122.761224][T12312]  do_sock_setsockopt+0x17c/0x1b0
[  122.761236][T12312]  __x64_sys_setsockopt+0x13f/0x1b0
[  122.761250][T12312]  do_syscall_64+0xfa/0x3b0
[  122.761260][T12312]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.761272][T12312]  ? exc_page_fault+0x9f/0xf0
[  122.761287][T12312]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.761298][T12312] RIP: 0033:0x7f2e2cd8ebe9
[  122.761308][T12312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  122.761317][T12312] RSP: 002b:00007f2e2dc58038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  122.761331][T12312] RAX: ffffffffffffffda RBX: 00007f2e2cfc5fa0 RCX: 00007f2e2cd8ebe9
[  122.761339][T12312] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  122.761345][T12312] RBP: 00007f2e2ce11e19 R08: 0000000000000004 R09: 0000000000000000
[  122.761352][T12312] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  122.761360][T12312] R13: 00007f2e2cfc6038 R14: 00007f2e2cfc5fa0 R15: 00007fff7ced97f8
[  122.761372][T12312]  </TASK>
[  122.761376][T12312] Mem-Info:
[  122.893117][T12312] active_anon:4535 inactive_anon:0 isolated_anon:0
[  122.893117][T12312]  active_file:1428 inactive_file:38253 isolated_file:0
[  122.893117][T12312]  unevictable:1768 dirty:194 writeback:0
[  122.893117][T12312]  slab_reclaimable:9775 slab_unreclaimable:70934
[  122.893117][T12312]  mapped:17979 shmem:2426 pagetables:964
[  122.893117][T12312]  sec_pagetables:0 bounce:0
[  122.893117][T12312]  kernel_misc_reclaimable:0
[  122.893117][T12312]  free:270589 free_pcp:27784 free_cma:0
[  122.909616][T12312] Node 0 active_anon:12424kB inactive_anon:0kB active_file:2788kB inactive_file:6048kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32132kB dirty:192kB writeback:0kB shmem:4920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:2804kB pagetables:2000kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  122.920666][T12312] Node 1 active_anon:5784kB inactive_anon:0kB active_file:2924kB inactive_file:146964kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:39784kB dirty:584kB writeback:0kB shmem:4784kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8928kB pagetables:1652kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  122.955192][T12312] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  122.967043][T12312] lowmem_reserve[]: 0 811 811 811 811
[  122.970028][T12312] Node 0 DMA32 free:400492kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12560kB inactive_anon:0kB active_file:2788kB inactive_file:6048kB unevictable:3536kB writepending:192kB present:1556484kB managed:830908kB mlocked:0kB bounce:0kB free_pcp:50504kB local_pcp:14036kB free_cma:0kB
[  122.981612][T12312] lowmem_reserve[]: 0 0 0 0 0
[  122.983419][T12312] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  122.996564][T12312] lowmem_reserve[]: 0 0 854 854 854
[  122.998837][T12312] Node 1 Normal free:215912kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:5852kB inactive_anon:0kB active_file:2924kB inactive_file:146964kB unevictable:3536kB writepending:584kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:53388kB local_pcp:38488kB free_cma:0kB
[  123.010884][T12312] lowmem_reserve[]: 0 0 0 0 0
[  123.012616][T12312] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  123.016853][T12312] Node 0 DMA32: 315*4kB (UM) 401*8kB (UME) 241*16kB (UME) 403*32kB (UME) 304*64kB (UME) 103*128kB (UM) 40*256kB (UME) 23*512kB (UM) 21*1024kB (UME) 8*2048kB (UM) 70*4096kB (UM) = 400484kB
[  123.027270][T12312] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  123.033812][T12312] Node 1 Normal: 1529*4kB (UME) 473*8kB (UME) 535*16kB (UME) 126*32kB (UME) 155*64kB (UME) 66*128kB (UME) 29*256kB (UM) 19*512kB (UM) 6*1024kB (UM) 2*2048kB (ME) 36*4096kB (M) = 215708kB
[  123.041022][T12312] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  123.044256][T12312] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  123.047312][T12312] 42107 total pagecache pages
[  123.049237][T12312] 0 pages in swap cache
[  123.050743][T12312] Free swap  = 124996kB
[  123.054218][T12312] Total swap = 124996kB
[  123.056305][T12312] 786301 pages RAM
[  123.058008][T12312] 0 pages HighMem/MovableOnly
[  123.059725][T12312] 241342 pages reserved
[  123.061245][T12312] 0 pages cma reserved
[  123.088258][T12332] ==================================================================
[  123.091633][T12332] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  123.094878][T12332] Read of size 1 at addr ffff88802e4ade30 by task syz.2.2817/12332
[  123.099017][T12332] 
[  123.100028][T12332] CPU: 0 UID: 0 PID: 12332 Comm: syz.2.2817 Not tainted syzkaller #0 PREEMPT(full) 
[  123.100044][T12332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  123.100051][T12332] Call Trace:
[  123.100056][T12332]  <TASK>
[  123.100061][T12332]  dump_stack_lvl+0x189/0x250
[  123.100080][T12332]  ? __pfx_dump_stack_lvl+0x10/0x10
[  123.100094][T12332]  ? lock_release+0x4b/0x3e0
[  123.100115][T12332]  ? __virt_addr_valid+0x4a5/0x5c0
[  123.100131][T12332]  print_report+0xca/0x240
[  123.100142][T12332]  ? xfrm_state_find+0x2cf2/0x5400
[  123.100154][T12332]  kasan_report+0x118/0x150
[  123.100172][T12332]  ? xfrm_state_find+0x2cf2/0x5400
[  123.100187][T12332]  xfrm_state_find+0x2cf2/0x5400
[  123.100205][T12332]  ? xfrm_state_find+0x1da/0x5400
[  123.100218][T12332]  ? __pfx_xfrm_state_find+0x10/0x10
[  123.100229][T12332]  ? xfrm4_get_saddr+0xd5/0x140
[  123.100242][T12332]  ? __pfx_xfrm4_get_saddr+0x10/0x10
[  123.100255][T12332]  ? lock_acquire+0x5f/0x360
[  123.100272][T12332]  ? rcu_is_watching+0x15/0xb0
[  123.100284][T12332]  ? lock_release+0x4b/0x3e0
[  123.100303][T12332]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  123.100326][T12332]  ? stack_depot_save_flags+0x40/0x860
[  123.100343][T12332]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  123.100359][T12332]  ? ref_tracker_alloc+0x2ae/0x460
[  123.100411][T12332]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  123.100427][T12332]  ? rcu_is_watching+0x15/0xb0
[  123.100440][T12332]  ? rcu_is_watching+0x15/0xb0
[  123.100454][T12332]  ? xfrm_selector_match+0xbcf/0x1140
[  123.100469][T12332]  ? rt_set_nexthop+0x693/0xa80
[  123.100486][T12332]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  123.100502][T12332]  ? rcu_is_watching+0x15/0xb0
[  123.100512][T12332]  ? xfrm_expand_policies+0x41f/0x6a0
[  123.100529][T12332]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  123.100545][T12332]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  123.100558][T12332]  ? udp_sendmsg+0xc8f/0x2170
[  123.100575][T12332]  ? lock_release+0x4b/0x3e0
[  123.100593][T12332]  xfrm_lookup_route+0x3c/0x1c0
[  123.100609][T12332]  udp_sendmsg+0x142e/0x2170
[  123.100628][T12332]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  123.100643][T12332]  ? __pfx_udp_sendmsg+0x10/0x10
[  123.100657][T12332]  ? rcu_is_watching+0x15/0xb0
[  123.100670][T12332]  ? count_memcg_event_mm+0x21/0x260
[  123.100684][T12332]  ? count_memcg_event_mm+0x21/0x260
[  123.100699][T12332]  ? lock_release+0x4b/0x3e0
[  123.100718][T12332]  ? lock_release+0x4b/0x3e0
[  123.100734][T12332]  ? __pfx_aa_sk_perm+0x10/0x10
[  123.100750][T12332]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  123.100764][T12332]  ? sock_rps_record_flow+0x19/0x410
[  123.100781][T12332]  ? inet_sendmsg+0x29c/0x370
[  123.100795][T12332]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  123.100809][T12332]  __sock_sendmsg+0x19c/0x270
[  123.100826][T12332]  ____sys_sendmsg+0x52d/0x830
[  123.100840][T12332]  ? __pfx_____sys_sendmsg+0x10/0x10
[  123.100856][T12332]  ? import_iovec+0x74/0xa0
[  123.100870][T12332]  ___sys_sendmsg+0x21f/0x2a0
[  123.100883][T12332]  ? __pfx____sys_sendmsg+0x10/0x10
[  123.100896][T12332]  ? futex_private_hash_put+0x4b/0x280
[  123.100916][T12332]  ? __fget_files+0x2a/0x420
[  123.100925][T12332]  ? __fget_files+0x3a0/0x420
[  123.100936][T12332]  __sys_sendmmsg+0x227/0x430
[  123.100950][T12332]  ? __pfx___sys_sendmmsg+0x10/0x10
[  123.100961][T12332]  ? do_futex+0x395/0x420
[  123.100984][T12332]  ? rcu_is_watching+0x15/0xb0
[  123.100996][T12332]  __x64_sys_sendmmsg+0xa0/0xc0
[  123.101008][T12332]  do_syscall_64+0xfa/0x3b0
[  123.101019][T12332]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.101031][T12332]  ? exc_page_fault+0x9f/0xf0
[  123.101048][T12332]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.101060][T12332] RIP: 0033:0x7f2e2cd8ebe9
[  123.101072][T12332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  123.101083][T12332] RSP: 002b:00007f2e2dc58038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  123.101096][T12332] RAX: ffffffffffffffda RBX: 00007f2e2cfc5fa0 RCX: 00007f2e2cd8ebe9
[  123.101106][T12332] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003
[  123.101114][T12332] RBP: 00007f2e2ce11e19 R08: 0000000000000000 R09: 0000000000000000
[  123.101122][T12332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  123.101130][T12332] R13: 00007f2e2cfc6038 R14: 00007f2e2cfc5fa0 R15: 00007fff7ced97f8
[  123.101146][T12332]  </TASK>
[  123.101150][T12332] 
[  123.253977][T12332] Allocated by task 9058:
[  123.255678][T12332]  kasan_save_track+0x3e/0x80
[  123.257329][T12332]  __kasan_slab_alloc+0x6c/0x80
[  123.258883][T12332]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  123.260835][T12332]  xfrm_state_alloc+0x24/0x2f0
[  123.262478][T12332]  __find_acq_core+0x8a7/0x1c00
[  123.264239][T12332]  xfrm_find_acq+0x78/0xa0
[  123.265959][T12332]  xfrm_alloc_userspi+0x6b3/0xc90
[  123.267886][T12332]  xfrm_user_rcv_msg+0x7a3/0xab0
[  123.269777][T12332]  netlink_rcv_skb+0x208/0x470
[  123.271641][T12332]  xfrm_netlink_rcv+0x79/0x90
[  123.273362][T12332]  netlink_unicast+0x82f/0x9e0
[  123.274988][T12332]  netlink_sendmsg+0x805/0xb30
[  123.276604][T12332]  __sock_sendmsg+0x21c/0x270
[  123.278196][T12332]  ____sys_sendmsg+0x505/0x830
[  123.279811][T12332]  ___sys_sendmsg+0x21f/0x2a0
[  123.281371][T12332]  __x64_sys_sendmsg+0x19b/0x260
[  123.283071][T12332]  do_syscall_64+0xfa/0x3b0
[  123.284611][T12332]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.286591][T12332] 
[  123.287426][T12332] Freed by task 10:
[  123.288727][T12332]  kasan_save_track+0x3e/0x80
[  123.290302][T12332]  kasan_save_free_info+0x46/0x50
[  123.291996][T12332]  __kasan_slab_free+0x5b/0x80
[  123.293618][T12332]  kmem_cache_free+0x18f/0x400
[  123.295220][T12332]  xfrm_state_gc_task+0x52d/0x6b0
[  123.296915][T12332]  process_scheduled_works+0xae1/0x17b0
[  123.298769][T12332]  worker_thread+0x8a0/0xda0
[  123.300298][T12332]  kthread+0x711/0x8a0
[  123.301675][T12332]  ret_from_fork+0x3fc/0x770
[  123.303218][T12332]  ret_from_fork_asm+0x1a/0x30
[  123.304800][T12332] 
[  123.305626][T12332] The buggy address belongs to the object at ffff88802e4adb00
[  123.305626][T12332]  which belongs to the cache xfrm_state of size 928
[  123.310155][T12332] The buggy address is located 816 bytes inside of
[  123.310155][T12332]  freed 928-byte region [ffff88802e4adb00, ffff88802e4adea0)
[  123.314527][T12332] 
[  123.315307][T12332] The buggy address belongs to the physical page:
[  123.317417][T12332] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802e4ae400 pfn:0x2e4ac
[  123.320928][T12332] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  123.323645][T12332] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  123.326065][T12332] page_type: f5(slab)
[  123.327429][T12332] raw: 00fff00000000040 ffff88801aba6640 dead000000000122 0000000000000000
[  123.330361][T12332] raw: ffff88802e4ae400 00000000800e0007 00000000f5000000 0000000000000000
[  123.333203][T12332] head: 00fff00000000040 ffff88801aba6640 dead000000000122 0000000000000000
[  123.336132][T12332] head: ffff88802e4ae400 00000000800e0007 00000000f5000000 0000000000000000
[  123.339034][T12332] head: 00fff00000000002 ffffea0000b92b01 00000000ffffffff 00000000ffffffff
[  123.341948][T12332] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  123.344831][T12332] page dumped because: kasan: bad access detected
[  123.346991][T12332] page_owner tracks the page as allocated
[  123.348952][T12332] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6874, tgid 6873 (syz.2.423), ts 59033919930, free_ts 57258706198
[  123.355111][T12332]  post_alloc_hook+0x240/0x2a0
[  123.356750][T12332]  get_page_from_freelist+0x21e4/0x22c0
[  123.358627][T12332]  __alloc_frozen_pages_noprof+0x181/0x370
[  123.360516][T12332]  alloc_pages_mpol+0x232/0x4a0
[  123.362180][T12332]  allocate_slab+0x8a/0x370
[  123.363742][T12332]  ___slab_alloc+0xbeb/0x1410
[  123.365348][T12332]  kmem_cache_alloc_noprof+0x283/0x3c0
[  123.367169][T12332]  xfrm_state_alloc+0x24/0x2f0
[  123.368799][T12332]  pfkey_add+0x6e4/0x2e00
[  123.370222][T12332]  pfkey_sendmsg+0xbfe/0x1090
[  123.371792][T12332]  __sock_sendmsg+0x21c/0x270
[  123.373353][T12332]  ____sys_sendmsg+0x505/0x830
[  123.375201][T12332]  ___sys_sendmsg+0x21f/0x2a0
[  123.377217][T12332]  __x64_sys_sendmsg+0x19b/0x260
[  123.379295][T12332]  do_syscall_64+0xfa/0x3b0
[  123.381221][T12332]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.383752][T12332] page last free pid 10 tgid 10 stack trace:
[  123.386292][T12332]  __free_frozen_pages+0xbc4/0xd30
[  123.388526][T12332]  __slab_free+0x303/0x3c0
[  123.390368][T12332]  qlist_free_all+0x97/0x140
[  123.392372][T12332]  kasan_quarantine_reduce+0x148/0x160
[  123.394361][T12332]  __kasan_slab_alloc+0x22/0x80
[  123.396208][T12332]  __kmalloc_cache_noprof+0x1be/0x3d0
[  123.398135][T12332]  nsim_fib_event_work+0x1174/0x3180
[  123.399936][T12332]  process_scheduled_works+0xae1/0x17b0
[  123.401829][T12332]  worker_thread+0x8a0/0xda0
[  123.403424][T12332]  kthread+0x711/0x8a0
[  123.404836][T12332]  ret_from_fork+0x3fc/0x770
[  123.406464][T12332]  ret_from_fork_asm+0x1a/0x30
[  123.408089][T12332] 
[  123.408956][T12332] Memory state around the buggy address:
[  123.410851][T12332]  ffff88802e4add00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  123.413554][T12332]  ffff88802e4add80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  123.416175][T12332] >ffff88802e4ade00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  123.418949][T12332]                                      ^
[  123.420823][T12332]  ffff88802e4ade80: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  123.423650][T12332]  ffff88802e4adf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  123.426352][T12332] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  123.447454][T12332] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  123.449848][T12332] CPU: 0 UID: 0 PID: 12332 Comm: syz.2.2817 Not tainted syzkaller #0 PREEMPT(full) 
[  123.452899][T12332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  123.456126][T12332] Call Trace:
[  123.457230][T12332]  <TASK>
[  123.458220][T12332]  dump_stack_lvl+0x99/0x250
[  123.459747][T12332]  ? __asan_memcpy+0x40/0x70
[  123.461297][T12332]  ? __pfx_dump_stack_lvl+0x10/0x10
[  123.463021][T12332]  ? __pfx__printk+0x10/0x10
[  123.464593][T12332]  vpanic+0x281/0x750
[  123.465935][T12332]  ? preempt_schedule+0xae/0xc0
[  123.467575][T12332]  ? __pfx_vpanic+0x10/0x10
[  123.469019][T12332]  ? preempt_schedule_common+0x83/0xd0
[  123.470774][T12332]  ? preempt_schedule+0xae/0xc0
[  123.472350][T12332]  ? __pfx_preempt_schedule+0x10/0x10
[  123.474119][T12332]  panic+0xb9/0xc0
[  123.475450][T12332]  ? __pfx_panic+0x10/0x10
[  123.477034][T12332]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  123.479121][T12332]  ? xfrm_state_find+0x2cf2/0x5400
[  123.480877][T12332]  check_panic_on_warn+0x89/0xb0
[  123.482623][T12332]  ? xfrm_state_find+0x2cf2/0x5400
[  123.484351][T12332]  end_report+0x78/0x160
[  123.485821][T12332]  kasan_report+0x129/0x150
[  123.487444][T12332]  ? xfrm_state_find+0x2cf2/0x5400
[  123.489351][T12332]  xfrm_state_find+0x2cf2/0x5400
[  123.491565][T12332]  ? xfrm_state_find+0x1da/0x5400
[  123.493726][T12332]  ? __pfx_xfrm_state_find+0x10/0x10
[  123.495910][T12332]  ? xfrm4_get_saddr+0xd5/0x140
[  123.497872][T12332]  ? __pfx_xfrm4_get_saddr+0x10/0x10
[  123.500162][T12332]  ? lock_acquire+0x5f/0x360
[  123.502229][T12332]  ? rcu_is_watching+0x15/0xb0
[  123.504337][T12332]  ? lock_release+0x4b/0x3e0
[  123.506357][T12332]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  123.508954][T12332]  ? stack_depot_save_flags+0x40/0x860
[  123.511316][T12332]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  123.514179][T12332]  ? ref_tracker_alloc+0x2ae/0x460
[  123.516464][T12332]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  123.518704][T12332]  ? rcu_is_watching+0x15/0xb0
[  123.520763][T12332]  ? rcu_is_watching+0x15/0xb0
[  123.522775][T12332]  ? xfrm_selector_match+0xbcf/0x1140
[  123.525108][T12332]  ? rt_set_nexthop+0x693/0xa80
[  123.527276][T12332]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  123.529639][T12332]  ? rcu_is_watching+0x15/0xb0
[  123.531754][T12332]  ? xfrm_expand_policies+0x41f/0x6a0
[  123.534096][T12332]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  123.536421][T12332]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  123.538652][T12332]  ? udp_sendmsg+0xc8f/0x2170
[  123.540641][T12332]  ? lock_release+0x4b/0x3e0
[  123.542598][T12332]  xfrm_lookup_route+0x3c/0x1c0
[  123.544720][T12332]  udp_sendmsg+0x142e/0x2170
[  123.546436][T12332]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  123.548338][T12332]  ? __pfx_udp_sendmsg+0x10/0x10
[  123.550118][T12332]  ? rcu_is_watching+0x15/0xb0
[  123.552144][T12332]  ? count_memcg_event_mm+0x21/0x260
[  123.554436][T12332]  ? count_memcg_event_mm+0x21/0x260
[  123.556726][T12332]  ? lock_release+0x4b/0x3e0
[  123.558754][T12332]  ? lock_release+0x4b/0x3e0
[  123.560432][T12332]  ? __pfx_aa_sk_perm+0x10/0x10
[  123.562280][T12332]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  123.564967][T12332]  ? sock_rps_record_flow+0x19/0x410
[  123.567230][T12332]  ? inet_sendmsg+0x29c/0x370
[  123.569207][T12332]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  123.571283][T12332]  __sock_sendmsg+0x19c/0x270
[  123.572847][T12332]  ____sys_sendmsg+0x52d/0x830
[  123.574500][T12332]  ? __pfx_____sys_sendmsg+0x10/0x10
[  123.576558][T12332]  ? import_iovec+0x74/0xa0
[  123.578486][T12332]  ___sys_sendmsg+0x21f/0x2a0
[  123.580436][T12332]  ? __pfx____sys_sendmsg+0x10/0x10
[  123.582629][T12332]  ? futex_private_hash_put+0x4b/0x280
[  123.584746][T12332]  ? __fget_files+0x2a/0x420
[  123.586243][T12332]  ? __fget_files+0x3a0/0x420
[  123.587994][T12332]  __sys_sendmmsg+0x227/0x430
[  123.589674][T12332]  ? __pfx___sys_sendmmsg+0x10/0x10
[  123.591539][T12332]  ? do_futex+0x395/0x420
[  123.593013][T12332]  ? rcu_is_watching+0x15/0xb0
[  123.594654][T12332]  __x64_sys_sendmmsg+0xa0/0xc0
[  123.596303][T12332]  do_syscall_64+0xfa/0x3b0
[  123.597905][T12332]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.600105][T12332]  ? exc_page_fault+0x9f/0xf0
[  123.602093][T12332]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.604554][T12332] RIP: 0033:0x7f2e2cd8ebe9
[  123.606422][T12332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  123.613913][T12332] RSP: 002b:00007f2e2dc58038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  123.617443][T12332] RAX: ffffffffffffffda RBX: 00007f2e2cfc5fa0 RCX: 00007f2e2cd8ebe9
[  123.620642][T12332] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003
[  123.623876][T12332] RBP: 00007f2e2ce11e19 R08: 0000000000000000 R09: 0000000000000000
[  123.627121][T12332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  123.630417][T12332] R13: 00007f2e2cfc6038 R14: 00007f2e2cfc5fa0 R15: 00007fff7ced97f8
[  123.633808][T12332]  </TASK>
[  123.635977][T12332] Kernel Offset: disabled
[  123.637854][T12332] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:56:14  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000107d RDI=000000000000107e RBP=00000000000003f8 RSP=ffffc9000306e7b0
R8 =ffff888107cd8237 R9 =1ffff11020f9b046 R10=dffffc0000000000 R11=ffffffff854f2340
R12=dffffc0000000000 R13=ffffffff99afb8e4 R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f23bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f2e2dc586c0 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000007fc0 CR3=00000001103c8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f2e2cf97498 00007f2e2cf97470 XMM03=00007f2e2cf974a8 00007f2e2cf974a0
XMM04=00007f2e2dafd100 00007f2e2cf97460 XMM05=00007f2e2cf97478 00007f2e2cf974c0
XMM06=00007f2e2cf974b8 00007f2e2cf974b0 XMM07=00007f2e2cf974a8 00007f2e2cf974a0
XMM08=0000000000000000 00007f2e2ce12ee7 XMM09=0000000000000000 00007f2e2ce12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffffc90007c776b0 RCX=c599ba8b38ea3400 RDX=ffffc90007c77601
RSI=ffffffff8be33660 RDI=ffffffff8222dd8e RBP=ffffc90007c776f0 RSP=ffffc90007c77640
R8 =ffffc90007c77790 R9 =0000000000000000 R10=ffffc90007c776b8 R11=fffff52000f8eed9
R12=ffff8881098b3980 R13=0000000000000000 R14=dffffc0000000000 R15=1ffff92000f8eed6
RIP=ffffffff818c7f4e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f34516ab440 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 000000000000ff00 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000000000ff 000000000000ff00 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
