last executing test programs:

12.443047286s ago: executing program 0 (id=1421):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x4000000, @empty, 0x6}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

12.442009388s ago: executing program 0 (id=1424):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8001, 0x5, @empty, 0xfffffff8}, 0x1c)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
listen(r1, 0x2)

12.374382873s ago: executing program 0 (id=1426):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c561e067f0202ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000000003a0", 0x58}], 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
close(0x3)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180200681108d1000000000000000000850000003b0000009500000000040000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94)

12.332061168s ago: executing program 0 (id=1428):
r0 = accept(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x80)
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r5 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe)

12.153892425s ago: executing program 0 (id=1437):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80)

12.003874537s ago: executing program 0 (id=1443):
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000002c0)={@local, @loopback}, &(0x7f0000000280)=0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r1, 0x0, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280), 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000004c0)="00ff03076003008cb89e08f088a8ccf63780", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg(r2, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001c80)="798e17a462", 0x5}, {&(0x7f00000001c0)="f046930fa55abd012495a5cfd6dadd38aefd099ef2872c528fba3a7ae77cf3e61d6b48c5316b2b89011110419e", 0xfffffff2}], 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="68000000000000003a0000000400000012331f3a8113e5e07fb96a48595b3351314fb24bdf97abcfe84a530ffb7d8215e5cbbf5a5154b278e958ff8532d2fc4fff64e77cb0c8bcd7663b222f3e5626bdab8b1e91264e309ecbc2bf397a79573fba00000000000000f8"], 0x160}}], 0x2, 0x20004840)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bond0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r7, @ANYBLOB="14000200fe8000000000000000000000000000aa0800093f3f0c0000140001"], 0x48}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x4, '\x00', r7, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendto(r2, &(0x7f0000000800)="42fa603de74acd95585d7cc02f240817f49b77f0ddd81f1d4953c41385f5221f7ab49663603984a4f9542b5b1b19ea64af85f1bda098623a079a0c5abbd1340b99ee551665f3df0ed6e11c751eb567fb0fb4fbd14e03932a612bb002195c82461a9cc33e354cf646901f9d16f0e32abedff9ba9828a3c2914b3cc0d4de2d5b133a58c811c3343dffe8258af8f857489bcb7e07f71d762a15c09fe811dba1ebcbb887b4feb93909953b695fd9275cc6e83a109bcb29b2650f34d71ce4ee23bee4b64c736b63fbb1010aa312207ffa00b96e099f857fc0a4b1ba8451b711", 0xdd, 0x4040, &(0x7f0000000500)=@un=@abs={0x1, 0x0, 0x4e22}, 0x80)
sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0)

11.858217388s ago: executing program 32 (id=1443):
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000002c0)={@local, @loopback}, &(0x7f0000000280)=0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r1, 0x0, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280), 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000004c0)="00ff03076003008cb89e08f088a8ccf63780", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc)
connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg(r2, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001c80)="798e17a462", 0x5}, {&(0x7f00000001c0)="f046930fa55abd012495a5cfd6dadd38aefd099ef2872c528fba3a7ae77cf3e61d6b48c5316b2b89011110419e", 0xfffffff2}], 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="68000000000000003a0000000400000012331f3a8113e5e07fb96a48595b3351314fb24bdf97abcfe84a530ffb7d8215e5cbbf5a5154b278e958ff8532d2fc4fff64e77cb0c8bcd7663b222f3e5626bdab8b1e91264e309ecbc2bf397a79573fba00000000000000f8"], 0x160}}], 0x2, 0x20004840)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bond0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r7, @ANYBLOB="14000200fe8000000000000000000000000000aa0800093f3f0c0000140001"], 0x48}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x4, '\x00', r7, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendto(r2, &(0x7f0000000800)="42fa603de74acd95585d7cc02f240817f49b77f0ddd81f1d4953c41385f5221f7ab49663603984a4f9542b5b1b19ea64af85f1bda098623a079a0c5abbd1340b99ee551665f3df0ed6e11c751eb567fb0fb4fbd14e03932a612bb002195c82461a9cc33e354cf646901f9d16f0e32abedff9ba9828a3c2914b3cc0d4de2d5b133a58c811c3343dffe8258af8f857489bcb7e07f71d762a15c09fe811dba1ebcbb887b4feb93909953b695fd9275cc6e83a109bcb29b2650f34d71ce4ee23bee4b64c736b63fbb1010aa312207ffa00b96e099f857fc0a4b1ba8451b711", 0xdd, 0x4040, &(0x7f0000000500)=@un=@abs={0x1, 0x0, 0x4e22}, 0x80)
sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0)

703.729654ms ago: executing program 3 (id=1659):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x6, 0x7f, 0x10}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000400), &(0x7f00000001c0)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)

584.303843ms ago: executing program 3 (id=1663):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000000540), 0xc)

583.558973ms ago: executing program 3 (id=1666):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x80)

522.107046ms ago: executing program 3 (id=1669):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r1}, 0x18)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newspdinfo={0x1c, 0x24, 0x1, 0x1, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x8004)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@remote, 0x4e22, 0x0, 0x4e22, 0xfff, 0xa, 0x0, 0x0, 0x3a}, {0x3, 0xd4, 0x6, 0x8, 0x3, 0x3, 0x5, 0x8001}, {0x7f, 0x10000, 0x8000000000000000}, 0xc, 0x6e6bc0, 0x0, 0x0, 0x2, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x19}, 0x4d2, 0x3c}, 0x2, @in6=@mcast1, 0x34ff, 0x3, 0x3, 0x1, 0xa9, 0x8001, 0x1}}, 0xe8)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x8, 0x8, 0x8}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0xa0, 0x1}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0xffff93d3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r7, 0x58, &(0x7f0000000300)}, 0x10)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a00010071756575650000001c000280060002400ffe009b06000140faff"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x9c, 0x464, 0x200, 0x70bd2b, 0x25dfdbfb, "e00c60b0eda60303bde13d74dddde18f4891bf814cba793c20523011c3b0d09b8f5364ca2a3e437fb31cb874b90d7e5d64057768d1273e2898c77a5f89a710db509980b95e92b332700f00d412c9008cfcebfde4e22932ee834b2f4175e7ee8573584cda1cbf0d8ee33018e75d0408f48fb83ce4c2ed3e7fd6369089be4273d029d3d6760b6b1a91fe93", ["", "", ""]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_FLOW={0x8}]}, 0x2c}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, 0x1404, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x8044)

475.81334ms ago: executing program 1 (id=1671):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0xff8, &(0x7f0000002e00)=""/4088, 0x0, 0xa}, 0x94)

470.749789ms ago: executing program 3 (id=1672):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791028000000000069003a00000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48)

392.759227ms ago: executing program 3 (id=1674):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040), 0x4)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000009c0)=@o_path={&(0x7f0000000940)='./file0\x00', 0x0, 0x4000, r1}, 0x18)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x3, '\x00', 0x0, r6, 0x3}, 0x50)
sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x14000010}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)={0xc8, 0x4, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x407b}]}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14}, @NFTA_HOOK_DEV={0x14, 0x3, 'sit0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6c1f678a}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg1\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x2000c085}, 0x8000)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000008000000000000000800000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000e000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000ac0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44801}, 0x80)
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000080)={r3, r6})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01006e38440000a955897e18", @ANYRES32=r7, @ANYBLOB="3400238005000e0001000000050011000100000006000c0001040000060004006e000000060010000002000008001a0002000000"], 0x50}}, 0x4040810)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621dc6}, 0x4)

392.562637ms ago: executing program 1 (id=1675):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x40000005, 0x4)
recvmmsg(r0, &(0x7f0000001140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/28, 0x1c}, 0x7}], 0x1, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000001c0)=0x7f, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

328.112012ms ago: executing program 2 (id=1677):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f00000003c0)={0x7d, {{0x29, 0x0, 0x4000000, @local, 0x4}}}, 0x88)

327.872893ms ago: executing program 2 (id=1678):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x4, 0xffd, 0x2}, 0x50)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

262.485384ms ago: executing program 2 (id=1679):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000001040)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="9f1ac09f155c1291fc8baa01adb9b575263c1a877ef8644bccc1143c6da61222f05eacf50665f3905cc2fd3e4e8100a13e7fcca4310085ea82993babea06255779d0dfa66f589f9511a2f87ee914c9e0894139310b5457cfe7ca3ae9dade5d7a11f0f2bbdec62e2df3daf9875c79c6763fdcb88306000000bd7c5c71ab8fffc299f6aea8ae05a727e64cbf8c3de5c36604fa3a7f43c2d51832aa29a52a9dd409823bc89a7cc268e91fff716052173384c4e76c9921c2accb039cbf2cfb99a47371db803c3dce71aa0555a2c0fdb6c8e812ac6974d7b3d749bbc7f90a00", 0xdd}, {&(0x7f00000012c0)="f12468c6c394472c8eb4d933949b4e7ce34f7e40ba3f0e7faf4c451550fa3e23ce5eff4f94c1d6a8d70a2bac4a61a80878383b7e9b4949e5e1806334e9b2b38c36b1ae9cacf90d28c44777d394f9c35db1f99c67e2e8be7b18eb08f008d897c6f47e09251280c7f663bd27785705ece8f16d41629358dd8090186bbd46a69fb5727ba3e1d26a5489ee962100f4600a24873520bd6266c7d27e2c0645cdc1c5b6e0787b5a9e9a98358e557344f0d8190df4e39a0ae6a3c77022d5bfe6326c9f151c760d16864288295be04e9f6454cafc19431c2f99322dd409b56268d8e40d80ca98b6f6331f06ef5a28ed1b092e16558d33177d4ab70db6768e06f59cf9c9d0382a2d59fcad38fbeded381b74acb93bd915ae6898f8ba1587e780205ad4cbf31186fe3913dcdb2527af89b3f431029416fcf0aa6a5e81d935d7e37e932a4e8cec21daf2eff568ca97132e6c3e659d0332cbdac7111ac4edbad69c5b67e11ebecc863a58ad7264385e8520d3d3f27fa565bfd90907e66b0a6c692f6fa9b666cb3a1e4c341c7fe0235bbd1bcb657637c2c784c874a7d083f80644b6a6e68983f769e5b90a06b30f0418addd80ed03722a9360bd640acc28f89bef7d20a4b9384ade774b1e461be1a926c9753e561cfd4de1e15177008c1b1e88b267457f697f4ada22ee0198a644a76ab3eecc263e61bc09f1455888f768a15a3213b9981b2863c3505317e4e363a0cbebaad423cae3df0ee901ae7dc4c80ea672932d92cb206e57f931f31482b30caec2926b277f2b45c3f12d6e243ae7a75191480771f6da4798045e9f024cde0045013c6c5dac160a908c1a8f19bfb2a2c49dfd138fcae28f289a929e5c584652a1930930f7b55d010d4ac7f497bcf21484a39b71ce12164d03650f6dcbde8e4315981579d151bedf03769de77d6664c2a3bff1047d19026d747520756eb4f9473f7e174aa0a9e635f0054c9cf2c52f28ef209ee55985c966a89c86cfe4d1c38bb5c367d42590a12ab71fd9df77239b71c29286bce4f5d270c885c223e2541609b5a9b25ca5898e077ffbe051686079c3d371f8bb8decf44234844ce4f3202cf6f7ce760492b2291d465d5a3abbab5486758bd2dd41c3dfff561bff88f105ed23eef411f8815dc739b17329ca264156bdc1112b6a4f3500f5dd79e8608e2b2941d03fac5136874c687bb082a9571002548f4cf6d966267c4e35bde6163d52bba090fdb972bf4905bca4d6032a96166ecd3922b46404c2a96f880c83dad173e119c30e568fa2d1a62c4af40f79cc4db7c41af817a9a41fddab00de688ddde530fbd5d22c30691b1c34394e3d329032a2b31ddbda7f2cbe68b2bb2a5efa0f57fd8dae10f472d8d82a2f2681a68eb54fdc2ff4e532118a8c5bdc490353f65f5747f72edd5dec321bb799f490fa69f4654c1c4d6c4f99e52880f7ec3905e60578649171b0f1e6bf001688a3f1e856b01b19c8e674ee1abecbfc0795927ca1559c557a4febc928f93f10c1e0a793ff140d2475d5563a916101a7a15ca075c1716be9c170b0dd52a8b0f109e722d27057f6cc8474e3f9456d5eeb10b8cfc8668cbab0ce4039211aa349058a38376c63da06616112242b4b3ddfb75cb5d5ca18ad4a231d90cb8ddbe430076c60b57ba814b81a32aa0c16c8867d193f31a89311c6aa4dfdc557657456ba2a6e381a6e824c8f88f599d2e5bbfa4caa45cfcbed998ad6844446270cd1348ac075fd831ff6b6016b82314a82c284ee252e9435ef726c4492f2c80a5f0462496b5f53e6ebd15dc419eab620e2da0534892b0f1506681eedad8c9b65b6f042cb5d71fc39d6f8ac35a054b20f964b6b8867bf242ac1cd2873a6cf8b4d4814ab60f6b3266f72f3c5f10d180cd5a7ae1dccafd847a2cb76542a16da1e88b2df1bef08279d3cf2de21ea2ebc32696c6b3e9df3268d3306c59184edc352eae88bf7967b316d13098312e040265a121762dd83495ba637bf5e68c72a5056231caca9041969d0dfa0f05a0307e42ebc36dc10e526e4e6481509d33ef9eb71565d4c50d3e594f0b451ea22c9ffdc4abb31cb9ad3095f2c1e30abd5072f18f35345a50500084f1bd3f584b0f9a4be66fb8c1193def94882815df069971a2f9088da24932b1b6f22a3afbbbf2408adeadfb4042340f56c3dbb74c8b78dc0efbde2504cf52169c27a4d47969ac0a0cb6875e4e3afaa7e199c5a33e550a9c34f64a6826e2396b88d40cbb8761c04a39bb5be5fd3a1073c3fb77a66d14b0ce83cf66ac2dac9d566a469410cbfdca14764466e2198089ce6f560a323f856867ca06d244f2b6c55259618768ab7e0aa4cd3374105a657f39d11c4eab45f1f685b8f11233b11a2ee4429033937d36b8d3d00a690b57dae50a6760946a1115b43c478950c0edf8d02ee0d07b8b96d00a0c26dcf6a9ccaaa3be39e63b81bdda5d3973f166bd6d414a05e419798810bb23669413c1e9f8285bc5dbe24e5eba2ced316358af4d671419b4a5afdfd2972a983cac53ba75061a2ad6b4c18b6b575660d21ce054f530abe4daf2d86ab3ec0583f8259c2a29e4b98a067398d67e7d26d1f04e7f37446196d6f207b9cbc50eae7bb2bf499e669065d49c44cc3303d25baaff66ba614c2c11c0d668f26a34cc39565f79f5cd844c70e530175b970a92aac892de2cafd5f6463660de32e379bcf2df6da2eb0036fbbb4d3144ac0d943b22b877ad8218056b1064da7c48036dd79502d806865b9d158dd51c78bccceaf8bfe82675c885870d06db67843b2fb24c3fc8a00f7e101774d7c80297c410e7d4af1ed641458b7f69360266d51b16d3c2dbee5f9f1522dceb4575dfc047957f7ead3dc86bf6558cb48869f262d9dc4d646a6d6b844f2c0d1e756688031a31307fdb0a26f3c1b99f3a03487415b0069a1d73f65ea6c89361beddec8addb4bb75714c8885876ac0748a34ba1ef820c83eb98cb12dd6be28086daf767b7a3fcfaadb98101ebbc7c730bfd3278b9e7f072ebfd49c35de14a5a18e6021279a34b9a6b04505554b482ac243ae978157cc3010644eb4d559658aee00e0fe280aa3d621cec79f0463fd5327293516c615515795060b7cf222f968053f7b8438c5f3fe6072985396976d227939b2e43f631cdd98d8b2d45e6adcbaaf1796c53abd8e6d6f47b49782a6d1b312de4a2a11741f3ccc55ef53ec19b555e5d4d87fe37313b65cc5b9619750b158d3e70a29c87ff3eb02b637810dc2c501bd679982d152f743fd6318a6b4e4e51009f5eea457687ea5c80079e73103ea7b8639edb1725a5131b4746abd6a500d7600a2f8e3c0a4474cdc3094a31c994944b89ce60a85f1468f825ba6ce1486760b9f1c87542c1b5a0266d563d4cc72763cdd5adaa9dc5d19da6e8510a6b9162319d65d733b13f004f8a5bc444d3af165720f7bddb50b1a2e3aad47463f035480a9ec84e7d305d1d668e4d04a8a5e5df263f38d0dc15b92585539f0b0fae3bc843594270041ed2b2028ba99d8e7cd8c54f17eea2ee2fb9b0a177033a155b28b0aa2a0f54e07a37da1082a5217224a6da718bece1b7b7ebd81b367ef1e56f16e21cac0f639b2fc3b86718df1d881682dac4e7e61cc26a2854cdee3c29e5df6c6585c1eb432f1070c72b9902d2bc8a62304fc94e1bdf13c2b79568a772f5028869f59d4bc4c44969d7124f49052ba4c8f72ea514628d8a41839b6bb896e6d1f12fed5f94106d86d6fdd93f3fcc9125263a2731a14830f67465c9a8241df9ac88e2c0576d0935ebf8c53a3e7e27b7f5d71b984c8b44a0e08c8bb7a69e234c9c495c1d9fc4435ecad3be25cf439f87405b17c89179c0b535d35a171448cf0693626253323c6a4896fda9987050e9ce6d9085235c3f44827dc21e4c6e8ffaf3e2315a727452d71a04ab7cb2a8bbef876af1805f8b381f376024743d2d6e1f12b8637c0ce41e3d4e190c01526b9636c1089fad636fa3c7a6278e029e6f426456f18d54025883155fb89bf52d5a7a696ecb8d3710763b5897dbe9579e1f144b4ae6f87e617cadf1bdf754b5845bc69db0b69ddec753ebd3c3fc7aa43cdfabe01fa0b0de856d16b7ff14898034c6ce30a6c2fd424ac3d82d3d82b64a3caf70c937df73783bc7908b8ea67d5ec249b0c2910aeb2f9b24f549215b910ce1828429fe5cf5af7ba37c1980aa2500597ab0e9541631dea7a76d25ebbede3cb74b8aaf81cfa8bbd1ba59ef0377eb7481846a861bcdbac62f29e0e6080d679a5080c25b5460cfc123893473f6c27e12a9a732d3cea2f9887b6a312d28cca68f27861d1edfbcb2fb1f28d9b64f957d8b038b3116c4f7988abb45b4fb53073e9154f176a6e4fcd1e206a5e0a7e679da918d480dd0e12eb7dc6bf0fa724418693d6c319590c5977c37621fcb1bd2ceb6fad94441866ff1c169094d5e65a8a8cf70ec024dac0dc699ba8ad7b7860286b4e2bd1cfd34f6a17b75c56b89d8212768566e71f0b310132883033606083eae4ae1e43e822d539a10c34189e3709e515e13c66abca5c41973e1cde6e8ba928a32a45c2b87b0cdc7542455900609a3c22ec16c121196ba46451e3d3bb8dbabc1bbb77bf6181bd4a809cfed730289e578dcb41ca5a26432a4b07b1d9d3216d200d3a2d9cea879502c7c670eafcdd454824e35b847cb7e7017fe172740ad90f7fb8bcc5f6a26a45f3bd47b8c98e88eec22ef959f4c5a37aa265aecbcf7b0fd9151b1d601a5da44137482f43f46ea6325a99826ff1d4200b312892a50bec81576f0951be628201cfab617dbc29a3f037cf743f4274863533fd36dce4e288bac7eb4aa21db83390eb4ac73fc292d9e5eae90885351ff81532684f57dcd4980e891bd1d96b1e9db5f7f9d4b38fa3e8e9de32805e801f989cd134b187140ee7aa067f306e26f8d076c5b62f73b34b9b9acb60c2f6f84070ba6507ea5da926b47051e2d4262883b42b859b88890e21568f65d620cf767ecbf4ffb482044977dfe913063d69ffecc67346e1ed44b9f12e65471640cb5245ef7a7d646dbf80b8ac94e7f7983a7b069312094a1f6a6be9565994ed6374218e91aa77307f7a635e688ec06d79771190ad2760465ec89159cdeb80af9eb0157c4002ea5e336a67e73b9e025a4bb41ce31f110a3ac9a059482ebf1e21c80bca10346ffd9adb236049c518e98f983467f585f284bd75d29130223dfb4bd45fe1351291d0a858f7aa20ad585d88822169b5ecf6282dd61616ec8bbc501fafa8ac74679a0f6fcd5ae58c65a616c9a22df2c427ff9bed4b522bf9e5323493763f3e5bd391433f51c8213ec40bc326beeec8b813c0247cbf36b451b43682d8683b1d378ef53cc823b8bc7e91ea6a4a844f136e91913ea0b0b61ce7aed9de28e769d09ba722b4de2ffa23188cc78dfa40868e1ac0ec56e2b6b308811946d11ad3bf0b9c200eb66dac033e27771115a098db2393004ef507dd7e419386f6d64e38cb416bc6e", 0xf23}], 0x2, 0x0, 0x0, 0x80}], 0x1, 0xc8d1)
recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x1, 0x2101, 0x0)

262.199006ms ago: executing program 1 (id=1680):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x4, &(0x7f0000000480)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x20, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

262.054784ms ago: executing program 2 (id=1681):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x963}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0)

261.603599ms ago: executing program 1 (id=1682):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbfb}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

257.580931ms ago: executing program 1 (id=1683):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5, 0x7, 0x8, 0x5, 0x80}, 0x50)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
socket$kcm(0x21, 0x2, 0xa)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000040000000000d0000000000005f00"], 0x0, 0x34, 0x0, 0x0, 0xfffffffc}, 0x28)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80)
r3 = socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r5=>0x0})
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0)

8.180601ms ago: executing program 2 (id=1684):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
r1 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)

7.949431ms ago: executing program 2 (id=1685):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x40000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)

0s ago: executing program 1 (id=1686):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000002e40)='ns/mnt\x00')
ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000002e80)={{}, "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"})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:32616' (ED25519) to the list of known hosts.
syzkaller login: [   49.920656][ T5840] cgroup: Unknown subsys name 'net'
[   50.041180][ T5840] cgroup: Unknown subsys name 'cpuset'
[   50.045672][ T5840] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.897293][ T5840] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   57.876479][ T5861] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.308805][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   60.313154][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   60.314736][ T5879] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   60.317705][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   60.320182][ T5879] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   60.325019][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   60.328117][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   60.329046][ T5879] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   60.331562][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   60.333316][ T5879] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   60.362783][ T5875] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   60.366816][ T5875] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   60.371146][ T5875] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   60.375143][ T5875] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   60.379104][ T5875] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   60.673980][ T5876] chnl_net:caif_netlink_parms(): no params data found
[   60.764158][ T5873] chnl_net:caif_netlink_parms(): no params data found
[   60.805953][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.808943][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.811284][ T5876] bridge_slave_0: entered allmulticast mode
[   60.814009][ T5876] bridge_slave_0: entered promiscuous mode
[   60.821695][ T5880] chnl_net:caif_netlink_parms(): no params data found
[   60.830184][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.832335][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.834428][ T5876] bridge_slave_1: entered allmulticast mode
[   60.837211][ T5876] bridge_slave_1: entered promiscuous mode
[   60.902714][ T5876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.905534][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.907756][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.910180][ T5873] bridge_slave_0: entered allmulticast mode
[   60.912792][ T5873] bridge_slave_0: entered promiscuous mode
[   60.916797][ T5876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.934302][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.936547][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.939087][ T5873] bridge_slave_1: entered allmulticast mode
[   60.941705][ T5873] bridge_slave_1: entered promiscuous mode
[   60.994634][ T5876] team0: Port device team_slave_0 added
[   60.997173][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.000537][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.002687][ T5880] bridge_slave_0: entered allmulticast mode
[   61.005344][ T5880] bridge_slave_0: entered promiscuous mode
[   61.017481][ T5876] team0: Port device team_slave_1 added
[   61.028498][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.030642][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.032722][ T5880] bridge_slave_1: entered allmulticast mode
[   61.035416][ T5880] bridge_slave_1: entered promiscuous mode
[   61.040209][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.055342][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.057437][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.067608][ T5876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.087262][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.100730][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.102807][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.110666][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.130279][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.150220][ T5873] team0: Port device team_slave_0 added
[   61.157982][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.162841][ T5873] team0: Port device team_slave_1 added
[   61.216640][ T5876] hsr_slave_0: entered promiscuous mode
[   61.220352][ T5876] hsr_slave_1: entered promiscuous mode
[   61.233026][ T5880] team0: Port device team_slave_0 added
[   61.236623][ T5880] team0: Port device team_slave_1 added
[   61.239752][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.242156][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.251087][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.275090][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.277540][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.286049][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.319314][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.321416][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.329597][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.333944][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.336032][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.344157][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   61.378933][ T5873] hsr_slave_0: entered promiscuous mode
[   61.381370][ T5873] hsr_slave_1: entered promiscuous mode
[   61.383404][ T5873] debugfs: 'hsr0' already exists in 'hsr'
[   61.385131][ T5873] Cannot create hsr debugfs directory
[   61.457463][ T5880] hsr_slave_0: entered promiscuous mode
[   61.462572][ T5880] hsr_slave_1: entered promiscuous mode
[   61.464991][ T5880] debugfs: 'hsr0' already exists in 'hsr'
[   61.466726][ T5880] Cannot create hsr debugfs directory
[   61.641328][ T5876] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   61.653001][ T5876] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   61.667357][ T5876] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   61.679913][ T5876] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   61.720622][ T5873] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   61.727090][ T5873] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   61.742945][ T5873] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   61.756626][ T5873] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   61.791599][ T5880] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   61.804291][ T5880] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   61.814251][ T5880] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   61.831064][ T5880] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   61.939047][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.952172][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.979813][ T5873] 8021q: adding VLAN 0 to HW filter on device team0
[   61.984663][ T5876] 8021q: adding VLAN 0 to HW filter on device team0
[   61.996505][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.001487][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.004088][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.011610][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.013898][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.019533][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.021787][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.046138][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.048535][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.062479][ T5880] 8021q: adding VLAN 0 to HW filter on device team0
[   62.085080][  T516] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.087792][  T516] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.122005][  T516] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.124200][  T516] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.234939][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.280345][ T5873] veth0_vlan: entered promiscuous mode
[   62.286547][ T5873] veth1_vlan: entered promiscuous mode
[   62.314087][ T5873] veth0_macvtap: entered promiscuous mode
[   62.327752][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.333174][ T5873] veth1_macvtap: entered promiscuous mode
[   62.346570][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.355734][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.362351][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.369905][ T5875] Bluetooth: hci0: command tx timeout
[   62.371998][   T54] Bluetooth: hci1: command tx timeout
[   62.380876][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.385102][ T5872] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.400335][ T5876] veth0_vlan: entered promiscuous mode
[   62.410757][ T5872] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.413604][ T5872] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.448597][ T5875] Bluetooth: hci2: command tx timeout
[   62.454010][ T5876] veth1_vlan: entered promiscuous mode
[   62.464180][ T5880] veth0_vlan: entered promiscuous mode
[   62.490002][ T5880] veth1_vlan: entered promiscuous mode
[   62.521584][ T5876] veth0_macvtap: entered promiscuous mode
[   62.527308][ T5876] veth1_macvtap: entered promiscuous mode
[   62.561510][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.563954][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.564590][ T5880] veth0_macvtap: entered promiscuous mode
[   62.581549][ T5880] veth1_macvtap: entered promiscuous mode
[   62.597748][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.619513][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.626836][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.635925][  T516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.639792][  T516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.641535][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.652585][ T5872] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.662820][ T5872] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.666337][ T5872] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.673734][ T5872] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.684246][ T5872] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.693979][ T5873] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   62.705000][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.708048][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.738644][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.837992][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.844044][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.886743][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.891445][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.952845][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.957090][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.961259][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.966134][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.047956][ T5953] netlink: 248 bytes leftover after parsing attributes in process `syz.0.13'.
[   63.439363][ T5982] netlink: 256 bytes leftover after parsing attributes in process `syz.0.31'.
[   63.451459][ T5982] netlink: 56 bytes leftover after parsing attributes in process `syz.0.31'.
[   63.492109][ T5986] netlink: 16 bytes leftover after parsing attributes in process `syz.2.33'.
[   63.516693][ T5991] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   63.644771][ T6001] netlink: 'syz.2.39': attribute type 25 has an invalid length.
[   63.786328][ T6011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.43'.
[   63.791374][ T6011] netlink: 'syz.2.43': attribute type 1 has an invalid length.
[   63.801846][ T6011] netlink: 'syz.2.43': attribute type 2 has an invalid length.
[   63.804542][ T6011] netlink: 80 bytes leftover after parsing attributes in process `syz.2.43'.
[   64.256340][ T6030] warning: `syz.2.49' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   64.449210][ T5875] Bluetooth: hci0: command tx timeout
[   64.458785][ T5875] Bluetooth: hci1: command tx timeout
[   64.529995][ T5875] Bluetooth: hci2: command tx timeout
[   64.706448][ T6066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.57'.
[   64.873224][ T6079] netlink: 16 bytes leftover after parsing attributes in process `syz.1.63'.
[   64.961565][ T6086] netlink: 224 bytes leftover after parsing attributes in process `syz.1.67'.
[   64.974721][ T6086] netlink: 'syz.1.67': attribute type 1 has an invalid length.
[   65.152282][ T6094] netlink: 32 bytes leftover after parsing attributes in process `syz.1.70'.
[   65.292888][ T6102] Zero length message leads to an empty skb
[   65.492601][ T6119] sctp: [Deprecated]: syz.1.80 (pid 6119) Use of struct sctp_assoc_value in delayed_ack socket option.
[   65.492601][ T6119] Use struct sctp_sack_info instead
[   65.509168][ T6117] block nbd0: server does not support multiple connections per device.
[   65.515018][ T6117] block nbd0: shutting down sockets
[   65.863522][ T6153] Illegal XDP return value 4294967294 on prog  (id 16) dev N/A, expect packet loss!
[   66.033848][ T6166] netlink: 'syz.2.99': attribute type 1 has an invalid length.
[   66.163854][ T6171] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[   66.171718][ T6171] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[   66.179486][ T6173] syz.0.102 uses obsolete (PF_INET,SOCK_PACKET)
[   66.354647][ T6187] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.440773][ T6197] syzkaller1: entered promiscuous mode
[   66.442505][ T6197] syzkaller1: entered allmulticast mode
[   66.487213][ T6201] bridge_slave_1: default FDB implementation only supports local addresses
[   66.528678][ T5875] Bluetooth: hci1: command tx timeout
[   66.528712][   T54] Bluetooth: hci0: command tx timeout
[   66.570998][ T6205] netlink: 'syz.2.116': attribute type 10 has an invalid length.
[   66.591999][ T6205] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.603108][ T6205] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   66.609307][   T54] Bluetooth: hci2: command tx timeout
[   66.732181][ T6219] netlink: 'syz.2.123': attribute type 8 has an invalid length.
[   66.759095][ T6221] syz_tun: entered promiscuous mode
[   66.761117][ T6221] macvtap1: entered promiscuous mode
[   66.765452][ T6221] syz_tun: left promiscuous mode
[   66.946994][ T6235] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   67.265798][ T6266] openvswitch: netlink: IPv4 tun info is not correct
[   67.666222][ T6296] veth0_to_team: entered promiscuous mode
[   67.825879][ T6313] netlink: 'syz.0.167': attribute type 7 has an invalid length.
[   68.162356][ T6343] __nla_validate_parse: 11 callbacks suppressed
[   68.162369][ T6343] netlink: 200 bytes leftover after parsing attributes in process `syz.1.181'.
[   68.173859][ T6343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.181'.
[   68.210156][ T6347] netlink: 20 bytes leftover after parsing attributes in process `syz.0.183'.
[   68.213559][ T6347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.183'.
[   68.217154][ T6347] netlink: 31 bytes leftover after parsing attributes in process `syz.0.183'.
[   68.221174][ T6347] netlink: 'syz.0.183': attribute type 3 has an invalid length.
[   68.224186][ T6347] netlink: 'syz.0.183': attribute type 2 has an invalid length.
[   68.226804][ T6347] netlink: 31 bytes leftover after parsing attributes in process `syz.0.183'.
[   68.265900][ T6350] netlink: 20 bytes leftover after parsing attributes in process `syz.0.185'.
[   68.274090][ T6350] netlink: 20 bytes leftover after parsing attributes in process `syz.0.185'.
[   68.613588][   T54] Bluetooth: hci1: command tx timeout
[   68.689434][   T54] Bluetooth: hci2: command tx timeout
[   68.826493][ T6382] wg1 speed is unknown, defaulting to 1000
[   68.835208][ T6384] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   68.842174][ T6382] wg1 speed is unknown, defaulting to 1000
[   68.845405][ T6382] wg1 speed is unknown, defaulting to 1000
[   68.869756][ T6382] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   68.892738][ T6382] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   68.940705][ T6382] wg1 speed is unknown, defaulting to 1000
[   68.943772][ T6382] wg1 speed is unknown, defaulting to 1000
[   68.946998][ T6382] wg1 speed is unknown, defaulting to 1000
[   68.952318][ T6382] wg1 speed is unknown, defaulting to 1000
[   69.054988][ T6389] netlink: 40 bytes leftover after parsing attributes in process `syz.1.201'.
[   69.127536][   T33] audit: type=1800 audit(1754976843.055:2): pid=6396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.204" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=342 res=0 errno=0
[   69.367194][ T6414] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.213'.
[   70.542650][ T6447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   70.859511][ T6481] validate_nla: 1 callbacks suppressed
[   70.859534][ T6481] netlink: 'syz.2.239': attribute type 3 has an invalid length.
[   71.333944][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.337120][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.781159][ T6525] bond0: invalid ARP target 0.0.0.0 specified for addition
[   71.783640][ T6525] bond0: option arp_ip_target: invalid value (0)
[   71.874383][ T6532] bridge0: entered allmulticast mode
[   71.877667][ T6532] bridge_slave_1: left allmulticast mode
[   71.881773][ T6532] bridge_slave_1: left promiscuous mode
[   71.884811][ T6532] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.898917][ T6532] bridge_slave_0: left allmulticast mode
[   71.900799][ T6532] bridge_slave_0: left promiscuous mode
[   71.902816][ T6532] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.923023][ T6532] bridge0 (unregistering): left allmulticast mode
[   71.953860][ T6535] netlink: 'syz.2.265': attribute type 29 has an invalid length.
[   72.863694][ T6593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   72.867855][ T6593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   73.313290][ T6629] netlink: 'syz.2.304': attribute type 16 has an invalid length.
[   73.315721][ T6629] netlink: 'syz.2.304': attribute type 3 has an invalid length.
[   73.321046][ T6629] __nla_validate_parse: 9 callbacks suppressed
[   73.321055][ T6629] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.304'.
[   73.403559][ T6637] tipc: Started in network mode
[   73.405212][ T6637] tipc: Node identity 3e3488eaf08f, cluster identity 4711
[   73.407884][ T6637] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.412163][ T6637] syzkaller0: entered promiscuous mode
[   73.415025][ T6637] syzkaller0: entered allmulticast mode
[   73.441000][ T6637] tipc: Resetting bearer <eth:syzkaller0>
[   73.444470][ T6635] tipc: Resetting bearer <eth:syzkaller0>
[   73.453218][ T6635] tipc: Disabling bearer <eth:syzkaller0>
[   73.500902][ T6641] tipc: Started in network mode
[   73.502649][ T6641] tipc: Node identity 6e051daffc22, cluster identity 4711
[   73.505196][ T6641] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.515626][ T6641] syzkaller0: entered promiscuous mode
[   73.520226][ T6641] syzkaller0: entered allmulticast mode
[   73.540328][ T6641] tipc: Resetting bearer <eth:syzkaller0>
[   73.545746][ T6639] tipc: Resetting bearer <eth:syzkaller0>
[   73.555122][ T6639] tipc: Disabling bearer <eth:syzkaller0>
[   73.581330][ T6643] syzkaller0: entered promiscuous mode
[   73.583111][ T6643] syzkaller0: entered allmulticast mode
[   73.591121][ T5872] syzkaller0: tun_net_xmit 70
[   73.593085][ T6643] syzkaller0: tun_chr_ioctl cmd 1074025677
[   73.595082][ T6643] syzkaller0: Linktype set failed because interface is up
[   73.874512][ T6669] block nbd2: NBD_DISCONNECT
[   73.885856][ T6671] netlink: 20 bytes leftover after parsing attributes in process `syz.1.322'.
[   73.894781][ T6673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.323'.
[   74.015576][ T6681] netlink: 'syz.1.327': attribute type 1 has an invalid length.
[   74.032931][ T6681] bond1: entered promiscuous mode
[   74.034664][ T6681] bond1: entered allmulticast mode
[   74.048076][ T6681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.327'.
[   74.056583][ T6681] bridge1: the hash_elasticity option has been deprecated and is always 16
[   74.589488][ T6735] netlink: 24 bytes leftover after parsing attributes in process `syz.1.351'.
[   74.601335][ T6733] tipc: Started in network mode
[   74.603306][ T6733] tipc: Node identity a64358cb0f18, cluster identity 4711
[   74.606128][ T6733] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.611526][ T6733] syzkaller0: entered promiscuous mode
[   74.613683][ T6733] syzkaller0: entered allmulticast mode
[   74.656195][ T6733] tipc: Resetting bearer <eth:syzkaller0>
[   74.668354][ T6733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   74.686461][ T6732] tipc: Resetting bearer <eth:syzkaller0>
[   74.697011][ T6732] tipc: Disabling bearer <eth:syzkaller0>
[   74.901304][ T6759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.362'.
[   75.104601][ T6777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.371'.
[   75.167381][ T6782] netlink: 36 bytes leftover after parsing attributes in process `syz.0.372'.
[   75.296116][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.376'.
[   75.301868][ T6789] bridge_slave_1: left allmulticast mode
[   75.307393][ T6789] bridge_slave_1: left promiscuous mode
[   75.310893][ T6789] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.314974][ T6789] bridge_slave_0: left allmulticast mode
[   75.317049][ T6789] bridge_slave_0: left promiscuous mode
[   75.323117][ T6789] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.447096][ T6794] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.509197][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.379'.
[   75.644899][ T6809] netlink: 'syz.0.384': attribute type 2 has an invalid length.
[   75.749690][ T6816] veth0: entered promiscuous mode
[   75.753969][ T6816] veth0: left promiscuous mode
[   75.960496][ T6831] netlink: 'syz.1.395': attribute type 10 has an invalid length.
[   75.963956][ T6831] syz_tun: entered promiscuous mode
[   75.970198][ T6831] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   75.974644][ T6831] netlink: 'syz.1.395': attribute type 10 has an invalid length.
[   75.981670][ T6831] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.993197][ T6831] team0: Port device bond0 added
[   76.001947][ T6836] netlink: 'syz.0.397': attribute type 1 has an invalid length.
[   76.033915][ T6836] 8021q: adding VLAN 0 to HW filter on device bond1
[   76.061679][ T6836] ipvlan2: entered allmulticast mode
[   76.063538][ T6836] bond1: entered allmulticast mode
[   76.086625][ T6836] bond1: (slave gretap1): making interface the new active one
[   76.089913][ T6836] gretap1: entered allmulticast mode
[   76.095353][ T6836] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   76.117264][ T6836] syz.0.397 (6836) used greatest stack depth: 19848 bytes left
[   76.602268][ T6874] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.605559][ T6874] syzkaller0: entered promiscuous mode
[   76.607338][ T6874] syzkaller0: entered allmulticast mode
[   76.650561][ T6874] tipc: Resetting bearer <eth:syzkaller0>
[   76.655256][ T6873] tipc: Resetting bearer <eth:syzkaller0>
[   76.666945][ T6873] tipc: Disabling bearer <eth:syzkaller0>
[   76.792745][ T6881] netlink: 'syz.0.414': attribute type 5 has an invalid length.
[   77.320325][ T6927] netlink: 'syz.2.437': attribute type 3 has an invalid length.
[   77.446323][ T6938] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.451012][ T6938] syzkaller0: entered promiscuous mode
[   77.453162][ T6938] syzkaller0: entered allmulticast mode
[   77.467932][ T6938] tipc: Resetting bearer <eth:syzkaller0>
[   77.482606][ T6937] tipc: Resetting bearer <eth:syzkaller0>
[   77.491732][ T6937] tipc: Disabling bearer <eth:syzkaller0>
[   77.654310][ T6949] wg1 speed is unknown, defaulting to 1000
[   77.960815][ T6969] netlink: 'syz.1.456': attribute type 1 has an invalid length.
[   77.963186][ T6969] netlink: 'syz.1.456': attribute type 2 has an invalid length.
[   77.970495][ T6969] netlink: 'syz.1.456': attribute type 1 has an invalid length.
[   77.973022][ T6969] netlink: 'syz.1.456': attribute type 2 has an invalid length.
[   78.027704][ T6975] veth0: entered promiscuous mode
[   78.033028][ T6974] veth0: left promiscuous mode
[   78.289966][ T7005] netlink: 'syz.0.474': attribute type 3 has an invalid length.
[   78.355957][ T7013] __nla_validate_parse: 14 callbacks suppressed
[   78.355969][ T7013] netlink: 20 bytes leftover after parsing attributes in process `syz.1.478'.
[   78.398754][ T7017] syzkaller1: entered promiscuous mode
[   78.400635][ T7017] syzkaller1: entered allmulticast mode
[   78.575568][ T7031] netlink: 96 bytes leftover after parsing attributes in process `syz.0.487'.
[   78.590345][ T7031] vlan2: entered allmulticast mode
[   78.592039][ T7031] gretap0: entered allmulticast mode
[   78.703542][ T7048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.495'.
[   78.720922][ T7048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.495'.
[   78.860535][ T7064] netlink: 24 bytes leftover after parsing attributes in process `syz.1.503'.
[   78.934653][ T7071] team0: Port device syz_tun added
[   78.997194][ T7079] netlink: 40 bytes leftover after parsing attributes in process `syz.1.509'.
[   79.123606][ T7085] wg1 speed is unknown, defaulting to 1000
[   79.374689][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.519'.
[   79.377519][ T7100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.519'.
[   79.774041][ T7125] wg1 speed is unknown, defaulting to 1000
[   80.394710][ T7143] vlan2: entered promiscuous mode
[   80.397078][ T7143] vlan2: entered allmulticast mode
[   80.399284][ T7143] hsr_slave_1: entered allmulticast mode
[   80.419821][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.536'.
[   80.882967][ T7160] netlink: 16 bytes leftover after parsing attributes in process `syz.0.544'.
[   81.017209][ T5937] IPVS: starting estimator thread 0...
[   81.065170][ T7171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   81.118613][ T7173] IPVS: using max 61 ests per chain, 146400 per kthread
[   81.376920][ T5937] IPVS: starting estimator thread 0...
[   81.385492][ T7211] syzkaller1: entered promiscuous mode
[   81.387507][ T7211] syzkaller1: entered allmulticast mode
[   81.481099][ T7213] IPVS: using max 61 ests per chain, 146400 per kthread
[   81.587832][  T793] cfg80211: failed to load regulatory.db
[   81.626499][ T7226] validate_nla: 6 callbacks suppressed
[   81.626510][ T7226] netlink: 'syz.2.575': attribute type 39 has an invalid length.
[   81.650823][ T7226] team0: Port device syz_tun removed
[   81.801136][ T7238] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.803720][ T7238] syzkaller0: entered promiscuous mode
[   81.805571][ T7238] syzkaller0: entered allmulticast mode
[   81.811887][ T7238] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   81.821829][ T7238] tipc: Resetting bearer <eth:syzkaller0>
[   81.824528][ T7237] tipc: Resetting bearer <eth:syzkaller0>
[   81.831139][ T7237] tipc: Disabling bearer <eth:syzkaller0>
[   82.137223][ T7264] Bluetooth: MGMT ver 1.23
[   82.276712][ T7276] pimreg: entered allmulticast mode
[   82.295759][ T7276] pimreg: left allmulticast mode
[   83.101680][ T7334] wg1 speed is unknown, defaulting to 1000
[   83.228618][ T7346] IPv6: Can't replace route, no match found
[   83.376682][ T7358] __nla_validate_parse: 6 callbacks suppressed
[   83.376694][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.635'.
[   83.381850][ T7358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.635'.
[   83.385094][ T7358] netlink: 'syz.1.635': attribute type 18 has an invalid length.
[   83.458042][ T7365] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   83.645813][ T7378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.644'.
[   83.656172][ T7378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.644'.
[   83.744143][ T7392] netlink: 20 bytes leftover after parsing attributes in process `syz.2.648'.
[   83.764132][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   84.208433][   T54] Bluetooth: hci2: Opcode 0x0401 failed: -110
[   84.218708][   T54] Bluetooth: hci2: command 0x0401 tx timeout
[   84.862460][ T7427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.664'.
[   84.865297][ T7427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.664'.
[   84.875670][ T7427] netlink: 'syz.1.664': attribute type 13 has an invalid length.
[   84.881977][ T7427] netlink: 'syz.1.664': attribute type 12 has an invalid length.
[   85.110046][ T7447] netlink: 172 bytes leftover after parsing attributes in process `syz.0.672'.
[   85.113083][ T7448] netlink: 'syz.1.673': attribute type 4 has an invalid length.
[   85.116281][ T7447] netlink: 172 bytes leftover after parsing attributes in process `syz.0.672'.
[   85.120978][ T7448] netlink: 17 bytes leftover after parsing attributes in process `syz.1.673'.
[   85.194391][ T7452] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) !
[   85.394709][ T7462] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   87.798369][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   87.803331][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   87.807210][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   87.824445][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   88.555374][ T7711] __nla_validate_parse: 7 callbacks suppressed
[   88.555386][ T7711] netlink: 40 bytes leftover after parsing attributes in process `syz.0.791'.
[   88.789047][ T7725] netlink: 32 bytes leftover after parsing attributes in process `syz.0.797'.
[   88.995098][ T7744] veth0_macvtap: left promiscuous mode
[   88.997707][ T7744] macvtap0: entered allmulticast mode
[   89.087486][ T7755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.812'.
[   89.160643][ T7758] wg1 speed is unknown, defaulting to 1000
[   89.290271][ T7774] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[   89.293592][ T7774] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[   89.631468][ T7798] netlink: 'syz.1.828': attribute type 17 has an invalid length.
[   89.835818][ T7812] tipc: Failed to remove unknown binding: 66,1,1/0:2287680244/2287680246
[   89.839649][ T7812] tipc: Failed to remove unknown binding: 66,1,1/0:2287680244/2287680246
[   90.103090][ T7826] netlink: 'syz.2.842': attribute type 31 has an invalid length.
[   90.135775][ T7830] netlink: 'syz.1.844': attribute type 3 has an invalid length.
[   90.226028][ T7840] netlink: 'syz.0.848': attribute type 2 has an invalid length.
[   90.233920][ T7842] netlink: 56 bytes leftover after parsing attributes in process `syz.1.850'.
[   90.246048][ T7840] k*]: entered promiscuous mode
[   90.341552][ T7853] netlink: 256 bytes leftover after parsing attributes in process `syz.0.855'.
[   90.477505][ T7866] netlink: 188 bytes leftover after parsing attributes in process `syz.0.861'.
[   90.536921][ T7872] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   90.669924][ T7886] tipc: Cannot configure node identity twice
[   90.671828][ T7886] tipc: Cannot configure node identity twice
[   90.706457][ T7890] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   90.734035][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.874'.
[   90.736948][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.874'.
[   90.778377][ T7898] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[   91.150727][ T7928] netlink: 132 bytes leftover after parsing attributes in process `syz.0.889'.
[   91.437298][ T7957] netlink: 'syz.0.903': attribute type 10 has an invalid length.
[   91.440826][ T7957] netlink: 40 bytes leftover after parsing attributes in process `syz.0.903'.
[   91.443769][ T7957] veth0_vlan: entered allmulticast mode
[   91.446840][ T7957] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[   91.630948][ T7980] tc_dump_action: action bad kind
[   91.801946][ T8003] vlan0: entered promiscuous mode
[   92.199957][ T8039] syzkaller0: entered promiscuous mode
[   92.201717][ T8039] syzkaller0: entered allmulticast mode
[   93.377633][ T8086] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.200862][ T8124] __nla_validate_parse: 7 callbacks suppressed
[   94.200875][ T8124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.978'.
[   94.224300][ T8124] netlink: 20 bytes leftover after parsing attributes in process `syz.0.978'.
[   94.410821][ T8136] netlink: 'syz.1.984': attribute type 6 has an invalid length.
[   94.417206][ T8138] ieee802154 phy0 wpan0: encryption failed: -22
[   94.474516][ T8145] veth0_to_bond: entered allmulticast mode
[   94.499419][ T8147] netlink: 28 bytes leftover after parsing attributes in process `syz.2.989'.
[   94.547715][ T8153] netlink: 'syz.1.991': attribute type 10 has an invalid length.
[   94.553647][ T8152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.992'.
[   94.563468][ T8152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.992'.
[   94.973171][ T8196] netlink: 'syz.1.1011': attribute type 3 has an invalid length.
[   95.120067][ T8207] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   95.176270][ T8213] netlink: 'syz.2.1018': attribute type 83 has an invalid length.
[   95.274031][ T8224] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[   95.686886][ T8258] unsupported nla_type 52263
[   95.700714][ T8260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1040'.
[   95.885731][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.889477][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.238344][ T8293] netlink: 'syz.0.1055': attribute type 1 has an invalid length.
[   96.240894][ T8293] nbd: error processing sock list
[   96.242762][ T8293] block nbd0: shutting down sockets
[   96.944519][ T8325] svc: failed to register nfsdv3 RPC service (errno 111).
[   96.947575][ T8325] svc: failed to register nfsaclv3 RPC service (errno 111).
[   97.162964][ T8330] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1067'.
[   97.310401][ T8338] syzkaller0: entered promiscuous mode
[   97.312653][ T8338] syzkaller0: entered allmulticast mode
[   97.432062][ T8315] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   98.470128][ T8376] bond0: Unable to set peer notification delay as MII monitoring is disabled
[   98.537335][ T8384] netlink: 'syz.0.1091': attribute type 1 has an invalid length.
[   98.541509][ T8384] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1091'.
[   98.851932][ T8410] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   99.071972][ T8428] gretap0: entered promiscuous mode
[   99.073901][ T8428] vlan2: entered promiscuous mode
[   99.429288][ T8453] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma?
[   99.566758][ T8463] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1112'.
[   99.754403][ T8481] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1117'.
[  100.569971][ T8536] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1124'.
[  100.844605][ T8557] ksmbd: Unknown IPC event: 3, ignore.
[  101.074274][ T8573] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1142'.
[  101.146236][ T8578] rdma_rxe: rxe_newlink: failed to add lo
[  101.157913][ T8578] syz_tun: left promiscuous mode
[  101.175033][ T8578] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  101.285402][ T8591] netlink: 'syz.0.1150': attribute type 1 has an invalid length.
[  101.287905][ T8591] netlink: 'syz.0.1150': attribute type 2 has an invalid length.
[  101.529576][ T8613] wg1 speed is unknown, defaulting to 1000
[  101.633323][ T8627] netlink: 'syz.0.1165': attribute type 1 has an invalid length.
[  101.636480][ T8627] netlink: 'syz.0.1165': attribute type 4 has an invalid length.
[  101.649483][ T8627] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1165'.
[  101.809216][   T54] Bluetooth: hci2: command 0x0401 tx timeout
[  101.814146][ T8642] !: renamed from dummy0 (while UP)
[  101.901625][ T8647] wg1 speed is unknown, defaulting to 1000
[  102.100741][   T33] audit: type=1107 audit(1754976876.035:3): pid=8656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  102.385992][ T8674] syzkaller0: entered promiscuous mode
[  102.387971][ T8674] syzkaller0: entered allmulticast mode
[  102.392449][ T8677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1188'.
[  102.453788][ T8671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1186'.
[  103.461261][ T8690] netlink: 'syz.1.1194': attribute type 7 has an invalid length.
[  103.468333][ T8690] netlink: 'syz.1.1194': attribute type 3 has an invalid length.
[  103.470727][ T8690] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1194'.
[  103.494384][ T8692] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1195'.
[  103.501607][ T8692] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1195'.
[  103.520861][   T33] audit: type=1800 audit(1754976877.455:4): pid=8696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1197" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2286 res=0 errno=0
[  103.886628][ T5938] IPVS: starting estimator thread 0...
[  103.889188][ T8720] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  103.915415][ T8729] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  103.979714][ T8726] IPVS: using max 61 ests per chain, 146400 per kthread
[  104.007161][ T8737] sctp: [Deprecated]: syz.2.1213 (pid 8737) Use of struct sctp_assoc_value in delayed_ack socket option.
[  104.007161][ T8737] Use struct sctp_sack_info instead
[  104.440534][ T8758] macvlan2: entered allmulticast mode
[  104.457625][ T8758] veth1_vlan: entered allmulticast mode
[  104.468039][ T8758] veth1_vlan: left allmulticast mode
[  104.652527][ T8771] trusted_key: syz.1.1222 sent an empty control message without MSG_MORE.
[  104.733745][ T8775] wg1 speed is unknown, defaulting to 1000
[  104.966790][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  104.976517][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  104.988391][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  104.991181][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  105.475355][ T8854] __nla_validate_parse: 3 callbacks suppressed
[  105.475367][ T8854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1244'.
[  105.554525][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.557182][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.684945][ T8857] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  105.694860][ T8857] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  105.821622][   T51] wg1 speed is unknown, defaulting to 1000
[  105.823641][   T51] syz0: Port: 1 Link DOWN
[  105.828298][ T5922] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  105.831159][ T5922] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.834162][ T5922] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  105.836863][ T5922] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.859630][ T5922] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  105.862475][ T5922] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.865584][ T5922] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  105.891793][ T5922] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.282705][ T8879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1249'.
[  106.436709][ T8887] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.1254'.
[  106.532531][ T8900] batadv_slave_1: entered promiscuous mode
[  106.534507][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1258'.
[  106.580243][ T8903] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  107.846427][ T8965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1292'.
[  107.859318][ T8965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1292'.
[  107.880481][ T8967] sock: sock_timestamping_bind_phc: sock not bind to device
[  108.285540][ T8997] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1307'.
[  108.816533][ T9011] netlink: 'syz.0.1314': attribute type 30 has an invalid length.
[  108.822111][ T9011] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  108.825046][ T9011] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  108.865144][ T9015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1317'.
[  108.904932][ T9019] delete_channel: no stack
[  109.007193][ T9032] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1324'.
[  109.012508][ T9032] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1324'.
[  109.082656][ T9035] wg1 speed is unknown, defaulting to 1000
[  109.609488][ T9062] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  109.620357][ T9062] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  109.761485][   T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  109.764523][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.767370][   T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  109.770655][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.781151][   T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  109.784329][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.787397][   T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  109.791459][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.000966][ T9091] veth0_to_bridge: entered promiscuous mode
[  110.003992][ T9090] veth0_to_bridge: left promiscuous mode
[  110.047965][ T9096] bond0: (slave bond_slave_0): Releasing backup interface
[  110.055616][ T9096] bond0: (slave bond_slave_1): Releasing backup interface
[  110.087765][ T9096] team0: Port device team_slave_0 removed
[  110.096610][ T9096] team0: Port device team_slave_1 removed
[  110.100226][ T9096] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  110.102959][ T9096] batman_adv: batadv0: Removing interface: batadv_slave_0
[  110.107181][ T9096] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  110.110716][ T9096] batman_adv: batadv0: Removing interface: batadv_slave_1
[  110.120542][ T9096] bond1: (slave gretap1): Releasing active interface
[  110.122709][ T9096] gretap1: left allmulticast mode
[  110.137403][ T9104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  110.221245][ T9096] team0: Failed to send options change via netlink (err -105)
[  110.228281][ T9096] team0: Mode changed to "activebackup"
[  110.512574][ T9133] __nla_validate_parse: 3 callbacks suppressed
[  110.512584][ T9133] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1369'.
[  110.857577][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.868783][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.871480][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.874086][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.019170][ T9159] Bluetooth: MGMT ver 1.23
[  111.032860][ T9159] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.1380'.
[  111.065107][ T9163] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.1382'.
[  111.187895][ T9172] wg1 speed is unknown, defaulting to 1000
[  111.215071][ T9178] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1387'.
[  111.229660][ T9179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1384'.
[  111.420469][ T9197] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  112.417426][ T9236] geneve0: entered allmulticast mode
[  112.471515][ T9240] delete_channel: no stack
[  112.850323][ T9264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1425'.
[  112.852934][ T9264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1425'.
[  112.993277][ T9274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1430'.
[  113.218104][ T9296] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1440'.
[  113.232025][ T9298] netlink: 'syz.1.1441': attribute type 10 has an invalid length.
[  113.275822][ T9298] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1441'.
[  113.744045][ T5875] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  113.752768][ T5875] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  113.757874][ T5875] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  113.770965][ T5875] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  113.774482][ T5875] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  114.050047][ T5922] bond0 (unregistering): Released all slaves
[  114.117143][ T5922] bond1 (unregistering): Released all slaves
[  114.126132][ T9321] IPVS: Error joining to the multicast group
[  114.174406][ T9326] wg1 speed is unknown, defaulting to 1000
[  114.203138][ T5922] k*]: left promiscuous mode
[  114.284947][ T5922] tipc: Left network mode
[  114.413019][ T9326] chnl_net:caif_netlink_parms(): no params data found
[  114.480422][ T5922] hsr_slave_0: left promiscuous mode
[  114.483961][ T5922] hsr_slave_1: left promiscuous mode
[  115.115928][ T9326] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.128570][ T9326] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.131230][ T9326] bridge_slave_0: entered allmulticast mode
[  115.134487][ T9326] bridge_slave_0: entered promiscuous mode
[  115.146745][ T9326] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.150595][ T9326] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.153223][ T9326] bridge_slave_1: entered allmulticast mode
[  115.156029][ T9326] bridge_slave_1: entered promiscuous mode
[  115.205507][ T9326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  115.215687][ T9326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  115.262509][ T9326] team0: Port device team_slave_0 added
[  115.267701][ T9326] team0: Port device team_slave_1 added
[  115.316862][ T9326] batman_adv: batadv0: Adding interface: batadv_slave_0
[  115.319999][ T9326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.331680][ T9326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  115.349602][ T9326] batman_adv: batadv0: Adding interface: batadv_slave_1
[  115.351772][ T9326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.375323][ T9326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  115.424718][ T9326] hsr_slave_0: entered promiscuous mode
[  115.426930][ T9326] hsr_slave_1: entered promiscuous mode
[  115.439303][ T9326] debugfs: 'hsr0' already exists in 'hsr'
[  115.441235][ T9326] Cannot create hsr debugfs directory
[  115.455587][ T5922] IPVS: stop unused estimator thread 0...
[  115.692435][ T9403] delete_channel: no stack
[  115.696213][ T9326] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  115.702646][ T9326] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  115.716877][ T9326] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  115.732415][ T9326] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  115.808661][ T5875] Bluetooth: hci2: command tx timeout
[  115.826537][ T9326] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.846298][ T9326] 8021q: adding VLAN 0 to HW filter on device team0
[  115.857824][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.860197][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.869228][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.871416][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.937819][ T9428] bond0: (slave syz_tun): Releasing backup interface
[  115.943053][ T9428] team0: Port device bond0 removed
[  115.945510][ T9428] bond0: (slave bond_slave_0): Releasing backup interface
[  115.949623][ T9428] bond0: (slave bond_slave_1): Releasing backup interface
[  115.953510][ T9428] team0: Port device team_slave_0 removed
[  115.957697][ T9428] team0: Port device team_slave_1 removed
[  115.961134][ T9428] batman_adv: batadv0: Removing interface: batadv_slave_0
[  115.963881][ T9428] batman_adv: batadv0: Removing interface: batadv_slave_1
[  115.995408][ T9428] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  116.130347][ T9326] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.200872][ T9326] veth0_vlan: entered promiscuous mode
[  116.216198][ T9326] veth1_vlan: entered promiscuous mode
[  116.240277][ T9326] veth0_macvtap: entered promiscuous mode
[  116.246120][ T9326] veth1_macvtap: entered promiscuous mode
[  116.257891][ T9326] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.271155][ T9326] batman_adv: batadv0: Interface activated: batadv_slave_1
[  116.282263][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.285385][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.293508][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.296718][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.303650][ T9453] netlink: 'syz.1.1484': attribute type 303 has an invalid length.
[  116.381343][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.383741][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.416189][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.419679][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.673123][ T9483] __nla_validate_parse: 11 callbacks suppressed
[  116.673134][ T9483] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1493'.
[  116.808985][ T9494] wg1 speed is unknown, defaulting to 1000
[  116.871872][ T9503] openvswitch: netlink: IPv4 tun info is not correct
[  116.956688][ T9496] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1500'.
[  116.976762][ T9511] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  117.155645][ T9526] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1508'.
[  117.161053][ T9526] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1508'.
[  117.164969][ T9526] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1508'.
[  117.176869][ T9526] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1508'.
[  117.888424][ T5875] Bluetooth: hci2: command tx timeout
[  118.000347][ T8506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.009146][ T8506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.256065][ T9573] bridge2: entered promiscuous mode
[  118.334728][ T9577] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1519'.
[  118.342351][ T9578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1523'.
[  118.534819][   T33] audit: type=1800 audit(1754976892.465:5): pid=9568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1519" name="cgroup.controllers" dev="tmpfs" ino=2243 res=0 errno=0
[  118.551371][ T9594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1530'.
[  118.554102][ T9594] netlink: 'syz.1.1530': attribute type 21 has an invalid length.
[  118.690609][ T9603] mac80211_hwsim hwsim11 wlan0: entered promiscuous mode
[  118.693337][ T9603] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  118.914954][ T9615] netlink: 'syz.1.1538': attribute type 1 has an invalid length.
[  118.918982][ T9615] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1538'.
[  119.123133][ T9627] wg1 speed is unknown, defaulting to 1000
[  119.969384][ T5875] Bluetooth: hci2: command tx timeout
[  119.993884][ T9656] IPv6: sit2: Disabled Multicast RS
[  120.313149][ T9676] netlink: 'syz.2.1566': attribute type 39 has an invalid length.
[  120.691693][ T9702] macvlan0: entered allmulticast mode
[  120.695729][ T9702] veth1_vlan: entered allmulticast mode
[  120.701360][ T9702] team0: Port device macvlan0 added
[  121.380859][ T9758] sctp: [Deprecated]: syz.1.1603 (pid 9758) Use of int in max_burst socket option.
[  121.380859][ T9758] Use struct sctp_assoc_value instead
[  122.049074][ T5875] Bluetooth: hci2: command tx timeout
[  122.972534][ T9830] netlink: 'syz.3.1636': attribute type 21 has an invalid length.
[  122.975098][ T9830] __nla_validate_parse: 5 callbacks suppressed
[  122.975105][ T9830] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1636'.
[  122.983779][ T9830] netlink: 'syz.3.1636': attribute type 4 has an invalid length.
[  122.986398][ T9830] netlink: 'syz.3.1636': attribute type 3 has an invalid length.
[  122.990310][ T9830] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1636'.
[  123.058074][ T9839] netlink: 'syz.1.1635': attribute type 10 has an invalid length.
[  123.062984][ T9839] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1635'.
[  123.098927][ T9839] dummy0: entered promiscuous mode
[  123.102536][ T9839] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  123.145744][ T9838] syzkaller0: entered promiscuous mode
[  123.147613][ T9838] syzkaller0: entered allmulticast mode
[  124.415677][ T9900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1649'.
[  124.612044][ T9923] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1662'.
[  124.720250][ T9936] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1668'.
[  124.750152][ T9938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1669'.
[  124.853146][ T9950] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1674'.
[  124.869170][ T9950] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  124.877428][ T9950] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  125.062089][ T9971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1683'.
[  125.286494][ T9979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1687'.
[  125.298331][ T9979] ==================================================================
[  125.300841][ T9979] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  125.303186][ T9979] Read of size 4 at addr ffff888111c649c4 by task syz.1.1687/9979
[  125.306097][ T9979] 
[  125.307216][ T9979] CPU: 0 UID: 0 PID: 9979 Comm: syz.1.1687 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  125.307228][ T9979] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  125.307235][ T9979] Call Trace:
[  125.307240][ T9979]  <TASK>
[  125.307245][ T9979]  dump_stack_lvl+0x189/0x250
[  125.307260][ T9979]  ? __kasan_check_byte+0x12/0x40
[  125.307274][ T9979]  ? __pfx_dump_stack_lvl+0x10/0x10
[  125.307283][ T9979]  ? lock_release+0x4b/0x3e0
[  125.307297][ T9979]  ? __virt_addr_valid+0x4a5/0x5c0
[  125.307309][ T9979]  print_report+0xca/0x240
[  125.307317][ T9979]  ? xfrm_alloc_spi+0x570/0xf30
[  125.307325][ T9979]  kasan_report+0x118/0x150
[  125.307337][ T9979]  ? xfrm_alloc_spi+0x570/0xf30
[  125.307346][ T9979]  xfrm_alloc_spi+0x570/0xf30
[  125.307354][ T9979]  ? xfrm_alloc_spi+0x2a0/0xf30
[  125.307365][ T9979]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  125.307378][ T9979]  ? xfrm_find_acq+0x87/0xa0
[  125.307392][ T9979]  xfrm_alloc_userspi+0x70b/0xc90
[  125.307404][ T9979]  ? apparmor_capable+0x137/0x1b0
[  125.307413][ T9979]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  125.307429][ T9979]  ? __nla_parse+0x40/0x60
[  125.307472][ T9979]  xfrm_user_rcv_msg+0x7a3/0xab0
[  125.307487][ T9979]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  125.307506][ T9979]  ? __pfx___mutex_trylock_common+0x10/0x10
[  125.307516][ T9979]  ? rcu_is_watching+0x15/0xb0
[  125.307526][ T9979]  ? trace_contention_end+0x39/0x120
[  125.307535][ T9979]  ? __mutex_lock+0x335/0x1360
[  125.307547][ T9979]  netlink_rcv_skb+0x208/0x470
[  125.307558][ T9979]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  125.307566][ T9979]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  125.307579][ T9979]  ? netlink_deliver_tap+0x2e/0x1b0
[  125.307588][ T9979]  ? netlink_deliver_tap+0x2e/0x1b0
[  125.307599][ T9979]  xfrm_netlink_rcv+0x79/0x90
[  125.307607][ T9979]  netlink_unicast+0x82f/0x9e0
[  125.307618][ T9979]  ? __pfx_netlink_unicast+0x10/0x10
[  125.307627][ T9979]  ? netlink_sendmsg+0x642/0xb30
[  125.307636][ T9979]  ? skb_put+0x11b/0x210
[  125.307647][ T9979]  netlink_sendmsg+0x805/0xb30
[  125.307659][ T9979]  ? __pfx_netlink_sendmsg+0x10/0x10
[  125.307670][ T9979]  ? aa_sock_msg_perm+0xf1/0x1d0
[  125.307683][ T9979]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  125.307692][ T9979]  ? __pfx_netlink_sendmsg+0x10/0x10
[  125.307702][ T9979]  __sock_sendmsg+0x21c/0x270
[  125.307712][ T9979]  ____sys_sendmsg+0x505/0x830
[  125.307725][ T9979]  ? __pfx_____sys_sendmsg+0x10/0x10
[  125.307738][ T9979]  ? import_iovec+0x74/0xa0
[  125.307746][ T9979]  ___sys_sendmsg+0x21f/0x2a0
[  125.307758][ T9979]  ? __pfx____sys_sendmsg+0x10/0x10
[  125.307775][ T9979]  ? __fget_files+0x2a/0x420
[  125.307787][ T9979]  ? __fget_files+0x3a0/0x420
[  125.307800][ T9979]  __x64_sys_sendmsg+0x19b/0x260
[  125.307812][ T9979]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  125.307826][ T9979]  ? rcu_is_watching+0x15/0xb0
[  125.307834][ T9979]  ? do_syscall_64+0xbe/0x3b0
[  125.307846][ T9979]  do_syscall_64+0xfa/0x3b0
[  125.307856][ T9979]  ? lockdep_hardirqs_on+0x9c/0x150
[  125.307865][ T9979]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.307873][ T9979]  ? exc_page_fault+0x9f/0xf0
[  125.307883][ T9979]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.307892][ T9979] RIP: 0033:0x7f2f16f8ebe9
[  125.307910][ T9979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  125.307918][ T9979] RSP: 002b:00007f2f17e70038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  125.307928][ T9979] RAX: ffffffffffffffda RBX: 00007f2f171b5fa0 RCX: 00007f2f16f8ebe9
[  125.307934][ T9979] RDX: 0000000024000014 RSI: 0000200000000200 RDI: 0000000000000003
[  125.307939][ T9979] RBP: 00007f2f17011e19 R08: 0000000000000000 R09: 0000000000000000
[  125.307944][ T9979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  125.307949][ T9979] R13: 00007f2f171b6038 R14: 00007f2f171b5fa0 R15: 00007ffe98bf7db8
[  125.307961][ T9979]  </TASK>
[  125.307966][ T9979] 
[  125.424525][ T9979] Allocated by task 6814:
[  125.425886][ T9979]  kasan_save_track+0x3e/0x80
[  125.427337][ T9979]  __kasan_slab_alloc+0x6c/0x80
[  125.428787][ T9979]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  125.430392][ T9979]  xfrm_state_alloc+0x24/0x2f0
[  125.431819][ T9979]  __find_acq_core+0x8a7/0x1c00
[  125.433229][ T9979]  xfrm_find_acq+0x78/0xa0
[  125.434600][ T9979]  xfrm_alloc_userspi+0x6b3/0xc90
[  125.436094][ T9979]  xfrm_user_rcv_msg+0x7a3/0xab0
[  125.437577][ T9979]  netlink_rcv_skb+0x208/0x470
[  125.438983][ T9979]  xfrm_netlink_rcv+0x79/0x90
[  125.440483][ T9979]  netlink_unicast+0x82f/0x9e0
[  125.441986][ T9979]  netlink_sendmsg+0x805/0xb30
[  125.443506][ T9979]  __sock_sendmsg+0x21c/0x270
[  125.444937][ T9979]  ____sys_sendmsg+0x505/0x830
[  125.446418][ T9979]  ___sys_sendmsg+0x21f/0x2a0
[  125.447905][ T9979]  __x64_sys_sendmsg+0x19b/0x260
[  125.449466][ T9979]  do_syscall_64+0xfa/0x3b0
[  125.450905][ T9979]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.452756][ T9979] 
[  125.453476][ T9979] Freed by task 793:
[  125.454624][ T9979]  kasan_save_track+0x3e/0x80
[  125.456078][ T9979]  kasan_save_free_info+0x46/0x50
[  125.457598][ T9979]  __kasan_slab_free+0x5b/0x80
[  125.458999][ T9979]  kmem_cache_free+0x18f/0x400
[  125.460404][ T9979]  xfrm_state_gc_task+0x52d/0x6b0
[  125.461982][ T9979]  process_scheduled_works+0xae1/0x17b0
[  125.463646][ T9979]  worker_thread+0x8a0/0xda0
[  125.464993][ T9979]  kthread+0x711/0x8a0
[  125.466196][ T9979]  ret_from_fork+0x3fc/0x770
[  125.467634][ T9979]  ret_from_fork_asm+0x1a/0x30
[  125.469054][ T9979] 
[  125.469772][ T9979] The buggy address belongs to the object at ffff888111c64900
[  125.469772][ T9979]  which belongs to the cache xfrm_state of size 928
[  125.474266][ T9979] The buggy address is located 196 bytes inside of
[  125.474266][ T9979]  freed 928-byte region [ffff888111c64900, ffff888111c64ca0)
[  125.478465][ T9979] 
[  125.479209][ T9979] The buggy address belongs to the physical page:
[  125.481161][ T9979] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888111c65200 pfn:0x111c64
[  125.484221][ T9979] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  125.486715][ T9979] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  125.488928][ T9979] page_type: f5(slab)
[  125.490116][ T9979] raw: 057ff00000000040 ffff888104934280 dead000000000122 0000000000000000
[  125.492680][ T9979] raw: ffff888111c65200 00000000800e0008 00000000f5000000 0000000000000000
[  125.495183][ T9979] head: 057ff00000000040 ffff888104934280 dead000000000122 0000000000000000
[  125.497841][ T9979] head: ffff888111c65200 00000000800e0008 00000000f5000000 0000000000000000
[  125.500613][ T9979] head: 057ff00000000002 ffffea0004471901 00000000ffffffff 00000000ffffffff
[  125.503240][ T9979] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  125.505852][ T9979] page dumped because: kasan: bad access detected
[  125.507796][ T9979] page_owner tracks the page as allocated
[  125.509532][ T9979] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6106, tgid 6105 (syz.2.75), ts 65348013107, free_ts 63719588682
[  125.515243][ T9979]  post_alloc_hook+0x240/0x2a0
[  125.516724][ T9979]  get_page_from_freelist+0x21e4/0x22c0
[  125.518399][ T9979]  __alloc_frozen_pages_noprof+0x181/0x370
[  125.520475][ T9979]  alloc_pages_mpol+0x232/0x4a0
[  125.521942][ T9979]  allocate_slab+0x8a/0x370
[  125.523291][ T9979]  ___slab_alloc+0xbeb/0x1410
[  125.524719][ T9979]  kmem_cache_alloc_noprof+0x283/0x3c0
[  125.526352][ T9979]  xfrm_state_alloc+0x24/0x2f0
[  125.527855][ T9979]  pfkey_add+0x6e4/0x2e00
[  125.529162][ T9979]  pfkey_sendmsg+0xbfe/0x1090
[  125.530655][ T9979]  __sock_sendmsg+0x21c/0x270
[  125.532145][ T9979]  ____sys_sendmsg+0x505/0x830
[  125.533671][ T9979]  ___sys_sendmsg+0x21f/0x2a0
[  125.535199][ T9979]  __x64_sys_sendmsg+0x19b/0x260
[  125.536743][ T9979]  do_syscall_64+0xfa/0x3b0
[  125.538213][ T9979]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.540123][ T9979] page last free pid 51 tgid 51 stack trace:
[  125.541895][ T9979]  __free_frozen_pages+0xbc4/0xd30
[  125.543435][ T9979]  __put_partials+0x156/0x1a0
[  125.544836][ T9979]  put_cpu_partial+0x17c/0x250
[  125.546277][ T9979]  __slab_free+0x2d5/0x3c0
[  125.547657][ T9979]  qlist_free_all+0x97/0x140
[  125.549047][ T9979]  kasan_quarantine_reduce+0x148/0x160
[  125.550795][ T9979]  __kasan_slab_alloc+0x22/0x80
[  125.552453][ T9979]  __kmalloc_cache_noprof+0x1be/0x3d0
[  125.554070][ T9979]  nsim_fib_event_work+0x1174/0x3180
[  125.555734][ T9979]  process_scheduled_works+0xae1/0x17b0
[  125.557380][ T9979]  worker_thread+0x8a0/0xda0
[  125.558818][ T9979]  kthread+0x711/0x8a0
[  125.560091][ T9979]  ret_from_fork+0x3fc/0x770
[  125.561517][ T9979]  ret_from_fork_asm+0x1a/0x30
[  125.563103][ T9979] 
[  125.563897][ T9979] Memory state around the buggy address:
[  125.565656][ T9979]  ffff888111c64880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  125.568149][ T9979]  ffff888111c64900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  125.570641][ T9979] >ffff888111c64980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  125.573123][ T9979]                                            ^
[  125.574962][ T9979]  ffff888111c64a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  125.577391][ T9979]  ffff888111c64a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  125.579782][ T9979] ==================================================================
[  125.582312][ T9979] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  125.584458][ T9979] CPU: 0 UID: 0 PID: 9979 Comm: syz.1.1687 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  125.588008][ T9979] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  125.591042][ T9979] Call Trace:
[  125.592092][ T9979]  <TASK>
[  125.593081][ T9979]  dump_stack_lvl+0x99/0x250
[  125.594496][ T9979]  ? __asan_memcpy+0x40/0x70
[  125.595908][ T9979]  ? __pfx_dump_stack_lvl+0x10/0x10
[  125.597581][ T9979]  ? __pfx__printk+0x10/0x10
[  125.599019][ T9979]  vpanic+0x281/0x750
[  125.600279][ T9979]  ? __pfx_vpanic+0x10/0x10
[  125.601695][ T9979]  ? irqentry_exit+0x74/0x90
[  125.603132][ T9979]  panic+0xb9/0xc0
[  125.604318][ T9979]  ? __pfx_panic+0x10/0x10
[  125.605648][ T9979]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  125.607366][ T9979]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  125.609131][ T9979]  ? xfrm_alloc_spi+0x570/0xf30
[  125.610615][ T9979]  check_panic_on_warn+0x89/0xb0
[  125.612111][ T9979]  ? xfrm_alloc_spi+0x570/0xf30
[  125.613625][ T9979]  end_report+0x78/0x160
[  125.614908][ T9979]  kasan_report+0x129/0x150
[  125.616267][ T9979]  ? xfrm_alloc_spi+0x570/0xf30
[  125.617761][ T9979]  xfrm_alloc_spi+0x570/0xf30
[  125.619190][ T9979]  ? xfrm_alloc_spi+0x2a0/0xf30
[  125.620646][ T9979]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  125.622197][ T9979]  ? xfrm_find_acq+0x87/0xa0
[  125.623579][ T9979]  xfrm_alloc_userspi+0x70b/0xc90
[  125.625072][ T9979]  ? apparmor_capable+0x137/0x1b0
[  125.626588][ T9979]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  125.628278][ T9979]  ? __nla_parse+0x40/0x60
[  125.629688][ T9979]  xfrm_user_rcv_msg+0x7a3/0xab0
[  125.631229][ T9979]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  125.632933][ T9979]  ? __pfx___mutex_trylock_common+0x10/0x10
[  125.634856][ T9979]  ? rcu_is_watching+0x15/0xb0
[  125.636458][ T9979]  ? trace_contention_end+0x39/0x120
[  125.638222][ T9979]  ? __mutex_lock+0x335/0x1360
[  125.639914][ T9979]  netlink_rcv_skb+0x208/0x470
[  125.641547][ T9979]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  125.643373][ T9979]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  125.645062][ T9979]  ? netlink_deliver_tap+0x2e/0x1b0
[  125.646725][ T9979]  ? netlink_deliver_tap+0x2e/0x1b0
[  125.648302][ T9979]  xfrm_netlink_rcv+0x79/0x90
[  125.649761][ T9979]  netlink_unicast+0x82f/0x9e0
[  125.651216][ T9979]  ? __pfx_netlink_unicast+0x10/0x10
[  125.652908][ T9979]  ? netlink_sendmsg+0x642/0xb30
[  125.654490][ T9979]  ? skb_put+0x11b/0x210
[  125.655825][ T9979]  netlink_sendmsg+0x805/0xb30
[  125.657319][ T9979]  ? __pfx_netlink_sendmsg+0x10/0x10
[  125.658996][ T9979]  ? aa_sock_msg_perm+0xf1/0x1d0
[  125.660541][ T9979]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  125.662178][ T9979]  ? __pfx_netlink_sendmsg+0x10/0x10
[  125.663841][ T9979]  __sock_sendmsg+0x21c/0x270
[  125.665310][ T9979]  ____sys_sendmsg+0x505/0x830
[  125.666790][ T9979]  ? __pfx_____sys_sendmsg+0x10/0x10
[  125.668433][ T9979]  ? import_iovec+0x74/0xa0
[  125.669843][ T9979]  ___sys_sendmsg+0x21f/0x2a0
[  125.671318][ T9979]  ? __pfx____sys_sendmsg+0x10/0x10
[  125.672951][ T9979]  ? __fget_files+0x2a/0x420
[  125.674361][ T9979]  ? __fget_files+0x3a0/0x420
[  125.675818][ T9979]  __x64_sys_sendmsg+0x19b/0x260
[  125.677339][ T9979]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  125.678998][ T9979]  ? rcu_is_watching+0x15/0xb0
[  125.680490][ T9979]  ? do_syscall_64+0xbe/0x3b0
[  125.681964][ T9979]  do_syscall_64+0xfa/0x3b0
[  125.683375][ T9979]  ? lockdep_hardirqs_on+0x9c/0x150
[  125.684994][ T9979]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.686815][ T9979]  ? exc_page_fault+0x9f/0xf0
[  125.688249][ T9979]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.690128][ T9979] RIP: 0033:0x7f2f16f8ebe9
[  125.691529][ T9979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  125.697448][ T9979] RSP: 002b:00007f2f17e70038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  125.700348][ T9979] RAX: ffffffffffffffda RBX: 00007f2f171b5fa0 RCX: 00007f2f16f8ebe9
[  125.702789][ T9979] RDX: 0000000024000014 RSI: 0000200000000200 RDI: 0000000000000003
[  125.705203][ T9979] RBP: 00007f2f17011e19 R08: 0000000000000000 R09: 0000000000000000
[  125.707744][ T9979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  125.710206][ T9979] R13: 00007f2f171b6038 R14: 00007f2f171b5fa0 R15: 00007ffe98bf7db8
[  125.712693][ T9979]  </TASK>
[  125.714305][ T9979] Kernel Offset: disabled
[  125.715661][ T9979] Rebooting in 86400 seconds..

VM DIAGNOSIS:
05:34:59  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33bd260 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=00000000000013f0 RDI=00000000000013f1 RBP=ffffffff99de9770 RSP=ffffc90002e7e990
R8 =ffff8880216b0237 R9 =1ffff110042d6046 R10=dffffc0000000000 R11=ffffffff854e7100
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e7177 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f2f17e706c0 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2f17e6ffc8 CR3=000000002bf2e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fa680f87498 00007fa680f87470 XMM03=00007fa680f874a8 00007fa680f874a0
XMM04=00007fa681aed100 00007fa680f87460 XMM05=00007fa680f87478 00007fa680f874c0
XMM06=00007fa680f874b8 00007fa680f874b0 XMM07=00007fa680f874a8 00007fa680f874a0
XMM08=0000000000000000 00007fa680e12ee7 XMM09=0000000000000000 00007fa680e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=6513345f75143c00 RBX=ffffffff81968308 RCX=6513345f75143c00 RDX=0000000000000001
RSI=ffffffff8d9b494b RDI=ffffffff8be32680 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa34730 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d1000
RIP=ffffffff8b78b3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055557c2c75c8 CR3=000000010d390000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000050000006c 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000ff0000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000000000ff 00000000000000ff XMM05=0000000000000041 00000000306e0c17
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffff00000000 XMM09=0000000000000041 00000000306e616c
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
