last executing test programs:

55.805756948s ago: executing program 0 (id=636):
r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="f80000001a0001000000000000000000ac1414aab0e5049053555796000000000000000000000000000000000002000040030000000300030000000000000000", @ANYRESDEC=r1, @ANYRES32=0x0, @ANYRESOCT=r0], 0xf8}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="74010000", @ANYRES32=0x0, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088048010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a0000000000080009000000000008000a000000000008000a000000000008000a000000000008"], 0x174}}, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x81}]}, 0x10)
getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f00000017c0)=""/4096, &(0x7f0000000100)=0x1000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38}, 0x94) (async, rerun: 64)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYRESOCT], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4841) (async)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r3], 0x18}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010000304000000000000000100"], 0x3c}}, 0x0) (async)
r5 = socket$packet(0x11, 0x3, 0x300) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f00000004c0)=ANY=[@ANYRESHEX, @ANYRES32], 0x32600) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[], 0x60}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000500), 0xffffffffffffffff)
setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) (rerun: 64)
syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}}}}}}, 0x0) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x18)
ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)) (async, rerun: 32)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)

55.804760478s ago: executing program 0 (id=637):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0xfffffffe, 0x3}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@private1}}, 0xe8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x30, 0x3e, 0x1, 0x80000, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x7}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)

55.745481828s ago: executing program 0 (id=638):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, 0x0, &(0x7f0000000040)) (async)
getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, 0x0, &(0x7f0000000040))
socket$inet6_sctp(0xa, 0x801, 0x84) (async)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
unshare(0x2c020680)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000cccc410e6419be1", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000cccc410e6419be1", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000200), 0x12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000f600000018121000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1020, &(0x7f0000001200)=""/4128, 0x40f00}, 0x94)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r5, &(0x7f0000000000)="c5", 0x1, 0x50, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x13}, 0x1c) (async)
sendto$inet6(r5, &(0x7f0000000000)="c5", 0x1, 0x50, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x13}, 0x1c)
getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) (async)
getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8)
getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000140), &(0x7f00000001c0)=0x4)
setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x9}, 0x8)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000240)={0x3, [0xe9f, 0xc, 0x2]}, &(0x7f00000002c0)=0xa)
sendto$inet6(r2, &(0x7f0000000080)="00a0d0dceef39979e4998e5b5f6dfadc37511e5ff78f5cb6e73822fb23393a4d85203602d835f9c16abe601c20ec4e379e", 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, 0xfe2a)
unshare(0x6020400)
unshare(0x2e000400)
socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x15)
writev(r7, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a0603a6ff8000000000000000006302496b3a17b42e64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)
unshare(0x44000000) (async)
unshare(0x44000000)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)

55.67279159s ago: executing program 0 (id=641):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x2, 0x6, 0x4000}, 0x20)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8)
r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007"], 0x0, 0xc}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94)
r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
ioctl$FIOCLEX(r4, 0x5451)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32=r6], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0xffffffffffffff4d)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r7}, 0x10)
r8 = socket(0x22, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10)
write(r8, &(0x7f00000000c0)="240000001e005f0214fffdfffffffff807941202e800000000000000080003000b000000", 0x24)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x3)
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="80000000140001002bbd7000ffdbdf250b0f69000100ecc67075cf95c9489390680a92bd08aad8d4db3570ae7b6f28b76a3ae2bd127709a3120f789c977b5fdf6d845f664bdd88fb06d64fa8fef7bb2a09d593fd2fb9c56763981db8bd656d217005b39671c6c642b88bdf3286e274ceb51a2fae6979685284b1a30000002000"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c00000064000100bdffffff0000000002000000010000070000000008000b0047000078dc000100ac1414aa"], 0x2c}, 0x1, 0x0, 0x0, 0x42812}, 0x0)
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800000000000000000000a0000000181100ff", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000600009500000000000000b7020000000000007b9af8ff00000000d509000013ffffff7baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=0x0, @ANYRES64=r9], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)

55.534862219s ago: executing program 0 (id=644):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000540))
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="70b5c0dc5f65c69e2956f5dd104ebc286a089011050c526a9678f290bfef729cc90d864c631b6cb066abe04ff766717b0651846e850e46d8173d213493384f86db48cb954fa4dc7c41763f77f9050215c022d43f888377130f754792a4a1f04e02816c89cb891565cec4beb54161c58ecd119262da2d4d14c21fffae32a9bab5768f8400720b6d62efdfa1dafbf39c633b45b5050d73039ee5f624ca56151dab955c2c40b76026df646f5a97e518e22d97dbb9307101d819e224c308f7547c026115424de3d1d280ea644b", 0xcb}, {&(0x7f0000000300)="1fb09a0e41fa070bb1de3c2782dd9379e3b0e856c7dcf44937fdeb9be6161770d5ce176f904c36407ed6bf9b72cf2ece06a095dbe393e3a28b5f32d6245dece94cb6513a9dd614f43c5a0338f0c0840f894380f43b6d0c35edcee3402e49750e5c3db9486cb56957a45b91ae25e629d57d35778d34f3bf948cd3cc2953a4ab11a52ec6d3aba4b4864b4aad193d96", 0x8e}, {&(0x7f0000000000)="2ef028e996f86d3f0630e329a13e0588d572e9963473f0a3c773eb87647a723b61be0bc5b4d1ccb635d9fe423c8ac72de0cf4eabaa7a556bb55da9b67d4fb7bf409bc9b1ca2b104599b2fc562aaabcc8f9", 0x51}, {&(0x7f00000003c0)="d8d13e5837e58442c214df28b4074be2852c5334463cbd5d4e545a1a342466f6a47f0d55b0ed6da957a95c38c954be605d214d9782ea8ac0c9fc72a967b2494a59c0e929b99a3ed41e0758dfe4f89d9096666b3640344b7f6df2e0", 0x5b}, {&(0x7f0000000440)="dd57203129ba2db01bb5efa0006bb6efa9a2b82bcc38df4c9be645fc16d9c4d783ff8b025b68ac5068b26ee671c4a42e20edb82d47e8b83dd497b9349036364cf84a25d18f02", 0x46}], 0x5)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
getsockopt$inet6_buf(r0, 0x29, 0x44, &(0x7f0000000740)=""/226, 0xfffffffffffffffe)
write$tun(r1, &(0x7f0000002240)={@val={0xa}, @void, @eth={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0xa, 0x11, 0xff, @empty, @mcast2, {[], {0x4e23, 0x4e20, 0xa, 0x0, @opaque=']a'}}}}}}}, 0x91)

55.475720702s ago: executing program 0 (id=645):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async)
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async)
setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) (async)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r3, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async)

40.4918896s ago: executing program 32 (id=645):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async)
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async)
setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) (async)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r3, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async)

1.174598711s ago: executing program 2 (id=1504):
socket$kcm(0x10, 0x2, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
socket$nl_audit(0x10, 0x3, 0x9)
socket(0x1000000000000010, 0x80802, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00))
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='rcu_utilization\x00', r0}, 0x18)
socket(0x10, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x3, 0x5)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6(0xa, 0x2, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
socket$kcm(0x2, 0xa, 0x2)
socket$inet_sctp(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000700fc000000080011000700000008000e00800000000800", @ANYRES16=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.173409634s ago: executing program 2 (id=1505):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000008, 0x20000000ec071, 0xffffffffffffffff, 0x4000)
r2 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000000)=0xffffffc3, 0x4)
clock_gettime(0x9, &(0x7f0000000280))
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1}}, {0xffffffffffffffc4, 0x2, [0x1]}}]}]}, 0x54}}, 0x4000010)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x22000801}, 0x0)

1.103052471s ago: executing program 2 (id=1506):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32, @ANYBLOB="0000000000000000000683000000000000080000000000000012dfdef2f85b8cbdce4b9b74b54914615d8b5fa178efd0f403be0d8cc2b05613bdea4b2db05597968aa007afffadb926488aad753f2b1a276142b4e1bf5f66d72076c897f68ad4f4f681ce7b31e6c239fd4d3abe372bfbdfff325eea7f289c25de46cec92db37857ab573fd535832970071b3af44bce6eaa0a96cc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) (async)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)=0x82) (async)
ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f0000000040))
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) (async)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendto$inet(r4, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10)
sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, 0x19, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x8004) (async)
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$rose(r5, 0x104, 0x5, &(0x7f0000000900)=0x7, 0x4)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f00000000c0), 0xffffd6c0, r1}, 0x38)

1.005025324s ago: executing program 2 (id=1507):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@can_newroute={0x14, 0x18, 0x821}, 0x14}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x800)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xf0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x8000fff2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r2, 0x0, 0x4000)
sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000100001000000000000000000d100000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a19020000000000000000010020000c00024000000000000000010900010073797a31000000002000048014000300766574680100000063767461700000000800014000000005"], 0xe8}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000000140)={0x0, 'macsec0\x00', {0x2}, 0xf})
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, 0x5}, 0x1c)
epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xf)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x36}}}, 0x0, 0x0, 0x33, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8)
r10 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000003340)={0x0, 0x0, &(0x7f0000003300)={&(0x7f00000032c0)=ANY=[@ANYBLOB="200000006a0001002abd7000fcdbdf250000000800000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x4000804)
sendto$inet6(r9, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x4e23, 0x80000000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}}, 0x1c)
unshare(0x2000100)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'wlan0\x00', {0x3}, 0x37})

774.126302ms ago: executing program 3 (id=1513):
setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000000)={0x0, 0x9, 0x60, "975bb5ef71885ad30e3fd6d9e3ee52e56129c7d75bd386df45140b636f4948ea5812dfc77fdce98271e8c35cddd9583a3050760ee184cea3cce00717644dcf634269ad156e00edcb5d72b43d801f9d31427af13bc0f5a074cc1a0ead23a9d5f6"}, 0x68)
getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000080), 0x2)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000000c0)={'vcan0\x00', {0x2, 0x4e21, @multicast2}})
r1 = socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x12000, 0x0)
ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0)
write$tun(r2, &(0x7f0000000140)={@void, @void, @eth={@broadcast, @multicast, @val={@val={0x88a8, 0x2, 0x0, 0x1}, {0x8100, 0x2, 0x0, 0x3}}, {@mpls_mc={0x8848, {[{0x3, 0x0, 0x1}, {0x7f}, {0x6, 0x0, 0x1}], @ipv6=@udp={0x9, 0x6, "df4a56", 0xf0, 0x11, 0x1, @remote, @mcast1, {[@dstopts={0x0, 0x14, '\x00', [@generic={0x9, 0x97, "838313a65eefd2fb8d0b739531fcaae0572519d7d69c60e7ba4d2ea7b5bac0ed1d7f1cd6648a817b965a655cf60a2724151154db3d2da76f29a8d5190ea909d6f93ff10e74b7269d229a4470edb41c76d51e70e24deef8a016ab776d346879a88c91d79d9665e6ef35512650c4435b626db428c1a6643be7e749aabdc5d35436517f12ec06e2e5fc97dc1802a25ec9ca7ccabc324f4c67"}, @ra={0x5, 0x2, 0x15}, @enc_lim={0x4, 0x1, 0x40}]}], {0x4e21, 0x4e21, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "202058387404064e7af1231b16029aac8c9adb71af5daa8c", "5e6c97157b1e2f1f566b9ca09551280025d19e594652f13cd1de394840a9ed00"}}}}}}}}}, 0x13a)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000280)=0x9, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r4, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_IES={0x14, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x10, 0xbb, [0x7, 0xff00, 0x200, 0x9, 0x4, 0x0]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x48041)
ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f0000000400)=0x7)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='blkio.bfq.idle_time\x00', 0x0, 0x0)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r3)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r6, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044081)
getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f00000005c0)=0x2, &(0x7f0000000600)=0x4)
readv(r2, &(0x7f00000009c0)=[{&(0x7f0000000640)=""/215, 0xd7}, {&(0x7f0000000740)=""/224, 0xe0}, {&(0x7f0000000840)=""/125, 0x7d}, {&(0x7f00000008c0)=""/233, 0xe9}], 0x4)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a40), r3)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r7, 0x2, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x10)
ioctl$TUNSETCARRIER(r5, 0x400454e2, &(0x7f0000000b40)=0x1)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000b80)='wg0\x00', 0x4)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r8, &(0x7f0000002180)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002140)={&(0x7f0000000c00)={0x1508, 0x0, 0x5, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [{{0x254, 0x1, {{0x1, 0x5}, 0xff, 0x3, 0x6, 0x9, 0xf, 'syz0\x00', "6caf1ad7eae903fc9d51dbf53055ca47e9f8fcdb6e1492786719677007bf7ea0", "61895eb36c96fb4ce609c02d3270edba751b3864377116698f412b09802865d0", [{0x2, 0xd07b, {0x2, 0x3}}, {0xffff, 0x3, {0x2, 0x81}}, {0x6, 0xffff, {0x3, 0x1}}, {0xf, 0x400, {0x1, 0x8}}, {0x2248, 0x4, {0x0, 0x9}}, {0xff, 0x5b, {0x0, 0x9}}, {0x200, 0xfff7, {0x2, 0x6}}, {0x5, 0x1, {0x0, 0x9}}, {0x3, 0x200, {0x0, 0x100}}, {0x1, 0x9, {0x2, 0x1000}}, {0x8001, 0x7, {0x0, 0x800}}, {0xff, 0x1, {0x2, 0x7}}, {0x9, 0xffff, {0x3, 0x2}}, {0x13ec, 0x3, {0x1, 0xfa}}, {0xfff5, 0x7, {0x3, 0x587e}}, {0x2, 0x74, {0x0, 0x2}}, {0xd, 0x81, {0x3, 0xe}}, {0x7, 0xb, {0x0, 0x8001}}, {0x1, 0x1, {0x2, 0x5}}, {0x7, 0x1, {0x3, 0x7}}, {0xc36, 0x3, {0x2, 0xffffffc3}}, {0x7, 0x4, {0x0, 0x6}}, {0xef8a, 0x7, {0x0, 0x4}}, {0x84, 0x4d14, {0x1, 0xe7}}, {0x2, 0x7, {0x1, 0x5}}, {0x5, 0x2, {0x1}}, {0xe7de, 0x0, {0x0, 0x3}}, {0x8, 0x41a, {0x1, 0x1a45}}, {0x2, 0x5, {0x2, 0x5}}, {0x5, 0x8}, {0xc, 0x0, {0x2, 0x9}}, {0x5, 0x6cd4, {0x3, 0x5}}, {0x7, 0x2, {0x3}}, {0x2e, 0x1, {0x2, 0x800}}, {0x2, 0x1, {0x1, 0x5}}, {0x9, 0x759, {0x1, 0x7}}, {0x7f, 0xffff, {0x0, 0x5}}, {0x8d6d, 0x362, {0x3, 0xa15}}, {0x58a, 0x5, {0x2, 0xcfa}}, {0x101, 0x80, {0x2, 0x4}}]}}}, {{0x254, 0x1, {{0x0, 0x1}, 0x91, 0x1, 0x7, 0x5, 0x6, 'syz1\x00', "dd3e71bc8b324107c664a79b4e9a13459880bdd1dab4ce8e19e0671d3236e981", "ad1fe9c9b4cd52758b6b76a7365e4954dd34898d4a0822146917245235d936f3", [{0x79b, 0x401, {0x1, 0xfffffff1}}, {0x3, 0x0, {0x2, 0x9}}, {0xb590, 0x5, {0x3, 0x8}}, {0x2, 0x7db, {0x1, 0x7}}, {0x0, 0x8498, {0x0, 0x7}}, {0xff7f, 0x7, {0x1, 0x2}}, {0x5, 0x1, {0x0, 0x1}}, {0x2, 0x0, {0x0, 0x3}}, {0x1, 0x4, {0x3}}, {0xfffd, 0x0, {0x1, 0x7fffffff}}, {0xfffd, 0xfff, {0x0, 0x6}}, {0x8ecc, 0x6, {0x1, 0xf}}, {0xfff9, 0x4, {0x0, 0xe}}, {0xb61, 0x8, {0x0, 0x8}}, {0x3, 0x2, {0x0, 0x9}}, {0x8, 0xff08, {0x3, 0xfc}}, {0x8, 0x1, {0x1, 0x4}}, {0x34, 0x7, {0x1, 0x8}}, {0xd82, 0x9, {0x2, 0x80000000}}, {0x2, 0x2, {0x1, 0xffffffff}}, {0x401, 0x790, {0x1, 0x7}}, {0x8, 0x6, {0x1, 0x3}}, {0x0, 0x40, {0x3, 0x811}}, {0x6e8, 0x4, {0x3, 0x5}}, {0x4e4, 0x1, {0x3, 0x1c}}, {0x8, 0xfffd, {0x0, 0x1}}, {0x1, 0x86c, {0x1, 0x1}}, {0x7, 0x7fff, {0x2, 0x3}}, {0x6, 0xfff6, {0x0, 0xf9c6}}, {0xd, 0x7fff, {0x1, 0x6}}, {0xf24, 0xbb, {0x3}}, {0xbd, 0x5, {0x3, 0x932}}, {0x3, 0x7, {0x0, 0x5}}, {0x10, 0x2, {0x3, 0x53e}}, {0x33, 0xfff, {0x3, 0x2}}, {0x5, 0x8001, {0x1}}, {0x0, 0xa, {0x0, 0x6}}, {0x1, 0x28, {0x3, 0x7}}, {0x4db, 0x149, {0x1, 0x8}}, {0x7, 0x89, {0x1, 0x6}}]}}}, {{0x254, 0x1, {{0x3}, 0x94, 0x7, 0xfff, 0x80, 0x6, 'syz0\x00', "3742ae0c91309a6cd3bf4624a5ef52bcc1e65f72c99015450e28dc55bb0db14f", "ae3f54a2d4731a5cb30b08ee9f8fa6614f9e5c0fd4c4c571589c480b68eddfd3", [{0xc86, 0x4, {0x3, 0x1}}, {0x91, 0x6, {0x2, 0x2}}, {0x2, 0x1, {0x2, 0x6}}, {0x7a, 0x1, {0x2, 0x6}}, {0x3, 0x8, {0x3, 0x3}}, {0x4, 0x3, {0x3, 0x4}}, {0x0, 0x6, {0x1, 0x7}}, {0x9, 0xfffe, {0x1, 0x3}}, {0xff, 0x6, {0x2, 0x33}}, {0x6, 0x7fff, {0x0, 0x2}}, {0x4, 0x3, {0x2, 0x6}}, {0x100, 0x7, {0x2, 0x5}}, {0x3ff, 0x1, {0x2, 0x44861542}}, {0x0, 0xb9, {0x3, 0x4}}, {0x2, 0x9, {0x3, 0x3}}, {0x3, 0x400, {0x0, 0x4}}, {0x2, 0x4, {0x2, 0x5}}, {0x6, 0x0, {0x0, 0x49c9c364}}, {0x7, 0x1, {0x0, 0x2}}, {0x0, 0x8, {0x2, 0x1}}, {0xc, 0x101, {0x3, 0x5}}, {0x5, 0xfffe, {0x2, 0x9}}, {0x6, 0xc, {0x2, 0x4}}, {0x11e0, 0x7f, {0x1, 0x6}}, {0x2, 0x9, {0x0, 0x6}}, {0x1, 0x5430, {0x1, 0x10001}}, {0x3ff, 0x6, {0x0, 0x2d1}}, {0xfffd, 0x8, {0x3, 0x8}}, {0x1, 0x5, {0x2, 0xb}}, {0x4, 0x81, {0x0, 0x8}}, {0x9, 0x9, {0x2, 0x4}}, {0x8, 0x0, {0x2, 0x4}}, {0xfdb, 0x3, {0x1, 0x8}}, {0x3, 0x8a72, {0x1, 0x8}}, {0x7, 0x7fff, {0x2, 0x3ff}}, {0x8, 0x101, {0x3, 0x3}}, {0x1, 0x7ff, {0x3, 0xfffeffff}}, {0x0, 0x5, {0x3, 0x10001}}, {0x10, 0x2, {0x1, 0xc}}, {0x3, 0x100, {0x1, 0x8}}]}}}, {{0x254, 0x1, {{0x1, 0x80000001}, 0x0, 0x7, 0x401, 0x0, 0x8, 'syz1\x00', "20f6a886bfcdc8b33976470d65b02a9cf45ddb48323cf7d8ed1aaa7790595bd2", "3c791d4286d69f8e82156f87e5b1b071a18ca9fbb978344799cfdd540959a596", [{0x3, 0x8, {0x1, 0x63657b}}, {0x0, 0x5, {0x6, 0x200}}, {0xff, 0x7, {0x2, 0x9}}, {0x520, 0x7, {0x2, 0x5}}, {0xf, 0x4, {0x3, 0x800}}, {0x1, 0x0, {0x3, 0x10000}}, {0x9, 0x6, {0x0, 0x7}}, {0x3ff, 0x5474, {0x2, 0x8361}}, {0x2, 0x1, {0x0, 0x5}}, {0x8, 0x21, {0x3, 0x3}}, {0x7, 0x9, {0x1, 0x7}}, {0x200, 0x0, {0x3, 0x81}}, {0x7, 0xfffd, {0x0, 0x6}}, {0x1ff, 0x3, {0x2, 0x7}}, {0x3, 0xa, {0x1, 0x1}}, {0x100, 0x3, {0x2, 0x9}}, {0x3, 0x2, {0x2, 0x8000}}, {0x5, 0x5, {0x3, 0x6}}, {0x6, 0x3, {0x0, 0xfffffffe}}, {0x5, 0x10, {0x5, 0x401}}, {0xd5, 0x4, {0x2, 0x2}}, {0x4, 0x9, {0x0, 0xa1}}, {0x7, 0xfff, {0x2, 0x5dd9}}, {0x800, 0x3, {0x3, 0x8}}, {0x1, 0xf, {0x1, 0x80000}}, {0x8, 0xc, {0x3, 0x80}}, {0x5, 0x84, {0x0, 0x4}}, {0x9, 0x80, {0x1, 0xc1f}}, {0x3, 0x7, {0x3, 0x9}}, {0xfff1, 0xffff, {0x1, 0x3ced}}, {0xa, 0x8, {0x0, 0x5}}, {0x200, 0x0, {0x3, 0x7}}, {0x8, 0x1ff, {0x3, 0x1}}, {0x7aa, 0x3380, {0x2, 0x5}}, {0x6, 0x1, {0x3, 0xfffffff7}}, {0x4, 0x4, {0x1}}, {0x2, 0x8, {0x3, 0x3}}, {0x0, 0xd, {0x3, 0x3f3}}, {0x7, 0x3, {0x5ca0a5d12a623687, 0x9966}}, {0xfffe, 0x1, {0x1, 0xad74}}]}}}, {{0x254, 0x1, {{0x0, 0x7fffffff}, 0x6, 0x8, 0x1a, 0xfff1, 0x8, 'syz1\x00', "e3c2ed4dfde6d9997728f76bf20835afd5b48b21c80f1ea55dd0d04d85c916fc", "766767401404bfa3c13c1277869c1a146c50a6cdbb6087cc509591afedd6a93f", [{0x4, 0x873f, {0x1, 0x10}}, {0x3, 0xb1, {0x2, 0x1ff}}, {0x385, 0x1, {0x0, 0x7}}, {0x8, 0x9, {0x3, 0x74}}, {0x2, 0x80, {0x2}}, {0x1, 0x2, {0x3, 0x31}}, {0x8, 0xfc34, {0x0, 0x6}}, {0x4, 0xde3, {0x0, 0xfffff800}}, {0x7, 0x1, {0x0, 0x8}}, {0x0, 0x8, {0x3}}, {0x4, 0x1067, {0x1, 0x6}}, {0xafa, 0x5, {0x0, 0x8}}, {0x3, 0x3, {0x2763423e99cb6429}}, {0x2000, 0x7, {0x1, 0x80000001}}, {0x10, 0x0, {0x2, 0x7fff}}, {0x6bfe, 0x7, {0x2, 0x2}}, {0xc, 0x6, {0x0, 0xf}}, {0xfff2, 0x9, {0x0, 0x9}}, {0x1000, 0xdee, {0x0, 0x4}}, {0x1, 0x87, {0x0, 0x2}}, {0x5, 0x200, {0x0, 0xd3}}, {0x8001, 0x4, {0x2, 0x3ff}}, {0xd, 0x7, {0x1, 0xfffffff8}}, {0x0, 0x7, {0x1}}, {0x3c, 0x5}, {0x2000, 0xf, {0x3, 0x7fffffff}}, {0x5, 0x0, {0x2, 0x9f}}, {0x3, 0x0, {0x2, 0x8}}, {0x7, 0x1, {0x3}}, {0x101, 0x7, {0x2, 0xfff}}, {0x1, 0x76, {0x3, 0x44aa}}, {0xfff7, 0xda, {0x2, 0x8}}, {0x8, 0x0, {0x3, 0x5}}, {0xfff, 0xaf1b, {0x0, 0xfffffffa}}, {0x3e, 0x200, {0x3, 0x4}}, {0x1, 0x8, {0x3, 0x5}}, {0x1, 0x81, {0x2, 0xba}}, {0x1a, 0x7, {0x3, 0x2}}, {0x8, 0x100, {0x1, 0x3}}, {0x4, 0x2}]}}}, {{0x254, 0x1, {{0x1, 0x4}, 0x1, 0x6, 0x3d, 0xfffa, 0x7b40, 'syz0\x00', "66151ffe39a2a289eb4e10ad4d35b5a940f13d6f2ab2debf80e59c41add0bf8e", "4cc21a5f4ea13cb20017131d74087e1a3c5c8c8618c98b3756cc68b48f56941e", [{0x8, 0x0, {0x1, 0xfffff801}}, {0x7, 0x7, {0x2}}, {0x100, 0x1, {0x1, 0x3}}, {0xa2, 0x101, {0x0, 0x5}}, {0x3, 0x86, {0x0, 0xf4f}}, {0x5, 0x5, {0x2, 0x1}}, {0x81, 0x1, {0x0, 0xc7}}, {0x5cc7, 0xfff8, {0x2, 0x7}}, {0xfffa, 0xdf, {0x1, 0x9}}, {0x6, 0x101, {0x1, 0x3ff}}, {0x8, 0x8, {0x2, 0x1ff}}, {0x7, 0x4, {0x0, 0x8}}, {0x0, 0x4100, {0x2, 0x9}}, {0x42f, 0xba1, {0x0, 0xf}}, {0x0, 0x1, {0x1, 0x6}}, {0x2, 0xfff8, {0x1, 0xf90}}, {0x5, 0x649, {0x0, 0x84}}, {0x0, 0x5, {0x0, 0x7}}, {0xfffe, 0x8, {0x2}}, {0xe, 0x2, {0x0, 0x1}}, {0x6, 0x7, {0x2, 0x4}}, {0x58, 0x0, {0x0, 0x5}}, {0x0, 0x6c, {0x0, 0x8}}, {0x7, 0x200, {0x1, 0x400}}, {0x6, 0x6, {0x3, 0x6}}, {0x4, 0x2, {0x2, 0x353c00}}, {0x2, 0xf, {0x0, 0xc9}}, {0x5, 0xffff, {0x1, 0x10001}}, {0x7fff, 0x4, {0x3, 0x8000}}, {0x0, 0xf24, {0x3, 0x9}}, {0x6, 0x5, {0x2, 0x2}}, {0x8, 0x0, {0x3, 0x8}}, {0x7, 0xfc00, {0x0, 0x4f}}, {0xa57f, 0x2174, {0x2, 0x6}}, {0xfa92, 0x5, {0x2, 0x5}}, {0x4, 0xbd1e, {0x1, 0x8}}, {0x1, 0x3, {0x1}}, {0x4, 0x1, {0x1, 0x4}}, {0x1, 0x0, {0x0, 0x5}}, {0x9, 0xffc0, {0x2, 0x8}}]}}}, {{0x254, 0x1, {{0x0, 0x6}, 0x40, 0x0, 0x7, 0x8, 0x7, 'syz1\x00', "bc7e7bc948baefdb70d4f48355e3766ca06c4e24878623301abb860383a4878e", "ae3ade3cac5e961ecd3e424dde31ed96b69f96d8254d126a5a9666a9951afd7a", [{0x1ff, 0x0, {0x0, 0x9}}, {0x81, 0x1, {0x0, 0xa5}}, {0x1ff, 0xff, {0x1, 0x8000}}, {0x7f, 0x7, {0x0, 0x63}}, {0x7385, 0xc51, {0x1, 0x1}}, {0x9, 0x7, {0x2}}, {0x5, 0x3, {0x3, 0x8001}}, {0x7, 0xffff, {0x2, 0x4000000}}, {0x1a, 0x4000, {0x1, 0x3}}, {0x13, 0x8, {0x1, 0x8}}, {0x22c3, 0x1ff, {0x2, 0xa}}, {0x9, 0x8, {0x3, 0x5}}, {0x3, 0x8d, {0x0, 0x2}}, {0x3215, 0x3ff, {0x3, 0xe1d}}, {0x3, 0x4, {0x2, 0xf}}, {0x5, 0xd19, {0x3, 0x400}}, {0x0, 0x400, {0x3}}, {0x0, 0x68, {0x3, 0x6}}, {0x3, 0x0, {0x2, 0x4}}, {0x403d, 0x7fff, {0x1, 0x5}}, {0x155d, 0xfffa, {0x0, 0x1}}, {0x7, 0xb3, {0x1, 0xd7}}, {0x8, 0x1, {0x3, 0xa}}, {0x8234, 0x1630, {0x1, 0x6}}, {0x4, 0x5, {0x3, 0x900000}}, {0x1000, 0xfffa, {0x6, 0x3}}, {0x63c, 0x40, {0x1, 0x695}}, {0x5, 0x3, {0x3, 0x4}}, {0xfff3, 0x8, {0x2, 0x68db45fb}}, {0x9, 0xb000, {0x2, 0x5}}, {0x4, 0x7, {0x2, 0x7}}, {0x400, 0xa, {0x2, 0x8}}, {0x83, 0x7, {0x1, 0xea0}}, {0x7fff, 0x7, {0x2, 0x4}}, {0x0, 0x848, {0x2, 0x6}}, {0x3, 0xb, {0x0, 0x8dd6}}, {0x8, 0x81, {0x3, 0x1}}, {0x1ff, 0x2, {0x0, 0xcd}}, {0x401, 0x4, {0x2, 0xffff}}, {0x800, 0x7, {0x1, 0x6}}]}}}, {{0x254, 0x1, {{0x2, 0x7fffffff}, 0xad, 0x3, 0x1b0, 0x4, 0x2, 'syz1\x00', "e1adc48c12942605f0dfdcbdd8f7ae438170e7eaf3cc10dd215760e6ae827a47", "07090fc18043856610d3233e1b77f59f2c2a6365db7360f9f71483a598168a0f", [{0xfffa, 0x7, {0x2, 0x811}}, {0x7dc0, 0xc9, {0x1, 0x2}}, {0x5, 0x1, {0x0, 0x6}}, {0x44, 0x401, {0x0, 0xffff}}, {0x2, 0x10, {0x0, 0x7}}, {0x1, 0x2, {0x0, 0xfffffffd}}, {0x0, 0x200}, {0x40, 0x5, {0x3, 0xf240}}, {0x32eb, 0x9, {0x0, 0xa1}}, {0x6, 0x2, {0x3, 0xff}}, {0x4e, 0x7, {0x0, 0x1}}, {0x4, 0x7, {0x1, 0x5}}, {0x4, 0x8, {0x3, 0x535b}}, {0x0, 0x7ff, {0x2, 0xfffffffd}}, {0x2, 0x200, {0x2, 0x4}}, {0x6, 0xb141, {0x3, 0x1ff}}, {0xfff9, 0x800, {0x3, 0x3}}, {0x800, 0x1800, {0x2, 0x100}}, {0x8, 0x5, {0x1, 0x8}}, {0x7, 0xe03, {0x3, 0x5}}, {0x7ff, 0x6, {0x0, 0x5}}, {0x3, 0x8, {0x0, 0xe}}, {0x2307, 0xe, {0x5}}, {0x4, 0x6, {0x3, 0x3}}, {0xb, 0xc, {0x3, 0x7fff}}, {0x800, 0x2, {0x1, 0x6}}, {0x1, 0x2, {0x2, 0x2}}, {0xf800, 0x3, {0x3, 0x7}}, {0x8, 0xfff7}, {0x9d58, 0x2, {0x0, 0x7}}, {0x7, 0x8, {0x3, 0x7}}, {0x8, 0xffff, {0x0, 0x8}}, {0x1, 0xb, {0x3, 0x7}}, {0x2, 0x0, {0x1, 0xd5}}, {0x2, 0x8001, {0x1, 0x5254}}, {0x0, 0x0, {0x3, 0x5}}, {0x2, 0xfff, {0x3, 0xf}}, {0x8, 0xffff, {0x3, 0x1252}}, {0xc0, 0xa8, {0x2, 0x6}}, {0x3, 0x7, {0x3, 0x7ff}}]}}}, {{0x254, 0x1, {{0x2, 0x5}, 0x5, 0x5b, 0x3, 0x6a, 0x15, 'syz1\x00', "90ae1e5a70978844fb60151fb2f02f04acbf2197e28ea5695a14103ba1dd3997", "45fe03ff37b23c4538fde0c0f13816be40f1332d835434da0e8a6ed9a3139ed5", [{0x3, 0x9, {0x2, 0x7}}, {0x792a, 0x1ff, {0x3, 0x6}}, {0x43, 0x1, {0x2, 0x6}}, {0x7, 0x8, {0x3, 0x40}}, {0x80, 0x6, {0x3, 0x3c9f3127}}, {0xfff, 0xc51, {0x0, 0x5}}, {0x100, 0xfffe, {0x0, 0x7ff}}, {0x6, 0x40, {0x3, 0xddf}}, {0x5, 0x6, {0x2, 0x4}}, {0x7c3, 0x7, {0x2, 0x6}}, {0x0, 0xa, {0x2, 0x8}}, {0x5, 0x60, {0x0, 0x4}}, {0x0, 0x3, {0x1, 0x81}}, {0x5, 0x0, {0x1}}, {0x2, 0x2, {0x1, 0x4}}, {0x3, 0x7fff, {0x1, 0x1}}, {0x1, 0x0, {0x3, 0xffffffff}}, {0x208, 0x4, {0x2, 0x3}}, {0x31, 0x1, {0x1, 0xd94}}, {0x4, 0x2, {0x1, 0x5}}, {0x1429, 0x9, {0x3, 0x5}}, {0x100, 0x2, {0x1, 0x542fcc13}}, {0x4, 0xb771, {0x1}}, {0x3, 0x5a2f, {0x1, 0x85c9}}, {0x0, 0xfffb, {0x0, 0x5}}, {0xa, 0x0, {0x3}}, {0xfffb, 0x3, {0x2, 0x7}}, {0xfff0, 0x9, {0x0, 0x2}}, {0x228, 0x480, {0x3, 0x2}}, {0x800, 0x6, {0x3, 0x6b1}}, {0x7, 0x400, {0x1, 0x4}}, {0x5, 0x5, {0x1, 0x6}}, {0x3, 0xf6, {0x1, 0x5}}, {0xfff, 0xd4f7, {0x7, 0x5}}, {0x10, 0xb1fd, {0x0, 0x7}}, {0x80, 0x0, {0x1, 0x3}}, {0x800, 0x1, {0x1, 0x4}}, {0x4, 0x2, {0x0, 0x400}}, {0x8, 0xff, {0x3}}, {0x4, 0x7653, {0x4, 0xfffffff7}}]}}}]}, 0x1508}, 0x1, 0x0, 0x0, 0x4008000}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000021c0)={'pimreg0\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000002240)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000002300)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x38, r4, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7, 0x11}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x8800)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000002340)={'wlan0\x00'})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000002400)={'syztnl2\x00', &(0x7f0000002380)={'ip6tnl0\x00', r9, 0x2f, 0x7, 0x8, 0x4, 0x0, @mcast1, @remote, 0x8, 0x40, 0x5}})

714.236723ms ago: executing program 3 (id=1514):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x38}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0))
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4041}, 0x4000000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000140)={'wg2\x00', @local})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32, @ANYBLOB="20000100", @ANYRES32], 0x38}}, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
close(0x4)

713.779844ms ago: executing program 3 (id=1515):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000002b000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e6185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f659cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c61a137462c7f2539479f49d4eb2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc16e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c0977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6040099d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663dd472021d202eedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe3594d4a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed180d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35f267632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12a851810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f314001a62863f6e04b4506ac2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab79e609c57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2b4bb9905a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296e99d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55000048e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cf7800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc699d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7dc1a869fa5551b873e2c838e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867bf0ff0000000000000000000000a0616252abda1102c3eee13eddef0275f21752ee474e32d790ae1f3df77e303ae1968c2a4419d1ca13b97b2c3123ab5b8473b880644e6acfe1d346d1528262c6e91f38029ec24eeb4fe5c1b3726bcfd386ba153fed11692170e5a09432bd02fa9dba861ecad4dbf61a93733a21aeff5f541b8f78bccbf1ac0000000000000000000000145aaaa62ff74b216b2977e7b9261824f663cea60ec6e0fa03bd596cec6d12316c8ed147d4cdd140857444c27c1946b1afcd4ec260694cb71e421744cf1f860840b0decf9be35aeb02d1bf6137b3189edb2d21557e6804ed52305e7deace8b97cd2b423cb79c541762097e29c386634a4bcc3ee91266d808706aadbc4650183d71bf5341edfe4c815d3a87c05d75da20b260d39cdd8559292000cb06faf9972683d379565dcd932fbc6bfb13f938a693252fc3af8088fcf8e06a"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e00500000000", 0x0, 0x14, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e00500000000", 0x0, 0x14, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xfff1, 0xc}, {0xfff3, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44085}, 0x10) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xfff1, 0xc}, {0xfff3, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44085}, 0x10)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
pipe(&(0x7f00000000c0)={<r2=>0xffffffffffffffff})
epoll_pwait(r2, &(0x7f0000001800)=[{}], 0x1, 0xa52, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x8000600e})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)

711.614793ms ago: executing program 3 (id=1516):
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000400)={<r1=>0xffffffffffffffff})
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440)=[@window={0x3, 0x4, 0x8}, @sack_perm, @window={0x3, 0x3, 0x4}, @sack_perm, @window={0x3, 0x678, 0x7ff}, @mss, @mss={0x2, 0x4}], 0x7)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%+9llu \x00'}, 0x20)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000600)=r2, 0x4)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = getpid()
syz_emit_ethernet(0x83, &(0x7f0000000500)=ANY=[@ANYRESDEC=r5], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x26, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xdf}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @jmp={0x5, 0x1, 0xd, 0x5, 0x9, 0x100, 0x8}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1020, &(0x7f0000001200)=""/4128, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}}, 0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000003c0)=r5)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x4)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x100004, 0x620104, 0xb, 0x1}, 0x50)
r9 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r9, &(0x7f0000000080)={{0x3, @default, 0x1}, [@null, @default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
bind$ax25(r9, &(0x7f0000000480)={{0x3, @null, 0x3}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000640), &(0x7f0000000680)=0x4)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r8, 0x4}, 0x38)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='afs_cb_miss\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0xffffffffffffff3c, &(0x7f0000000000)="ff", 0x0, 0x3, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4000}, 0x48)

443.311255ms ago: executing program 3 (id=1519):
socket$kcm(0x10, 0x2, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
socket(0x1000000000000010, 0x80802, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00))
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='rcu_utilization\x00', r0}, 0x18)
socket(0x10, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x3, 0x5)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6(0xa, 0x2, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
socket$kcm(0x2, 0xa, 0x2)
socket$inet_sctp(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000700fc000000080011000700000008000e00800000000800", @ANYRES16=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

442.447689ms ago: executing program 3 (id=1520):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000240)={@broadcast, @local, @loopback}, 0xc)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd49032800030020000000600000004004730081e949b93897bc3b0000070000007d01ff020000000000000000000000000001"], 0xfdef)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xfbf8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xf28}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}]}]}, 0xb8}}, 0x0)

372.646241ms ago: executing program 1 (id=1523):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440))
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
pipe(&(0x7f00000001c0))
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0xa7, &(0x7f00000002c0)=""/167, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x4d5970267c004693, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0xfffffffc, 0x2, 0xfffffffe}, 0x10}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r4, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r13, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r1, &(0x7f0000000100), 0x10)
write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24)
r14 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r14, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)

254.084246ms ago: executing program 1 (id=1524):
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4e21, @empty}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}, 'bridge_slave_0\x00'})
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000400)={&(0x7f00000000c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x278, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x52, 0x3, "35426c5881c5b1cc589c329e9dc012313fbac28d920c7743aea0b6700bb1d5c952fde635fa1f07264e415c897841f18fe07c4b1ee14378d8310c4e2abd0fc96a0caf6fc26e331991e3786fcf26f5"}]}, @TIPC_NLA_BEARER={0x138, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x2, @mcast2, 0xd}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0xa11, 0x1, @loopback, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x6de, @mcast2}}}}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1c000000}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xa56}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x175e19a0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x4000801}, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x2, 0x0, r0, 0x8, '\x00', 0x0, r0, 0x4, 0x1, 0x4}, 0x50)
getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000004c0)={@private1, <r3=>0x0}, &(0x7f0000000500)=0x14)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0xbb6, 0xfff, 0x100, 0x1c, r2, 0x3, '\x00', r3, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0x4}, 0x50)
ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000600)={0x0, @l2={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x1}, @hci={0x1f, 0x2, 0x4}, @phonet={0x23, 0x5, 0x9, 0xb}, 0x40, 0x0, 0x0, 0x0, 0x9, &(0x7f00000005c0)='wg1\x00', 0x0, 0x4fa})
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000680)='irq_handler_exit\x00', r0, 0x0, 0x100000000}, 0x18)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000700)={0x0, 0x0, 0x7, 0x0, '\x00', [{0x3, 0x5, 0x10, 0x74, 0x9, 0x1}, {0x7, 0x2, 0x9, 0x1, 0x6, 0x8000000000000000}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{r0, <r6=>0xffffffffffffffff}, &(0x7f0000000bc0), &(0x7f0000000c00)=r0}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x1a, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x50}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @exit, @map_fd={0x18, 0x8, 0x1, 0x0, r4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a80)='syzkaller\x00', 0x3, 0xe8, &(0x7f0000000ac0)=""/232, 0x40f00, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000c80)=[r0, r6], &(0x7f0000000cc0)=[{0x3, 0x5, 0x4, 0x6}, {0x2, 0x4, 0xc, 0x6}, {0x3, 0x4, 0x3, 0x4}, {0x3, 0x4, 0x5, 0x1}], 0x10, 0xc}, 0x94)
pwritev(r6, &(0x7f0000000f00)=[{&(0x7f0000000dc0)="02228198d8ad3a33ed4064", 0xb}, {&(0x7f0000000e00)="5f28a806f8bba4425af489053e3eafd417bbeb7651bfcf2883108056236e2680e54af6b67ee413ed3a66fb660c20eee496d415c7b07f2c44483fad242b894c0fadda6be03ddc14187a8fd5b6d3bc356a59ee9860b19f3273a7fe0b5c8c698ab7a1d6d82a12fdfca59193613e216bb0ecde3667e6780c74e0cdd7f0f4d2aa886251e2680e137ddf22351fd84dcf2f52c7d8e142073583a4b0d05fb16260ca5c3ca6b41859d23866478ea77d491873a4f80ff9e96713f99bb11f61cea2f0b0fef541976239295abc8df2d17d1c0ce9185f509e6c6a76d66b75038aa79d5bcd939ca1f6", 0xe2}], 0x2, 0x5, 0x8)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MON_GET(r7, &(0x7f0000001100)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000f80)={0x11c, r1, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0xfc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xfff, @dev={0xfe, 0x80, '\x00', 0x26}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2e1076f3, @rand_addr=' \x01\x00', 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0x7}}, {0x14, 0x2, @in={0x2, 0x4e23, @private=0xa010102}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb2a78ca}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x57}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf0fb}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'syzkaller1\x00'}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40800}, 0x40800)
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000001140)=0x3)
r8 = socket$packet(0x11, 0x2, 0x300)
getpeername$packet(r8, &(0x7f00000011c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001200)=0x14)
sendmsg$nl_route(r5, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)=@ipv6_getnetconf={0x34, 0x52, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x7fff}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x6}, @NETCONFA_IFINDEX={0x8, 0x1, r3}, @NETCONFA_IFINDEX={0x8, 0x1, r9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40840}, 0x10)
ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000001300)=0x5)
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000001400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x8, [@func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0xe}, {0xd, 0x4}, {0x3, 0x5}, {0x1, 0x5}, {0xa, 0x5}, {0x9, 0x2}, {0x7, 0x3}, {0xd, 0x1}, {0x9, 0x5}, {}]}, @ptr={0x9, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x2e, 0x61, 0x30, 0x5f, 0x61, 0x5f]}}, &(0x7f00000014c0)=""/23, 0x88, 0x17, 0x0, 0xe}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001700)={r0, 0x20, &(0x7f00000016c0)={&(0x7f00000015c0)=""/21, 0x15, <r11=>0x0, &(0x7f0000001600)=""/142, 0x8e}}, 0x10)
r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001740)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x8001, '\x00', r3, r0, 0x1, 0x5, 0x5}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000017c0)={r4, <r13=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001800)={r0, <r14=>0xffffffffffffffff}, 0x4)
r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001840)={0x0, 0xdd, 0x18}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001980)=@bpf_lsm={0x1d, 0x4, &(0x7f0000001340)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xcb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @alu={0x4, 0x0, 0x1, 0x2, 0xb, 0x6, 0xfffffffffffffff0}], &(0x7f0000001380)='syzkaller\x00', 0xc, 0x4, &(0x7f00000013c0)=""/4, 0x40f00, 0x64, '\x00', 0x0, 0x1b, r10, 0x8, &(0x7f0000001540)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000001580)={0x0, 0x9, 0x4, 0x101}, 0x10, r11, 0x0, 0x9, &(0x7f0000001880)=[r2, r12, r13, r14, r2, r2, r4, r15], &(0x7f00000018c0)=[{0x2, 0x1, 0x5, 0x12}, {0x0, 0x5, 0x0, 0x6}, {0x4, 0x1, 0x10, 0x7}, {0x0, 0x5, 0x4, 0xb}, {0x3, 0x3, 0x8, 0x2f58e8fea0e1dbb}, {0x4, 0x2, 0x3, 0x2}, {0x3, 0x1, 0x7, 0xb}, {0x0, 0x2, 0x2, 0xa}, {0x5, 0x1, 0xb, 0x5}], 0x10, 0x6}, 0x94)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000001a80)=@generic={&(0x7f0000001a40)='./file0\x00', 0x0, 0x8}, 0x18)
r16 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), r0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000001cc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001c80)={&(0x7f0000001b40)={0x104, r16, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xe}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}, @ETHTOOL_A_LINKMODES_OURS={0xd8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xd2, 0x4, "cdd68f94a08d8924f522974c99f8e3cdbeee1abf524fd8371ce7f466a814002d7b850ac49ab20ee9d2b8443e4b93685e8050c7bf628e0c43c46a2ab391d3a210162acf605c8e8a393c474ea87c3ac1058f285d5315218a6ac6973131c38115d5b2e987cb325eb3d52ac8b6939d3f13d89cec6a5c85cea141b59c43291b863105037e241c9606c47a35404fca108528819a49d5910cbc538b1597bd898f87608affdf4121702cabf01824d44b433c282307154ea588ba17ec3a309ef25123eec3b4b723a0174dfc12cd0694b8adbd"}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x5}]}, 0x104}, 0x1, 0x0, 0x0, 0x24000894}, 0x20000801)

253.274086ms ago: executing program 1 (id=1525):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0x0, 0xfffffd9d}, 0xc)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000580)=@generic={&(0x7f0000000500)='./file0\x00', r5}, 0x18)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
writev(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r2)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xa}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8014}, 0x24048050)
r7 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r4, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x1, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x4, 0x2c, 0x0, 0x0, 0x8, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@noop]}}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x8, 0x0, 0xb9}}}}, 0x3a)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)
r11 = socket(0x1, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x24044800)

84.174186ms ago: executing program 2 (id=1526):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f0000000480)={{0x2b, @loopback, 0x0, 0x3, 'wrr\x00', 0x12, 0x0, 0x2d}, {@private=0xa010102, 0x4e24, 0x1, 0x0, 0x6}}, 0x44) (async)
setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f0000000480)={{0x2b, @loopback, 0x0, 0x3, 'wrr\x00', 0x12, 0x0, 0x2d}, {@private=0xa010102, 0x4e24, 0x1, 0x0, 0x6}}, 0x44)
getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000040))
openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x480200, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x480200, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0904000000000000000002000000090001007379d130000000000900020073797a32000000002c000480280001800b00010064796e73657400001800028009000002000000001100010000000000000000000000000a"], 0x80}}, 0x0)
close(r2) (async)
close(r2)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6) (async)
close(r6)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
r10 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000300)={<r11=>0x0, 0x4, 0x7, 0x9}, &(0x7f0000000380)=0x10)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, &(0x7f0000000440)={r11, 0x5}, &(0x7f0000000480)=0xfffffffffffffdbc) (async)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, &(0x7f0000000440)={r11, 0x5}, &(0x7f0000000480)=0xfffffffffffffdbc)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffc, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x1}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10}]}}]}, 0x40}}, 0x4008000)
r12 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_WANTLQI(r12, 0x0, 0x3, &(0x7f0000000140), 0x4) (async)
setsockopt$WPAN_WANTLQI(r12, 0x0, 0x3, &(0x7f0000000140), 0x4)
socket(0x37, 0x1, 0x3)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

83.719882ms ago: executing program 1 (id=1527):
socket$kcm(0x10, 0x2, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
socket(0x1000000000000010, 0x80802, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00))
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='rcu_utilization\x00', r0}, 0x18)
socket(0x10, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x3, 0x5)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6(0xa, 0x2, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
socket$kcm(0x2, 0xa, 0x2)
socket$inet_sctp(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000700fc000000080011000700000008000e00800000000800", @ANYRES16=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.931456ms ago: executing program 1 (id=1528):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r3, 0x23, 0x70bd2a, 0x25dfdbff, {{}, {0x0, 0x4107}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x48010}, 0x4040050) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0x68}}, 0x0) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r5=>r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000001c000100000000000000000207000000ccd557b02b19c657b72266ab000000000948dffff463101fca96356ac06ae7eac45c2a6b5c71b65aac35e77d73e048f01bae5d1030f4c0ee67eb03aab6d7", @ANYRES32=r7, @ANYBLOB="00000200"], 0x1c}}, 0x20000000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x7, &(0x7f0000000040)=ANY=[@ANYRESOCT=r5, @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) (async)
r8 = socket(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', <r10=>0x0})
r11 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000005142106"], 0x20}, 0x1, 0x0, 0x0, 0x40c5}, 0x0) (async)
r12 = socket$inet(0x10, 0x3, 0x0) (async)
r13 = socket$unix(0x1, 0x5, 0x0) (async)
r14 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r16=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r16, @ANYBLOB="24005a8020000180140003000000040020000000010000000000000004000200040001"], 0x40}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'bond0\x00', <r17=>0x0}) (async)
r18 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000680)='bond_slave_1\x00', 0x10) (async)
sendmsg$nl_route_sched(r18, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r17, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfd], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) (async)
r19 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
writev(r19, &(0x7f0000000300)=[{&(0x7f0000000180)='9+', 0x2}], 0x1) (async)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newqdisc={0x50, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x6}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000000000000000}]}}]}, 0x50}}, 0x0)

621.507µs ago: executing program 2 (id=1529):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r1, 0x10c, 0x8, &(0x7f0000000040)=0x6, 0x4)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000008400088080000080580009801c000080060001000200000008000200ac1414aa05000300020000001c0000800600010002000000080002007f00000105000300030000001c0000800600010002000000080002000a0101020500030020000000240001000000000000000000000000000000000000000000000000000000000000000000080005000100000014000200776731"], 0xb4}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040)

0s ago: executing program 1 (id=1530):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={<r1=>0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8}]}, &(0x7f0000000180)=0x10)
close(0x3)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
getsockname(r2, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', 0x0})
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000]}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001400038010000080080003"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0xfffffff6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e22, 0xf5b4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, &(0x7f0000000040)=0x84)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x70, 0x0, &(0x7f0000000300)=0xaf00)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gre={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5, 0x9, 0x7}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_OKEY={0x8, 0x5, 0x1}, @IFLA_GRE_LOCAL={0x8, 0x6, @broadcast}]}}}]}, 0x50}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:31054' (ED25519) to the list of known hosts.
syzkaller login: [   40.858267][ T5798] cgroup: Unknown subsys name 'net'
[   40.922735][ T5798] cgroup: Unknown subsys name 'cpuset'
[   40.926164][ T5798] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.104604][ T5798] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   44.573069][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   44.575736][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   44.578540][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   44.581291][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   44.584031][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   44.586683][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   44.589352][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   44.601240][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   44.604309][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   44.607338][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   44.610913][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   44.610992][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   44.614006][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   44.617207][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   44.629501][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   44.770307][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   44.782846][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   44.799133][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   44.836290][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.838808][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.841778][ T5846] bridge_slave_0: entered allmulticast mode
[   44.844203][ T5846] bridge_slave_0: entered promiscuous mode
[   44.852133][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.854607][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.857083][ T5846] bridge_slave_1: entered allmulticast mode
[   44.859540][ T5846] bridge_slave_1: entered promiscuous mode
[   44.870925][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.873397][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.875947][ T5842] bridge_slave_0: entered allmulticast mode
[   44.878433][ T5842] bridge_slave_0: entered promiscuous mode
[   44.881705][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.884168][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.886662][ T5842] bridge_slave_1: entered allmulticast mode
[   44.889642][ T5842] bridge_slave_1: entered promiscuous mode
[   44.913062][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.916550][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.919129][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.922105][ T5850] bridge_slave_0: entered allmulticast mode
[   44.924664][ T5850] bridge_slave_0: entered promiscuous mode
[   44.932325][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   44.941470][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.944218][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.946879][ T5850] bridge_slave_1: entered allmulticast mode
[   44.949220][ T5850] bridge_slave_1: entered promiscuous mode
[   44.956679][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.968644][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.973085][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   44.977610][ T5846] team0: Port device team_slave_0 added
[   44.981830][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   44.993564][ T5846] team0: Port device team_slave_1 added
[   45.002324][ T5842] team0: Port device team_slave_0 added
[   45.018085][ T5842] team0: Port device team_slave_1 added
[   45.021623][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.024204][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.034741][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.040312][ T5850] team0: Port device team_slave_0 added
[   45.042980][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.045637][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.056248][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.067636][ T5850] team0: Port device team_slave_1 added
[   45.085840][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.088971][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.100217][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.119892][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.122994][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.134634][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.142546][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.145429][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.156340][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.166923][ T5846] hsr_slave_0: entered promiscuous mode
[   45.169424][ T5846] hsr_slave_1: entered promiscuous mode
[   45.173627][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.176564][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.187718][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.222653][ T5842] hsr_slave_0: entered promiscuous mode
[   45.225097][ T5842] hsr_slave_1: entered promiscuous mode
[   45.227396][ T5842] debugfs: 'hsr0' already exists in 'hsr'
[   45.229660][ T5842] Cannot create hsr debugfs directory
[   45.249001][ T5850] hsr_slave_0: entered promiscuous mode
[   45.252535][ T5850] hsr_slave_1: entered promiscuous mode
[   45.255287][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   45.257768][ T5850] Cannot create hsr debugfs directory
[   45.383156][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   45.389327][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   45.398134][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   45.403691][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   45.445635][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.448224][ T5846] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.450840][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.453181][ T5846] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.457557][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   45.483549][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   45.491373][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   45.499305][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   45.503769][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   45.507653][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   45.513001][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   45.522438][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   45.537641][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.540293][ T5850] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.542919][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.545494][ T5850] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.550309][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.552794][ T5842] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.555387][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.557848][ T5842] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.574793][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.585179][ T3635] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.588473][ T3635] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.591992][ T3635] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.595198][ T3635] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.598167][ T3635] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.601272][ T3635] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.614654][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   45.624559][ T3635] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.627576][ T3635] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.636307][ T3635] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.639475][ T3635] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.648015][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.671084][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   45.675567][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.687971][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.690561][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.702134][ T3635] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.705121][ T3635] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.715247][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   45.731785][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.734321][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.737909][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.740892][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.756650][ T5850] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   45.762490][ T5850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   45.845744][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.869268][ T5846] veth0_vlan: entered promiscuous mode
[   45.877560][ T5846] veth1_vlan: entered promiscuous mode
[   45.881527][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.892855][ T5846] veth0_macvtap: entered promiscuous mode
[   45.901999][ T5846] veth1_macvtap: entered promiscuous mode
[   45.908076][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.918672][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.928206][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.931899][ T5842] veth0_vlan: entered promiscuous mode
[   45.936755][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.945854][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.953415][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.956312][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.971742][ T5842] veth1_vlan: entered promiscuous mode
[   45.974321][ T3635] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.977026][ T3635] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.987183][ T5850] veth0_vlan: entered promiscuous mode
[   45.994434][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.996129][ T5850] veth1_vlan: entered promiscuous mode
[   45.997563][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.004588][ T5842] veth0_macvtap: entered promiscuous mode
[   46.017613][ T5842] veth1_macvtap: entered promiscuous mode
[   46.022272][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   46.031142][ T5850] veth0_macvtap: entered promiscuous mode
[   46.037706][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.045435][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.049647][ T5875] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.054275][ T5875] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.057314][ T5875] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.061692][ T5850] veth1_macvtap: entered promiscuous mode
[   46.065126][ T5914] netlink: 'syz.2.3': attribute type 2 has an invalid length.
[   46.068476][ T5875] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.084108][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.095188][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.098707][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.101508][ T5875] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.102378][ T5875] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.107831][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.108833][ T5875] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.116803][ T5875] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.128401][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.132660][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.152319][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.155099][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.180748][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.186184][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.196435][ T5919] Zero length message leads to an empty skb
[   46.391750][ T5935] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7'.
[   46.394577][ T5935] netlink: 7 bytes leftover after parsing attributes in process `syz.1.7'.
[   46.660300][ T5849] Bluetooth: hci2: command tx timeout
[   46.660538][ T5844] Bluetooth: hci1: command tx timeout
[   46.662880][ T5233] Bluetooth: hci0: command tx timeout
[   47.125698][ T5957] netlink: 124 bytes leftover after parsing attributes in process `syz.0.9'.
[   47.138098][ T5957] IPVS: length: 209 != 24
[   47.370501][ T5973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12'.
[   47.475483][ T5976] team0: entered promiscuous mode
[   47.477254][ T5976] team_slave_0: entered promiscuous mode
[   47.479754][ T5976] team_slave_1: entered promiscuous mode
[   47.484053][ T5976] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13'.
[   47.488558][ T5975] team0: left promiscuous mode
[   47.491550][ T5975] team_slave_0: left promiscuous mode
[   47.494068][ T5975] team_slave_1: left promiscuous mode
[   47.567366][ T5979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'.
[   47.573717][ T5979] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   47.582755][ T5979] netlink: 'syz.1.14': attribute type 4 has an invalid length.
[   47.638176][ T5310] IPVS: starting estimator thread 0...
[   47.640290][ T5983] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[   47.671526][ T5987] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[   47.730589][ T5984] IPVS: using max 138 ests per chain, 331200 per kthread
[   47.767156][ T5992] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19'.
[   47.772145][ T5994] netlink: 34 bytes leftover after parsing attributes in process `syz.1.19'.
[   47.813121][ T5999] netlink: 844 bytes leftover after parsing attributes in process `syz.1.21'.
[   47.818183][ T5997] netlink: 20 bytes leftover after parsing attributes in process `syz.2.20'.
[   47.955719][ T6005] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[   47.958871][ T5310] IPVS: starting estimator thread 0...
[   48.051887][ T6014] IPVS: using max 136 ests per chain, 326400 per kthread
[   48.067898][ T6019] Illegal XDP return value 4294967274 on prog  (id 7) dev syz_tun, expect packet loss!
[   48.156755][ T6031] syz.0.30 uses obsolete (PF_INET,SOCK_PACKET)
[   48.234861][ T6038] netlink: 'syz.1.34': attribute type 1 has an invalid length.
[   48.238062][ T6038] netlink: 'syz.1.34': attribute type 3 has an invalid length.
[   48.739998][ T5849] Bluetooth: hci1: command tx timeout
[   48.740517][ T5233] Bluetooth: hci2: command tx timeout
[   49.084823][ T6061] bridge_slave_0: left allmulticast mode
[   49.087347][ T6061] bridge_slave_0: left promiscuous mode
[   49.090150][ T6061] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.099225][ T6061] bridge_slave_1: left allmulticast mode
[   49.102767][ T6061] bridge_slave_1: left promiscuous mode
[   49.105168][ T6061] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.111056][ T6061] bond0: (slave bond_slave_0): Releasing backup interface
[   49.115259][ T6061] bond0: (slave bond_slave_1): Releasing backup interface
[   49.123187][ T6061] team0: Port device team_slave_0 removed
[   49.128299][ T6061] team0: Port device team_slave_1 removed
[   49.132237][ T6061] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   49.135570][ T6061] batman_adv: batadv0: Removing interface: batadv_slave_0
[   49.139987][ T6061] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   49.142795][ T6061] batman_adv: batadv0: Removing interface: batadv_slave_1
[   49.167041][ T6061] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   49.338467][ T6068] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   49.617705][ T6072] bridge0: port 1(erspan0) entered blocking state
[   49.620377][ T6072] bridge0: port 1(erspan0) entered disabled state
[   49.623178][ T6072] erspan0: entered allmulticast mode
[   49.625684][ T6072] erspan0: entered promiscuous mode
[   49.627876][ T6072] bridge0: port 1(erspan0) entered blocking state
[   49.630180][ T6072] bridge0: port 1(erspan0) entered forwarding state
[   49.634157][ T6073] erspan0: left allmulticast mode
[   49.636651][ T6073] erspan0: left promiscuous mode
[   49.640264][ T6073] bridge0: port 1(erspan0) entered disabled state
[   50.114060][ T6095] netlink: 'syz.1.48': attribute type 13 has an invalid length.
[   50.117312][ T6095] netlink: 'syz.1.48': attribute type 17 has an invalid length.
[   50.133554][ T6095] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   50.574330][ T6112] sctp: [Deprecated]: syz.1.51 (pid 6112) Use of int in max_burst socket option deprecated.
[   50.574330][ T6112] Use struct sctp_assoc_value instead
[   50.647813][ T6125] ieee802154 phy0 wpan0: encryption failed: -90
[   50.707320][ T6134] netlink: 'syz.1.58': attribute type 5 has an invalid length.
[   50.711226][ T6134] ieee802154 phy0 wpan0: encryption failed: -22
[   50.820851][ T5844] Bluetooth: hci1: command tx timeout
[   50.823667][ T5849] Bluetooth: hci2: command tx timeout
[   51.587572][ T6155] __nla_validate_parse: 78 callbacks suppressed
[   51.587584][ T6155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.64'.
[   51.804919][ T6186] netlink: 'syz.2.72': attribute type 1 has an invalid length.
[   51.805598][ T6187] netlink: 16 bytes leftover after parsing attributes in process `syz.1.73'.
[   51.837196][ T6190] netlink: 40 bytes leftover after parsing attributes in process `syz.1.74'.
[   51.887153][ T6199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.76'.
[   51.983549][ T6215] netlink: 'syz.2.82': attribute type 11 has an invalid length.
[   51.986081][ T6215] netlink: 224 bytes leftover after parsing attributes in process `syz.2.82'.
[   52.005497][ T6221] netlink: 'syz.1.84': attribute type 2 has an invalid length.
[   52.006044][ T6218] batman_adv: batadv0: Adding interface: ip6gretap1
[   52.008666][ T6221] netlink: 'syz.1.84': attribute type 1 has an invalid length.
[   52.012545][ T6218] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.023299][ T6218] batman_adv: batadv0: Interface activated: ip6gretap1
[   52.060126][ T6229] netlink: 'syz.1.87': attribute type 4 has an invalid length.
[   52.138650][ T6235] netlink: 830 bytes leftover after parsing attributes in process `syz.1.88'.
[   52.142688][ T6235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.88'.
[   52.253563][ T6253] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   52.256208][ T6253] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   52.314563][ T6258] netlink: 36 bytes leftover after parsing attributes in process `syz.1.95'.
[   52.320033][ T6258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.95'.
[   52.323489][ T6258] netlink: 16 bytes leftover after parsing attributes in process `syz.1.95'.
[   52.425447][ T6269] bridge_slave_0: left allmulticast mode
[   52.428367][ T6269] bridge_slave_0: left promiscuous mode
[   52.432568][ T6269] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.437244][ T6269] bridge_slave_1: left allmulticast mode
[   52.439350][ T6269] bridge_slave_1: left promiscuous mode
[   52.442416][ T6269] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.447233][ T6269] bond0: (slave bond_slave_0): Releasing backup interface
[   52.454404][ T6269] bond0: (slave bond_slave_1): Releasing backup interface
[   52.464524][ T6269] team0: Port device team_slave_0 removed
[   52.476047][ T6269] team0: Port device team_slave_1 removed
[   52.478644][ T6269] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   52.482548][ T6269] batman_adv: batadv0: Removing interface: batadv_slave_0
[   52.491085][ T6269] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   52.493799][ T6269] batman_adv: batadv0: Removing interface: batadv_slave_1
[   52.517575][ T6271] syzkaller0: entered promiscuous mode
[   52.519533][ T6271] syzkaller0: entered allmulticast mode
[   52.585812][ T6269] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   52.642316][ T6276] netlink: 'syz.1.100': attribute type 8 has an invalid length.
[   52.759940][ T6287] netlink: 'syz.2.104': attribute type 1 has an invalid length.
[   52.783714][ T6287] netlink: 'syz.2.104': attribute type 3 has an invalid length.
[   52.831909][ T6296] tipc: Started in network mode
[   52.834293][ T6296] tipc: Node identity ac14140f, cluster identity 4711
[   52.837549][ T6296] tipc: New replicast peer: 208.253.78.183
[   52.840854][ T6296] tipc: Enabled bearer <udp:s>, priority 10
[   52.844095][ T6296] netlink: 'syz.2.107': attribute type 178 has an invalid length.
[   52.900331][ T5844] Bluetooth: hci1: command tx timeout
[   52.902716][ T5849] Bluetooth: hci2: command 0x0419 tx timeout
[   52.931465][ T6313] tipc: Enabling of bearer <udp:s> rejected, already enabled
[   52.981842][ T6326] netlink: 'syz.0.117': attribute type 10 has an invalid length.
[   52.995299][ T6326] dummy0: entered promiscuous mode
[   52.997099][ T6326] dummy0: entered allmulticast mode
[   52.999220][ T6326] bridge0: port 1(dummy0) entered blocking state
[   53.002276][ T6326] bridge0: port 1(dummy0) entered disabled state
[   53.005163][ T6326] bridge0: port 1(dummy0) entered blocking state
[   53.007587][ T6326] bridge0: port 1(dummy0) entered forwarding state
[   53.195049][ T6333] netlink: 'syz.0.119': attribute type 1 has an invalid length.
[   53.288724][ T5859] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   53.960041][   T47] tipc: Node number set to 2886997007
[   54.186111][ T6370] nbd: must specify a device to reconfigure
[   54.276143][ T6373] batadv_slave_1: entered promiscuous mode
[   54.286572][ T6373] batadv_slave_1: left promiscuous mode
[   54.351928][ T6385] batadv1: entered promiscuous mode
[   54.355072][ T6385] batadv1: entered allmulticast mode
[   54.906240][ T6399] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   54.913817][ T5859] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   54.917145][ T5859] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   54.921880][ T6402] batadv_slave_0: entered promiscuous mode
[   54.936425][ T5859] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   54.940105][ T5859] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   54.989983][ T5233] Bluetooth: hci2: command 0x0419 tx timeout
[   71.141314][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.143611][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   74.170519][ T6412] __nla_validate_parse: 21 callbacks suppressed
[   74.170533][ T6412] netlink: 44 bytes leftover after parsing attributes in process `syz.0.139'.
[   74.216974][ T6422] netlink: 68 bytes leftover after parsing attributes in process `syz.0.143'.
[   74.425457][ T6456] netlink: 16 bytes leftover after parsing attributes in process `syz.1.150'.
[   74.438285][ T6456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.150'.
[   74.527859][ T6464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.152'.
[   74.531781][ T6464] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.534796][ T6464] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.538576][ T6464] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.547201][ T6464] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.617448][ T6473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.155'.
[   74.760719][ T6507] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   74.802269][ T6511] validate_nla: 2 callbacks suppressed
[   74.802288][ T6511] netlink: 'syz.2.163': attribute type 4 has an invalid length.
[   74.832699][ T6513] netlink: 20 bytes leftover after parsing attributes in process `syz.1.165'.
[   74.838095][ T6515] netlink: 32 bytes leftover after parsing attributes in process `syz.0.166'.
[   74.884782][ T6527] netlink: 16 bytes leftover after parsing attributes in process `syz.0.169'.
[   74.916254][ T6531] geneve2: entered promiscuous mode
[   74.919323][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.923714][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.931262][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.938644][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.233935][ T6564] netlink: ct family unspecified
[   75.236094][ T6564] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.278312][ T6567] warning: `syz.1.178' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   75.284344][ T6566] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   75.328330][ T6573] netlink: 20 bytes leftover after parsing attributes in process `syz.1.179'.
[   75.570661][ T6505] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   75.586100][ T6590] bond0: (slave gretap0): Opening slave failed
[   75.589193][ T6591] bond0: (slave gretap0): Opening slave failed
[   75.611822][ T6593] bridge_slave_0: left allmulticast mode
[   75.614136][ T6593] bridge_slave_0: left promiscuous mode
[   75.616214][ T6593] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.621072][ T6593] bridge_slave_1: left allmulticast mode
[   75.623022][ T6593] bridge_slave_1: left promiscuous mode
[   75.624976][ T6593] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.630301][ T6593] bond0: (slave bond_slave_0): Releasing backup interface
[   75.634685][ T6593] bond0: (slave bond_slave_1): Releasing backup interface
[   75.642819][ T6593] team0: Port device team_slave_0 removed
[   75.648051][ T6593] team0: Port device team_slave_1 removed
[   75.666264][ T6593] syz.2.186 (6593) used obsolete PPPIOCDETACH ioctl
[   75.847790][ T6605] netlink: 'syz.2.191': attribute type 1 has an invalid length.
[   75.985272][ T6621] syzkaller1: entered promiscuous mode
[   75.990883][ T6621] syzkaller1: entered allmulticast mode
[   75.995069][ T6621] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[   76.148152][ T6646] netlink: 'syz.1.201': attribute type 1 has an invalid length.
[   76.201841][ T6656] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   76.346283][ T6664] vlan0: entered promiscuous mode
[   76.348481][ T6664] bridge0: entered promiscuous mode
[   76.376257][ T6666] pim6reg1: entered promiscuous mode
[   76.378606][ T6666] pim6reg1: entered allmulticast mode
[   76.522887][ T6673] geneve0: entered promiscuous mode
[   76.524874][ T6673] geneve0: entered allmulticast mode
[   76.893144][ T6683] netlink: 'syz.0.212': attribute type 11 has an invalid length.
[   76.958265][ T6687] netlink: 'syz.0.212': attribute type 4 has an invalid length.
[   77.088417][ T6689] netlink: 'syz.1.213': attribute type 10 has an invalid length.
[   77.180950][ T6692] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   77.433370][ T6695] IPVS: length: 100 != 203139240312
[   77.754941][ T6701] IPVS: Unknown mcast interface: batadv0
[   77.786595][ T6699] delete_channel: no stack
[   77.795589][ T6700] geneve2: left promiscuous mode
[   77.816567][ T6703] tipc: Started in network mode
[   77.818714][ T6703] tipc: Node identity 4e49351c4949, cluster identity 4711
[   77.823499][ T6703] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.838868][ T5859] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.846038][ T5859] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.849362][ T5859] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.865874][ T5859] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.870991][ T6703] syzkaller0: entered promiscuous mode
[   77.873514][ T6703] syzkaller0: entered allmulticast mode
[   77.881762][ T6703] tipc: Resetting bearer <eth:syzkaller0>
[   77.886417][ T6702] tipc: Resetting bearer <eth:syzkaller0>
[   77.896548][ T6702] tipc: Disabling bearer <eth:syzkaller0>
[   77.939503][ T6708] syzkaller0: entered promiscuous mode
[   77.944981][ T6708] syzkaller0: entered allmulticast mode
[   77.948611][ T6710] tipc: Started in network mode
[   77.951275][ T6710] tipc: Node identity ac14140f, cluster identity 4711
[   77.954373][ T6710] tipc: New replicast peer: 255.255.255.255
[   77.956784][ T6710] tipc: Enabled bearer <udp:syz2>, priority 10
[   77.995689][ T6716] ip6gretap1: entered promiscuous mode
[   78.037855][ T6722] smc: net device bond0 applied user defined pnetid SYZ2
[   78.041677][ T6722] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.139627][ T6737] netlink: 'syz.0.229': attribute type 5 has an invalid length.
[   78.146087][ T5859] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   78.149282][ T5859] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   78.153524][ T5859] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   78.156647][ T5859] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   78.257634][ T6755] TCP: TCP_TX_DELAY enabled
[   78.263803][ T6755] sctp: [Deprecated]: syz.1.234 (pid 6755) Use of int in max_burst socket option.
[   78.263803][ T6755] Use struct sctp_assoc_value instead
[   78.501635][ T6777] (unnamed net_device) (uninitialized): option lacp_active: invalid value (5)
[   79.057394][ T6787] dvmrp1: entered allmulticast mode
[   79.062721][ T6787] netlink: 'syz.0.243': attribute type 4 has an invalid length.
[   79.066412][ T6787] dvmrp1: left allmulticast mode
[   79.080786][    T9] tipc: Node number set to 2886997007
[   79.183716][ T6791] __nla_validate_parse: 23 callbacks suppressed
[   79.183835][ T6791] netlink: 104 bytes leftover after parsing attributes in process `syz.0.245'.
[   79.209112][ T6791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.245'.
[   79.212985][ T6791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.245'.
[   79.455233][ T6807] netlink: 'syz.1.251': attribute type 17 has an invalid length.
[   79.476160][ T6815] netlink: 132 bytes leftover after parsing attributes in process `syz.0.254'.
[   79.479740][ T6815] netlink: 132 bytes leftover after parsing attributes in process `syz.0.254'.
[   79.483971][ T6815] netlink: 132 bytes leftover after parsing attributes in process `syz.0.254'.
[   79.487725][ T6815] netlink: 132 bytes leftover after parsing attributes in process `syz.0.254'.
[   79.494020][ T6815] netlink: 132 bytes leftover after parsing attributes in process `syz.0.254'.
[   79.498457][ T6815] netlink: 132 bytes leftover after parsing attributes in process `syz.0.254'.
[   79.504251][ T6815] netlink: 132 bytes leftover after parsing attributes in process `syz.0.254'.
[   79.522891][ T6818] ip6gretap1: left promiscuous mode
[   79.604378][ T6835] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[   79.672987][ T6843] 8021q: adding VLAN 0 to HW filter on device bond2
[   80.089709][ T6880] openvswitch: netlink: Flow actions attr not present in new flow.
[   80.819987][ T5233] Bluetooth: hci2: command 0x0419 tx timeout
[   80.889569][ T6934] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   81.000475][ T6938] @: renamed from veth0_vlan
[   81.181393][ T6944] netlink: 'syz.1.289': attribute type 1 has an invalid length.
[   81.235376][ T6946] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[   81.388075][   T10] cfg80211: failed to load regulatory.db
[   81.477316][ T6953] netlink: 'syz.0.292': attribute type 10 has an invalid length.
[   81.484337][ T6953] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   82.806704][ T6995] netlink: 'syz.2.303': attribute type 99 has an invalid length.
[   82.911671][ T7021] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.916418][ T7021] syzkaller0: entered promiscuous mode
[   82.919367][ T7021] syzkaller0: entered allmulticast mode
[   82.928599][ T7021] tipc: Resetting bearer <eth:syzkaller0>
[   82.951445][ T7018] tipc: Resetting bearer <eth:syzkaller0>
[   82.955055][ T7018] tipc: Disabling bearer <eth:syzkaller0>
[   82.991489][ T7026] atomic_op ffff88803cc25198 conn xmit_atomic 0000000000000000
[   82.994139][ T7025] atomic_op ffff88803cc26998 conn xmit_atomic 0000000000000000
[   82.998395][ T7025] netlink: 'syz.0.312': attribute type 21 has an invalid length.
[   83.007672][ T7025] ipvlan2: entered promiscuous mode
[   83.010405][ T7025] bridge0: port 2(ipvlan2) entered blocking state
[   83.013042][ T7025] bridge0: port 2(ipvlan2) entered disabled state
[   83.016025][ T7025] ipvlan2: entered allmulticast mode
[   83.018473][ T7025] gretap0: entered allmulticast mode
[   83.022720][ T7025] ipvlan2: left allmulticast mode
[   83.024822][ T7025] gretap0: left allmulticast mode
[   83.037499][ T7026] ipvlan2: entered promiscuous mode
[   83.041826][ T7026] bridge0: port 2(ipvlan2) entered blocking state
[   83.044333][ T7026] bridge0: port 2(ipvlan2) entered disabled state
[   83.047310][ T7026] ipvlan2: entered allmulticast mode
[   83.051871][ T7026] gretap0: entered allmulticast mode
[   83.055058][ T7026] ipvlan2: left allmulticast mode
[   83.057564][ T7026] gretap0: left allmulticast mode
[   83.179897][ T7043] netlink: 'syz.2.319': attribute type 3 has an invalid length.
[   83.182558][ T7043] netlink: 'syz.2.319': attribute type 1 has an invalid length.
[   83.204265][ T7048] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   83.235135][ T7050] openvswitch: netlink: Message has 8 unknown bytes.
[   83.493880][ T7097] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   83.712303][ T7128] !: renamed from dummy0 (while UP)
[   83.781256][ T7111] Bluetooth: MGMT ver 1.23
[   83.848248][ T7146] netlink: 'syz.2.344': attribute type 21 has an invalid length.
[   83.909253][ T7160] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.147319][ T7181] netlink: 'syz.2.354': attribute type 10 has an invalid length.
[   84.166907][ T7181] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   84.174560][ T7181] netlink: 'syz.2.354': attribute type 10 has an invalid length.
[   84.180538][ T7189] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.184639][ T7181] netlink: 'syz.2.354': attribute type 10 has an invalid length.
[   84.202946][ T7189] tipc: Disabling bearer <eth:syzkaller0>
[   84.269368][ T7202] __nla_validate_parse: 35 callbacks suppressed
[   84.269377][ T7202] netlink: 20 bytes leftover after parsing attributes in process `syz.1.358'.
[   84.276996][ T7201] netlink: 20 bytes leftover after parsing attributes in process `syz.1.358'.
[   84.288566][ T7202] netlink: 244 bytes leftover after parsing attributes in process `syz.1.358'.
[   84.292565][ T7202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.358'.
[   84.295949][ T7204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.358'.
[   84.320312][ T7207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.359'.
[   84.323787][ T7207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.359'.
[   84.465937][ T7219] bridge0: entered promiscuous mode
[   84.471537][ T7219] vlan2: entered promiscuous mode
[   84.477587][ T7219] bridge0: port 2(vlan2) entered blocking state
[   84.482979][ T7219] bridge0: port 2(vlan2) entered disabled state
[   84.488725][ T7219] vlan2: entered allmulticast mode
[   84.493556][ T7219] bridge0: entered allmulticast mode
[   84.503397][ T7219] vlan2: left allmulticast mode
[   84.505612][ T7219] bridge0: left allmulticast mode
[   84.514022][ T7223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.363'.
[   84.517487][ T7223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.363'.
[   84.522314][ T7223] TC_ACT_REPEAT abuse ?
[   84.524149][ T7223] TC_ACT_REPEAT abuse ?
[   84.525740][ T7223] TC_ACT_REPEAT abuse ?
[   84.528260][ T7222] TC_ACT_REPEAT abuse ?
[   84.770666][ T7243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.367'.
[   84.815802][ T7248] bond0: (slave 0!): Enslaving as an active interface with an up link
[   85.010137][ T7262] !: entered promiscuous mode
[   85.012186][ T7262] vlan2: entered promiscuous mode
[   85.448532][ T7304] pim6reg: entered allmulticast mode
[   85.452867][ T7304] pim6reg: left allmulticast mode
[   85.518023][ T7314] net_ratelimit: 3 callbacks suppressed
[   85.518036][ T7314] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.525678][   T47] IPVS: starting estimator thread 0...
[   85.610394][ T7322] IPVS: using max 136 ests per chain, 326400 per kthread
[   85.639686][ T7336] Bluetooth: MGMT ver 1.23
[   85.684757][ T7344] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[   86.077212][ T7385] bond3: entered promiscuous mode
[   86.079521][ T7385] bond3: entered allmulticast mode
[   86.083146][ T7385] 8021q: adding VLAN 0 to HW filter on device bond3
[   86.116567][ T7394] openvswitch: netlink: Missing key (keys=40, expected=80)
[   86.120684][ T7394] openvswitch: netlink: Missing key (keys=40, expected=80)
[   86.124103][ T7394] openvswitch: netlink: Missing key (keys=40, expected=80)
[   86.316968][ T7415] syzkaller1: entered promiscuous mode
[   86.319417][ T7415] syzkaller1: entered allmulticast mode
[   86.428033][ T7432] ieee802154 phy0 wpan0: encryption failed: -22
[   86.762879][ T7462] batadv_slave_0: entered promiscuous mode
[   87.325130][ T7467] validate_nla: 36 callbacks suppressed
[   87.325145][ T7467] netlink: 'syz.0.432': attribute type 83 has an invalid length.
[   87.384308][ T7471] netlink: 'syz.2.434': attribute type 1 has an invalid length.
[   87.407677][ T7471] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   87.422549][ T7471] veth5: entered promiscuous mode
[   87.426602][ T7471] bond4: (slave veth5): Enslaving as a backup interface with a down link
[   87.464395][ T7475] sctp: [Deprecated]: syz.0.435 (pid 7475) Use of struct sctp_assoc_value in delayed_ack socket option.
[   87.464395][ T7475] Use struct sctp_sack_info instead
[   87.480264][ T7475] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[   87.515310][ T7479] IPVS: length: 209 != 24
[   87.625448][ T7504] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[   87.696519][ T7509] syzkaller1: entered promiscuous mode
[   87.698770][ T7509] syzkaller1: entered allmulticast mode
[   87.797916][ T7523] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[   87.893897][ T7537] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[   87.900955][ T7537] netlink: 'syz.1.450': attribute type 10 has an invalid length.
[   87.904384][ T7537] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[   87.908030][ T7537] bond0: (slave wlan1): Opening slave failed
[   87.915942][ T7537] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   87.923138][ T7537] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   88.371738][ T7550] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   88.376447][ T7550] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   88.433723][ T7555] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.436477][ T7555] veth1_to_hsr: entered allmulticast mode
[   88.442678][ T7555] tipc: Resetting bearer <eth:syzkaller0>
[   88.445813][ T7554] tipc: Disabling bearer <eth:syzkaller0>
[   88.549475][ T7566] netlink: 'syz.2.458': attribute type 21 has an invalid length.
[   88.680961][ T7575] netlink: 'syz.2.459': attribute type 4 has an invalid length.
[   88.696660][ T7575] netlink: 'syz.2.459': attribute type 4 has an invalid length.
[   88.829173][ T7587] netlink: 'syz.1.462': attribute type 83 has an invalid length.
[   89.134398][ T7606] openvswitch: netlink: Key type 29 is not supported
[   89.158100][ T7609] syzkaller0: entered promiscuous mode
[   89.160132][ T7609] syzkaller0: entered allmulticast mode
[   89.164684][ T7609] netdevsim0: mtu less than device minimum
[   89.318277][ T7611] netlink: 'syz.1.470': attribute type 9 has an invalid length.
[   89.321734][ T7611] __nla_validate_parse: 30 callbacks suppressed
[   89.321748][ T7611] netlink: 212260 bytes leftover after parsing attributes in process `syz.1.470'.
[   89.332589][ T7611] bridge1: entered allmulticast mode
[   89.590519][ T7637] netlink: 24 bytes leftover after parsing attributes in process `syz.1.477'.
[   89.669517][ T7645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.480'.
[   89.698455][ T7649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.481'.
[   89.872870][ T7659] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.876783][ T7658] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   89.880696][ T7659] syzkaller0: entered promiscuous mode
[   89.883672][ T7659] syzkaller0: entered allmulticast mode
[   89.889547][ T7658] tipc: Resetting bearer <eth:syzkaller0>
[   89.892769][ T7657] tipc: Resetting bearer <eth:syzkaller0>
[   89.895486][ T7657] tipc: Disabling bearer <eth:syzkaller0>
[   90.041274][ T7664] netlink: 60 bytes leftover after parsing attributes in process `syz.1.486'.
[   90.396752][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.488'.
[   90.402527][ T7672] netlink: 48 bytes leftover after parsing attributes in process `syz.2.488'.
[   90.423349][ T7674] netlink: 40 bytes leftover after parsing attributes in process `syz.2.489'.
[   90.444970][ T7676] netlink: 36 bytes leftover after parsing attributes in process `syz.2.490'.
[   90.451868][ T7676] netlink: 36 bytes leftover after parsing attributes in process `syz.2.490'.
[   90.904269][ T7690] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.908762][ T7690] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   90.914541][ T7690] tipc: Resetting bearer <eth:syzkaller0>
[   90.962781][ T7689] tipc: Disabling bearer <eth:syzkaller0>
[   91.055509][ T7700] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.069536][ T7700] tipc: Disabling bearer <eth:syzkaller0>
[   91.421614][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.425236][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.428618][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.434606][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.551724][ T7764] geneve2: entered promiscuous mode
[   91.636955][ T7773] pim6reg1: entered promiscuous mode
[   91.639639][ T7773] pim6reg1: entered allmulticast mode
[   91.728383][ T7778] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.735995][ T7778] syzkaller0: entered promiscuous mode
[   91.740250][ T7778] syzkaller0: entered allmulticast mode
[   91.757302][ T7778] tipc: Resetting bearer <eth:syzkaller0>
[   91.808141][ T7777] tipc: Resetting bearer <eth:syzkaller0>
[   91.816514][ T7777] tipc: Disabling bearer <eth:syzkaller0>
[   91.874899][ T7785] netlink: 'syz.2.522': attribute type 3 has an invalid length.
[   91.977094][ T7796] netlink: 'syz.2.526': attribute type 1 has an invalid length.
[   92.117106][ T7817] bridge4: entered allmulticast mode
[   92.179456][ T7833] bond1: entered promiscuous mode
[   92.183827][ T7833] 8021q: adding VLAN 0 to HW filter on device bond1
[   92.193664][ T7833] 8021q: adding VLAN 0 to HW filter on device bond1
[   92.196181][ T7833] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   92.200127][ T7833] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode
[   92.204967][ T7833] bond1: (slave vxcan3): making interface the new active one
[   92.207966][ T7833] vxcan3: entered promiscuous mode
[   92.210662][ T7833] bond1: (slave vxcan3): Enslaving as an active interface with an up link
[   92.348910][ T7870] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   92.770988][ T7909] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[   93.038728][ T7938] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[   93.042634][ T7938] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[   93.074539][ T7943] sch_tbf: burst 240 is lower than device lo mtu (11337746) !
[   93.112358][ T7948] validate_nla: 1 callbacks suppressed
[   93.112369][ T7948] netlink: 'syz.2.568': attribute type 13 has an invalid length.
[   93.268555][ T7958] IPVS: length: 209 != 24
[   94.023799][ T7994] netlink: 'syz.1.581': attribute type 4 has an invalid length.
[   94.128709][ T8001] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.132255][ T8001] syzkaller0: entered promiscuous mode
[   94.134595][ T8001] syzkaller0: entered allmulticast mode
[   94.195238][ T8004] tipc: Resetting bearer <eth:syzkaller0>
[   94.202885][ T8000] tipc: Resetting bearer <eth:syzkaller0>
[   94.209287][ T8000] tipc: Disabling bearer <eth:syzkaller0>
[   94.294761][ T8015] netlink: 'syz.0.587': attribute type 2 has an invalid length.
[   94.341949][ T8023] __nla_validate_parse: 58 callbacks suppressed
[   94.341961][ T8023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.589'.
[   94.348246][ T8023] netlink: 56 bytes leftover after parsing attributes in process `syz.0.589'.
[   94.358622][ T8023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.589'.
[   94.371352][ T8023] dummy0: left allmulticast mode
[   94.381336][ T8023] dummy0: left promiscuous mode
[   94.383455][ T8023] bridge0: port 1(dummy0) entered disabled state
[   94.580934][ T8048] syzkaller1: entered promiscuous mode
[   94.582826][ T8048] syzkaller1: entered allmulticast mode
[   94.606328][ T8055] netlink: 'syz.2.600': attribute type 1 has an invalid length.
[   94.651754][ T8055] 8021q: adding VLAN 0 to HW filter on device bond8
[   94.665768][ T8055] bond7: (slave bond8): making interface the new active one
[   94.671712][ T8055] bond7: (slave bond8): Enslaving as an active interface with an up link
[   94.770761][ T8079] syz_tun: entered allmulticast mode
[   94.782398][ T8079] dvmrp1: entered allmulticast mode
[   94.793098][ T8077] syz_tun: left allmulticast mode
[   94.976093][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.605'.
[   94.979079][ T8108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.605'.
[   94.983163][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.605'.
[   94.986263][ T8108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.605'.
[   95.020385][ T8118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.607'.
[   95.024076][ T8118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.607'.
[   95.205486][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.611'.
[   95.208792][ T8157] 8021q: VLANs not supported on ip6gre0
[   95.367249][ T8182] netlink: 'syz.0.613': attribute type 1 has an invalid length.
[   95.382246][ T8182] 8021q: adding VLAN 0 to HW filter on device bond2
[   95.396794][ T8182] bond2: (slave wlan0): Enslaving as an active interface with a down link
[   95.404218][ T8182] vlan2: entered allmulticast mode
[   95.405998][ T8182] veth1: entered allmulticast mode
[   95.488753][ T8193] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.497854][ T8193] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   95.702551][ T8223] netlink: 'syz.1.624': attribute type 7 has an invalid length.
[   95.705897][ T8223] netlink: 'syz.1.624': attribute type 8 has an invalid length.
[   95.718017][ T8223] siw: device registration error -23
[   95.718807][ T8224] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   95.725136][ T8224] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   95.928907][ T8240] tun0: tun_chr_ioctl cmd 1074025672
[   95.931521][ T8240] tun0: ignored: set checksum disabled
[   96.576509][ T8271] openvswitch: netlink: IP tunnel dst address not specified
[   96.651901][ T8276] netlink: 'syz.2.639': attribute type 2 has an invalid length.
[   96.656537][ T8276] : entered promiscuous mode
[   97.833049][ T8318] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   97.905413][ T8334] netlink: 'syz.1.654': attribute type 3 has an invalid length.
[   98.059700][ T8350] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.114303][ T8350] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.174002][ T8350] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.213201][ T8350] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.258606][ T5875] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.265225][ T5875] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.270786][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.276410][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.326061][ T8359] veth1_to_bond: entered allmulticast mode
[   98.333365][ T8359] veth1_to_bond (unregistering): left allmulticast mode
[   99.625871][ T8381] pimreg: tun_chr_ioctl cmd 2147767506
[   99.692037][ T8386] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.694830][ T8386] syzkaller0: entered promiscuous mode
[   99.696727][ T8386] syzkaller0: entered allmulticast mode
[   99.713519][ T8386] tipc: Resetting bearer <eth:syzkaller0>
[   99.716408][ T8385] tipc: Resetting bearer <eth:syzkaller0>
[   99.719328][ T8385] tipc: Disabling bearer <eth:syzkaller0>
[   99.786585][ T8388] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[   99.790115][ T8388] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[   99.811817][ T8390] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.815344][ T8390] syzkaller0: entered promiscuous mode
[   99.817696][ T8390] syzkaller0: entered allmulticast mode
[   99.824312][ T8390] tipc: Resetting bearer <eth:syzkaller0>
[   99.829658][ T8389] tipc: Resetting bearer <eth:syzkaller0>
[   99.835160][ T8389] tipc: Disabling bearer <eth:syzkaller0>
[  100.058600][ T8402] __nla_validate_parse: 28 callbacks suppressed
[  100.058612][ T8402] netlink: 144 bytes leftover after parsing attributes in process `syz.2.672'.
[  100.104315][ T8404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.673'.
[  100.112260][ T8404] netlink: 428 bytes leftover after parsing attributes in process `syz.1.673'.
[  100.116003][ T8404] netlink: 32 bytes leftover after parsing attributes in process `syz.1.673'.
[  100.287414][ T8412] netlink: 16 bytes leftover after parsing attributes in process `syz.1.676'.
[  100.407135][ T8421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.678'.
[  101.043298][ T8443] netlink: 'syz.2.684': attribute type 10 has an invalid length.
[  101.043301][ T8444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.684'.
[  101.083157][ T8443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.684'.
[  101.086143][ T8443] netlink: 68 bytes leftover after parsing attributes in process `syz.2.684'.
[  101.088986][ T8443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.684'.
[  102.224061][ T8496] lo speed is unknown, defaulting to 1000
[  102.226900][ T8496] lo speed is unknown, defaulting to 1000
[  102.230299][ T8496] lo speed is unknown, defaulting to 1000
[  102.237425][ T8496] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  102.252148][ T8496] lo speed is unknown, defaulting to 1000
[  102.256422][ T8496] lo speed is unknown, defaulting to 1000
[  102.259569][ T8496] lo speed is unknown, defaulting to 1000
[  102.271136][ T8495] geneve2: entered promiscuous mode
[  102.286664][ T8501] netlink: 'syz.1.699': attribute type 29 has an invalid length.
[  102.700199][ T8535] netlink: 'syz.1.710': attribute type 6 has an invalid length.
[  103.059221][ T8559] syzkaller1: entered allmulticast mode
[  103.346393][ T8566] netlink: 'syz.2.715': attribute type 16 has an invalid length.
[  104.161747][ T8598] netlink: 'syz.2.723': attribute type 1 has an invalid length.
[  104.164645][ T8598] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  104.221158][ T8617] bond0: (slave 0!): Releasing backup interface
[  104.243864][ T8617] bond0: (slave wlan1): Releasing backup interface
[  104.251693][ T8617] bond4: (slave ip6gretap1): Releasing backup interface
[  104.254375][ T8617] bond4: (slave ip6gretap1): the permanent HWaddr of slave - 26:6a:93:97:e6:5d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  104.263776][ T8617] bond4: (slave veth5): Releasing backup interface
[  104.268554][ T8617] bond7: (slave bond8): Releasing backup interface
[  104.341525][ T8630] lo speed is unknown, defaulting to 1000
[  104.372612][ T8630] pim6reg: entered allmulticast mode
[  104.382216][ T8630] pim6reg: left allmulticast mode
[  104.458448][ T8640] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.488077][ T8640] syzkaller0: entered promiscuous mode
[  104.495012][ T8640] syzkaller0: entered allmulticast mode
[  104.560377][ T8639] tipc: Resetting bearer <eth:syzkaller0>
[  104.574148][ T8639] tipc: Disabling bearer <eth:syzkaller0>
[  104.738927][ T8677] bpq0: entered promiscuous mode
[  104.840249][ T8684] net veth1_virt_wifi : renamed from virt_wifi0
[  105.179569][   T47] lo speed is unknown, defaulting to 1000
[  105.233183][ T8718] netlink: 'syz.1.756': attribute type 10 has an invalid length.
[  105.976067][ T8720] vlan0: entered promiscuous mode
[  106.034729][ T8726] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  106.052456][ T8728] netlink: 'syz.1.760': attribute type 29 has an invalid length.
[  106.056131][ T8728] netlink: 'syz.1.760': attribute type 29 has an invalid length.
[  106.059096][ T8728] netlink: 'syz.1.760': attribute type 29 has an invalid length.
[  106.063304][ T8728] netlink: 'syz.1.760': attribute type 29 has an invalid length.
[  106.066007][ T8728] netlink: 'syz.1.760': attribute type 29 has an invalid length.
[  106.068690][ T8728] netlink: 'syz.1.760': attribute type 29 has an invalid length.
[  106.072099][ T8728] netlink: 'syz.1.760': attribute type 29 has an invalid length.
[  106.075952][ T8728] netlink: 'syz.1.760': attribute type 29 has an invalid length.
[  106.078866][ T8728] netlink: 'syz.1.760': attribute type 29 has an invalid length.
[  106.081782][ T8728] netlink: 'syz.1.760': attribute type 29 has an invalid length.
[  107.124470][ T8747] __nla_validate_parse: 51 callbacks suppressed
[  107.124481][ T8747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.764'.
[  107.148376][ T8749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.765'.
[  107.174477][ T8749] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  107.207600][ T8754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.766'.
[  107.288548][ T8758] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  107.292855][ T8758] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  107.315961][ T8761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.769'.
[  107.320148][ T8761] netlink: 24 bytes leftover after parsing attributes in process `syz.1.769'.
[  107.399331][ T8765] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.402276][ T8765] syzkaller0: entered promiscuous mode
[  107.404202][ T8765] syzkaller0: entered allmulticast mode
[  107.411085][ T8765] tipc: Resetting bearer <eth:syzkaller0>
[  107.414473][ T8764] tipc: Resetting bearer <eth:syzkaller0>
[  107.419039][ T8764] tipc: Disabling bearer <eth:syzkaller0>
[  107.638236][ T8774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.775'.
[  107.643402][ T8774] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.775'.
[  107.754776][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.777'.
[  107.777398][ T8785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.777'.
[  107.812163][ T8791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.778'.
[  107.932419][ T8806] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.934828][ T8807] syzkaller0: entered promiscuous mode
[  107.937396][ T8807] syzkaller0: entered allmulticast mode
[  107.947355][ T8804] tipc: Resetting bearer <eth:syzkaller0>
[  107.951636][ T8804] tipc: Disabling bearer <eth:syzkaller0>
[  108.162126][ T8817] lo speed is unknown, defaulting to 1000
[  109.232156][ T8869] syzkaller1: entered promiscuous mode
[  109.234190][ T8869] syzkaller1: entered allmulticast mode
[  110.173309][ T8894] IPv6: Can't replace route, no match found
[  110.531549][ T8918] : entered promiscuous mode
[  110.533977][ T5859] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.537518][ T5859] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.545187][ T5859] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.557028][ T5859] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.689991][ T8939] syzkaller1: entered promiscuous mode
[  110.692009][ T8939] syzkaller1: entered allmulticast mode
[  110.716326][ T8943] bridge0: entered allmulticast mode
[  110.753163][ T8945] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.756376][ T8944] tipc: Resetting bearer <eth:syzkaller0>
[  110.778942][ T8944] tipc: Disabling bearer <eth:syzkaller0>
[  110.932012][ T8964] batadv_slave_1: entered promiscuous mode
[  110.972627][ T8966] Bluetooth: MGMT ver 1.23
[  111.083819][ T8980] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[  111.150558][ T8994] tun0: tun_chr_ioctl cmd 1074025673
[  111.152527][ T8995] tun0: tun_chr_ioctl cmd 1074025672
[  111.154285][ T8995] tun0: ignored: set checksum disabled
[  111.156212][ T8994] tun0: tun_chr_ioctl cmd 1074025672
[  111.157937][ T8994] tun0: ignored: set checksum disabled
[  111.181894][ T8991] lo speed is unknown, defaulting to 1000
[  111.232284][ T8999] smc: net device bond0 applied user defined pnetid SYZ2
[  111.973573][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  111.976918][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  111.980193][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  111.985216][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  111.989339][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  112.008656][ T9034] lo speed is unknown, defaulting to 1000
[  112.012989][ T9033] wireguard0: entered promiscuous mode
[  112.014978][ T9033] wireguard0: entered allmulticast mode
[  112.058610][ T9034] chnl_net:caif_netlink_parms(): no params data found
[  112.082114][ T9034] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.084726][ T9034] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.087109][ T9034] bridge_slave_0: entered allmulticast mode
[  112.089532][ T9034] bridge_slave_0: entered promiscuous mode
[  112.092840][ T9034] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.095296][ T9034] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.097729][ T9034] bridge_slave_1: entered allmulticast mode
[  112.100421][ T9034] bridge_slave_1: entered promiscuous mode
[  112.111343][ T9034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  112.116005][ T9034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  112.127936][ T9034] team0: Port device team_slave_0 added
[  112.130737][ T9034] team0: Port device team_slave_1 added
[  112.140263][ T9034] batman_adv: batadv0: Adding interface: batadv_slave_0
[  112.142660][ T9034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.151713][ T9034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  112.155898][ T9034] batman_adv: batadv0: Adding interface: batadv_slave_1
[  112.158193][ T9034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.166863][ T9034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  112.185059][ T9034] hsr_slave_0: entered promiscuous mode
[  112.187417][ T9034] hsr_slave_1: entered promiscuous mode
[  112.189618][ T9034] debugfs: 'hsr0' already exists in 'hsr'
[  112.191996][ T9034] Cannot create hsr debugfs directory
[  112.244188][ T9034] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  112.248170][ T9034] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  112.252686][ T9034] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  112.256483][ T9034] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  112.281292][ T9034] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.283984][ T9034] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.286590][ T9034] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.289172][ T9034] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.301666][ T9063] __nla_validate_parse: 23 callbacks suppressed
[  112.301676][ T9063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.845'.
[  112.312092][ T9063] 8021q: adding VLAN 0 to HW filter on device bond1
[  112.326385][ T9034] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.334057][   T32] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.336848][   T32] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.344202][ T9034] 8021q: adding VLAN 0 to HW filter on device team0
[  112.348759][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.351313][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.360796][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.363842][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.406627][ T9074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.849'.
[  112.438177][ T9034] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.449694][ T9082] validate_nla: 27 callbacks suppressed
[  112.449703][ T9082] netlink: 'syz.1.851': attribute type 10 has an invalid length.
[  112.456056][ T9034] veth0_vlan: entered promiscuous mode
[  112.468726][ T9034] veth1_vlan: entered promiscuous mode
[  112.479068][ T9034] veth0_macvtap: entered promiscuous mode
[  112.483925][ T9034] veth1_macvtap: entered promiscuous mode
[  112.487584][ T9086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.852'.
[  112.491874][ T9034] batman_adv: batadv0: Interface activated: batadv_slave_0
[  112.508492][ T9087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.852'.
[  112.509188][ T9034] batman_adv: batadv0: Interface activated: batadv_slave_1
[  112.521956][ T9087] 8021q: adding VLAN 0 to HW filter on device bond2
[  112.526652][ T5875] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  112.526895][ T9088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.852'.
[  112.535024][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  112.541919][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.545234][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.571236][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.574035][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.588044][ T3635] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.594394][ T3635] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.645075][ T9101] netlink: 'syz.3.855': attribute type 1 has an invalid length.
[  112.692499][ T9099] infiniband syz1: set down
[  112.694481][ T9099] infiniband syz1: added macvlan1
[  112.712764][ T9104] netlink: 'syz.3.856': attribute type 1 has an invalid length.
[  112.713718][ T9099] RDS/IB: syz1: added
[  112.716871][ T9099] smc: adding ib device syz1 with port count 1
[  112.718092][ T9104] netlink: 236 bytes leftover after parsing attributes in process `syz.3.856'.
[  112.719008][ T9099] smc:    ib device syz1 port 1 has pnetid SYZ2 (user defined)
[  112.762685][ T9107] netlink: 36 bytes leftover after parsing attributes in process `syz.3.857'.
[  112.765744][ T9107] netlink: 16 bytes leftover after parsing attributes in process `syz.3.857'.
[  112.768741][ T9107] netlink: 36 bytes leftover after parsing attributes in process `syz.3.857'.
[  112.772430][ T9107] netlink: 36 bytes leftover after parsing attributes in process `syz.3.857'.
[  112.822429][ T9111] syzkaller0: entered promiscuous mode
[  112.826929][ T9111] syzkaller0: entered allmulticast mode
[  112.875249][ T9115] bridge0: port 3(gretap1) entered blocking state
[  112.877714][ T9115] bridge0: port 3(gretap1) entered disabled state
[  112.880272][ T9115] gretap1: entered allmulticast mode
[  112.883596][ T9115] gretap1: entered promiscuous mode
[  113.012427][ T9125] tipc: Started in network mode
[  113.014449][ T9125] tipc: Node identity ae47f2a5d5ae, cluster identity 4711
[  113.016983][ T9125] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.020576][ T9125] syzkaller0: entered promiscuous mode
[  113.022472][ T9125] syzkaller0: entered allmulticast mode
[  113.025888][ T9125] tipc: Resetting bearer <eth:syzkaller0>
[  113.029169][ T9125] tipc: Disabling bearer <eth:syzkaller0>
[  113.038986][ T9126] netlink: 'syz.1.862': attribute type 2 has an invalid length.
[  113.046004][ T9126] : entered promiscuous mode
[  113.059627][ T9128] netlink: 'syz.2.865': attribute type 2 has an invalid length.
[  113.265762][ T9135] netlink: 'syz.1.867': attribute type 2 has an invalid length.
[  113.387944][ T9144] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.412603][ T9147] netlink: 'syz.1.871': attribute type 2 has an invalid length.
[  113.418037][ T9147] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  113.474725][ T9154] lo speed is unknown, defaulting to 1000
[  113.477825][ T9154] lo speed is unknown, defaulting to 1000
[  113.483921][ T9154] lo speed is unknown, defaulting to 1000
[  113.528867][ T9155] 8021q: adding VLAN 0 to HW filter on device team0
[  113.534231][ T9155] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  113.547501][ T9154] infiniband syz0: set active
[  113.549625][    T9] lo speed is unknown, defaulting to 1000
[  113.552469][ T9154] infiniband syz0: added lo
[  113.570307][ T9154] RDS/IB: syz0: added
[  113.574389][ T9154] smc: adding ib device syz0 with port count 1
[  113.577081][ T9154] smc:    ib device syz0 port 1 has pnetid 
[  113.580387][    T9] lo speed is unknown, defaulting to 1000
[  113.583714][ T9154] lo speed is unknown, defaulting to 1000
[  113.619653][ T9154] lo speed is unknown, defaulting to 1000
[  113.654326][ T9154] lo speed is unknown, defaulting to 1000
[  113.687855][ T9154] lo speed is unknown, defaulting to 1000
[  113.872826][ T9177] trusted_key: syz.1.878 sent an empty control message without MSG_MORE.
[  113.899308][ T9182] lo speed is unknown, defaulting to 1000
[  113.922522][ T9184] dvmrp1: left allmulticast mode
[  113.938763][ T9182] lo speed is unknown, defaulting to 1000
[  113.982466][ T9184] rdma_rxe: rxe_newlink: failed to add lo
[  113.995863][ T9184] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.998947][ T9184] 8021q: adding VLAN 0 to HW filter on device team0
[  114.004079][ T9184] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  114.020377][ T5849] Bluetooth: hci3: command tx timeout
[  114.118959][ T9198] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.123907][ T9198] syzkaller0: entered promiscuous mode
[  114.126367][ T9198] syzkaller0: entered allmulticast mode
[  114.134097][ T9198] tipc: Resetting bearer <eth:syzkaller0>
[  114.140249][ T9197] tipc: Resetting bearer <eth:syzkaller0>
[  114.146426][ T9197] tipc: Disabling bearer <eth:syzkaller0>
[  114.549234][ T9200] vlan0: entered allmulticast mode
[  114.551472][ T9200] bridge_slave_0: entered allmulticast mode
[  115.008491][ T9230] syzkaller1: entered promiscuous mode
[  115.012577][ T9230] syzkaller1: entered allmulticast mode
[  115.234857][ T9251] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  115.314931][ T9257] syz_tun: entered allmulticast mode
[  115.319082][ T9257] dvmrp1: entered allmulticast mode
[  115.332153][ T9256] syz_tun: left allmulticast mode
[  115.363453][ T9259] syzkaller0: entered promiscuous mode
[  115.365492][ T9259] syzkaller0: entered allmulticast mode
[  115.371971][ T9261] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  115.375390][ T9261] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  115.634136][ T9289] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.636742][ T9289] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.661525][ T9289] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.666237][ T9289] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.707386][   T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.717314][   T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.721806][   T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.725707][   T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.894731][ T9318] netlink: 'syz.1.920': attribute type 1 has an invalid length.
[  115.910577][ T9318] 8021q: adding VLAN 0 to HW filter on device bond4
[  115.913339][ T9318] bond3: (slave bond4): making interface the new active one
[  115.916014][ T9318] bond3: (slave bond4): Enslaving as an active interface with an up link
[  116.099919][ T5849] Bluetooth: hci3: command tx timeout
[  116.917943][ T9340] lo speed is unknown, defaulting to 1000
[  116.950325][ T9340] lo speed is unknown, defaulting to 1000
[  117.258795][ T9354] netlink: 'syz.1.929': attribute type 21 has an invalid length.
[  117.261719][ T9354] netlink: 'syz.1.929': attribute type 4 has an invalid length.
[  117.384576][ T9366] __nla_validate_parse: 36 callbacks suppressed
[  117.384590][ T9366] netlink: 36 bytes leftover after parsing attributes in process `syz.1.932'.
[  117.411505][ T9368] sit4: entered promiscuous mode
[  117.433051][ T9370] bridge0: port 1(erspan0) entered blocking state
[  117.435474][ T9370] bridge0: port 1(erspan0) entered disabled state
[  117.437675][ T9370] erspan0: entered allmulticast mode
[  117.440324][ T9370] erspan0: left allmulticast mode
[  117.526673][ T9380] veth7: entered promiscuous mode
[  117.533794][ T9381] veth9: entered promiscuous mode
[  117.587863][ T9389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.937'.
[  117.645829][ T9395] netlink: 204172 bytes leftover after parsing attributes in process `syz.1.941'.
[  117.649221][ T9395] openvswitch: netlink: Message has 5 unknown bytes.
[  117.674671][ T9397] netlink: 48 bytes leftover after parsing attributes in process `syz.1.942'.
[  117.743324][ T9399] bond3: (slave bond4): Releasing backup interface
[  117.747509][ T5310] lo speed is unknown, defaulting to 1000
[  117.757704][ T9399] validate_nla: 5 callbacks suppressed
[  117.757712][ T9399] netlink: 'syz.1.943': attribute type 10 has an invalid length.
[  117.793530][ T9399] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  117.797471][ T9399] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  117.845171][ T9420] netlink: 'syz.3.948': attribute type 1 has an invalid length.
[  117.848508][ T9420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.948'.
[  117.864862][ T9423] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.949'.
[  118.060711][ T9434] netlink: 16 bytes leftover after parsing attributes in process `syz.2.952'.
[  118.181944][ T5849] Bluetooth: hci3: command tx timeout
[  118.182665][ T9445] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.210970][ T9443] lo speed is unknown, defaulting to 1000
[  118.320195][ T9443] lo speed is unknown, defaulting to 1000
[  118.624286][ T9452] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.632338][ T9452] syzkaller0: entered promiscuous mode
[  118.640355][ T9452] syzkaller0: entered allmulticast mode
[  118.662538][ T9452] tipc: Resetting bearer <eth:syzkaller0>
[  118.812196][ T9451] tipc: Resetting bearer <eth:syzkaller0>
[  118.824442][ T9451] tipc: Disabling bearer <eth:syzkaller0>
[  118.853806][ T3635] tipc: Resetting bearer <eth:syzkaller0>
[  118.864300][ T9456] netlink: 228 bytes leftover after parsing attributes in process `syz.2.958'.
[  118.900476][ T9458] netlink: 56 bytes leftover after parsing attributes in process `syz.1.959'.
[  118.936492][ T9438] tipc: Resetting bearer <eth:syzkaller0>
[  119.021231][ T9438] tipc: Disabling bearer <eth:syzkaller0>
[  119.034639][ T5859] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  119.237917][ T9498] netlink: 'syz.1.968': attribute type 5 has an invalid length.
[  119.246461][ T9492] netlink: 52 bytes leftover after parsing attributes in process `syz.3.967'.
[  119.343406][ T5859] nci: nci_rx_work: unknown MT 0x1
[  120.263825][ T5849] Bluetooth: hci3: command tx timeout
[  120.270841][ T9552] hsr_slave_1 (unregistering): left promiscuous mode
[  120.279729][ T9551] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  120.290223][ T9551] CPU: 0 UID: 0 PID: 9551 Comm: syz.2.982 Not tainted syzkaller #0 PREEMPT(full) 
[  120.290236][ T9551] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  120.290241][ T9551] Call Trace:
[  120.290245][ T9551]  <TASK>
[  120.290249][ T9551]  dump_stack_lvl+0x189/0x250
[  120.290264][ T9551]  ? __pfx_dump_stack_lvl+0x10/0x10
[  120.290273][ T9551]  ? __pfx__printk+0x10/0x10
[  120.290283][ T9551]  ? kernfs_root+0x1c/0x230
[  120.290294][ T9551]  ? kernfs_path_from_node+0x2f/0x290
[  120.290302][ T9551]  ? kernfs_path_from_node+0x250/0x290
[  120.290309][ T9551]  ? kernfs_path_from_node+0x2f/0x290
[  120.290318][ T9551]  sysfs_warn_dup+0x8e/0xa0
[  120.290326][ T9551]  sysfs_do_create_link_sd+0xc0/0x110
[  120.290334][ T9551]  device_add_class_symlinks+0x1cf/0x240
[  120.290343][ T9551]  device_add+0x475/0xb50
[  120.290350][ T9551]  wiphy_register+0x1ba6/0x28d0
[  120.290364][ T9551]  ? __pfx_wiphy_register+0x10/0x10
[  120.290374][ T9551]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  120.290383][ T9551]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  120.290392][ T9551]  ieee80211_register_hw+0x3425/0x4080
[  120.290403][ T9551]  ? ieee80211_register_hw+0x1401/0x4080
[  120.290413][ T9551]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  120.290421][ T9551]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  120.290433][ T9551]  ? __hrtimer_setup+0x187/0x210
[  120.290439][ T9551]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  120.290450][ T9551]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  120.290463][ T9551]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  120.290471][ T9551]  ? trace_kmalloc+0x1f/0xd0
[  120.290480][ T9551]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  120.290489][ T9551]  ? kstrndup+0xbf/0x160
[  120.290498][ T9551]  hwsim_new_radio_nl+0xea4/0x1b10
[  120.290507][ T9551]  ? __pfx___nla_validate_parse+0x10/0x10
[  120.290520][ T9551]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  120.290530][ T9551]  ? __nla_parse+0x40/0x60
[  120.290542][ T9551]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  120.290552][ T9551]  genl_family_rcv_msg_doit+0x215/0x300
[  120.290561][ T9551]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  120.290571][ T9551]  ? bpf_lsm_capable+0x9/0x20
[  120.290580][ T9551]  ? security_capable+0x7e/0x2e0
[  120.290591][ T9551]  genl_rcv_msg+0x60e/0x790
[  120.290599][ T9551]  ? __pfx_genl_rcv_msg+0x10/0x10
[  120.290606][ T9551]  ? __kasan_slab_alloc+0x6c/0x80
[  120.290615][ T9551]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  120.290624][ T9551]  ? __netlink_lookup+0xbd/0x810
[  120.290629][ T9551]  ? rcu_is_watching+0x15/0xb0
[  120.290638][ T9551]  netlink_rcv_skb+0x208/0x470
[  120.290648][ T9551]  ? __pfx_genl_rcv_msg+0x10/0x10
[  120.290664][ T9551]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  120.290676][ T9551]  ? lock_release+0x4b/0x3e0
[  120.290687][ T9551]  ? down_read+0x1ad/0x2e0
[  120.290694][ T9551]  genl_rcv+0x28/0x40
[  120.290702][ T9551]  netlink_unicast+0x82f/0x9e0
[  120.290712][ T9551]  ? __pfx_netlink_unicast+0x10/0x10
[  120.290722][ T9551]  ? netlink_sendmsg+0x642/0xb30
[  120.290732][ T9551]  ? skb_put+0x11b/0x210
[  120.290770][ T9551]  netlink_sendmsg+0x805/0xb30
[  120.290782][ T9551]  ? __pfx_netlink_sendmsg+0x10/0x10
[  120.290793][ T9551]  ? futex_unqueue+0x22/0x240
[  120.290802][ T9551]  ? aa_sock_msg_perm+0xf1/0x1d0
[  120.290808][ T9551]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  120.290817][ T9551]  ? __pfx_netlink_sendmsg+0x10/0x10
[  120.290828][ T9551]  __sock_sendmsg+0x21c/0x270
[  120.290838][ T9551]  ____sys_sendmsg+0x505/0x830
[  120.290847][ T9551]  ? __pfx_____sys_sendmsg+0x10/0x10
[  120.290855][ T9551]  ? import_iovec+0x74/0xa0
[  120.290865][ T9551]  ___sys_sendmsg+0x21f/0x2a0
[  120.290873][ T9551]  ? __pfx____sys_sendmsg+0x10/0x10
[  120.290882][ T9551]  ? futex_wait+0x285/0x360
[  120.290896][ T9551]  ? __fget_files+0x2a/0x420
[  120.290901][ T9551]  ? __fget_files+0x3a0/0x420
[  120.290909][ T9551]  __x64_sys_sendmsg+0x19b/0x260
[  120.290916][ T9551]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  120.290926][ T9551]  ? rcu_is_watching+0x15/0xb0
[  120.290932][ T9551]  do_syscall_64+0xfa/0x3b0
[  120.290939][ T9551]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.290946][ T9551]  ? exc_page_fault+0x9f/0xf0
[  120.290955][ T9551]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.290962][ T9551] RIP: 0033:0x7f26afb8ebe9
[  120.290969][ T9551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  120.290976][ T9551] RSP: 002b:00007f26b0a2d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  120.290984][ T9551] RAX: ffffffffffffffda RBX: 00007f26afdb5fa0 RCX: 00007f26afb8ebe9
[  120.290990][ T9551] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000a
[  120.290995][ T9551] RBP: 00007f26afc11e19 R08: 0000000000000000 R09: 0000000000000000
[  120.290999][ T9551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  120.291003][ T9551] R13: 00007f26afdb6038 R14: 00007f26afdb5fa0 R15: 00007fffb3c81448
[  120.291010][ T9551]  </TASK>
[  120.294353][ T9551] IPVS: length: 209 != 24
[  120.388878][ T9556] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  120.480413][ T9557] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  120.765280][ T9589] netlink: 'syz.1.990': attribute type 2 has an invalid length.
[  120.773942][ T9589] k*]: entered promiscuous mode
[  120.779489][ T9588] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  121.028634][ T9612] netlink: 'syz.1.996': attribute type 1 has an invalid length.
[  121.033278][ T9612] netlink: 'syz.1.996': attribute type 2 has an invalid length.
[  121.063645][ T9614] netlink: 'syz.1.997': attribute type 1 has an invalid length.
[  121.078562][ T9614] 8021q: adding VLAN 0 to HW filter on device bond6
[  121.094354][ T9614] bond6: (slave ip6gretap2): making interface the new active one
[  121.099532][ T9614] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link
[  121.118252][ T9614] veth11: entered promiscuous mode
[  121.122256][ T9614] bond6: (slave veth11): Enslaving as an active interface with a down link
[  121.128202][ T9614] erspan0: entered allmulticast mode
[  121.134960][ T9617] netlink: 'syz.2.998': attribute type 3 has an invalid length.
[  121.424476][ T9658] IPv6: Can't replace route, no match found
[  121.564122][ T9665] macsec0: entered allmulticast mode
[  121.668552][ T9689] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  121.672422][ T9690] syzkaller0: entered promiscuous mode
[  121.674477][ T9690] syzkaller0: entered allmulticast mode
[  121.680130][ T9689] gtp0: entered promiscuous mode
[  121.685098][ T9692] tipc: Resetting bearer <eth:syzkaller0>
[  121.691365][ T9688] tipc: Resetting bearer <eth:syzkaller0>
[  121.693956][ T9688] tipc: Disabling bearer <eth:syzkaller0>
[  121.725771][ T9693] netlink: 'syz.1.1017': attribute type 6 has an invalid length.
[  121.824765][ T9696] IPVS: length: 209 != 24
[  122.296665][ T9700] : renamed from vlan1
[  122.478122][ T9709] siw: device registration error -23
[  122.481434][ T9709] siw: device registration error -23
[  122.550255][ T9717] __nla_validate_parse: 16 callbacks suppressed
[  122.550269][ T9717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1025'.
[  122.560341][ T9717] hsr_slave_1 (unregistering): left promiscuous mode
[  122.753513][ T9737] netlink: 'syz.2.1030': attribute type 10 has an invalid length.
[  122.761703][ T9737] 8021q: adding VLAN 0 to HW filter on device team0
[  122.765800][ T9737] bond0: (slave team0): Enslaving as an active interface with an up link
[  123.133742][ T9764] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  123.196187][ T9779] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1040'.
[  123.474237][ T9796] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.481644][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1045'.
[  123.489757][ T9796] siw: device registration error -23
[  124.050518][ T9800] netlink: 'syz.3.1046': attribute type 142 has an invalid length.
[  124.068302][ T9804] netlink: 'syz.3.1047': attribute type 1 has an invalid length.
[  124.072171][ T9804] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1047'.
[  124.075926][ T9804] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1047'.
[  124.243927][ T9822] bridge2: entered promiscuous mode
[  124.341687][ T9835] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1057'.
[  124.399986][ T9842] netlink: 'syz.3.1057': attribute type 2 has an invalid length.
[  124.404867][ T9842] k*]: entered promiscuous mode
[  124.419487][ T9842] 8021q: adding VLAN 0 to HW filter on device bond0
[  124.423510][ T9842] 8021q: adding VLAN 0 to HW filter on device team0
[  124.427104][ T9842] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  124.572438][ T9844] netlink: 'syz.2.1060': attribute type 6 has an invalid length.
[  124.609478][ T9847] veth13: entered promiscuous mode
[  124.680049][ T9851] tipc: Can't bind to reserved service type 2
[  124.743413][ T9855] netlink: 'syz.2.1064': attribute type 10 has an invalid length.
[  124.917587][ T9868] netlink: 'syz.2.1068': attribute type 19 has an invalid length.
[  124.920311][ T9868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1068'.
[  125.007492][ T9883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1072'.
[  125.014751][ T9883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1072'.
[  125.023435][ T9883] lo speed is unknown, defaulting to 1000
[  125.056422][ T9883] lo speed is unknown, defaulting to 1000
[  125.110326][ T9887] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1073'.
[  125.926018][ T9886] Set syz1 is full, maxelem 65536 reached
[  125.939344][ T9922] netlink: 'syz.1.1080': attribute type 4 has an invalid length.
[  125.946235][ T5310] lo speed is unknown, defaulting to 1000
[  125.948656][ T5310] syz0: Port: 1 Link DOWN
[  125.955021][ T5310] lo speed is unknown, defaulting to 1000
[  125.957182][ T9922] netlink: 'syz.1.1080': attribute type 4 has an invalid length.
[  125.966652][   T47] lo speed is unknown, defaulting to 1000
[  125.969163][   T47] syz0: Port: 1 Link ACTIVE
[  125.975847][   T47] lo speed is unknown, defaulting to 1000
[  126.026945][ T9922] bridge0: port 1(erspan0) entered blocking state
[  126.029472][ T9922] bridge0: port 1(erspan0) entered disabled state
[  126.097154][ T9940] netlink: 'syz.2.1084': attribute type 2 has an invalid length.
[  126.103641][ T9940] : entered promiscuous mode
[  126.170823][ T9948] netlink: 'syz.1.1086': attribute type 1 has an invalid length.
[  126.173985][ T9948] nbd: device at index 1 is going down
[  126.389021][ T9989] bond0: (slave team0): Releasing backup interface
[  126.398381][ T9991] pim6reg1: entered promiscuous mode
[  126.402445][ T9991] pim6reg1: entered allmulticast mode
[  126.494544][T10012] dvmrp1: left allmulticast mode
[  126.547926][T10014] batadv0: entered promiscuous mode
[  126.550340][T10014] batadv0: entered allmulticast mode
[  126.550462][T10015] rdma_rxe: rxe_newlink: failed to add lo
[  126.562212][T10015] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  126.881458][T10049] ipvlan3: entered promiscuous mode
[  126.884715][T10049] bridge0: port 1(ipvlan3) entered blocking state
[  126.887635][T10049] bridge0: port 1(ipvlan3) entered disabled state
[  126.891180][T10049] ipvlan3: entered allmulticast mode
[  126.893693][T10049] gretap0: entered allmulticast mode
[  126.896978][T10049] ipvlan3: left allmulticast mode
[  126.899311][T10049] gretap0: left allmulticast mode
[  127.572000][T10064] __nla_validate_parse: 23 callbacks suppressed
[  127.572015][T10064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1118'.
[  127.592149][T10064] bridge3: port 1(veth3) entered blocking state
[  127.594779][T10064] bridge3: port 1(veth3) entered disabled state
[  127.597137][T10064] veth3: entered allmulticast mode
[  127.599458][T10064] veth3: entered promiscuous mode
[  127.605715][T10064] bridge3: port 2(veth0_to_bond) entered blocking state
[  127.608188][T10064] bridge3: port 2(veth0_to_bond) entered disabled state
[  127.611131][T10064] veth0_to_bond: entered allmulticast mode
[  127.613834][T10064] veth0_to_bond: entered promiscuous mode
[  127.619064][T10064] vlan2: entered allmulticast mode
[  127.621249][T10064] veth0_to_hsr: entered allmulticast mode
[  127.623447][T10064] bridge3: port 3(vlan2) entered blocking state
[  127.625745][T10064] bridge3: port 3(vlan2) entered disabled state
[  127.628518][T10064] vlan2: entered promiscuous mode
[  127.630543][T10064] veth0_to_hsr: entered promiscuous mode
[  127.753056][T10083] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1124'.
[  127.757525][T10083] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1124'.
[  127.783094][T10090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1126'.
[  127.786565][T10090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1126'.
[  127.888451][T10106] ieee802154 phy0 wpan0: encryption failed: -22
[  127.935370][T10111] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1132'.
[  127.956935][T10112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1133'.
[  127.973554][T10111] 8021q: adding VLAN 0 to HW filter on device bond0
[  127.980294][T10111] bond0: (slave rose0): Enslaving as an active interface with an up link
[  127.984614][T10111] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  127.987754][T10111] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  128.091624][T10143] bond0: Error: Cannot enslave bond to itself.
[  128.102855][T10143] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1139'.
[  128.106429][T10143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1139'.
[  128.254165][T10158] wireguard2: entered promiscuous mode
[  128.258300][T10158] wireguard2: entered allmulticast mode
[  128.960635][T10183] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1146'.
[  129.028473][T10191] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  129.031537][T10191] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  129.054065][T10196] Bluetooth: hci1: Opcode 0x080f failed: -4
[  130.021764][T10224] Bluetooth: MGMT ver 1.23
[  130.181391][T10233] bridge_slave_0: left allmulticast mode
[  130.184071][T10233] bridge_slave_0: left promiscuous mode
[  130.186792][T10233] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.192425][T10233] bridge_slave_1: left allmulticast mode
[  130.194510][T10233] bridge_slave_1: left promiscuous mode
[  130.196628][T10233] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.199992][T10233] veth0_to_bond: left allmulticast mode
[  130.201966][T10233] veth0_to_bond: left promiscuous mode
[  130.204241][T10233] bridge3: port 2(veth0_to_bond) entered disabled state
[  130.208002][T10233] bond0: (slave bond_slave_0): Releasing backup interface
[  130.211719][T10233] bond0: (slave bond_slave_1): Releasing backup interface
[  130.215510][T10233] team0: Port device team_slave_0 removed
[  130.218205][T10233] team0: Port device team_slave_1 removed
[  130.221669][T10233] batman_adv: batadv0: Removing interface: batadv_slave_0
[  130.225193][T10233] batman_adv: batadv0: Removing interface: batadv_slave_1
[  130.228386][T10233] gretap1: left allmulticast mode
[  130.231958][T10233] gretap1: left promiscuous mode
[  130.234536][T10233] bridge0: port 3(gretap1) entered disabled state
[  130.240122][T10233] veth3: left allmulticast mode
[  130.242067][T10233] veth3: left promiscuous mode
[  130.244089][T10233] bridge3: port 1(veth3) entered disabled state
[  130.248400][T10233] vlan2: left promiscuous mode
[  130.251297][T10233] veth0_to_hsr: left promiscuous mode
[  130.253792][T10233] bridge3: port 3(vlan2) entered disabled state
[  130.292348][T10238] syzkaller1: entered promiscuous mode
[  130.294990][T10238] syzkaller1: entered allmulticast mode
[  130.417590][T10240] bridge4: port 1(veth5) entered blocking state
[  130.420603][T10240] bridge4: port 1(veth5) entered disabled state
[  130.423451][T10240] veth5: entered allmulticast mode
[  130.426251][T10240] veth5: entered promiscuous mode
[  130.473710][T10247] validate_nla: 10 callbacks suppressed
[  130.473722][T10247] netlink: 'syz.3.1166': attribute type 1 has an invalid length.
[  130.721472][T10254] tipc: New replicast peer: 255.255.255.255
[  130.724386][T10254] tipc: Enabled bearer <udp:syz2>, priority 10
[  130.931618][T10272] lo speed is unknown, defaulting to 1000
[  130.969197][T10272] lo speed is unknown, defaulting to 1000
[  130.978872][T10280] geneve2: entered promiscuous mode
[  130.981112][T10280] geneve2: entered allmulticast mode
[  131.060065][ T5849] Bluetooth: hci1: command 0x080f tx timeout
[  131.103754][T10288] netlink: 'syz.1.1178': attribute type 1 has an invalid length.
[  131.116301][T10289] bond8: (slave ip6gretap3): Enslaving as a backup interface with an up link
[  131.124849][T10289] bond8 (unregistering): (slave ip6gretap3): Releasing backup interface
[  131.130069][T10289] bond8 (unregistering): Released all slaves
[  131.153316][T10293] openvswitch: netlink: Message has 1 unknown bytes.
[  131.155555][T10293] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.243173][T10301] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  131.381712][T10311] lo speed is unknown, defaulting to 1000
[  131.418543][T10311] lo speed is unknown, defaulting to 1000
[  131.761267][T10364] netlink: 'syz.3.1192': attribute type 11 has an invalid length.
[  131.840069][ T5915] tipc: Node number set to 2078929573
[  131.846006][T10380] netlink: 'syz.3.1196': attribute type 12 has an invalid length.
[  131.857726][T10382] pim6reg: entered allmulticast mode
[  131.867997][T10380] lo speed is unknown, defaulting to 1000
[  131.870461][T10382] pim6reg: left allmulticast mode
[  131.906533][T10387] netlink: 'syz.3.1196': attribute type 21 has an invalid length.
[  131.908770][T10380] lo speed is unknown, defaulting to 1000
[  132.142230][T10401] netlink: 'syz.2.1199': attribute type 1 has an invalid length.
[  132.147979][T10401] netlink: 'syz.2.1199': attribute type 10 has an invalid length.
[  132.159426][T10401] netlink: 'syz.2.1199': attribute type 10 has an invalid length.
[  132.169610][T10401] bond0: (slave 0!): Enslaving as an active interface with an up link
[  132.212264][T10406] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.214693][T10406] syzkaller0: entered promiscuous mode
[  132.216485][T10406] syzkaller0: entered allmulticast mode
[  132.245160][T10405] tipc: Resetting bearer <eth:syzkaller0>
[  132.250758][T10405] tipc: Disabling bearer <eth:syzkaller0>
[  132.424716][T10422] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20002
[  132.581131][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.584565][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.859744][T10438] macsec0: left allmulticast mode
[  132.864414][T10438] gtp0: left promiscuous mode
[  132.879211][T10438] bridge2: left promiscuous mode
[  132.889023][T10438] vlan2: left allmulticast mode
[  132.894604][T10438] veth0_to_hsr: left allmulticast mode
[  133.245415][T10470] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  133.325764][T10474] netlink: 'syz.3.1217': attribute type 11 has an invalid length.
[  133.395344][T10475] netlink: 'syz.1.1222': attribute type 6 has an invalid length.
[  133.473022][T10478] __nla_validate_parse: 18 callbacks suppressed
[  133.473039][T10478] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1223'.
[  133.506792][T10481] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1224'.
[  133.620495][T10481] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1224'.
[  133.962653][T10517] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1234'.
[  133.973559][T10517] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1234'.
[  134.052409][T10522] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1235'.
[  134.056541][T10522] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  134.120417][T10530] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1239'.
[  134.123841][T10530] netlink: 'syz.2.1239': attribute type 83 has an invalid length.
[  134.201850][T10541] lo speed is unknown, defaulting to 1000
[  134.242778][T10542] netlink: 'syz.2.1242': attribute type 13 has an invalid length.
[  134.284856][T10547] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  134.293168][T10542] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  134.309455][T10541] lo speed is unknown, defaulting to 1000
[  134.689182][T10560] tipc: New replicast peer: 255.255.255.255
[  134.691822][T10560] tipc: Enabled bearer <udp:syz2>, priority 10
[  134.698173][T10554] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1245'.
[  134.703322][T10554] mac80211_hwsim hwsim17 wlan0: entered allmulticast mode
[  134.811271][T10576] bond0: (slave 0!): Releasing backup interface
[  134.834213][T10579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1251'.
[  134.841705][T10579] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1251'.
[  134.968642][T10591] erspan0: left allmulticast mode
[  134.987384][T10591] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  135.018301][T10593] svc: failed to register nfsdv3 RPC service (errno 111).
[  135.021419][T10593] svc: failed to register nfsaclv3 RPC service (errno 111).
[  135.280673][T10619] lo speed is unknown, defaulting to 1000
[  135.325492][T10636] IPv6: Can't replace route, no match found
[  135.332031][T10619] lo speed is unknown, defaulting to 1000
[  135.383405][T10622] rdma_rxe: rxe_newlink: failed to add lo
[  135.394114][T10639] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  135.427956][T10618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  135.453679][T10648] lo speed is unknown, defaulting to 1000
[  135.494130][T10648] lo speed is unknown, defaulting to 1000
[  135.498806][T10650] sctp: [Deprecated]: syz.2.1269 (pid 10650) Use of int in max_burst socket option deprecated.
[  135.498806][T10650] Use struct sctp_assoc_value instead
[  135.556840][T10653] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20002
[  135.937842][T10619] syz.1.1260 (10619) used greatest stack depth: 18672 bytes left
[  136.379378][T10673] validate_nla: 6 callbacks suppressed
[  136.379393][T10673] netlink: 'syz.3.1276': attribute type 1 has an invalid length.
[  136.413824][T10680] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  136.417264][T10680] macvtap0: entered promiscuous mode
[  136.524859][T10689] tap0: tun_chr_ioctl cmd 1074025680
[  136.528118][T10689] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  136.535454][T10689] D: renamed from syzkaller0
[  136.537709][T10689] tipc: Disabling bearer <eth:syzkaller0>
[  136.681792][T10692] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  136.696764][T10691] tipc: Disabling bearer <eth:syzkaller0>
[  137.062300][T10714] lo speed is unknown, defaulting to 1000
[  137.119644][T10714] lo speed is unknown, defaulting to 1000
[  137.427791][T10736] geneve2: entered promiscuous mode
[  137.434537][ T9294] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  137.441948][ T9294] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  137.444770][ T9294] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  137.449570][ T9294] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  137.554349][T10748] netlink: 'syz.2.1298': attribute type 32 has an invalid length.
[  137.557826][T10748] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192)
[  137.563834][T10748] nbd: must specify at least one socket
[  137.958114][T10759] pim6reg: entered allmulticast mode
[  138.076633][T10773] netem: change failed
[  138.100035][ T5233] Bluetooth: hci3: command 0x0405 tx timeout
[  138.153065][T10780] netlink: 'syz.1.1306': attribute type 1 has an invalid length.
[  138.156513][T10780] netlink: 'syz.1.1306': attribute type 2 has an invalid length.
[  138.163427][T10780] netlink: 'syz.1.1306': attribute type 1 has an invalid length.
[  138.167778][T10780] netlink: 'syz.1.1306': attribute type 2 has an invalid length.
[  138.233815][T10787] 8021q: adding VLAN 0 to HW filter on device bond2
[  138.237082][T10789] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  138.241692][T10787] veth5: left allmulticast mode
[  138.244033][T10787] veth5: left promiscuous mode
[  138.246482][T10787] bridge4: port 1(veth5) entered disabled state
[  138.326002][T10801] netlink: 'syz.1.1311': attribute type 1 has an invalid length.
[  138.355658][T10804] : entered promiscuous mode
[  138.370125][T10808] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  138.373961][T10808] netlink: 'syz.1.1313': attribute type 1 has an invalid length.
[  138.453016][T10813] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.469616][T10818] netlink: 'syz.1.1316': attribute type 25 has an invalid length.
[  138.503215][T10813] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.522005][T10816] 8021q: adding VLAN 0 to HW filter on device bond0
[  138.524791][T10816] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  138.552338][T10825] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.556119][T10825] syzkaller0: entered promiscuous mode
[  138.557932][T10825] syzkaller0: entered allmulticast mode
[  138.572871][T10825] tipc: Resetting bearer <eth:syzkaller0>
[  138.578447][T10824] tipc: Resetting bearer <eth:syzkaller0>
[  138.587691][T10824] tipc: Disabling bearer <eth:syzkaller0>
[  138.603098][T10813] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.724221][T10813] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.767539][T10837] vlan2: entered allmulticast mode
[  138.770072][T10837] bond0: entered allmulticast mode
[  138.773394][T10836] __nla_validate_parse: 31 callbacks suppressed
[  138.773405][T10836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1323'.
[  138.858366][T10852] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1328'.
[  138.898221][T10855] netlink: 'syz.2.1329': attribute type 8 has an invalid length.
[  138.986774][T10865] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.048711][T10868] lo speed is unknown, defaulting to 1000
[  139.068135][T10872] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.068178][T10865] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.122515][   T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  139.157592][ T5875] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  139.161474][ T5875] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  139.165251][T10868] lo speed is unknown, defaulting to 1000
[  139.180818][ T5875] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  139.228765][T10865] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.295771][T10865] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.328866][T10888] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1337'.
[  139.390582][ T5859] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  139.404962][ T5875] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  139.416616][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1339'.
[  139.417829][ T5875] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  139.428908][ T5875] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  139.554037][ T5849] Bluetooth: hci2: command 0x0419 tx timeout
[  139.652709][T10908] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.1343'.
[  139.845795][T10936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1350'.
[  139.886621][T10931] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  139.896983][T10931] syzkaller0: entered promiscuous mode
[  139.902644][T10931] syzkaller0: entered allmulticast mode
[  139.923254][T10931] tipc: Resetting bearer <eth:syzkaller0>
[  139.944154][T10930] tipc: Resetting bearer <eth:syzkaller0>
[  139.948199][T10930] tipc: Disabling bearer <eth:syzkaller0>
[  140.009724][T10945] tun0: tun_chr_ioctl cmd 2148045848
[  140.014660][T10945] tun0: tun_chr_ioctl cmd 21731
[  140.161621][T10951] 8021q: adding VLAN 0 to HW filter on device bond4
[  140.165609][T10951] bond3: (slave bond4): making interface the new active one
[  140.169030][T10951] bond3: (slave bond4): Enslaving as an active interface with an up link
[  140.178952][T10952] 8021q: adding VLAN 0 to HW filter on device bond5
[  140.184491][T10952] bond3: (slave bond5): Enslaving as a backup interface with an up link
[  141.491769][T10969] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  141.495622][T10969] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1360'.
[  141.499075][T10969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1360'.
[  141.530005][T10972] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1361'.
[  141.584120][   T33] audit: type=1107 audit(1756160728.853:2): pid=10975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  141.635835][T10979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1364'.
[  141.643425][T10979] macvtap1: entered promiscuous mode
[  141.806737][T10985] validate_nla: 2 callbacks suppressed
[  141.806745][T10985] netlink: 'syz.2.1366': attribute type 2 has an invalid length.
[  141.813508][T10985] k*]: entered promiscuous mode
[  141.818396][T10985] veth0_to_team: entered promiscuous mode
[  141.821593][T10985] veth0_to_team: entered allmulticast mode
[  142.710251][T11010] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  142.713172][T11010] syzkaller0: entered promiscuous mode
[  142.715116][T11010] syzkaller0: entered allmulticast mode
[  142.721653][T11010] tipc: Resetting bearer <eth:syzkaller0>
[  142.724711][T11009] tipc: Resetting bearer <eth:syzkaller0>
[  142.728941][T11009] tipc: Disabling bearer <eth:syzkaller0>
[  142.958626][T11027] netlink: 'syz.2.1378': attribute type 1 has an invalid length.
[  143.284471][T11059] sctp: [Deprecated]: syz.3.1385 (pid 11059) Use of int in maxseg socket option.
[  143.284471][T11059] Use struct sctp_assoc_value instead
[  143.326972][T11061] netlink: 'syz.3.1386': attribute type 1 has an invalid length.
[  143.445354][T11064] netlink: 'syz.3.1387': attribute type 25 has an invalid length.
[  143.489289][T11069] netlink: 'syz.3.1389': attribute type 8 has an invalid length.
[  143.598408][T11080] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  143.638713][T11080] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  143.704042][T11087] netlink: 'syz.3.1395': attribute type 25 has an invalid length.
[  143.792683][T11095] __nla_validate_parse: 8 callbacks suppressed
[  143.792700][T11095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1398'.
[  143.799685][T11095] sctp: [Deprecated]: syz.3.1398 (pid 11095) Use of struct sctp_assoc_value in delayed_ack socket option.
[  143.799685][T11095] Use struct sctp_sack_info instead
[  143.808196][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1398'.
[  143.812132][T11095] netlink: 'syz.3.1398': attribute type 5 has an invalid length.
[  143.815281][T11095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1398'.
[  143.904480][T11097] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  144.018101][T11107] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1401'.
[  144.167169][T11113] netlink: 'syz.1.1403': attribute type 14 has an invalid length.
[  144.190687][T11113] netlink: 'syz.1.1403': attribute type 14 has an invalid length.
[  144.260434][ T5884] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  144.403392][T11124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1406'.
[  144.406478][T11124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1406'.
[  144.625602][T11128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1408'.
[  144.630947][T11128] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  144.721497][T11133] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  144.918167][T11149] netlink: 'syz.3.1413': attribute type 1 has an invalid length.
[  144.921682][T11149] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1413'.
[  145.139999][ T5884] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  145.636150][T11172] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1422'.
[  145.639131][T11172] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1422'.
[  145.771513][T11157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  146.482105][T11186] ip6tnl4: entered promiscuous mode
[  146.484610][T11186] ip6tnl4: entered allmulticast mode
[  146.487574][T11186] team0: Device ip6tnl4 is up. Set it down before adding it as a team port
[  146.683011][T11191] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  146.687194][T11196] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  146.825804][T11211] validate_nla: 2 callbacks suppressed
[  146.825815][T11211] netlink: 'syz.3.1433': attribute type 13 has an invalid length.
[  146.831379][T11211] netlink: 'syz.3.1433': attribute type 17 has an invalid length.
[  146.853542][T11211] 8021q: adding VLAN 0 to HW filter on device team0
[  146.859378][T11211] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  146.879581][T11208] lo speed is unknown, defaulting to 1000
[  146.912071][T11208] lo speed is unknown, defaulting to 1000
[  147.223353][T11221] macvlan3: entered allmulticast mode
[  147.227515][T11221] veth1_vlan: entered allmulticast mode
[  147.238326][T11221] bond0: (slave macvlan3): Enslaving as an active interface with an up link
[  147.262020][T11220] macvlan4: entered allmulticast mode
[  147.264062][T11220] bond0: (slave macvlan4): Error -98 calling set_mac_address
[  147.299910][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  147.311104][T11225] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.313638][T11226] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  147.317578][T11226] syzkaller0: entered promiscuous mode
[  147.319437][T11226] syzkaller0: entered allmulticast mode
[  147.323683][T11225] tipc: Resetting bearer <eth:syzkaller0>
[  147.326422][T11224] tipc: Resetting bearer <eth:syzkaller0>
[  147.329458][T11224] tipc: Disabling bearer <eth:syzkaller0>
[  147.678600][T11236] netlink: 'syz.1.1440': attribute type 1 has an invalid length.
[  147.683538][T11236] netlink: 'syz.1.1440': attribute type 1 has an invalid length.
[  147.821420][T11242] netlink: 'syz.1.1443': attribute type 20 has an invalid length.
[  147.824788][T11242] netlink: 'syz.1.1443': attribute type 21 has an invalid length.
[  148.278069][T11276] lo speed is unknown, defaulting to 1000
[  148.312130][T11276] lo speed is unknown, defaulting to 1000
[  148.503732][T11296] netlink: 'syz.2.1458': attribute type 1 has an invalid length.
[  148.524130][T11296] bond11: entered promiscuous mode
[  148.526760][T11296] 8021q: adding VLAN 0 to HW filter on device bond11
[  148.545213][T11296] 8021q: adding VLAN 0 to HW filter on device bond11
[  148.548446][T11296] bond11: (slave wireguard0): The slave device specified does not support setting the MAC address
[  148.566858][T11296] bond11: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  148.594530][T11296] bond11: (slave wireguard0): making interface the new active one
[  148.597927][T11296] wireguard0: entered promiscuous mode
[  148.601988][T11296] bond11: (slave wireguard0): Enslaving as an active interface with an up link
[  148.672769][T11303] netlink: 'syz.2.1459': attribute type 3 has an invalid length.
[  148.733039][T11315] lo speed is unknown, defaulting to 1000
[  148.775044][T11315] lo speed is unknown, defaulting to 1000
[  149.103171][T11323] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.162700][T11323] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.243767][T11323] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.314316][T11323] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.409504][ T9294] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  149.417520][ T9294] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  149.422577][ T9294] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  149.428124][ T9294] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  149.553322][T11326] __nla_validate_parse: 34 callbacks suppressed
[  149.553337][T11326] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1464'.
[  149.560971][T11326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1464'.
[  149.565125][T11326] chnl_net:caif_netlink_parms(): no params data found
[  149.622856][T11328] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1465'.
[  149.794263][T11339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1469'.
[  149.797798][T11339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1469'.
[  149.822698][T11343] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1470'.
[  149.827154][T11343] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  149.832862][T11343] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1470'.
[  149.945037][T11353] netlink: 'syz.1.1474': attribute type 1 has an invalid length.
[  150.140541][T11363] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1477'.
[  150.171279][T11365] netlink: 'syz.1.1478': attribute type 3 has an invalid length.
[  150.174536][T11365] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1478'.
[  150.480848][T11387] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1484'.
[  150.500165][ T5849] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  150.553617][T11398] pimreg: entered allmulticast mode
[  150.706796][T11410] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  150.717831][T11410] tunl0: entered promiscuous mode
[  150.721170][T11410] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  151.469159][T11465] pim6reg: entered allmulticast mode
[  151.479257][T11463] pim6reg: left allmulticast mode
[  151.531160][T11467] rdma_rxe: rxe_newlink: failed to add batadv_slave_1
[  151.682105][T11483] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.711426][T11483] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.733223][T11484] tunl0: left promiscuous mode
[  151.737783][T11484] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  151.762397][T11483] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.793553][T11483] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.821226][ T5875] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  151.831271][ T9294] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  151.836524][ T9294] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  151.875390][ T9294] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  151.985657][T11501] syz0: rxe_newlink: already configured on lo
[  151.993742][T11501] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  152.020055][ T5915] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  152.113697][T11507] syzkaller1: entered promiscuous mode
[  152.115610][T11507] syzkaller1: entered allmulticast mode
[  152.118388][T11507] validate_nla: 7 callbacks suppressed
[  152.118397][T11507] netlink: 'syz.1.1525': attribute type 1 has an invalid length.
[  152.128088][T11507] 8021q: adding VLAN 0 to HW filter on device bond8
[  152.135858][T11507] 8021q: adding VLAN 0 to HW filter on device bond8
[  152.138428][T11507] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address
[  152.142834][T11507] bond8: (slave vxcan1): Error -95 calling set_mac_address
[  152.192158][T11509] veth13: entered promiscuous mode
[  152.196074][T11509] bond8: (slave veth13): Enslaving as an active interface with a down link
[  152.201430][T11509] erspan0: entered allmulticast mode
[  152.256216][T11511] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  152.418538][T11538] ==================================================================
[  152.422058][T11538] BUG: KASAN: use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  152.425387][T11538] Read of size 2 at addr ffff888117440a42 by task syz.2.1532/11538
[  152.429626][T11538] 
[  152.430465][T11538] CPU: 1 UID: 0 PID: 11538 Comm: syz.2.1532 Not tainted syzkaller #0 PREEMPT(full) 
[  152.430477][T11538] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  152.430486][T11538] Call Trace:
[  152.430492][T11538]  <TASK>
[  152.430497][T11538]  dump_stack_lvl+0x189/0x250
[  152.430515][T11538]  ? __pfx_dump_stack_lvl+0x10/0x10
[  152.430529][T11538]  ? lock_release+0x4b/0x3e0
[  152.430548][T11538]  ? __virt_addr_valid+0x4a5/0x5c0
[  152.430564][T11538]  print_report+0xca/0x240
[  152.430574][T11538]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  152.430585][T11538]  kasan_report+0x118/0x150
[  152.430602][T11538]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  152.430617][T11538]  __xfrm_state_lookup+0x6ad/0x8d0
[  152.430631][T11538]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  152.430646][T11538]  xfrm_state_add+0x27d/0xc40
[  152.430661][T11538]  pfkey_add+0x1edd/0x2e00
[  152.430679][T11538]  ? __pfx_pfkey_add+0x10/0x10
[  152.430690][T11538]  ? kmem_cache_free+0x18f/0x400
[  152.430709][T11538]  pfkey_sendmsg+0xbfe/0x1090
[  152.430719][T11538]  ? trace_sched_exit_tp+0x36/0x110
[  152.430739][T11538]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  152.430758][T11538]  ? rcu_is_watching+0x15/0xb0
[  152.430770][T11538]  ? futex_unqueue+0x22/0x240
[  152.430783][T11538]  ? aa_sock_msg_perm+0xf1/0x1d0
[  152.430795][T11538]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  152.430807][T11538]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  152.430819][T11538]  __sock_sendmsg+0x21c/0x270
[  152.430838][T11538]  ____sys_sendmsg+0x505/0x830
[  152.430852][T11538]  ? __pfx_____sys_sendmsg+0x10/0x10
[  152.430868][T11538]  ? import_iovec+0x74/0xa0
[  152.430883][T11538]  ___sys_sendmsg+0x21f/0x2a0
[  152.430896][T11538]  ? __pfx____sys_sendmsg+0x10/0x10
[  152.430909][T11538]  ? futex_wait+0x285/0x360
[  152.430931][T11538]  ? __fget_files+0x2a/0x420
[  152.430941][T11538]  ? __fget_files+0x3a0/0x420
[  152.430952][T11538]  __x64_sys_sendmsg+0x19b/0x260
[  152.430963][T11538]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  152.430978][T11538]  ? rcu_is_watching+0x15/0xb0
[  152.430989][T11538]  do_syscall_64+0xfa/0x3b0
[  152.430999][T11538]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.431010][T11538]  ? exc_page_fault+0x9f/0xf0
[  152.431037][T11538]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.431050][T11538] RIP: 0033:0x7f26afb8ebe9
[  152.431063][T11538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  152.431074][T11538] RSP: 002b:00007f26b0a2d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  152.431089][T11538] RAX: ffffffffffffffda RBX: 00007f26afdb5fa0 RCX: 00007f26afb8ebe9
[  152.431099][T11538] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[  152.431107][T11538] RBP: 00007f26afc11e19 R08: 0000000000000000 R09: 0000000000000000
[  152.431115][T11538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  152.431122][T11538] R13: 00007f26afdb6038 R14: 00007f26afdb5fa0 R15: 00007fffb3c81448
[  152.431136][T11538]  </TASK>
[  152.431140][T11538] 
[  152.542294][T11538] The buggy address belongs to the physical page:
[  152.544484][T11538] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888117443180 pfn:0x117440
[  152.547947][T11538] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff)
[  152.550572][T11538] page_type: f0(buddy)
[  152.552168][T11538] raw: 057ff00000000000 ffffea000443c308 ffffea000479dc08 0000000000000000
[  152.555083][T11538] raw: ffff888117443180 0000000000000002 00000000f0000000 0000000000000000
[  152.558010][T11538] page dumped because: kasan: bad access detected
[  152.560201][T11538] page_owner tracks the page as freed
[  152.562122][T11538] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6296, tgid 6295 (syz.2.107), ts 52847813568, free_ts 126340188065
[  152.568903][T11538]  post_alloc_hook+0x240/0x2a0
[  152.570569][T11538]  get_page_from_freelist+0x21e4/0x22c0
[  152.572423][T11538]  __alloc_frozen_pages_noprof+0x181/0x370
[  152.574399][T11538]  alloc_pages_mpol+0x232/0x4a0
[  152.576224][T11538]  allocate_slab+0x8a/0x370
[  152.577764][T11538]  ___slab_alloc+0xbeb/0x1410
[  152.579293][T11538]  kmem_cache_alloc_noprof+0x283/0x3c0
[  152.581098][T11538]  xfrm_state_alloc+0x24/0x2f0
[  152.582673][T11538]  pfkey_add+0x6e4/0x2e00
[  152.584083][T11538]  pfkey_sendmsg+0xbfe/0x1090
[  152.585836][T11538]  __sock_sendmsg+0x21c/0x270
[  152.587611][T11538]  ____sys_sendmsg+0x505/0x830
[  152.589512][T11538]  ___sys_sendmsg+0x21f/0x2a0
[  152.591240][T11538]  __x64_sys_sendmsg+0x19b/0x260
[  152.593039][T11538]  do_syscall_64+0xfa/0x3b0
[  152.594654][T11538]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.596878][T11538] page last free pid 9983 tgid 9981 stack trace:
[  152.598995][T11538]  __free_frozen_pages+0xbc4/0xd30
[  152.600714][T11538]  __put_partials+0x156/0x1a0
[  152.602490][T11538]  put_cpu_partial+0x17c/0x250
[  152.604148][T11538]  __slab_free+0x2d5/0x3c0
[  152.605673][T11538]  qlist_free_all+0x97/0x140
[  152.607245][T11538]  kasan_quarantine_reduce+0x148/0x160
[  152.609260][T11538]  __kasan_slab_alloc+0x22/0x80
[  152.611067][T11538]  kmem_cache_alloc_lru_noprof+0x1c6/0x3d0
[  152.613178][T11538]  __d_alloc+0x36/0x7a0
[  152.614667][T11538]  d_alloc_pseudo+0x21/0xc0
[  152.616366][T11538]  alloc_file_pseudo+0xcc/0x210
[  152.618119][T11538]  sock_alloc_file+0xb8/0x2e0
[  152.620072][T11538]  __sys_socket+0x13d/0x1b0
[  152.621728][T11538]  __x64_sys_socket+0x7a/0x90
[  152.623596][T11538]  do_syscall_64+0xfa/0x3b0
[  152.625367][T11538]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.627410][T11538] 
[  152.628354][T11538] Memory state around the buggy address:
[  152.630424][T11538]  ffff888117440900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  152.633092][T11538]  ffff888117440980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  152.635970][T11538] >ffff888117440a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  152.638920][T11538]                                            ^
[  152.641149][T11538]  ffff888117440a80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  152.644008][T11538]  ffff888117440b00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  152.646870][T11538] ==================================================================
[  152.649813][T11538] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  152.652180][T11538] CPU: 1 UID: 0 PID: 11538 Comm: syz.2.1532 Not tainted syzkaller #0 PREEMPT(full) 
[  152.655279][T11538] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  152.658709][T11538] Call Trace:
[  152.659861][T11538]  <TASK>
[  152.660859][T11538]  dump_stack_lvl+0x99/0x250
[  152.662389][T11538]  ? __asan_memcpy+0x40/0x70
[  152.663927][T11538]  ? __pfx_dump_stack_lvl+0x10/0x10
[  152.665664][T11538]  ? __pfx__printk+0x10/0x10
[  152.667253][T11538]  vpanic+0x281/0x750
[  152.668667][T11538]  ? __pfx_vpanic+0x10/0x10
[  152.670286][T11538]  ? rcu_is_watching+0x15/0xb0
[  152.671984][T11538]  panic+0xb9/0xc0
[  152.673340][T11538]  ? __pfx_panic+0x10/0x10
[  152.674955][T11538]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  152.677016][T11538]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  152.679107][T11538]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  152.681105][T11538]  check_panic_on_warn+0x89/0xb0
[  152.683064][T11538]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  152.684907][T11538]  end_report+0x78/0x160
[  152.686554][T11538]  kasan_report+0x129/0x150
[  152.688208][T11538]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  152.690078][T11538]  __xfrm_state_lookup+0x6ad/0x8d0
[  152.691899][T11538]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  152.693811][T11538]  xfrm_state_add+0x27d/0xc40
[  152.695694][T11538]  pfkey_add+0x1edd/0x2e00
[  152.697601][T11538]  ? __pfx_pfkey_add+0x10/0x10
[  152.699609][T11538]  ? kmem_cache_free+0x18f/0x400
[  152.701458][T11538]  pfkey_sendmsg+0xbfe/0x1090
[  152.703137][T11538]  ? trace_sched_exit_tp+0x36/0x110
[  152.705181][T11538]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  152.707476][T11538]  ? rcu_is_watching+0x15/0xb0
[  152.709666][T11538]  ? futex_unqueue+0x22/0x240
[  152.711865][T11538]  ? aa_sock_msg_perm+0xf1/0x1d0
[  152.714151][T11538]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  152.715961][T11538]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  152.717999][T11538]  __sock_sendmsg+0x21c/0x270
[  152.720001][T11538]  ____sys_sendmsg+0x505/0x830
[  152.721928][T11538]  ? __pfx_____sys_sendmsg+0x10/0x10
[  152.724009][T11538]  ? import_iovec+0x74/0xa0
[  152.725734][T11538]  ___sys_sendmsg+0x21f/0x2a0
[  152.727670][T11538]  ? __pfx____sys_sendmsg+0x10/0x10
[  152.729450][T11538]  ? futex_wait+0x285/0x360
[  152.730983][T11538]  ? __fget_files+0x2a/0x420
[  152.732636][T11538]  ? __fget_files+0x3a0/0x420
[  152.734262][T11538]  __x64_sys_sendmsg+0x19b/0x260
[  152.735991][T11538]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  152.737894][T11538]  ? rcu_is_watching+0x15/0xb0
[  152.739778][T11538]  do_syscall_64+0xfa/0x3b0
[  152.741620][T11538]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.743762][T11538]  ? exc_page_fault+0x9f/0xf0
[  152.745393][T11538]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  152.747370][T11538] RIP: 0033:0x7f26afb8ebe9
[  152.748867][T11538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  152.755166][T11538] RSP: 002b:00007f26b0a2d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  152.758159][T11538] RAX: ffffffffffffffda RBX: 00007f26afdb5fa0 RCX: 00007f26afb8ebe9
[  152.761059][T11538] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[  152.763632][T11538] RBP: 00007f26afc11e19 R08: 0000000000000000 R09: 0000000000000000
[  152.766212][T11538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  152.768973][T11538] R13: 00007f26afdb6038 R14: 00007f26afdb5fa0 R15: 00007fffb3c81448
[  152.771545][T11538]  </TASK>
[  152.773227][T11538] Kernel Offset: disabled
[  152.774707][T11538] Rebooting in 86400 seconds..

VM DIAGNOSIS:
22:25:39  Registers:
info registers vcpu 0

CPU#0
RAX=ca80ebeb19e4eb00 RBX=ffffffff819683b8 RCX=ca80ebeb19e4eb00 RDX=0000000000000001
RSI=ffffffff8be33660 RDI=ffffffff819683b8 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38530 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b79c3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c30c054 CR3=000000010ed76000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=00000000000000e9 00000008001b0002
XMM02=0000000000000002 0000000000060003 XMM03=0000000000010002 0000000000000000
XMM04=080008000a000000 0000000000aa1414 XMM05=ac00000002000000 0000050003200000
XMM06=fffc030000000000 0000010002000000 XMM07=0000000000000000 0000000002000000
XMM08=0000000000000000 00007f26afc12ee7 XMM09=0000000000000000 00007f26afc12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000037 RBX=0000000000000037 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001205 RDI=0000000000001206 RBP=00000000000003f8 RSP=ffffc900038eed90
R8 =ffff888021388237 R9 =1ffff11004271046 R10=dffffc0000000000 R11=ffffffff854f2040
R12=dffffc0000000000 R13=ffffffff99afd8f8 R14=ffffffff99df23e0 R15=0000000000000000
RIP=ffffffff854f20bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f26b0a2d6c0 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f26afb74c40 CR3=000000010ed76000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ff00000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007f26b08ed100 00007f26afd87460 XMM05=00007f26afd87478 00007f26afd874c0
XMM06=00007f26afd874b8 00007f26afd874b0 XMM07=00007f26afd874a8 00007f26afd874a0
XMM08=0000000000000000 00007f26afc12ee7 XMM09=0000000000000000 00007f26afc12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
