last executing test programs:

1.779747804s ago: executing program 2 (id=1528):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000072009fb300000000fedbdf2507000000", @ANYRES32, @ANYBLOB="080001"], 0x20}}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000280), r1)
getsockname$packet(r1, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f00000000c0)=""/233, 0x5000, 0x0, 0x480000, 0x1}, 0x20)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008080}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$ppp(0xffffffffffffff9c, 0x0, 0x2100, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(0x0, r2)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r3, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x3a, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"4adcda08f6e83e2aa00e133f88a8349f246e"}}}}, 0xfc6d)

1.620448459s ago: executing program 2 (id=1533):
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, 0x0, 0x0)
sendmmsg$inet(r0, 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4c, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x10, 0x7, 0x1, 0x7}})
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = socket(0x2b, 0x1, 0x1)
r3 = bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r2}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1c, 0x1b, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES64=r3, @ANYBLOB="0000000000000000b702000014000000b70300000048d48b0a27bd00afec2262742bc2f8de0000008500000083000000a1866cdb48821ef0b3bf09000000000000550901000000000095000000000000008500000023000020000000000000000018000000f66b247c45ccc80601f71bc70700"/128, @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000"], 0x0, 0x800, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a32000000001400078008001340000000000800124000002000050005000a000000050004000000000015000300686173683a6970"], 0x64}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x40840)
syz_init_net_socket$ax25(0x3, 0x2, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000), 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"])
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r5, 0x1, 0x2, 0x0, 0x48)
getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, &(0x7f0000000000)=""/152, 0x0)
r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r6, &(0x7f0000000040)={0x1f, @none, 0x1}, 0xa)
connect$bt_rfcomm(r6, &(0x7f0000000240)={0x1f, @any, 0x6}, 0xa)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2a, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000001340)=@ethtool_per_queue_op={0x4b, 0xe, [0x3, 0x4, 0x8000, 0x7, 0x5, 0x25, 0x42, 0x7fffffff, 0x7, 0x7, 0xffffffff, 0xfffffffc, 0xf, 0x80000000, 0x8, 0xd2, 0x4, 0xde8, 0x1, 0x4, 0xe, 0x6, 0x2, 0xc0, 0x97e, 0x6, 0xffff0000, 0x6, 0x6, 0x3ff, 0xfff, 0x3, 0x1, 0x358e, 0x3, 0x6, 0xf, 0xf, 0x1, 0xfffffff9, 0x10001, 0x0, 0x4, 0x8, 0x3, 0x9ae7, 0x80, 0xb7, 0x5, 0x2, 0x5, 0x2, 0x3ff, 0xce53, 0x2, 0xd4, 0x0, 0x0, 0x3, 0x8, 0x5, 0x7, 0x400, 0x4, 0x0, 0x2, 0x0, 0x7, 0x8001, 0x53, 0xfffffffc, 0x0, 0xbbc3, 0xfff, 0x594, 0x8315, 0x3ff, 0x5, 0x2, 0xdf, 0x3, 0x3, 0x6, 0x8000, 0xffffffff, 0x8, 0x9, 0x4, 0x7, 0x7, 0x16, 0x265, 0xb, 0x9, 0x0, 0x2, 0x14c1, 0x0, 0x8000, 0x0, 0xa6a3, 0x0, 0x6, 0x7, 0x80000001, 0x8000, 0xf48, 0x5, 0x6b9, 0xffff, 0x4, 0x100, 0x0, 0x8, 0x2, 0x62, 0x7ff, 0x5, 0x5, 0xb4d, 0xa, 0x100, 0x4fc, 0x0, 0x8, 0x0, 0x8, 0x6], "7ea0bfe7802376dbe4669dc09aeff9a0ee9bce63c092d78c456cd4de61b00eeaffe47cb31ef1d10564a231eaa5a52da62c420319d42bfb88ed8122bbd0c6328fa6c43993b8a410d367bcd8ea6f2bca3bbce5107c7e0c2e1c335d0d78b36ca046cc60b7453afc4e8afc6c904cf3bb61136c9558c062aa9cc2518a0f22cd3efd808b61903f3a1a0a56781af40bc8642a06d10822dd003b62dcc1520d9cdcb9ed9ba073a60959213aecd4f6950bce75ae066d2e76c9c68dc0a198b16cdcbd02f628c50ac75ac4dd1def46d161965042b256965906e438a818df5c7636c560a5c17e593a493061617e70041125848c3bdbad97bdf264567fa88993f1032b72e9c868fe1ebcc2cfc4f8dfd390daed5cfa31853b8d3570949bb5754cdba81bf86cac25e753eb62633c4012d2a3932aa79148126ffb10174ba16da0a31d9d477ff24318ca4d83442ba56407ec9dd97e719c432a04914fd8db1a97645f90b1b2fcc154974c882157c1868d4384c99600b3ef9faf6ceedce5d0bbe91dd0d6a3456c54ab6b44930df8b34377ab4ab6f76f00418851351eb439f7b88b591768f00b0d435fb137ca037b97e236e43f48f125059e73161d859cb9b978420498c0ed41084dcf8422578a6ef6312633eddd1e6993767cef0717aeef5f25c1ebd7e853805dc94fa4d9fb04adcacbe468b7dcdf98b41962e61e493883dffdb2efa8fe91e9550ec4862de71985535897824b29db4495f8524f6f855a4b681b8bb29cdcdd4977465a275fa7b8addebe312e357f802e3c2d2a5fba939d9df125526323d355251d20dd14437858c195c54161808867babf6c39c70b2179274715fdcb98ccf3a043ae00c1cbc378d0fc51f67ccbfd504ba1f56243321aebe2ea9913d3b058a8f8b0c2d99f93e8a2fbd6a2c04ebf02c148eb9afbd7ae47ade123aecb652d6c71c83532d02e166eb16dde078cf316f0536037d87f1b9747478288c5fe6a414cc0a491a5e43f76d4cad7b608033e71280ce0fc69613b1a7a18ed1993f378bdfdffeba891f707519756e809697c3a06cbf31ce488d021adfcd904e82da7a6bac478bc52a2b50359c45391a419ea87e63d0a605e031432b4a4b0e01313fa3033b80699478c21175a36e01f28850ad184fd732d8c299df080668bf055f79e8da56c44e0d3feab839904c4feff709657754858e260f9cd74d135ddae413d4fd55384b3d9a388d438e6c7e449eb3ff5d05b72b9509b75343b4f00340c6cb1c64257731849b84e1a49961e7d4f1e2aace57744834f89f9d4489ba400ed9d4442646c5d4a403b2fb2c525328bd88688b6b70206ebe364785dd5bf66478c87766ceb83c7a24f218b6fcba4b89f090816098333d84c73933155512e53ba9b92a025d315146e7934a8d5a5cf2773cb30903e3d2fb46c002c30e22c2606d14ea194c394a2f7d6015f443907ebb17770e71f11e6eeacea7e5ac6b8d388f67e0c09e61e8247d37f12ad2e88378a3e13a6113a47e80d51219a0fc37c282f08253f44ea71e1bad77ed0f6dbce76ec851456bc395f566a8404f8fa36e4cacdd287a4fcb1603e550632adf0247ffb5bebbb3007d9c09bff2ec949d2f6d743be40134c6577f292ad38bc3196f69c94e308ae13cb9de0fcc1d8a15476e2add5dd34bb6f74718ecfb9cc69a06f670d17c1f36595b3dea5c3edd31709ac75f6bde79e59d2ee83534e84f6a72e92643a2899373643de7df237e8d413444484cfa1e6909a89a21be9badbdbd0fd366dd1e939d04e913e53eee5d5d65d5a132f7f84ec7d09977afbf66baaa07da232fd5ff99bd873af562d88d984f5570ddade5fd04f33330036e58a5233ae507b243e062ea753cd35140c248fab54b47b7c0f6aa2b1a22b2c3a05b304e60d3dca2b07cbcdc085f02ea9c12477adaef36358c6fd7b72c589fd8364df1a1ae341579ab0393d8f20632bbee738467c5f6691b10557349f0cccce440209f45305c710d5f30d317a9e5f3bd16f4976902065485a34e61dfb6ef8030a692b856806b97553226647d9a133bbdf0ac9031811afc99a3ddcdf4d9ea1a7d303b4f848a1adbb9181addc85cbe84512e454afc13d4642a3c7a08929cd44a2f4a5c04aaa001dcb925fce65bf63e0b9b44f0060fe5f2b5af60ab66c8d3abdebd580b75a421f169889c5f5a5b67855901f30b3f8729584e11a8fd31f5fe265fa26c2180ba02745799949a90489ee3c3c163f69bd2a8022e4ad7990348161ee60d53ae039a41acde82352b439ca256e5cbd7842e2b9520d6afb0e33f2d391d391c36c55c76e84af53a792cee82cea36701c954bcdc605619b1d5383c1340d2c6c12dc69801afb7214bf3a3ce172b3b3dd098bea1745759fd7d4511b3c39a0dea4264251034d0ef05c2429aad2a20fc5b53c6abf950a6dffb3ab37ec331a61462f6c3f491e0a4abf9fee193837cb09cfa980939eb32711ea7fb169c56c1d98174dbc047601e77d6edd38405b8391d7e10f40d4a181224c5594ae4035ab997bd2552b421fba2d67ff9ac10422775ff3cf71ca7a44a52e5a29c30d8083dc43104b4414727f37ef19c4164555b86c579626437818f901e0b36c89fd68eb8f952478de5700f94499fb7d58527e63c904d0f22cb3c320b6100174e117a3d7a1b6d4bce957b3e4ed8336f540675a07cfca464129be4b45d9bdc691893107621d1c60ea6c56a6e87e7b178086da23812a1502434179366c15d4ce77ef242adcee849edfede2bc90d124833fcbdea01fdcc22acf87654bbaffb14171492321a41d982c0c49191c85da784bc49964e4757b537d8c0417a586c67e71dc71a5454ed84497d713ac8987f2b8ef22c072bf9b3f0a7dd4e9bd067a07214dc6c9111f5e57f28adaeb796c5a0a88dbc1a8b714880f4dcc36b260f44637ccdd319ad79de47016019aa3747e738c46db16bb44bb5d08a72c555d2869224075355b68dde5dee13a9b391ae93863a402fe7ffee9cbceabf375dd2c2e5861f8a3c455746308eaf004c2bbc7ad6b1d63d52699fea60d488e1a0c65db1a0bac5683071810d03a7a67b12f4167ecd757e60002402bd3db0bec0c589c01acbf6412fe9efc2e006a58038c0362187c5970112fa2b69b42d863a713f2fa9d66259e4a2332ed3bda1293f26d95bb93f4ba122983619418dbf10ad107cf9d29de65e94cdfdae6e2ede7a6a98980ea9ee18025a0c1f1869babe127c08bf774e19e97a0cd6758c6f7118efcd5e0e922fa2c0f09c81512aaeaf2bcf20166b73f175539016477878f6ce0a348a27093fca3f2a91351828b7c20b410d5af79e5aa1a3612319b9d305bc72509277ba0bf7a12619f6a0abde41394a8396870b81bab79ef8bba85f058922d3f1f776727c6ca086f4d128f60a35f1679857f49e4d4338642f2104bbeffe9a77e2ae98c9e6550794e99429b6f481d5d6588a7d1fdd773b980e5d9389a6c8c3e94be6aa0108437f401a604fe0d7cf64eac63345cd47f3015db9d0f8012a383ce3e197a1a7ccfdb52514a13218019735596e1e15d39aebf7adf3a94cfef15ebc61f3e0f2632f23bf4d0c6e365636061c1066f12bbabccc263d54e95f96f39e0aac588d0ab5f6be4579d2f68c550a724a498306abeffb0708745e60ebb09875ccd0c97d98b2d72005933db147aaf3c20f351551e9c20fc971348786f91c35efd216602e8194651f856a4be04ea8ac0f0ce87c04932f875a83719dca68c5784ad25b307915afb930624e549954261b1014a42c82ec5345d782bfdb585df6c913e37b45df6964b7e77a704b67e5627d4bb2e62db3291b9f4c279e270d9b7d1cbb0fb43446ae16c36f25cf2e38adb361a6b750a626a5d16eeb0654d629ea8c363f159579754381f9047de81f900e5a7aca12adc87a79427e1abf55dfda096299929438f1049938d7b16ab52372195d13040bfa12b2b1b7fcff3e7b334d9e203608e612b5e729ebf0ee43fbd465fc49c26d423832930e39e5a084b7d3c798cf73de2feb72b23d854bb436542580f911d9ea038be1769e15acb9cdfbe1d27f455961e0ddaf7ffa81d0a9b79946d19318349faa8038dc27411bb3297ed448b6c4350b7025c8395291b1a6fd54623a4bc9f016ea0e2a608f7123aaa5c5ee7ad0cc9f11ee1ed8b6b9e5831016ad51007076be8b1f247890c6f7bf699aeba36521c87829be0378956d351330724184d7a979be55f5835abb522fc18b0e2e8ac697a34c947ab9481ca9124e1f720b260f1fe4c23796adfd7e1380c52168ad09145bee591541f54c61446f9775bf98f9f9910df47f68ecc36e1466b003496912b6fbb025d6ed47e0ccc3ba0b6c3f58db833e75ffaaf3bc460bb471ef023c0dccdc772681ff5133cfe44acb37aac5995915ef9a56b9278e098895d871436239fd727ffa60964bf77cd3d9bd495bf6ca5a2828a55b657257dedb3ab74df6e71c72a67886a63f4c031d33922dff613d0c6560adb1368f55033c74295da8ca2b5bb54dead44fbcf7b38bc31366a1394dd3772625d49eae570370c278b9bf04549e345a1ca66680a18f42fa352c1744d3d6cbf21dcdc775023a081bc4f48fa6a2000bfd9d21b490a135fc606b0b5033d962c7deecb2c35138a74c346feef9d0cf4d6373f5d908a5a2ec8d56d2cb784fa1b414fe86d93a0c0b6fb8758cd3bbcf13d6968576bdb8f4239d336184e7d5d5d27791b07a5d66dd37837e86ae329511b10582c61f74a505306d21898dad765cfa5badcb26f1f0949d19ae4936b8d5e6f095736288792ceae2288292b16d89dbf885ac06cf92fe6c806eba2e9bc6ac87d72a07e8586ebe4178383ef8b72b9591e2bb726ee04ae3e8778e961b7d77ce841910c3fe20219f666ad7b569f96511df1e50dcbe6fc4ce4348d92a19e8b0106f253fa5e67b8f367f8c06836b445963769d9b7fc76241461110da5b7a3b40ef40b3b82f72b652d947aada636abd76ab8cfb143a47c79d48ae9ecb968be19eb60609b7eda8ab8bc4b170015df629f30f008e104dd3faa46427ca1b8d445e8225032b452936b6fef2e80f840525ba90042e0098be400f3503be878e5885915662d4045d3e2963b6f1d1968fa01798ec42071ce70492aae1ac4bb33ddb351a52cedf09f36009b980073299d97af2b8de3e958ffa9f14607ce895d7b596a7096160c3351b4c97c6e569dbb4612b7de8a732ebd0b2bd465e4809a1fdce33e37aa63dd19fbf87f995723a351c3762e0e6b512842d6226a39876dac6f474504b326aa874090bd34ca8c05b1a4ac5bd03d7221c07297f57de9bc6f4b8c75ad1be2282404a830031f84e188092142e1dfd983aa21c4d1918dd33fcd23e4ad74e8cc85630d6d8b062252c075a30522a9eb9e282c7f3d980ee137d3a2a2bb4e0d3d6bfd907539eb26a6a8a512505a71d15b27075c6f8e9e73736f48e740512179fca2a4a46b62e1c864b61b3c5a4e473fec380f18a3c36cc2c2aec27182a88d2b4100682bd1154705b0a7ba3875f283094ae0082a270931ef1f6d2e38c12a2524ef7c6649d426c167005c229611c330b171b8edf47334ad6dbc6f52dc2916f22f7c9a08db8e3f15378dcbb035d4a0f2f57c190e103282d4d7abeeb8606c75eca80a9a9cc9c1329a0d4af2cc551ccef871711a8bc46a109b51292df973ceb78f4e458da83a9e3313167a03d4a087ce1065398e9b82432f5f57f223332010810ba499b7566bebb2d011738fed3634d06004147f1da354f37b56ec1e9ea5a93198c447769f2f1ed338f675992b3b9b622484c1820134f94ef1e89dcbbd06245e0028751036"}})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x3, 0x0, 0x0, 0xb, 0x2}]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x10000}, 0x28)

1.317599556s ago: executing program 1 (id=1543):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000700)=@broute={'broute\x00', 0x20, 0x3, 0x5da, [0x1000000, 0x0, 0x0, 0x0, 0x0, 0x200000000100], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000001200000088f77767300000000000000000000000000074756e6c3000000000000000000000007369743000000000000000000000000076657468305f746f5f6272696467650041cbbb174ea3ffffff00000000006e000000ee0100001e0200005345434d41524b000000000000000000000000000000000000000000000000000801000000000000010000000300000073797374656d5f753a6f626a6563745f723a706f6c6963795f636f6e6669675f743a7330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a300000000000000000000000000000000000000000000000010900000001000000000000004e465155455545000000000000000000000000000000000000000000000000000800000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff02000000110000000a0000008808677265746170300000000000000000006d6163736563300000000000000000006e657464657673696d3000000000000070696d72656731000000000000000000aaaaaaaaaaaaffff00000000aaaaaaaaaaaa00ffffff00ff4e0100004e0100007e01000073747000000000000000000000000000000000000000000000000000000000004800000000000000060000000a0008000700ffffffffffff0000ffff0000000000000000b5dd00004e040800aaaaaaaaaa42ffff00ffff004e224e210004000006000700000203000900710001000001726174656573740000000000000000000000000000000000000000000000000048000000000000006e69637666300000000000000000000076657468315f746f5f62617461647600150000000400000003000000840c000005000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000fdffffff00000000110000000e0000006004626174616476300000000000000000007665746831000000000000000000000070696d367265673100000000000000007465616d5f736c6176655f3000000000aaaaaaaaaabbffff00ffffffa8b5f0d9eb5700ffff0000ff6e00000036010000ae0100004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a30000000000000000000000000000000000000000000000001fbffffffa9fe0000000000006e666c6f67000000000000000000000000000000000000000000000000000000500000000000000001800000040d9b030000000091e847a5a37ae03a70ddcd375f50467d06fab9d39835ed88150b3730a3e23c75292b6a137157ec0cfa0af0393739dad50ff91f9c2feed44f5798013e2c887f52000000006e666c6f67000000000000000000000000000000000000000000000000000000500000000000000006000000ed00280c00000000c37ad9c6573acc7eb7a5ff50faf85fbc5b294685cfb08c76eb1553ad8b45316703520bc03ad1802beb8f28c5cb80e61b5c27411de934f9f59e8f2b23f82a48cf00"/1498]}, 0x652)

1.227151914s ago: executing program 1 (id=1545):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
socket(0x23, 0x5, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x9, 0x0, 0x1000006, 0x692}, 0x10)
sendto$inet6(r0, &(0x7f0000000040)='x', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffc, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdba, 0x2, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket(0x29, 0x2, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4844}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xf, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1ec}}, 0x0)
ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0xffff, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @bcast, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x2, &(0x7f0000000300)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000000080)='GPL\x00', 0x4, 0x1d, &(0x7f0000000400)=""/29, 0x40f00, 0x65, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x5, 0x4, 0xc, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
unshare(0x0)
syz_init_net_socket$ax25(0x3, 0x5, 0x0)
unshare(0x2000000)
r4 = socket$netlink(0x10, 0x3, 0x0)
syz_emit_ethernet(0x8a, &(0x7f0000000240)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x54, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], @pkt_toobig={0x3, 0x2, 0x0, 0x0, {0x0, 0x6, "d80002", 0x0, 0x11, 0x0, @local, @mcast2, [@dstopts={0x0, 0x2, '\x00', [@ra={0x5, 0x2f}, @hao={0xc9, 0x10, @mcast1}]}], "2b58959e"}}}}}}}, 0x0)
sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="aa0ad24cc9ba46aef111637a7360bf2dc773c105502da3e1d147a3a6312f9767bfeed6a7f188fa39f707c840fda3abf1fd01d2bbe39bcc80fef14dba61aa886345c875540308d8fc19269eadfc93d1636df8d1463de12a3fc06d514aabad7585f5076b"], 0x28}, 0x1, 0x0, 0x0, 0x60048080}, 0x0)
recvmmsg(r4, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002022, 0x0)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
sendto$netrom(r5, 0x0, 0x0, 0x40, 0x0, 0x0)

1.120043067s ago: executing program 0 (id=1547):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5)
r7 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000022000106"], 0x1c}], 0x1}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYRES16=r6, @ANYRES16=r3, @ANYRES64=r2, @ANYRES64=r7, @ANYRESOCT=r7, @ANYRES16=r2, @ANYRES8=r2, @ANYRESOCT=r1], 0xe0}}, 0x20000080)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
r11 = socket$kcm(0x29, 0x2, 0x0)
sendmmsg$inet(r11, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)='/', 0x1}], 0x1}}], 0x2, 0x0)
close(r11)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b00)=@newtfilter={0x974, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x940, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_ACT={0x53c, 0x2, [@m_skbedit={0x154, 0xc, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0xf1c0, 0x6, 0x9, 0x200}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x4c, 0x0, 0xa3, 0x9d}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7fffffff}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x1, 0xfff1}}]}, {0xe0, 0x6, "1c35562aee5096cb27dafc1b35adaa75d06b5d280f0630b7ed1fb51ec2ce544eec910ddef285d782b759535ad7d1309b3c294f03f78e1c5cd14bae8b38289d0e64fa63794ca3bff2543bd0e14e13028294349a7c32fd17d77d58f6fae4d355273f9eba63d04a0deb97212d593586cbb2898cb9ca0a2bedb5fc6fd919cca1e30b9853009c6ace7f600dbc79b8863a09d618d603d67c43b75f6c5f14104bdb80ed01e53932b9dec1c350468f5aa09d9b60fe2b6e83f157f089c06f108cff37e97b84aa49bb00936bc462bfae1c48a8aa6ead1ec6320c823f624e686c90"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_csum={0x70, 0xb, 0x0, 0x0, {{0x9}, {0x4}, {0x43, 0x6, "0d32c7c47286bc6394e1808e347c1532666f7d731e51da10ee7711539c723d909ac43ea82a2189c15a51e5cfa65e1d2b3baee7be9c91ca21aadc2ba8fe408b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0x14c, 0x1b, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x109f6e683f940a78}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x1, 0x1, 0x650, 0x8f6}, 0x9}}]}, {0xcc, 0x6, "ae253feb0e275f7f5303f7961fef6eb9dba5f988dec187a5507227d1864a7507acf842cfe511eb852ad4cbe18c67072cb19fa6f72b4e9c467d614c242fc47ae418bd804ae91be794c06569b430974868839170004b45b63990da17d42cb103f3932755f2a8b272dff8dc139b8b4a8d17af3f326aacf97dfce7e70c827a7c9516591ae0f8956db5cadce37eb40cc1e4c4cab5c662680e08c53396b54d366ad644117f1859c79bd3e789d1a7d89fe68d1ec93560ad00447b97dbd539ccf9ae7f20aebbc5a0c799cae5"}, {0xc}, {0xc, 0x8, {0x2, 0x4}}}}, @m_bpf={0x128, 0x11, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x400, 0x0, 0x2, 0xfa49}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x5, 0x38, 0x0, 0x3}, {0x3cc2, 0x7f, 0x0, 0x2}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r9}]}, {0xb8, 0x6, "6357570c23566b14525bffb7a4d9da2cfc105e93672bd4995742fa08947dbed0a9970f070e45bd6e0aa9d40d6d03ae9697a9428f41712b02317e1856d54af9f79f3673a3e814fbdc5d007414f9da56d04ffdbc3717561305dff8d923d7bf53e0eed46b6ffd0aa2d9a1aa6f16168597402903bc3c32361e09bcddc969e043fcb54a0d878276b304ec6bc9c7054948d9310a257c84ec66d1b999a9f16174278cab8ebea8acfafc98b56934ace3e7d922cc0974cf12"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_ct={0x100, 0x0, 0x0, 0x0, {{0x7}, {0x50, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x80}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private1}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_PARMS={0x18, 0x1, {0x1000, 0x8, 0xffffffffdfffffff, 0x6, 0x1}}, @TCA_CT_ZONE={0x6, 0x4, 0x7}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @remote}]}, {0x8a, 0x6, "c7291ff789eb4257fc12f7bfd8ba9486c3ee18a11a0033887a4d47d09a18ee70845667bcac4c35c92c1157c261e32ab51e2b44d0d13c50c8d5e0eeea79a0b933bc8a68ac833b611c0d827048f41ae2d372a42bd2ef4bc1e9e0c3d5b9e08948feebe121cde51cc0bbdbcc5524d3f4ef83cf099f61b9a3248764f775a6a97cb96325f94caa81a3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x9}}, @TCA_MATCHALL_ACT={0x3e0, 0x2, [@m_tunnel_key={0x10c, 0x9f, 0x0, 0x0, {{0xf}, {0x78, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x5}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x66, 0x6, "a88ebc91cdfe762a0b4e14087af8da00beb7679109902e96a44b2561ed72837b93117f268af89c25b9562b7c74a7d9184aab147f65585edbd97925661dc1a87a1427f6b8af28625bd9c195e087e0bda31e83bccd1a0d5b01852540ad2697a4f50b9d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x1f8, 0xe, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x7, 0x20000002, 0xc00000, 0x1}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xbe5, 0x62ffe7f1, 0xffffffffffffffff, 0x2, 0x9}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10, 0x5, 0x30000002, 0xffc00000, 0x3c}, 0xfff7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x3, 0x2, 0x1, 0x287}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffff0000, 0xd6d, 0x20000000, 0x1a84, 0xc35}, 0x800}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfe, 0x9, 0xfffffffffffffff4, 0xf4c, 0xfffffffa}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x81, 0xc000000, 0x20000000, 0x0, 0x6}, 0x183c}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x46f, 0x3, 0xb, 0x7, 0x40}, 0xcfd}}]}, {0xe5, 0x6, "49531c2c257a8ef6ffe8f0561ef4e56e8ad26f7a53e9ce288f5af30e831b95a45e7b9d4fe6186a68ed7bc8cc59904fafe458500eafbcf0a80d813edb6b92e8cd7c34a12de30597bd5299111b6f3bf22fb89a06d1a69b4c517d7764af8ef79769a5c9c9c1888957d41b392716f9c0e4b3b406c1ab84dc5e1507f20973d79efaf9eb6cb6eece1bec6d621cdeb0c6cca9d1dba5125aece55b4b82cde5452e36a92f5029abb03cad29a603f7fd400ccad09c0659d80581f21cc5ca1bf7b8016bd9e8d5f0e42935ea0578826b5fb3d5c4e1ef907fcf2518b13db08899306d46ecfa89e2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0xd8, 0x7, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1ff, 0xffffffff, 0x1, 0x8}, 0xd}}]}, {0x85, 0x6, "e9081537cd7e47acdd99e1f3c7ae034666d57286346d4c101bb57387ad2a53ad589cdd1a32114f7189002a538c6f487721c8d3da95b10433390725b5e7a4ca5c0d079316d5a88c57e126076fbd671e61ea7b601050fa2cc7453cb5f566137784e19fa439145290f35501f7a24fcdafcbb46ec96331e44d895e45d46e0ff4b29f4a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x974}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

910.918518ms ago: executing program 0 (id=1548):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000023c0)={'filter\x00', 0x7, 0x4, 0x4d0, 0x110, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x4, &(0x7f0000002380), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @private=0xa010102, @loopback, 0x1, 0x1}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xfffffffc, 0x9, 0x7, 0x2}}}, {{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x6, 'system_u:object_r:getty_var_run_t:s0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x520)

859.479702ms ago: executing program 0 (id=1549):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0xb, &(0x7f00000000c0)={0xfffffff6}, 0x10)
r1 = getuid()
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@private, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8)
sendmsg$nl_netfilter(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x1fc, 0x7, 0x7, 0x801, 0x70bd2c, 0x25dfdbfb, {0x3}, [@generic="9bfd8b684c", @typed={0x8, 0x114, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x1f, 0x0, 0x0, @uid=r1}, @nested={0x1cd, 0x77, 0x0, 0x1, [@typed={0x9, 0xc8, 0x0, 0x0, @str='syz0\x00'}, @generic="9c4cf1528b20eccafb80", @typed={0x8, 0x8f, 0x0, 0x0, @fd=r0}, @typed={0x23, 0x14c, 0x0, 0x0, @binary="07d00e97dce0ac48de5f97657fce0f531875167a8e091f91fe87204cab11b1"}, @nested={0x4, 0xc2}, @typed={0xc, 0xb4, 0x0, 0x0, @u64=0x73b}, @typed={0x8, 0xf9, 0x0, 0x0, @uid=r2}, @generic="fc701de757e9e7c94f4de6242443780c9829d2aafd147e12eeda375c70f5006b6ee1254fe2818b874c12eb9b691375dea089b502590f9a980058ad46b1858c594049c18e38e90a08f6b3b16bf2cbb3301b653919657c255e3c3d313e6ac653e1ebb41cf36664b4ca0c303d3c6d689ead0454add84298ed63b03d6eeb34812fef2ff3fb744fc93f0ac39362dec001ab2e2990463b3b291fb2b87841362fada45d1084683cbc1b2b6561d0318066a4b48903a85e7c882d260b76f62ac56ccb4f616cb8ecdfa8791649a61d1428690a0fac92b5a5b1522635", @generic="bc31197e58b142979c6ca3ca29fdbb5a508e03b6ad7c238ae0eb6428151ec43b9639b2121083da2e1e6ccce5a64f41664a202450411b9923437cef3ae0e551dce8c9ce43c9859638aec194a040688510fd06dc8cd9437cf4a7c0f99bb451b7588df8bded588343d21f7be802c52e85a2b5d3de78a5fde66350ec36e4dd8a684204a5dec852a8e53b42aef1cdf6eb8ba08847b6aba808b560"]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0xe05, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x48000)

791.324106ms ago: executing program 0 (id=1550):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x3a, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"4adcda08f6e83e2aa00e133f88a8349f246e"}}}}, 0xfc6d)

720.839768ms ago: executing program 2 (id=1551):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0)
write$cgroup_subtree(r0, 0x0, 0xa)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
recvmsg$qrtr(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x38, 0x10000)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x14, 0x4, 0x8, 0xd}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x2c)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r3, &(0x7f0000000280), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x17, &(0x7f0000000280)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x100}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xf}], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r4, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffff8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'})
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f00000023c0)={'filter\x00', 0x7, 0x4, 0x4d0, 0x110, 0x20, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x4, &(0x7f0000002380), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @private=0xa010102, @loopback, 0x1, 0x1}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xfffffffc, 0x9, 0x7, 0x2}}}, {{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x6, 'system_u:object_r:getty_var_run_t:s0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x520)

720.115805ms ago: executing program 0 (id=1552):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x11000)
vmsplice(r2, &(0x7f0000000280)=[{&(0x7f0000000680)="85", 0x1}], 0x1, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {0x0, 0x2f00}, {0x7, 0x307}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r10=>0x0})
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@ipv6_newaddrlabel={0x64, 0x48, 0x400, 0x70bd27, 0x25dfdbfc, {0xa, 0x0, 0x10, 0x0, r10, 0x9a}, [@IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x32}}, @IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_LABEL={0x45, 0x2, 0x6}, @IFAL_ADDRESS={0x0, 0x1, @private1}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x64}}, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
listen(r0, 0x0)
r14 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r14, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

650.690776ms ago: executing program 2 (id=1553):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r1, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6d616e676c65000000000010080000000000000000100000000000000000000004000000007dcc00000000000000cb58aa4900000000000000000000b69e00"/104], 0x68)

649.633861ms ago: executing program 2 (id=1554):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5)
r7 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000022000106"], 0x1c}], 0x1}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYRES16=r6, @ANYRES16=r3, @ANYRES64=r2, @ANYRES64=r7, @ANYRESOCT=r7, @ANYRES16=r2, @ANYRES8=r2, @ANYRESOCT=r1], 0xe0}}, 0x20000080)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)
r8 = socket(0x400000000010, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001780)={0x18, 0x7, &(0x7f0000001380)=@framed={{}, [@jmp={0x5, 0x0, 0x2, 0x0, 0xa, 0x2}, @generic={0x5, 0x0, 0x0, 0x2, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0x50}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)
r10 = socket$kcm(0x29, 0x2, 0x0)
sendmmsg$inet(r10, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)='/', 0x1}], 0x1}}], 0x2, 0x0)
close(r10)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b00)=@newtfilter={0x974, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x940, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_ACT={0x53c, 0x2, [@m_skbedit={0x154, 0xc, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0xf1c0, 0x6, 0x9, 0x200}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x4c, 0x0, 0xa3, 0x9d}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7fffffff}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x1, 0xfff1}}]}, {0xe0, 0x6, "1c35562aee5096cb27dafc1b35adaa75d06b5d280f0630b7ed1fb51ec2ce544eec910ddef285d782b759535ad7d1309b3c294f03f78e1c5cd14bae8b38289d0e64fa63794ca3bff2543bd0e14e13028294349a7c32fd17d77d58f6fae4d355273f9eba63d04a0deb97212d593586cbb2898cb9ca0a2bedb5fc6fd919cca1e30b9853009c6ace7f600dbc79b8863a09d618d603d67c43b75f6c5f14104bdb80ed01e53932b9dec1c350468f5aa09d9b60fe2b6e83f157f089c06f108cff37e97b84aa49bb00936bc462bfae1c48a8aa6ead1ec6320c823f624e686c90"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_csum={0x70, 0xb, 0x0, 0x0, {{0x9}, {0x4}, {0x43, 0x6, "0d32c7c47286bc6394e1808e347c1532666f7d731e51da10ee7711539c723d909ac43ea82a2189c15a51e5cfa65e1d2b3baee7be9c91ca21aadc2ba8fe408b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0x14c, 0x1b, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x109f6e683f940a78}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x1, 0x1, 0x650, 0x8f6}, 0x9}}]}, {0xcc, 0x6, "ae253feb0e275f7f5303f7961fef6eb9dba5f988dec187a5507227d1864a7507acf842cfe511eb852ad4cbe18c67072cb19fa6f72b4e9c467d614c242fc47ae418bd804ae91be794c06569b430974868839170004b45b63990da17d42cb103f3932755f2a8b272dff8dc139b8b4a8d17af3f326aacf97dfce7e70c827a7c9516591ae0f8956db5cadce37eb40cc1e4c4cab5c662680e08c53396b54d366ad644117f1859c79bd3e789d1a7d89fe68d1ec93560ad00447b97dbd539ccf9ae7f20aebbc5a0c799cae5"}, {0xc}, {0xc, 0x8, {0x2, 0x4}}}}, @m_bpf={0x128, 0x11, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7, 0x400, 0x0, 0x2, 0xfa49}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x5, 0x38, 0x0, 0x3}, {0x3cc2, 0x7f, 0x0, 0x2}]}, @TCA_ACT_BPF_FD={0x8}]}, {0xb8, 0x6, "6357570c23566b14525bffb7a4d9da2cfc105e93672bd4995742fa08947dbed0a9970f070e45bd6e0aa9d40d6d03ae9697a9428f41712b02317e1856d54af9f79f3673a3e814fbdc5d007414f9da56d04ffdbc3717561305dff8d923d7bf53e0eed46b6ffd0aa2d9a1aa6f16168597402903bc3c32361e09bcddc969e043fcb54a0d878276b304ec6bc9c7054948d9310a257c84ec66d1b999a9f16174278cab8ebea8acfafc98b56934ace3e7d922cc0974cf12"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_ct={0x100, 0x0, 0x0, 0x0, {{0x7}, {0x50, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x80}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private1}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_PARMS={0x18, 0x1, {0x1000, 0x8, 0xffffffffdfffffff, 0x6, 0x1}}, @TCA_CT_ZONE={0x6, 0x4, 0x7}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @remote}]}, {0x8a, 0x6, "c7291ff789eb4257fc12f7bfd8ba9486c3ee18a11a0033887a4d47d09a18ee70845667bcac4c35c92c1157c261e32ab51e2b44d0d13c50c8d5e0eeea79a0b933bc8a68ac833b611c0d827048f41ae2d372a42bd2ef4bc1e9e0c3d5b9e08948feebe121cde51cc0bbdbcc5524d3f4ef83cf099f61b9a3248764f775a6a97cb96325f94caa81a3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x9}}, @TCA_MATCHALL_ACT={0x3e0, 0x2, [@m_tunnel_key={0x10c, 0x9f, 0x0, 0x0, {{0xf}, {0x78, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x5}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x66, 0x6, "a88ebc91cdfe762a0b4e14087af8da00beb7679109902e96a44b2561ed72837b93117f268af89c25b9562b7c74a7d9184aab147f65585edbd97925661dc1a87a1427f6b8af28625bd9c195e087e0bda31e83bccd1a0d5b01852540ad2697a4f50b9d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x1f8, 0xe, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x7, 0x20000002, 0xc00000, 0x1}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xbe5, 0x62ffe7f1, 0xffffffffffffffff, 0x2, 0x9}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10, 0x5, 0x30000002, 0xffc00000, 0x3c}, 0xfff7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x3, 0x2, 0x1, 0x287}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffff0000, 0xd6d, 0x20000000, 0x1a84, 0xc35}, 0x800}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfe, 0x9, 0xfffffffffffffff4, 0xf4c, 0xfffffffa}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x81, 0xc000000, 0x20000000, 0x0, 0x6}, 0x183c}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x46f, 0x3, 0xb, 0x7, 0x40}, 0xcfd}}]}, {0xe5, 0x6, "49531c2c257a8ef6ffe8f0561ef4e56e8ad26f7a53e9ce288f5af30e831b95a45e7b9d4fe6186a68ed7bc8cc59904fafe458500eafbcf0a80d813edb6b92e8cd7c34a12de30597bd5299111b6f3bf22fb89a06d1a69b4c517d7764af8ef79769a5c9c9c1888957d41b392716f9c0e4b3b406c1ab84dc5e1507f20973d79efaf9eb6cb6eece1bec6d621cdeb0c6cca9d1dba5125aece55b4b82cde5452e36a92f5029abb03cad29a603f7fd400ccad09c0659d80581f21cc5ca1bf7b8016bd9e8d5f0e42935ea0578826b5fb3d5c4e1ef907fcf2518b13db08899306d46ecfa89e2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0xd8, 0x7, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1ff, 0xffffffff, 0x1, 0x8}, 0xd}}]}, {0x85, 0x6, "e9081537cd7e47acdd99e1f3c7ae034666d57286346d4c101bb57387ad2a53ad589cdd1a32114f7189002a538c6f487721c8d3da95b10433390725b5e7a4ca5c0d079316d5a88c57e126076fbd671e61ea7b601050fa2cc7453cb5f566137784e19fa439145290f35501f7a24fcdafcbb46ec96331e44d895e45d46e0ff4b29f4a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x974}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

408.787127ms ago: executing program 2 (id=1555):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa08c82553c54d08004500000800000000040690780a010102ac1414aa00010000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)=0x10000000)
socket$packet(0x11, 0x2, 0x300)
r3 = socket$pppoe(0x18, 0x1, 0x0)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000140)={0x18, 0x0, {0x4, @random="6994379a97b0", 'bridge_slave_1\x00'}}, 0x1e)
connect$pppoe(r4, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}})
ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f0000000240)={{r2}, "644d9c771ea934c72d170c326a2c2ddc54d5187ad7e46fa93532bba26373c82b74075902649be4e513d1073ef7a6a6179f31f43c2bc357d81c687139c72294811fbe268914005197a4bce17f28e94554a84b34d95c5a812a3af177ce6acf262e31411906b7d996b842ac6dcdfb9229073acb16b44d1a4a6862be5739a043d0b15acc4ead4b838582ab667088703b4c7862aacef13fb20e3884e325c5db445ffece1293243d863bde2d0b989cf2591976a5bd2fa41245858925a016c1bf8aea1b0b69eadd9a3e4db3e83e822b083fca4ebe5a48e0e60e45f94f03a9b852c9c3518b788d4f293e875064da2ff3b7c25a706b9e3ee67bf1fd94b92073e60985126e036059d6377930d79960fc745aec159e77b423c43d0381e8657595705859b60db1125e64a048cf43268b721f4ec4516e58891f530a0bbdf00ddf5e60fa22c18b603f33834b5ab41d5135666b6ee61b857e120baf07cd233d96287c283f83baaf8a13083d9e7e1a91509dfca3acbbf2fe8a8b0796e1cc8b0e1fbe3ff519ebd721d1a5fabd2406e281baeaafb11711a54f52a214b508062077f446897a76fe5e01cc06c25e50ebcf8d5a196778f7dda6042884bc9040099d1b6a11fa0302cc2168754169b0ee33c0c49858619b8a04afc1f62adbc6064396c03b86dfbc3fe2ad2278806a1911747fae9dddfa5471a7d8c9f657909cee2f9c30ec035c37491cb196e2a059f0e660e72edcdc7894b510d81b8c8c12763f4bb1180f27fc2e71da0e1241698586e17c30ad3be827f92394752abf46b41fc289aed22c76e1d3aaf58e7cc21452b4cdb5ab914402be0abe4ecfe4c97355ae130c605f3a91f48a6e44e580d21a8a2a593b955054a35ae7546c5f0f85a38de0210e2850c40c40601774e76606e38e6b32c6b19ee026fd369cbf027753c6e126817bdffeea2b2477d3ab93c40e792b28b55a9dc533d5c6b264bc53064c01df1eb8d2160a7ed2e7d2471d0bd746418b7469d7c1e0c7d7dff5962cd45b348cf5b6cb389b2282ef9202de5bb50a8d44d7264a8bc54226ac0f4ff78b5b10cd4671aacc20ac0492c2a2d598d1a6a6db8a7bcd232a0ec93b859f4e916292575411446c356ce90ccff29d371ea02ce3847769acb58cfe9a569252046e3c28cd6d8a496c9427767fb1e5a079c2e6e500a24d96dd5e49da13ad5b6998960565fa1b00facda6cb4a64b1b7e8c890d1bdd24523498d2743e4fac036054e7784e35d34f5dec72ddb24fbc6e914b3400b7a1021e3082e29f1514edc372b8f2469e340ef25379977f0b6bf7d3e86f7585d4b62b7864a2d80359931345096925def3011d7192833f6d99734edb0fe05351e6bdd1a553e7e9dd36466a87a76948d391c95634dd86d40f4e5e19e07cdf8e16e4da5012e4919bdadba550d32a1a91384ab08aca2f9e02c6b02b989b026854d568d28168fa5c2959cad071dfa3a9ab23fd6ce2b981bbcd7c04578db3689a11bb2cb0798bdc2329ff5308165308d283bce61220d603e70ef4c4c3a21354e92e61b5fa04dd7a45be014d6145dab3912219ab0dc5833ea840cfa7ac6160993b3b4479b489a75f1e12e8efa26402a4b9ed968ec495f579a88d9d95bf321bc657728859725c6b97cc0445d8960e3ede23748b5353a57d503cab7d7c47dc4be0ad684b3e6a55442da044f2281fac13c494545284114d60d355d39e195d3c228db05d7436f022c6144826e8b29ebd748985372942ef181a736608cc5242872e8da8d08749f2379f1b90a33f293c5089b3d69b8e3e5a16ce355cb959caca48031aa7455a648b981d8caaf3aca30368f4f628b42a15dd929f6ae5e94aba62cda04cc82b8bd161c10b60c849399a00d50ba2c1fcdef0eff948d748e6b3a18b371f8326c83f1d8ef66e48688fcb58f72e63085461d422b2ce7be82717b8d1868d7ff80d1e3c7418b66d4000dae1ac4b64cb5582515479eef59dee1274d179bc919de616a3e054c71c1c8035015d873b18674c0d3b4515204b00f2510e7bbdd3a458367a41d2eb6d887edb3611491ea72d92e57a1dbeaad02a64f1080d0998733b1aa04da1602fb8638209a5da11ddb5509c877528abaa0a3f80b28715d9386f0d5ebfcd85eeca54fd489d65f51dd14015f9d77fff6ecb48f49b08a30fae9b110038f9396c703469c28b710d5012ecee0f517c4086485b820d3aa0bc088d2fe1ee78d5497a9ad7f772f67744b31f8124ea7509859bbd4527969e8234d79797a3f141db20d8d1b950f2edea7313c269025e612a146f02ff9859160c5b3f3fe6f18220db5d29cab6a41bc8c81180d2995366211993311b9966c248190d8cef493a0edd55773d7e04f37ad1c11801d7e9900faa7079d389f2759d1ff39f39c611295e7d406a7ee14f2a0dc546b0624bdcf3ae67e96893fcd0a0f0b7272bf5c8f58017b6ce10ce97732477797313e0fcbbfc85dfd48de42034c5addd2a87336fc11fd116f40a0d821df675d75cb6dcfe6f369deb722448e9426fc24d8538d36155bd8bf6a73fcb2dd9209d123b5d9537ce4734c4dd4d8bf08181da95d154ab796029109d01c9b4bd388e481172c7a4cb2bed6667fe1c72cd79f001f65c701115621843781dea1cd5bf8cc6b23f3563f0c3e82db52876bf172bc01f383a93ccee8ca11579087f6ec39e87a5d5c0fff7e2435fe678498f773f98494386aea15c3b3556f3b2f9351f027d6a623300623716f01e35a19f42462e6e0e3c421aa7dbb35310bf92d138b8e118e8e3e588835a92bd4f9c56c1b24e91941da5f5ec6e7933d26a63a67507a50805971e30c7f21da2146a4b7d491f75388678c2659bf7e56aa94d8a7be6787e38f740e23e122be4caaae9771d242f5f12a2590778385b228ad2138ed455c4072456caeead73a681e21883406170c4fe75fdf3858e1a48572daaf951e5127ebdbba8f513d44bbb66892eb0c5a8022a656ec7781efaa88890dd2a293c163583fb3d1277489f5c419de25588021af81d58e82ea417cf653ee40f11d42116fe94e6f370fe5b90359ab6b9cc9c0281b98eb7ca559bb24691d97d27c431d8cbc1c42a5f371b4fbacb61c0ed502fcbfd4884f2643a1408f477d7f9cebaf16000d268140f8f60ec16c52e6a34b5b181e9a7303ba879720ee030c7c341843f6077b3fb8cf545bfd66e076d310287389b8d49a6133e7ed7df373e44e156dc1337a0e4769d7a2bf14a937d9dcfdf0ab8f80ae5ba0260be8450d5cd5bf1f5e3f956c78793109e4cb01e5e289aa70f8e707b684cf9c0e7d5478205d9797f7772303a1e723f5c61aa756d08a20b35032a30d93672f6aee28146d23e5b8f1b27a90fd7b9a20fac83654d5f6bb175770013c804be4a7e7d4dace4c4cdd82fb2f39fe18eb95ab34b2208bbc6431cfa76b2464698fe647a8578854b942ce4e10416d2ed29044b7e4bf0589dbd250e369499053aa9d6d83481a44f3901ac3adc8732f5a397e9d7556aa1e0f0d63839ebc8cdb6e8b68887818f4fdf9e9916ba920cf6e5cb2a8a691603da201f47cfe028aa06a17ab7ba073b3b154e8946851f53a866598aeb84c268b880a8d11aef99655bd17511c4d6e33aa50b886843554b594122ffba4bc9339e9b2b59a269e95917eeaf3580502889c634a4bbe2a60abc91de8969e226f06fe1f1c68ee3784a07e72b93e1bdad733de767d2da6cdaf8f08765ee50b4acbfbee13f96236384e46a3049c601201cfbd901225edc6cb587c6e400491392ac6a8241a2c4189b9248745a11db76e042ff7e492949159e49e09b742821aba83bbb6d12362e6d992fdfd84b7a32d7a8853b3eb0dd0378679855bdaf13cec24140df5ad371a42b97c85dedc8cedcbb07be8007204d895608c03b771dfaea91e7ffa51d6e84f04e2b3edea1714bd982e84ce40920d05965e255e9996d507e487a46897e319a62209e4401f6e031089625783409b4dcf2a4a1d592b7933416c2d512974f073a246c647f0883b58e06d471a3f3097f47149d58929aa12c5972eea608041406cb7a648240ad77eda465c1f56f6096831070ae5e1aa69ee93e07a7195e81f9cb6193d425005896b066709748bf9279c151fe1a844942406c363dcf67f7a49ee99f6f0efabaee227de38ec99f0ae9644339780b9a916bb1e3d1840bb0fec52edabac3be8296ebebc077425274deaeb20bf4c7753fd77b5ef3631332af52374aeb343240c7d359db34af2796d70f9b4dc8212e88e055908da0cc6ebe39b11943424246352c4bed35edd031213ad6542fa2d70a4bd25813bfb5882eb6bbfc9852452138f7130764103e0655a8e2412ece0fe5e99b323a7eee7e1326ac2e1f5f996466cdf37ada0f7e8060eaff796d9a28ce5709c3058b399a90ac63c20efc0d091d496723e51872c34b330afda6600f3f5f2c0a03ab176ff110540de0bd7a21d95f03c951c94db41bfacab3196bf041bc9ed6e9fc178a4ba1e7d3562ae311e32114ecbb90846da26a2f0b7bbe1f90716ad39e4b41b505677ff0f74d60f08f7acb6619b86b83e4a942ed77b341a9342cbc96bd9530898b977351bed7f70f348d9fe192182afa2431bb98c974435fab3b386d4a109f064f9a3ddb7db2ca434181dce09c39ba2b28d9ea9f8c334f01293f627c9b67e47f0cd7515e0f7be95ce6437655c144936ba2205f29e86fc73bf72b592f5899a08f78b50333fcc8a6f9b1ac023fa4017153802847ad4ace3e6abe167fd6fdbcc6b3a6412d697af2c2ff2e8b08adce9534f1d42caae66a3f4c1ee3052de966bf5989ceb1d013c97b75442fde30d9b15c9847bd0e403218ea2368e183e6a641b86b275c055740019d983c033f58f6c3435e7b100df12feeb7c7ded61b5268298a14332f0ecec3a1fa11b623b478364e02dd92527d552466b942d06125fdebd6c816863a838280e52edca03b2df82e3a81ba40d21257d9c24610a691be4ee1efbcac744c649df1d688ec3af44a14d7cc591b59e46218116a4751d53ca5d51668a7d44b86eabdcc2387e43dc6580a1d4049fa8b6af8a7d8a051f0b80b985f6b2d46846ae70123c24d1b1f297332168d61a95173d953e9b26b93afa6850f74235e3ce1d6f40dc9140c0907ef83f168c22d22d912a0dc2efdaa9c3da9534e2defa81a678d0593e2331520fb48b7355a4f126dd250edeeefe679725dc662edee16b35c8ed2c69b7c5368c51842b87af84d6435233536da95b83b0116f5d62bfda0008648d9b4baae9d83b0b6c3dbef28abdf5d6f2cb5e259f1ceaf9071c56303944051bdf4f2538da9225766cd023a7501a52881543a467e5d33fe9accf1e7cccf182699448c740a3b2ffd392299c2c33b9d80310a16a693a96d84a87cac6f1db3231e0e10c164630f6edb47d140080beecec42bc8f4c9c8357f6531185a72feb7b280c37612de5a56a0a76125459b89e1834840a8aca2a9ed36806aba54abaf50ae00afa11e173f677525d6e12861e0006d18580aa0eead45475b0a312ee67df43a01a1e5f9f23a2e7983f913ecc993ff243b8619bd64cdca92dc6ce2740064a2e8b2fd4b15f112ecaf106c0f72752d822824b00efb1e48c721973fd6593841e60a2af8d986544400ab0df03570ded9bc3535882d066f9108dcdfcf99c909d89f5b28d73dee9606236d43e3b050063cb4e0d8a96af33295a69355c05840f8d0c6ba104fed6981967feacc3aadfc4aee800266a1b9527da3e8e2f7cc1f4dfc3afcb5a1b35018d56a35a38f4acc2124956bb5f0a0508e1688d9c8b1aba9074de3d2a6d54a564c774abd645c156c4"})
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
connect$rose(r5, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c)
connect$rose(r5, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @bcast}, 0x1c)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x7, 0x0, &(0x7f0000000000)="e0b9547ed387db", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190)
setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190)
setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x4e22, @multicast2}}}, 0x88)
r8 = socket$inet6(0xa, 0x3, 0x84)
connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)=0x3)
close(r2)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)

407.92908ms ago: executing program 0 (id=1556):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000008c0)=0x2, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x20}}, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0xc0}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x7, 0x1, 0x0, 0x0, 0x0, {0x3, 0x0, 0x6}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x850}, 0x10)
writev(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r3}, 0x18)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0)

362.125161ms ago: executing program 1 (id=1557):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800c00180008ac0f00"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@deltaction={0x14, 0x31, 0x20, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x4020000)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', <r4=>0x0})
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000001c0)={r4, 0x1, 0xffffffffffffffde, @remote}, 0x10)
r5 = socket$kcm(0x10, 0x2, 0x10)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r6, 0x0, 0x18, &(0x7f0000000080)=0x5, 0x4)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x40010)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000140)={0x5811, 0x9, 0xfffffffb, 0xffff}, 0x6f)
socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000180)={0x1, 0x1000}, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0xffffffb1)
r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
accept4$unix(r1, 0x0, &(0x7f0000000240), 0x80800)
bind$x25(r9, &(0x7f0000000200)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12)
bind$x25(r8, &(0x7f0000000080), 0x12)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000740), 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000c40)=""/140, 0x8c}, {&(0x7f0000000880)=""/219, 0xdb}, {&(0x7f0000000680)}, {&(0x7f0000000980)=""/109, 0x6d}, {&(0x7f0000000a00)=""/187, 0xbb}, {&(0x7f0000000ac0)=""/199, 0xc7}], 0x6, &(0x7f0000001040)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x180}, 0x121)
r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000700)={'bond0\x00'})
ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000000)={{r1}, 0x2a, 0x80000007ff, 0x2})
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x390, 0xffffffff, 0x1c8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@empty, @loopback, [0xff000000, 0xffffff00, 0xff], [0xff, 0x0, 0xff, 0xff], 'ip6erspan0\x00', 'wg0\x00', {0xff}, {0xff}, 0x16, 0x0, 0x1, 0x42}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"37e7"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@private2, @private0, [0x0, 0xffffffff, 0xff, 0xff000000], [0xffffffff, 0x0, 0xff000000, 0xffffff00], 'veth1_to_bond\x00', 'batadv0\x00', {0xff}, {}, 0x0, 0x2, 0x3, 0x2}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0)

141.163965ms ago: executing program 1 (id=1558):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x3a, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"4adcda08f6e83e2aa00e133f88a8349f246e"}}}}, 0xfc6d)

58.222117ms ago: executing program 1 (id=1559):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0)
write$cgroup_subtree(r0, 0x0, 0xa)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
recvmsg$qrtr(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x38, 0x10000)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x14, 0x4, 0x8, 0xd}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x2c)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r3, &(0x7f0000000280), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x17, &(0x7f0000000280)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x100}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xf}], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r4, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffff8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080)
socket$packet(0x11, 0x2, 0x300)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000023c0)={'filter\x00', 0x7, 0x4, 0x4d0, 0x110, 0x20, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x4, &(0x7f0000002380), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @private=0xa010102, @loopback, 0x1, 0x1}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xfffffffc, 0x9, 0x7, 0x2}}}, {{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x6, 'system_u:object_r:getty_var_run_t:s0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x520)

0s ago: executing program 1 (id=1560):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
accept4$netrom(r1, 0x0, &(0x7f00000003c0), 0x800)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0xcc15, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000b40), 0xffffffffffffffff)
r2 = socket$xdp(0x2c, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000280)={0x0, 0x0, 0x1000, 0xffffffff}, 0x20)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r4, &(0x7f0000000200)=0x10001, 0x12)
sendfile(r4, r3, 0x0, 0xf03a0005)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r6, &(0x7f00000000c0), 0x9)
sendfile(r6, r5, 0x0, 0x10000)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="44000000020601040000000000000000000000000c00078008000840000000540500010006000000050005000a00000005000400000000000900020073797a31000000001648bcebb1babf81"], 0x44}}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180009ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x14, 0x13, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}}, 0x4000)
socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000faffffff00000000000000"], 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:4602' (ED25519) to the list of known hosts.
syzkaller login: [   48.550262][ T5762] cgroup: Unknown subsys name 'net'
[   48.689403][ T5762] cgroup: Unknown subsys name 'cpuset'
[   48.693381][ T5762] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.440288][ T5762] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.965491][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.969365][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.975444][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.981240][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.997160][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.001752][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.016088][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.019284][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.026051][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.030492][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.038620][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.044936][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.049175][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.058956][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.062445][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.345072][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   56.434529][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   56.455051][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   56.544315][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.547944][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.551007][ T5829] bridge_slave_0: entered allmulticast mode
[   56.554553][ T5829] bridge_slave_0: entered promiscuous mode
[   56.594201][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.599038][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.601923][ T5829] bridge_slave_1: entered allmulticast mode
[   56.606118][ T5829] bridge_slave_1: entered promiscuous mode
[   56.628400][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.630919][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.633365][ T5835] bridge_slave_0: entered allmulticast mode
[   56.637946][ T5835] bridge_slave_0: entered promiscuous mode
[   56.671197][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.674015][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.677218][ T5832] bridge_slave_0: entered allmulticast mode
[   56.680993][ T5832] bridge_slave_0: entered promiscuous mode
[   56.685239][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.688192][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.691066][ T5832] bridge_slave_1: entered allmulticast mode
[   56.694856][ T5832] bridge_slave_1: entered promiscuous mode
[   56.698810][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.701631][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.704518][ T5835] bridge_slave_1: entered allmulticast mode
[   56.709315][ T5835] bridge_slave_1: entered promiscuous mode
[   56.728954][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.765221][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.771929][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.793751][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.827765][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.861712][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.868741][ T5835] team0: Port device team_slave_0 added
[   56.873968][ T5829] team0: Port device team_slave_0 added
[   56.902200][ T5835] team0: Port device team_slave_1 added
[   56.909788][ T5829] team0: Port device team_slave_1 added
[   56.914110][ T5832] team0: Port device team_slave_0 added
[   56.918360][ T5832] team0: Port device team_slave_1 added
[   56.953676][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.956198][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.965010][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.984354][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.987306][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.997687][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.019033][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.021699][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.031595][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.040443][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.043146][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.053074][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.064867][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.068029][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.077991][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.085000][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.089459][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.098968][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.170151][ T5835] hsr_slave_0: entered promiscuous mode
[   57.173302][ T5835] hsr_slave_1: entered promiscuous mode
[   57.183971][ T5832] hsr_slave_0: entered promiscuous mode
[   57.189566][ T5832] hsr_slave_1: entered promiscuous mode
[   57.192372][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.196100][ T5832] Cannot create hsr debugfs directory
[   57.259614][ T5829] hsr_slave_0: entered promiscuous mode
[   57.262635][ T5829] hsr_slave_1: entered promiscuous mode
[   57.266080][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.269007][ T5829] Cannot create hsr debugfs directory
[   57.598649][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.607218][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.614802][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.622137][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.689223][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.694591][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.711621][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.719196][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.753342][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.762911][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.778914][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.797585][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.842363][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.876580][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   57.887880][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.890810][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.903823][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.906764][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.013651][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.070266][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.081772][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   58.090306][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.092682][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.108087][   T54] Bluetooth: hci1: command tx timeout
[   58.108282][ T5837] Bluetooth: hci2: command tx timeout
[   58.110334][   T54] Bluetooth: hci0: command tx timeout
[   58.119165][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.121520][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.126579][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   58.139567][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.141913][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.160718][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.163024][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.249346][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.334852][ T5835] veth0_vlan: entered promiscuous mode
[   58.361179][ T5835] veth1_vlan: entered promiscuous mode
[   58.374949][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.400064][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.402480][ T5835] veth0_macvtap: entered promiscuous mode
[   58.411875][ T5835] veth1_macvtap: entered promiscuous mode
[   58.439977][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.449882][ T5832] veth0_vlan: entered promiscuous mode
[   58.454128][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.468291][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.471265][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.473825][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.478950][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.492725][ T5832] veth1_vlan: entered promiscuous mode
[   58.511790][ T5829] veth0_vlan: entered promiscuous mode
[   58.547903][ T5829] veth1_vlan: entered promiscuous mode
[   58.558341][ T5832] veth0_macvtap: entered promiscuous mode
[   58.573424][ T5832] veth1_macvtap: entered promiscuous mode
[   58.599577][ T5829] veth0_macvtap: entered promiscuous mode
[   58.604036][ T5829] veth1_macvtap: entered promiscuous mode
[   58.616427][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.637907][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.641604][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.644733][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.656193][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.661937][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.679018][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.681868][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.684641][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.689455][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.694749][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.698868][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.701874][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.704507][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.728279][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.732376][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.790423][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.875034][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.879983][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.909224][ T5902] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2'.
[   58.937402][ T5902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'.
[   58.956499][ T2993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.959479][ T2993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.013421][ T5904] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4'.
[   59.018916][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.023042][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.048979][ T2993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.051933][ T2993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.836657][ T5933] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[   59.854464][ T5935] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   59.884014][ T5935] syz.1.15 (5935) used greatest stack depth: 20664 bytes left
[   60.044103][ T5939] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.185928][ T5840] Bluetooth: hci0: command tx timeout
[   60.187766][ T5840] Bluetooth: hci2: command tx timeout
[   60.188841][   T54] Bluetooth: hci1: command tx timeout
[   60.249780][ T5949] syz.0.20 uses obsolete (PF_INET,SOCK_PACKET)
[   60.422684][ T5951] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.21'.
[   60.429649][ T5951] openvswitch: netlink: Port -8 exceeds max allowable 65535
[   60.494462][ T5958] netlink: 88 bytes leftover after parsing attributes in process `syz.0.24'.
[   60.502919][ T5959] netlink: 32 bytes leftover after parsing attributes in process `syz.0.24'.
[   60.587779][ T5939] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.864841][ T5982] IPVS: length: 209 != 24
[   60.869722][ T5982] C: renamed from lo (while UP)
[   60.874208][ T5982] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   61.121033][ T5994] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.452028][ T6004] syzkaller1: entered promiscuous mode
[   61.454165][ T6004] syzkaller1: entered allmulticast mode
[   61.617262][ T5939] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.621675][ T6022] x_tables: duplicate underflow at hook 2
[   61.670807][ T6022] Zero length message leads to an empty skb
[   61.708464][ T5939] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.804351][ T5939] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.823214][ T5939] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.832444][ T5939] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.859923][ T5939] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.870666][ T6033] netlink: 28 bytes leftover after parsing attributes in process `syz.1.46'.
[   61.972540][ T6043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.51'.
[   61.976369][ T6043] netlink: 'syz.0.51': attribute type 2 has an invalid length.
[   61.979562][ T6043] netlink: 16 bytes leftover after parsing attributes in process `syz.0.51'.
[   62.018359][ T6044] kthread_run failed with err -4
[   62.034268][ T6048] openvswitch: netlink: IP tunnel TTL not specified.
[   62.060232][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.52'.
[   62.074838][ T6050] gretap1: entered promiscuous mode
[   62.108747][ T6050] netlink: 'syz.1.52': attribute type 4 has an invalid length.
[   62.153627][ T6050] syz.1.52 (6050) used greatest stack depth: 20568 bytes left
[   62.266232][   T54] Bluetooth: hci2: command tx timeout
[   62.267264][ T5837] Bluetooth: hci0: command tx timeout
[   62.268423][   T54] Bluetooth: hci1: command tx timeout
[   62.673597][ T6098] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.016882][ T6120] netlink: 'syz.0.77': attribute type 1 has an invalid length.
[   63.152366][ T6128] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   64.278757][ T6177] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   64.336800][ T6180] __nla_validate_parse: 8 callbacks suppressed
[   64.336826][ T6180] netlink: 32 bytes leftover after parsing attributes in process `syz.1.101'.
[   64.347346][   T54] Bluetooth: hci0: command tx timeout
[   64.347420][ T5840] Bluetooth: hci2: command tx timeout
[   64.349440][   T54] Bluetooth: hci1: command tx timeout
[   64.396595][ T6181] warning: `syz.2.100' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   64.527392][ T6196] netlink: 64 bytes leftover after parsing attributes in process `syz.0.107'.
[   64.530721][ T6198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.108'.
[   64.810701][ T6212] netlink: 'syz.2.113': attribute type 1 has an invalid length.
[   65.064810][ T6221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.115'.
[   65.291898][ T6227] veth3: entered promiscuous mode
[   65.311177][ T6230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   65.333694][ T6223] netlink: 120 bytes leftover after parsing attributes in process `syz.2.116'.
[   65.823620][ T6245] netlink: 20 bytes leftover after parsing attributes in process `syz.2.122'.
[   66.169064][ T6268] netlink: 'syz.1.127': attribute type 1 has an invalid length.
[   66.189961][ T6268] 8021q: adding VLAN 0 to HW filter on device bond1
[   66.217654][ T6268] 8021q: adding VLAN 0 to HW filter on device bond1
[   66.220350][ T6268] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   66.224667][ T6268] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   66.691893][ T6292] Bluetooth: MGMT ver 1.23
[   66.813609][ T6304] netlink: 16 bytes leftover after parsing attributes in process `syz.2.142'.
[   66.921680][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.144'.
[   66.927723][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.144'.
[   67.248524][ T6326] tc_dump_action: action bad kind
[   67.254050][ T6326] netlink: 'syz.0.152': attribute type 1 has an invalid length.
[   67.258451][ T6326] netlink: 'syz.0.152': attribute type 2 has an invalid length.
[   67.261641][ T6326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.152'.
[   67.418125][ T6335] tap0: tun_chr_ioctl cmd 1074025675
[   67.419800][ T6335] tap0: persist disabled
[   67.450221][ T6337] x_tables: duplicate underflow at hook 2
[   67.567999][ T6343] lo speed is unknown, defaulting to 1000
[   67.570200][ T6343] lo speed is unknown, defaulting to 1000
[   67.573964][ T6343] lo speed is unknown, defaulting to 1000
[   67.584554][ T6343] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   67.601753][ T6343] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   67.635963][ T6343] lo speed is unknown, defaulting to 1000
[   67.640453][ T6343] lo speed is unknown, defaulting to 1000
[   67.644795][ T6343] lo speed is unknown, defaulting to 1000
[   68.507375][   T32] wlan1: Trigger new scan to find an IBSS to join
[   69.263020][ T6390] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   69.320350][ T6393] bond0: entered promiscuous mode
[   69.322256][ T6393] bond_slave_0: entered promiscuous mode
[   69.324356][ T6393] bond_slave_1: entered promiscuous mode
[   69.329027][ T6393] batadv0: entered promiscuous mode
[   69.331649][ T6393] batadv0: left promiscuous mode
[   69.333688][ T6393] bond0: left promiscuous mode
[   69.340202][ T6393] bond_slave_0: left promiscuous mode
[   69.342081][ T6393] bond_slave_1: left promiscuous mode
[   69.371891][ T6397] __nla_validate_parse: 2 callbacks suppressed
[   69.371902][ T6397] netlink: 28 bytes leftover after parsing attributes in process `syz.2.178'.
[   69.415179][ T6395] batadv_slave_1: entered promiscuous mode
[   69.448666][ T6395] netlink: 16 bytes leftover after parsing attributes in process `syz.0.179'.
[   69.454971][ T6394] batadv_slave_1: left promiscuous mode
[   69.486698][ T6405] netlink: 128 bytes leftover after parsing attributes in process `syz.2.182'.
[   69.489550][ T6405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'.
[   69.787667][ T6431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'.
[   69.791112][ T6431] netlink: 20 bytes leftover after parsing attributes in process `syz.2.185'.
[   69.803271][ T6431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'.
[   69.951556][ T6449] netlink: 'syz.0.193': attribute type 5 has an invalid length.
[   69.954784][ T6450] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   69.964677][ T6449] ip6erspan0: entered promiscuous mode
[   69.972529][ T6449] netlink: 136 bytes leftover after parsing attributes in process `syz.0.193'.
[   69.975745][ T6449] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[   70.258039][ T6474] x_tables: duplicate underflow at hook 2
[   70.369199][ T6479] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.203'.
[   70.910888][ T6492] netlink: 28 bytes leftover after parsing attributes in process `syz.2.206'.
[   70.917698][ T6492] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   70.991090][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.465817][ T1087] wlan1: Trigger new scan to find an IBSS to join
[   71.467794][ T1087] wlan1: Trigger new scan to find an IBSS to join
[   71.547473][ T6557] netlink: 'syz.1.228': attribute type 1 has an invalid length.
[   71.882757][ T6578] sctp: [Deprecated]: syz.1.236 (pid 6578) Use of struct sctp_assoc_value in delayed_ack socket option.
[   71.882757][ T6578] Use struct sctp_sack_info instead
[   72.228717][ T6588] netlink: 'syz.2.240': attribute type 1 has an invalid length.
[   72.358932][ T6592] netlink: 'syz.2.241': attribute type 1 has an invalid length.
[   72.803653][ T6606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   73.273128][ T6648] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   73.763048][ T6692] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[   73.840005][ T6700] delete_channel: no stack
[   73.952005][ T6714] x_tables: duplicate underflow at hook 3
[   74.104588][ T6721] netlink: 'syz.2.285': attribute type 1 has an invalid length.
[   74.127904][ T6721] 8021q: adding VLAN 0 to HW filter on device bond1
[   74.142213][ T6721] 8021q: adding VLAN 0 to HW filter on device bond1
[   74.144650][ T6721] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   74.149023][ T6721] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   74.433732][ T6735] __nla_validate_parse: 7 callbacks suppressed
[   74.433749][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.290'.
[   74.441056][ T6735] netlink: 16 bytes leftover after parsing attributes in process `syz.2.290'.
[   74.516531][ T3534] wlan1: Trigger new scan to find an IBSS to join
[   74.843159][ T6754] netlink: 28 bytes leftover after parsing attributes in process `syz.0.299'.
[   74.863471][ T6759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.298'.
[   75.232617][ T6791] netlink: 'syz.2.304': attribute type 13 has an invalid length.
[   75.239232][ T6791] netlink: 'syz.2.304': attribute type 17 has an invalid length.
[   75.326635][ T6791] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   75.332496][   T24] lo speed is unknown, defaulting to 1000
[   75.344010][ T6775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.349764][ T6775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.466255][   T32] wlan1: Trigger new scan to find an IBSS to join
[   75.468961][ T2993] wlan1: Creating new IBSS network, BSSID de:0a:10:3a:3c:b2
[   75.788754][ T6800] netlink: 'syz.1.309': attribute type 22 has an invalid length.
[   75.791858][ T6800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.309'.
[   75.803529][ T6800] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   75.807294][ T6800] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   75.810566][ T6800] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   75.813962][ T6800] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   75.819689][ T6800] netlink: 'syz.1.309': attribute type 22 has an invalid length.
[   75.822641][ T6800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.309'.
[   75.827323][ T6800] IPVS: length: 24 != 226226328
[   75.829272][ T6801] IPVS: length: 24 != 226226328
[   75.833198][ T6800] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   75.840706][ T6801] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   75.969644][ T6810] netlink: 40 bytes leftover after parsing attributes in process `syz.2.312'.
[   75.993351][ T6812] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   75.996052][ T6812] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   76.082597][ T6814] lo speed is unknown, defaulting to 1000
[   76.255350][ T6823] netlink: 'syz.0.317': attribute type 1 has an invalid length.
[   76.266348][ T6823] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.317'.
[   76.350235][ T6810] netlink: 28 bytes leftover after parsing attributes in process `syz.2.312'.
[   76.550513][ T6835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.321'.
[   76.680138][ T5741] IPVS: starting estimator thread 0...
[   76.683607][ T6848] IPVS: set_ctl: invalid protocol: 33 10.1.1.2:20002
[   76.765836][ T6849] IPVS: using max 45 ests per chain, 108000 per kthread
[   76.794458][ T6857] x_tables: duplicate underflow at hook 1
[   76.943964][ T6877] openvswitch: netlink: IP tunnel TTL not specified.
[   77.083900][ T6895] delete_channel: no stack
[   77.088719][ T6895] netlink: 'syz.1.342': attribute type 1 has an invalid length.
[   77.304552][ T6916] netlink: 'syz.2.348': attribute type 1 has an invalid length.
[   77.319344][ T6916] 8021q: adding VLAN 0 to HW filter on device bond2
[   77.337294][ T6916] 8021q: adding VLAN 0 to HW filter on device bond2
[   77.339552][ T6916] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   77.353730][ T6916] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   77.366231][ T6923] vlan0: entered promiscuous mode
[   77.374280][ T6921] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   77.597680][ T6944] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   77.605028][ T6944] netlink: 'syz.0.360': attribute type 10 has an invalid length.
[   77.616367][ T6944] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   77.629212][ T6944] bridge_slave_0: left allmulticast mode
[   77.636219][ T6944] bridge_slave_0: left promiscuous mode
[   77.639256][ T6944] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.650279][ T6944] bridge_slave_1: left allmulticast mode
[   77.652262][ T6944] bridge_slave_1: left promiscuous mode
[   77.654408][ T6944] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.667134][ T6944] bond0: (slave bond_slave_0): Releasing backup interface
[   77.673942][ T6944] bond0: (slave bond_slave_1): Releasing backup interface
[   77.689848][ T6944] team0: Port device team_slave_0 removed
[   77.695140][ T6944] team0: Port device team_slave_1 removed
[   77.698379][ T6944] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.700700][ T6944] batman_adv: batadv0: Removing interface: batadv_slave_0
[   77.704720][ T6944] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.709125][ T6944] batman_adv: batadv0: Removing interface: batadv_slave_1
[   77.717932][ T6944] bond0: (slave wlan1): Releasing backup interface
[   77.794002][ T6957] tipc: Started in network mode
[   77.796776][ T6957] tipc: Node identity aec48b6855c5, cluster identity 4711
[   77.799321][ T6957] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.801895][ T6957] syzkaller0: entered promiscuous mode
[   77.803764][ T6957] syzkaller0: entered allmulticast mode
[   77.816419][ T6957] sch_fq: defrate 257 ignored.
[   77.821338][ T6957] tipc: Resetting bearer <eth:syzkaller0>
[   77.833075][ T6956] tipc: Resetting bearer <eth:syzkaller0>
[   77.844282][ T6956] tipc: Disabling bearer <eth:syzkaller0>
[   78.294771][ T6974] Bluetooth: MGMT ver 1.23
[   78.434790][ T6983] Illegal XDP return value 4291306120 on prog  (id 99) dev N/A, expect packet loss!
[   78.548257][ T6992] openvswitch: netlink: IP tunnel TTL not specified.
[   79.173530][ T7051] lo speed is unknown, defaulting to 1000
[   79.208143][ T7051] netlink: 'syz.2.394': attribute type 13 has an invalid length.
[   79.210634][ T7051] netlink: 'syz.2.394': attribute type 17 has an invalid length.
[   79.219416][ T7051] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   79.380545][ T7062] C: renamed from team_slave_0 (while UP)
[   79.391803][ T7062] netlink: 'syz.2.397': attribute type 3 has an invalid length.
[   79.395033][ T7062] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   79.459598][ T7064] __nla_validate_parse: 25 callbacks suppressed
[   79.459610][ T7064] netlink: 40 bytes leftover after parsing attributes in process `syz.2.398'.
[   79.837308][ T7076] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.402'.
[   79.933571][ T7085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.405'.
[   80.033260][ T7096] netlink: 40 bytes leftover after parsing attributes in process `syz.1.410'.
[   80.315454][ T7110] block nbd0: server does not support multiple connections per device.
[   80.318639][ T7110] block nbd0: shutting down sockets
[   80.369971][ T7112] bridge_slave_1: entered promiscuous mode
[   80.372290][ T7112] bridge_slave_1: entered allmulticast mode
[   80.553046][ T7120] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   80.660088][ T7124] openvswitch: netlink: Flow actions attr not present in new flow.
[   80.773592][ T7128] netlink: 40 bytes leftover after parsing attributes in process `syz.0.422'.
[   81.084692][ T7135] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20001
[   81.152394][ T7139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.425'.
[   81.159933][ T7138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.425'.
[   81.239192][  T791] cfg80211: failed to load regulatory.db
[   81.333971][ T7152] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   81.384965][ T7158] netlink: 24 bytes leftover after parsing attributes in process `syz.0.430'.
[   81.421194][ T7158] lo speed is unknown, defaulting to 1000
[   81.606229][ T7170] syzkaller0: entered promiscuous mode
[   81.610280][ T7170] syzkaller0: entered allmulticast mode
[   81.769835][ T7183] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   81.844205][ T7185] netlink: 32 bytes leftover after parsing attributes in process `syz.2.441'.
[   81.898473][ T7192] netlink: 28 bytes leftover after parsing attributes in process `syz.1.442'.
[   81.973216][ T7202] xt_CONNSECMARK: invalid mode: 254
[   82.567906][ T7225] wg2: entered promiscuous mode
[   82.569520][ T7225] wg2: entered allmulticast mode
[   82.623651][ T7232] tipc: Started in network mode
[   82.627723][ T7232] tipc: Node identity 92e62ad316c7, cluster identity 4711
[   82.630719][ T7232] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.799849][ T5741] IPVS: starting estimator thread 0...
[   82.860593][ T7249] ip6tnl1: entered promiscuous mode
[   82.881607][ T7250] lo speed is unknown, defaulting to 1000
[   82.885887][ T7246] IPVS: using max 53 ests per chain, 127200 per kthread
[   83.482415][ T7283] netlink: 'syz.0.474': attribute type 10 has an invalid length.
[   83.487785][ T7283] team0: entered promiscuous mode
[   83.490218][ T7283] bridge0: port 1(team0) entered blocking state
[   83.492980][ T7283] bridge0: port 1(team0) entered disabled state
[   83.496645][ T7283] team0: entered allmulticast mode
[   83.736183][ T7294] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   83.746750][ T5873] tipc: Node number set to 2216766163
[   83.778796][ T7298] syzkaller0: entered promiscuous mode
[   83.783159][ T7298] syzkaller0: entered allmulticast mode
[   83.795084][ T7298] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   84.110062][ T7321] netlink: 'syz.2.489': attribute type 5 has an invalid length.
[   84.112601][ T7321] netlink: 'syz.2.489': attribute type 7 has an invalid length.
[   84.124061][ T7321] : entered promiscuous mode
[   84.144699][ T7317] lo speed is unknown, defaulting to 1000
[   84.183514][ T7329] syzkaller1: entered promiscuous mode
[   84.187614][ T7329] syzkaller1: entered allmulticast mode
[   84.190009][ T7331] netlink: 'syz.0.488': attribute type 13 has an invalid length.
[   84.192601][ T7331] netlink: 'syz.0.488': attribute type 17 has an invalid length.
[   84.233689][ T7331] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   84.400643][ T7347] x_tables: duplicate underflow at hook 3
[   84.402429][ T7343] tipc: Failed to remove unknown binding: 66,1,1/2216766163:876093563/876093565
[   84.417367][ T7343] tipc: Failed to remove unknown binding: 66,1,1/2216766163:876093563/876093565
[   84.432481][ T7343] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.505589][   T32] wlan1: Trigger new scan to find an IBSS to join
[   84.568225][ T7358] x_tables: duplicate underflow at hook 2
[   84.588870][ T7361] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   84.631399][ T7365] __nla_validate_parse: 10 callbacks suppressed
[   84.631410][ T7365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.502'.
[   84.650870][ T7365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.502'.
[   84.862528][ T7393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.515'.
[   84.933705][ T7401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.519'.
[   84.949813][ T7401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.519'.
[   84.955084][ T7407] netlink: 'syz.0.520': attribute type 1 has an invalid length.
[   84.971399][ T7407] 8021q: adding VLAN 0 to HW filter on device bond1
[   84.988591][ T7407] 8021q: adding VLAN 0 to HW filter on device bond1
[   84.990795][ T7407] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   84.994752][ T7407] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   85.442370][ T7432] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.446920][ T7432] batadv_slave_0: entered promiscuous mode
[   85.456346][ T7432] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[   85.460964][ T7432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.529'.
[   85.464536][ T7432] bridge_slave_1: left allmulticast mode
[   85.469833][ T7432] bridge_slave_1: left promiscuous mode
[   85.472407][ T7432] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.481713][ T7432] bridge_slave_0: left allmulticast mode
[   85.484165][ T7432] bridge_slave_0: left promiscuous mode
[   85.489913][ T7432] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.692100][ T7438] x_tables: duplicate underflow at hook 3
[   86.313830][ T7477] netlink: 'syz.1.545': attribute type 10 has an invalid length.
[   86.317342][ T7477] netlink: 40 bytes leftover after parsing attributes in process `syz.1.545'.
[   86.320236][ T7477] dummy0: entered promiscuous mode
[   86.322050][ T7477] dummy0: entered allmulticast mode
[   86.326139][ T7477] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   86.369768][ T7482] netlink: 'syz.0.548': attribute type 2 has an invalid length.
[   86.373057][ T7482] netlink: 666 bytes leftover after parsing attributes in process `syz.0.548'.
[   86.381861][ T7482] netlink: 'syz.0.548': attribute type 2 has an invalid length.
[   86.413887][ T7484] netlink: 104 bytes leftover after parsing attributes in process `syz.1.549'.
[   86.599675][ T7496] netlink: 'syz.0.555': attribute type 1 has an invalid length.
[   86.638071][ T7496] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   86.641930][ T7496] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   86.645954][ T7496] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   86.649782][ T7496] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   86.655724][ T7496] bond2: (slave geneve2): making interface the new active one
[   86.660577][ T7496] bond2: (slave geneve2): Enslaving as an active interface with an up link
[   86.678869][ T7496] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[   86.685751][ T7496] netlink: 28 bytes leftover after parsing attributes in process `syz.0.555'.
[   86.699198][ T7501] bond0: (slave bond_slave_0): Releasing backup interface
[   86.704086][ T7501] bond0: (slave bond_slave_1): Releasing backup interface
[   86.719010][ T7501] team0: Port device team_slave_0 removed
[   86.728994][ T7501] team0: Port device team_slave_1 removed
[   86.732672][ T7501] batman_adv: batadv0: Removing interface: batadv_slave_0
[   86.741659][ T7501] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   86.744547][ T7501] batman_adv: batadv0: Removing interface: batadv_slave_1
[   86.760083][ T7496] 8021q: adding VLAN 0 to HW filter on device bond2
[   86.795181][ T7503] 8021q: adding VLAN 0 to HW filter on device batadv1
[   86.870109][ T7505] lo speed is unknown, defaulting to 1000
[   87.072710][ T7520] lo speed is unknown, defaulting to 1000
[   87.119212][ T7522] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[   87.466968][ T2993] wlan1: Trigger new scan to find an IBSS to join
[   87.558140][ T7532] x_tables: duplicate underflow at hook 2
[   88.251822][ T7548] xt_CT: No such helper "pptp"
[   88.517114][ T7555] geneve3: entered promiscuous mode
[   89.344898][ T7560] validate_nla: 1 callbacks suppressed
[   89.344933][ T7560] netlink: 'syz.0.572': attribute type 13 has an invalid length.
[   89.354298][ T7560] netlink: 'syz.0.572': attribute type 11 has an invalid length.
[   89.471108][ T7562] IPVS: persistence engine module ip_vs_pe_ not found
[   89.651085][ T7571] delete_channel: no stack
[   89.831974][ T7583] __nla_validate_parse: 10 callbacks suppressed
[   89.831986][ T7583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.580'.
[   89.841661][ T7583] netlink: 'syz.0.580': attribute type 1 has an invalid length.
[   89.844972][ T7583] netlink: 224 bytes leftover after parsing attributes in process `syz.0.580'.
[   89.857053][ T7585] netlink: 40 bytes leftover after parsing attributes in process `syz.2.581'.
[   89.877231][ T7583] xt_CT: No such helper "snmp"
[   89.893261][ T7588] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.977177][ T7594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.585'.
[   89.990018][ T7596] netlink: 'syz.2.586': attribute type 1 has an invalid length.
[   89.993064][ T7596] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.586'.
[   90.019965][ T7594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.585'.
[   90.025963][ T7594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.585'.
[   90.039473][ T7594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.585'.
[   90.047643][ T7594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.585'.
[   90.053835][ T7594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.585'.
[   90.138313][ T7594] bridge_slave_1: left promiscuous mode
[   90.140570][ T7594] bridge_slave_1: left allmulticast mode
[   90.309833][ T7594] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[   90.335121][ T7594] ip6erspan0: left promiscuous mode
[   90.341898][ T7594] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[   90.344705][ T7594] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[   90.347730][ T7594] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[   90.350415][ T7594] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[   90.358807][ T7594] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.362108][ T7594] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.364755][ T7594] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.368111][ T7594] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.371163][ T7594] geneve3: left promiscuous mode
[   90.379438][ T7599] tipc: Started in network mode
[   90.385462][ T7599] tipc: Node identity 0a5d69d870b7, cluster identity 4711
[   90.387777][ T7599] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.390469][ T7598] tipc: Resetting bearer <eth:syzkaller0>
[   90.393115][ T7600] syzkaller0: entered promiscuous mode
[   90.398540][ T7600] syzkaller0: entered allmulticast mode
[   90.402902][ T7597] tipc: Resetting bearer <eth:syzkaller0>
[   90.412125][ T7597] tipc: Disabling bearer <eth:syzkaller0>
[   90.505498][   T60] wlan1: Trigger new scan to find an IBSS to join
[   90.527815][ T7614] netlink: 'syz.2.590': attribute type 1 has an invalid length.
[   90.602323][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.604787][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.638787][ T7618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   90.668409][ T7624] macvlan1: entered promiscuous mode
[   90.671182][ T7624] ipvlan0: entered promiscuous mode
[   90.673695][ T7624] ipvlan0: left promiscuous mode
[   90.676019][ T7624] macvlan1: left promiscuous mode
[   90.742147][ T7628] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.746254][ T7628] syzkaller0: entered promiscuous mode
[   90.748367][ T7628] syzkaller0: entered allmulticast mode
[   90.764149][ T7628] tipc: Resetting bearer <eth:syzkaller0>
[   90.768771][ T7627] tipc: Resetting bearer <eth:syzkaller0>
[   90.780074][ T7627] tipc: Disabling bearer <eth:syzkaller0>
[   91.093538][ T7648] netlink: 'syz.2.602': attribute type 10 has an invalid length.
[   91.121552][ T7648] team0: Port device geneve0 added
[   91.252768][ T7658] lo speed is unknown, defaulting to 1000
[   91.501778][ T7684] IPv6: addrconf: prefix option has invalid lifetime
[   91.522789][ T7686] x_tables: duplicate underflow at hook 3
[   91.530826][ T7684] IPv6: addrconf: prefix option has invalid lifetime
[   91.741900][ T7700] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   91.894538][ T7714] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   92.263378][ T7738] netlink: 'syz.1.630': attribute type 1 has an invalid length.
[   92.300503][ T7739] lo speed is unknown, defaulting to 1000
[   92.972280][ T7777] netlink: 'syz.1.642': attribute type 10 has an invalid length.
[   92.979098][ T7777] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.005473][ T7777] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   93.096024][ T7785] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[   93.275185][ T7792] sctp: [Deprecated]: syz.0.648 (pid 7792) Use of int in max_burst socket option deprecated.
[   93.275185][ T7792] Use struct sctp_assoc_value instead
[   93.465527][ T1090] wlan1: Trigger new scan to find an IBSS to join
[   93.754104][ T7832] gretap1: entered promiscuous mode
[   93.756650][ T7832] gretap1: entered allmulticast mode
[   93.858402][ T7856] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   94.374512][ T7904] netlink: 'syz.2.684': attribute type 3 has an invalid length.
[   94.386586][   T65] wlan1: Creating new IBSS network, BSSID 82:fa:ce:72:d5:a7
[   94.394191][ T7904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.495204][ T7908] lo speed is unknown, defaulting to 1000
[   94.544705][  T791] IPVS: starting estimator thread 0...
[   94.645444][ T7913] IPVS: using max 62 ests per chain, 148800 per kthread
[   94.790281][   T13] IPVS: stop unused estimator thread 0...
[   94.818535][ T7930] pim6reg: entered allmulticast mode
[   94.823588][ T7930] pim6reg: left allmulticast mode
[   94.901138][ T7934] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   94.905030][ T7934] syzkaller0: entered promiscuous mode
[   94.907390][ T7934] syzkaller0: entered allmulticast mode
[   94.926439][ T7934] __nla_validate_parse: 95 callbacks suppressed
[   94.926452][ T7934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.693'.
[   95.063591][ T7936] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   95.398379][ T7942] netlink: 40 bytes leftover after parsing attributes in process `syz.1.696'.
[   95.817969][ T7976] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.822378][ T7976] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.825225][ T7976] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.830156][ T7976] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.850437][ T7982] lo speed is unknown, defaulting to 1000
[   96.174086][ T7995] netlink: 44 bytes leftover after parsing attributes in process `syz.1.709'.
[   96.221821][ T8002] netlink: 40 bytes leftover after parsing attributes in process `syz.2.711'.
[   96.367966][ T8011] netlink: 'syz.1.714': attribute type 4 has an invalid length.
[   96.519515][ T8016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.715'.
[   96.819605][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.721'.
[   96.850066][ T8041] netlink: 40 bytes leftover after parsing attributes in process `syz.2.722'.
[   97.083902][ T8052] netlink: 20 bytes leftover after parsing attributes in process `syz.2.725'.
[   97.147984][ T8054] netlink: 'syz.2.726': attribute type 15 has an invalid length.
[   97.254305][ T8058] x_tables: duplicate underflow at hook 2
[   97.320275][ T8060] netlink: 337 bytes leftover after parsing attributes in process `syz.2.729'.
[   97.611017][ T8072] macsec0: entered allmulticast mode
[   97.614043][ T8072] veth1_macvtap: entered allmulticast mode
[   97.622812][ T8072] macsec0: left allmulticast mode
[   97.624385][ T8072] veth1_macvtap: left allmulticast mode
[   97.881702][ T8085] syz.2.737 (8085) used greatest stack depth: 20008 bytes left
[   98.173324][ T8113] netlink: 36 bytes leftover after parsing attributes in process `syz.2.749'.
[   98.179580][ T8113] x_tables: duplicate underflow at hook 3
[   98.227180][ T8115] netlink: 'syz.1.750': attribute type 9 has an invalid length.
[   98.229538][ T8118] netlink: 'syz.2.751': attribute type 1 has an invalid length.
[   98.251893][ T8118] 8021q: adding VLAN 0 to HW filter on device bond3
[   98.269776][ T8118] 8021q: adding VLAN 0 to HW filter on device bond3
[   98.272080][ T8118] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[   98.277198][ T8118] bond3: (slave vxcan3): Error -95 calling set_mac_address
[   98.606804][ T8137] unsupported nlmsg_type 40
[   98.647693][ T8144] veth1_to_batadv: entered promiscuous mode
[   98.651911][ T8144] netlink: 'syz.1.761': attribute type 1 has an invalid length.
[   99.081533][ T8189] x_tables: duplicate underflow at hook 1
[   99.481873][ T8228] x_tables: duplicate underflow at hook 2
[   99.604905][ T8243] team0: left allmulticast mode
[   99.606753][ T8243] team0: left promiscuous mode
[   99.608526][ T8243] bridge0: port 1(team0) entered disabled state
[   99.838802][ T8250] hsr_slave_1 (unregistering): left promiscuous mode
[   99.904991][ T8253] netlink: 'syz.2.793': attribute type 1 has an invalid length.
[   99.920180][ T8253] 8021q: adding VLAN 0 to HW filter on device bond4
[   99.940613][ T8253] 8021q: adding VLAN 0 to HW filter on device bond4
[   99.943496][ T8253] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[   99.947656][ T8253] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  100.091471][ T8268] pimreg: entered allmulticast mode
[  100.211054][ T8270] __nla_validate_parse: 11 callbacks suppressed
[  100.211067][ T8270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.800'.
[  100.300813][ T8270] hsr_slave_1 (unregistering): left promiscuous mode
[  100.389121][ T8281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.803'.
[  100.414450][ T8281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.803'.
[  100.712959][ T8310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.814'.
[  101.035115][ T8327] netlink: 2 bytes leftover after parsing attributes in process `syz.2.818'.
[  101.047103][ T8327] batadv_slave_1: entered promiscuous mode
[  101.239030][ T8396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.823'.
[  101.446626][ T8404] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.826'.
[  101.453283][ T8404] openvswitch: netlink: Key 14 has unexpected len 2 expected 28
[  101.459230][ T8404] netlink: 256 bytes leftover after parsing attributes in process `syz.2.826'.
[  101.462685][ T8404] netlink: 'syz.2.826': attribute type 12 has an invalid length.
[  101.962626][ T8430] lo speed is unknown, defaulting to 1000
[  102.043890][ T8434] netlink: 404 bytes leftover after parsing attributes in process `syz.1.834'.
[  102.047601][ T8434] netlink: 28 bytes leftover after parsing attributes in process `syz.1.834'.
[  102.117052][ T8438] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0
[  102.258112][ T8440] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  102.523694][ T8451] netlink: 'syz.1.840': attribute type 39 has an invalid length.
[  102.700972][ T8462] netlink: 'syz.0.842': attribute type 1 has an invalid length.
[  104.255135][ T8537] netlink: 'syz.0.866': attribute type 3 has an invalid length.
[  104.470982][ T8548] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.474106][ T8549] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  104.482785][ T8548] tipc: Resetting bearer <eth:syzkaller0>
[  104.616490][ T8545] tipc: Disabling bearer <eth:syzkaller0>
[  104.836449][ T8560] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.160535][ T8576] netlink: 'syz.2.882': attribute type 1 has an invalid length.
[  105.194049][ T8576] 8021q: adding VLAN 0 to HW filter on device bond5
[  105.231678][ T8576] 8021q: adding VLAN 0 to HW filter on device bond5
[  105.235011][ T8576] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  105.242200][ T8576] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  105.484489][ T8584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.498284][ T8584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.159795][ T8484] Set syz1 is full, maxelem 65536 reached
[  106.248674][ T8593] __nla_validate_parse: 11 callbacks suppressed
[  106.248698][ T8593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.887'.
[  106.380289][ T8611] netlink: 'syz.0.895': attribute type 1 has an invalid length.
[  106.382588][ T8611] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.895'.
[  106.582393][ T8635] sctp: [Deprecated]: syz.1.902 (pid 8635) Use of int in max_burst socket option.
[  106.582393][ T8635] Use struct sctp_assoc_value instead
[  106.604367][ T8635] netlink: 28 bytes leftover after parsing attributes in process `syz.1.902'.
[  106.615775][ T8635] netlink: 28 bytes leftover after parsing attributes in process `syz.1.902'.
[  106.778040][ T8635] sock: sock_set_timeout: `syz.1.902' (pid 8635) tries to set negative timeout
[  106.866948][ T8652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.908'.
[  106.872614][ T8652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.908'.
[  106.876484][ T8652] netlink: 'syz.2.908': attribute type 18 has an invalid length.
[  106.891267][ T8654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.908'.
[  106.894871][ T8654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.908'.
[  106.898588][ T8654] netlink: 'syz.2.908': attribute type 18 has an invalid length.
[  107.000802][ T8658] netlink: 'syz.2.910': attribute type 21 has an invalid length.
[  107.004152][ T8658] netlink: 'syz.2.910': attribute type 22 has an invalid length.
[  107.007450][ T8658] netlink: 'syz.2.910': attribute type 23 has an invalid length.
[  107.010471][ T8658] netlink: 136 bytes leftover after parsing attributes in process `syz.2.910'.
[  107.086333][ T8663] netlink: 'syz.2.911': attribute type 1 has an invalid length.
[  107.104110][ T8663] 8021q: adding VLAN 0 to HW filter on device bond6
[  107.220401][ T8672] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.519911][ T8696] netlink: 32 bytes leftover after parsing attributes in process `syz.2.921'.
[  107.668940][ T8714] pim6reg1: entered allmulticast mode
[  107.700814][ T8711] netlink: 'syz.1.928': attribute type 10 has an invalid length.
[  107.716519][ T8711] team0: Port device geneve0 added
[  107.892071][ T8732] x_tables: duplicate underflow at hook 2
[  107.954308][ T8733] x_tables: duplicate underflow at hook 2
[  108.118929][ T8757] netlink: 'syz.0.944': attribute type 1 has an invalid length.
[  108.150710][ T8755] lo speed is unknown, defaulting to 1000
[  108.275116][ T8759] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.364956][ T8759] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.429769][ T8774] 8021q: adding VLAN 0 to HW filter on device bond7
[  108.474628][ T8759] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.561022][ T8759] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.683161][ T8759] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.701850][ T8759] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.719052][ T8759] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.730838][ T8759] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.793949][ T8800] x_tables: duplicate underflow at hook 2
[  108.820935][ T8798] lo speed is unknown, defaulting to 1000
[  109.019119][ T8813] syzkaller1: entered promiscuous mode
[  109.025385][ T8813] syzkaller1: entered allmulticast mode
[  109.162119][ T8820] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  109.174661][ T8820] bond0: (slave batadv0): Releasing backup interface
[  109.200057][ T8820] team0: Port device geneve0 removed
[  109.247193][ T8820] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  109.250966][ T8820] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  109.601046][ T8825] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  111.328882][ T8884] dummy0: left promiscuous mode
[  111.330563][ T8884] dummy0: left allmulticast mode
[  111.370578][ T8884] wg2: left promiscuous mode
[  111.372464][ T8884] wg2: left allmulticast mode
[  111.413065][ T8884] batadv_slave_0: left promiscuous mode
[  111.477994][ T8884] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.481506][ T8884] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.484686][ T8884] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.489030][ T8884] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.497097][ T8884] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  111.521204][ T8884] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  111.524981][ T8884] gretap1: left promiscuous mode
[  111.530009][ T8884] tipc: Resetting bearer <eth:syzkaller0>
[  111.534872][ T8884] syzkaller0: left promiscuous mode
[  111.542610][ T8884] syzkaller0: left allmulticast mode
[  111.550646][ T8884] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  111.554030][ T8884] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  111.556684][ T8884] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  111.559400][ T8884] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  111.565173][ T8884] ip6tnl1: left promiscuous mode
[  111.776509][ T8895] validate_nla: 6 callbacks suppressed
[  111.776530][ T8895] netlink: 'syz.1.988': attribute type 5 has an invalid length.
[  111.914446][ T8899] __nla_validate_parse: 15 callbacks suppressed
[  111.914466][ T8899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.990'.
[  112.046520][ T8905] netlink: 'syz.2.992': attribute type 1 has an invalid length.
[  112.078951][ T8905] 8021q: adding VLAN 0 to HW filter on device bond8
[  112.238667][ T8912] netlink: 52 bytes leftover after parsing attributes in process `syz.2.995'.
[  112.297106][ T8915] netlink: 'syz.2.995': attribute type 1 has an invalid length.
[  112.300614][ T8915] netlink: 24 bytes leftover after parsing attributes in process `syz.2.995'.
[  112.436595][ T8921] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  112.471972][ T8921] bridge_slave_0: left allmulticast mode
[  112.474508][ T8921] bridge_slave_0: left promiscuous mode
[  112.478475][ T8921] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.485078][ T8921] bridge_slave_1: left allmulticast mode
[  112.488980][ T8921] bridge_slave_1: left promiscuous mode
[  112.491491][ T8921] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.503925][ T8921] bond0: (slave bond_slave_0): Releasing backup interface
[  112.513047][ T8921] bond0: (slave bond_slave_1): Releasing backup interface
[  112.537592][ T8921] team0: Port device C removed
[  112.548747][ T8921] team0: Port device team_slave_1 removed
[  112.552414][ T8921] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  112.570461][ T8921] batman_adv: batadv0: Removing interface: batadv_slave_0
[  112.583835][ T8921] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  112.598642][ T8921] batman_adv: batadv0: Removing interface: batadv_slave_1
[  112.620186][ T8921] team0: Port device geneve0 removed
[  112.646152][ T8923] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  112.649876][ T8923] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  112.675209][ T8925] lo speed is unknown, defaulting to 1000
[  112.991370][ T8934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1002'.
[  113.430986][ T8947] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1007'.
[  113.654251][ T8956] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1012'.
[  113.659493][ T8956] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1012'.
[  114.074985][ T8979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1021'.
[  114.244263][ T8992] netlink: 'syz.2.1026': attribute type 1 has an invalid length.
[  114.256068][ T8992] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1026'.
[  114.328524][ T8993] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1026'.
[  115.038019][ T9012] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.047837][ T9012] syzkaller0: entered promiscuous mode
[  115.050066][ T9012] syzkaller0: entered allmulticast mode
[  115.084504][ T9012] tipc: Resetting bearer <eth:syzkaller0>
[  115.098563][ T9011] tipc: Resetting bearer <eth:syzkaller0>
[  115.119334][ T9011] tipc: Disabling bearer <eth:syzkaller0>
[  115.328306][ T9023] block nbd0: NBD_DISCONNECT
[  115.932829][ T9048] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  116.100751][ T9053] netlink: 'syz.1.1049': attribute type 1 has an invalid length.
[  116.133886][ T9053] bond2: (slave vti0): The slave device specified does not support setting the MAC address
[  116.137820][ T9053] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  116.144359][ T9053] bond2: (slave vti0): making interface the new active one
[  116.148050][ T9053] bond2: (slave vti0): Enslaving as an active interface with an up link
[  117.164111][ T9088] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.168928][ T9088] syzkaller0: entered promiscuous mode
[  117.170682][ T9088] syzkaller0: entered allmulticast mode
[  117.193071][ T9088] tipc: Resetting bearer <eth:syzkaller0>
[  117.197840][ T9088] openvswitch: netlink: IP tunnel dst address not specified
[  117.202180][ T9086] tipc: Resetting bearer <eth:syzkaller0>
[  117.217844][ T9086] tipc: Disabling bearer <eth:syzkaller0>
[  117.294432][ T9096] __nla_validate_parse: 7 callbacks suppressed
[  117.294450][ T9096] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1067'.
[  117.304098][ T9096] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1067'.
[  117.308613][ T5837] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  117.313586][ T5837] Bluetooth: hci2: command 0x0401 tx timeout
[  117.322704][ T9098] netlink: 'syz.2.1068': attribute type 11 has an invalid length.
[  117.326535][ T9098] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1068'.
[  117.554489][ T9112] netlink: 'syz.0.1075': attribute type 5 has an invalid length.
[  117.559469][ T9112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1075'.
[  117.564772][ T9112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1075'.
[  117.586361][ T2321] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  117.631636][ T9120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1079'.
[  117.634451][ T9120] netlink: 'syz.2.1079': attribute type 20 has an invalid length.
[  117.642234][ T9120] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  117.644990][ T9120] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  117.648289][ T9120] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  117.651486][ T9120] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  117.657935][ T9120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1079'.
[  117.660678][ T9120] netlink: 'syz.2.1079': attribute type 20 has an invalid length.
[  117.756889][   T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  118.001930][ T9138] gretap1: left promiscuous mode
[  118.006874][ T9138] gretap1: left allmulticast mode
[  118.014255][ T9138] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.019351][ T9138] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.022869][ T9138] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.029282][ T9141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1087'.
[  118.030357][ T9138] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  118.033382][ T9141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1087'.
[  118.040310][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1089'.
[  118.059554][ T9141] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  118.062412][ T9141] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  118.065177][ T9141] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  118.068901][ T9141] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  118.109265][ T9147] netlink: 'syz.2.1090': attribute type 13 has an invalid length.
[  118.128901][ T9147] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  118.140112][ T9147] sch_tbf: burst 2 is lower than device lo mtu (14) !
[  118.153057][ T9148] sch_tbf: burst 2 is lower than device lo mtu (14) !
[  118.158176][ T9147] sch_tbf: burst 2 is lower than device lo mtu (14) !
[  118.161812][ T9148] sch_tbf: burst 2 is lower than device lo mtu (14) !
[  118.165214][ T9147] sch_tbf: burst 2 is lower than device lo mtu (14) !
[  118.168391][   T24] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  118.643960][ T9187] netlink: 'syz.0.1103': attribute type 1 has an invalid length.
[  118.720391][ T9191] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  118.826923][ T5864] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  118.829949][ T5864] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  119.561118][ T9238] syzkaller1: entered promiscuous mode
[  119.563569][ T9238] syzkaller1: entered allmulticast mode
[  119.785452][ T5741] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  119.888111][ T9261] netlink: 'syz.0.1130': attribute type 6 has an invalid length.
[  119.961614][ T9271] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.146451][ T9288] x_tables: duplicate underflow at hook 2
[  121.806072][ T9379] openvswitch: netlink: Unknown key attributes 2
[  121.873660][ T9383] tap0: tun_chr_ioctl cmd 1074025677
[  121.894142][ T9383] tap0: linktype set to 0
[  122.905530][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  123.019694][ T9415] __nla_validate_parse: 17 callbacks suppressed
[  123.019712][ T9415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1169'.
[  123.237058][ T5840] Bluetooth: hci2: command 0x0401 tx timeout
[  123.326164][ T9434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1174'.
[  123.335839][ T9434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1174'.
[  123.451256][ T9440] syzkaller0: entered promiscuous mode
[  123.453500][ T9440] syzkaller0: entered allmulticast mode
[  123.509427][ T9439] veth7: entered promiscuous mode
[  123.550161][ T9454] x_tables: duplicate underflow at hook 2
[  123.719886][ T9471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1188'.
[  123.722574][ T9471] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1188'.
[  123.730768][ T9473] openvswitch: netlink: IP tunnel TTL not specified.
[  123.731437][ T9471] bridge0: port 1(vlan2) entered blocking state
[  123.735002][ T9471] bridge0: port 1(vlan2) entered disabled state
[  123.738937][ T9471] vlan2: entered allmulticast mode
[  123.740525][ T9471] bridge0: entered allmulticast mode
[  123.743736][ T9471] vlan2: left allmulticast mode
[  123.747575][ T9471] bridge0: left allmulticast mode
[  123.762476][ T9475] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1190'.
[  123.765778][ T9475] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1190'.
[  123.983585][ T9493] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1198'.
[  124.058585][ T9499] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1199'.
[  124.111114][ T9501] pim6reg1: entered promiscuous mode
[  124.112784][ T9501] pim6reg1: entered allmulticast mode
[  124.398420][ T9517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1208'.
[  124.877707][ T9540] netlink: 'syz.0.1217': attribute type 1 has an invalid length.
[  124.994854][ T9544] x_tables: duplicate underflow at hook 2
[  125.031092][ T9546] x_tables: duplicate underflow at hook 2
[  125.142855][ T9550] netlink: 'syz.0.1221': attribute type 4 has an invalid length.
[  125.360940][ T9559] netlink: 'syz.0.1225': attribute type 64 has an invalid length.
[  125.431287][ T9561] ip6tnl1: entered promiscuous mode
[  125.432926][ T9561] ip6tnl1: entered allmulticast mode
[  125.440260][ T9561] team0: Device ip6tnl1 is up. Set it down before adding it as a team port
[  125.470634][ T9562] ip6tnl1: entered promiscuous mode
[  125.472735][ T9562] ip6tnl1: entered allmulticast mode
[  125.476468][ T9562] team0: Device ip6tnl1 is up. Set it down before adding it as a team port
[  126.059515][ T9611] vlan0: entered promiscuous mode
[  126.061162][ T9611] team0: entered promiscuous mode
[  126.144285][ T9622] x_tables: duplicate underflow at hook 3
[  126.420193][ T9643] netlink: 'syz.1.1260': attribute type 4 has an invalid length.
[  126.491933][ T9653] x_tables: duplicate underflow at hook 2
[  126.517771][ T9648] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  126.974472][ T9700] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  127.644310][ T9741] nbd: device at index 1 is going down
[  127.841422][ T9761] netlink: 'syz.1.1298': attribute type 1 has an invalid length.
[  127.929229][ T9772] block nbd2: NBD_DISCONNECT
[  128.260134][ T9805] __nla_validate_parse: 31 callbacks suppressed
[  128.260146][ T9805] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1311'.
[  128.276383][ T9805] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1311'.
[  128.314981][ T9807] openvswitch: netlink: IP tunnel TTL not specified.
[  128.350767][ T9809] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  128.356238][ T9809] syzkaller0: entered promiscuous mode
[  128.358438][ T9809] syzkaller0: entered allmulticast mode
[  128.367503][ T9809] tipc: Resetting bearer <eth:syzkaller0>
[  128.485781][ T9819] x_tables: duplicate underflow at hook 3
[  128.490981][ T9821] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1317'.
[  128.595725][ T9826] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1319'.
[  128.599688][ T9826] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1319'.
[  128.610464][ T9823] nbd: device at index 2 is going down
[  128.723053][ T9831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1320'.
[  128.878389][ T9842] netlink: 'syz.2.1323': attribute type 1 has an invalid length.
[  128.881119][ T9842] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1323'.
[  128.884442][ T9842] NCSI netlink: No device for ifindex 813332851
[  128.943031][ T9845] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  128.985759][ T9848] netlink: 'syz.0.1326': attribute type 9 has an invalid length.
[  128.993370][ T9848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1326'.
[  128.997810][ T9848] veth0: entered promiscuous mode
[  129.001876][ T9847] veth0: left promiscuous mode
[  129.093345][ T9852] syzkaller0: entered allmulticast mode
[  129.198027][ T9872] x_tables: duplicate underflow at hook 3
[  129.248608][ T9877] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1338'.
[  129.298830][ T9883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1340'.
[  129.483443][ T9889] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  129.498559][ T9889] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  130.163356][ T9923] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.172050][ T9923] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.203554][ T9923] sch_tbf: burst 0 is lower than device bridge3 mtu (1514) !
[  130.301807][ T9928] bond0: option arp_validate: invalid value (18446744073491447809)
[  130.419409][ T9935] nbd: device at index 0 is going down
[  130.940710][ T9992] x_tables: duplicate underflow at hook 2
[  130.943716][ T9992] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD
[  131.683279][T10019] block nbd2: NBD_DISCONNECT
[  131.795536][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  132.051577][T10040] nbd: device at index 2 is going down
[  132.305739][T10058] lo speed is unknown, defaulting to 1000
[  132.380415][T10071] openvswitch: netlink: IP tunnel TTL not specified.
[  132.438824][T10074] netlink: 'syz.1.1405': attribute type 32 has an invalid length.
[  132.442176][T10074] netlink: 'syz.1.1405': attribute type 32 has an invalid length.
[  132.446486][T10074] netlink: 'syz.1.1405': attribute type 32 has an invalid length.
[  132.450850][T10074] netlink: 'syz.1.1405': attribute type 32 has an invalid length.
[  132.454585][T10074] netlink: 'syz.1.1405': attribute type 32 has an invalid length.
[  132.459835][T10074] netlink: 'syz.1.1405': attribute type 32 has an invalid length.
[  132.462880][T10074] netlink: 'syz.1.1405': attribute type 32 has an invalid length.
[  132.466155][T10074] netlink: 'syz.1.1405': attribute type 32 has an invalid length.
[  132.469158][T10074] netlink: 'syz.1.1405': attribute type 32 has an invalid length.
[  132.471845][T10074] netlink: 'syz.1.1405': attribute type 32 has an invalid length.
[  132.476533][T10070] block nbd0: NBD_DISCONNECT
[  132.990004][T10112] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  133.238905][T10124] nbd: device at index 2 is going down
[  133.871463][T10146] nbd: device at index 2 is going down
[  134.023424][T10157] pim6reg1: entered promiscuous mode
[  134.025137][T10157] pim6reg1: entered allmulticast mode
[  134.150053][T10176] x_tables: duplicate underflow at hook 1
[  134.363183][T10202] __nla_validate_parse: 28 callbacks suppressed
[  134.363242][T10202] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1450'.
[  134.372482][T10202] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1450'.
[  134.564472][T10222] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1458'.
[  134.568547][T10222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1458'.
[  134.584776][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1458'.
[  134.622827][T10224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1459'.
[  134.652904][T10226] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1460'.
[  134.656526][T10226] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1460'.
[  134.701564][T10233] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1462'.
[  134.803887][T10240] block nbd1: NBD_DISCONNECT
[  134.934949][T10245] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1466'.
[  135.131075][T10261] nbd: device at index 1 is going down
[  135.283914][T10275] pim6reg1: entered promiscuous mode
[  135.287912][T10275] pim6reg1: entered allmulticast mode
[  135.318905][T10277] veth0_to_bridge: entered promiscuous mode
[  135.323851][T10276] veth0_to_bridge: left promiscuous mode
[  135.450378][T10285] block nbd0: NBD_DISCONNECT
[  136.541750][T10382] x_tables: duplicate underflow at hook 3
[  136.622807][T10391] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  136.892507][T10401] block nbd2: NBD_DISCONNECT
[  136.907055][T10407] team0: Master is either lo or non-ether device
[  137.003369][T10413] syzkaller1: entered promiscuous mode
[  137.016736][T10413] syzkaller1: entered allmulticast mode
[  137.399368][T10442] x_tables: duplicate underflow at hook 2
[  137.402801][T10442] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD
[  137.634362][T10454] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.729151][T10458] block nbd0: NBD_DISCONNECT
[  137.858070][T10461] x_tables: duplicate underflow at hook 1
[  138.226206][T10474] nbd: device at index 2 is going down
[  138.429540][   T65] wlan0: Trigger new scan to find an IBSS to join
[  139.220213][T10480] ==================================================================
[  139.223305][T10480] BUG: KASAN: slab-use-after-free in rose_transmit_link+0x5c3/0x740
[  139.226224][T10480] Read of size 1 at addr ffff8881067aac32 by task syz.2.1555/10480
[  139.230226][T10480] 
[  139.231192][T10480] CPU: 1 UID: 0 PID: 10480 Comm: syz.2.1555 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  139.231214][T10480] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  139.231225][T10480] Call Trace:
[  139.231236][T10480]  <TASK>
[  139.231255][T10480]  dump_stack_lvl+0x189/0x250
[  139.231280][T10480]  ? __virt_addr_valid+0x1c8/0x5c0
[  139.231303][T10480]  ? rcu_is_watching+0x15/0xb0
[  139.231322][T10480]  ? __kasan_check_byte+0x12/0x40
[  139.231344][T10480]  ? __pfx_dump_stack_lvl+0x10/0x10
[  139.231359][T10480]  ? rcu_is_watching+0x15/0xb0
[  139.231375][T10480]  ? lock_release+0x4b/0x3e0
[  139.231392][T10480]  ? __virt_addr_valid+0x1c8/0x5c0
[  139.231409][T10480]  ? __virt_addr_valid+0x4a5/0x5c0
[  139.231428][T10480]  print_report+0xca/0x230
[  139.231441][T10480]  ? rose_transmit_link+0x5c3/0x740
[  139.231455][T10480]  kasan_report+0x118/0x150
[  139.231475][T10480]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  139.231496][T10480]  ? rose_transmit_link+0x5c3/0x740
[  139.231514][T10480]  rose_transmit_link+0x5c3/0x740
[  139.231527][T10480]  ? skb_put+0x11b/0x210
[  139.231549][T10480]  rose_write_internal+0x11dc/0x1ac0
[  139.231570][T10480]  ? __pfx_rose_write_internal+0x10/0x10
[  139.231588][T10480]  ? __timer_delete+0x5d/0x390
[  139.231609][T10480]  rose_release+0x24e/0x520
[  139.231630][T10480]  sock_close+0xc3/0x240
[  139.231653][T10480]  ? __pfx_sock_close+0x10/0x10
[  139.231669][T10480]  __fput+0x44c/0xa70
[  139.231691][T10480]  task_work_run+0x1d4/0x260
[  139.231715][T10480]  ? __pfx_task_work_run+0x10/0x10
[  139.231737][T10480]  ? task_work_add+0x377/0x420
[  139.231757][T10480]  ? __pfx_task_work_add+0x10/0x10
[  139.231779][T10480]  get_signal+0x11ed/0x1340
[  139.231802][T10480]  arch_do_signal_or_restart+0x9a/0x750
[  139.231827][T10480]  ? __pfx___sys_connect+0x10/0x10
[  139.231845][T10480]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  139.231873][T10480]  ? exit_to_user_mode_loop+0x40/0x110
[  139.231889][T10480]  exit_to_user_mode_loop+0x75/0x110
[  139.231903][T10480]  do_syscall_64+0x2bd/0x3b0
[  139.231920][T10480]  ? lockdep_hardirqs_on+0x9c/0x150
[  139.231934][T10480]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.231949][T10480]  ? exc_page_fault+0x9f/0xf0
[  139.231964][T10480]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.231979][T10480] RIP: 0033:0x7fc5e338e9a9
[  139.231994][T10480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  139.232009][T10480] RSP: 002b:00007fc5e41d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  139.232026][T10480] RAX: fffffffffffffe00 RBX: 00007fc5e35b5fa0 RCX: 00007fc5e338e9a9
[  139.232039][T10480] RDX: 000000000000001c RSI: 0000200000000100 RDI: 000000000000000a
[  139.232082][T10480] RBP: 00007fc5e3410d69 R08: 0000000000000000 R09: 0000000000000000
[  139.232092][T10480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  139.232101][T10480] R13: 0000000000000000 R14: 00007fc5e35b5fa0 R15: 00007ffe1f6fd6e8
[  139.232119][T10480]  </TASK>
[  139.232125][T10480] 
[  139.333649][T10480] Allocated by task 6259:
[  139.335117][T10480]  kasan_save_track+0x3e/0x80
[  139.336853][T10480]  __kasan_kmalloc+0x93/0xb0
[  139.338499][T10480]  __kmalloc_cache_noprof+0x230/0x3d0
[  139.340384][T10480]  rose_add_node+0x23a/0xde0
[  139.342063][T10480]  rose_rt_ioctl+0xa48/0xfb0
[  139.343583][T10480]  rose_ioctl+0x3ce/0x8b0
[  139.344852][T10480]  sock_do_ioctl+0xdc/0x300
[  139.346212][T10480]  sock_ioctl+0x576/0x790
[  139.347785][T10480]  __se_sys_ioctl+0xfc/0x170
[  139.349531][T10480]  do_syscall_64+0xfa/0x3b0
[  139.351251][T10480]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.353209][T10480] 
[  139.354011][T10480] Freed by task 10487:
[  139.355514][T10480]  kasan_save_track+0x3e/0x80
[  139.357143][T10480]  kasan_save_free_info+0x46/0x50
[  139.358798][T10480]  __kasan_slab_free+0x62/0x70
[  139.360571][T10480]  kfree+0x18e/0x440
[  139.362061][T10480]  rose_rt_device_down+0x473/0x4c0
[  139.363724][T10480]  rose_device_event+0x603/0x6a0
[  139.365251][T10480]  notifier_call_chain+0x1b6/0x3e0
[  139.367058][T10480]  dev_close_many+0x29c/0x410
[  139.368411][T10480]  netif_close+0x158/0x210
[  139.369714][T10480]  dev_close+0x10a/0x220
[  139.370951][T10480]  bpq_device_event+0x2f4/0x600
[  139.372385][T10480]  notifier_call_chain+0x1b6/0x3e0
[  139.373880][T10480]  __dev_notify_flags+0x18d/0x2e0
[  139.375358][T10480]  netif_change_flags+0xe8/0x1a0
[  139.376806][T10480]  dev_change_flags+0x130/0x260
[  139.378457][T10480]  dev_ioctl+0x7b4/0x1150
[  139.379737][T10480]  sock_do_ioctl+0x22c/0x300
[  139.381096][T10480]  sock_ioctl+0x576/0x790
[  139.382369][T10480]  __se_sys_ioctl+0xfc/0x170
[  139.383729][T10480]  do_syscall_64+0xfa/0x3b0
[  139.385073][T10480]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.386821][T10480] 
[  139.387534][T10480] The buggy address belongs to the object at ffff8881067aac00
[  139.387534][T10480]  which belongs to the cache kmalloc-512 of size 512
[  139.391635][T10480] The buggy address is located 50 bytes inside of
[  139.391635][T10480]  freed 512-byte region [ffff8881067aac00, ffff8881067aae00)
[  139.396111][T10480] 
[  139.396993][T10480] The buggy address belongs to the physical page:
[  139.398873][T10480] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8881067a9c00 pfn:0x1067a8
[  139.401996][T10480] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  139.404489][T10480] flags: 0x57ff00000000240(workingset|head|node=1|zone=2|lastcpupid=0x7ff)
[  139.407270][T10480] page_type: f5(slab)
[  139.408447][T10480] raw: 057ff00000000240 ffff88801a441c80 ffffea0004437410 ffff8881000007c8
[  139.411055][T10480] raw: ffff8881067a9c00 000000000010000a 00000000f5000000 0000000000000000
[  139.413902][T10480] head: 057ff00000000240 ffff88801a441c80 ffffea0004437410 ffff8881000007c8
[  139.416631][T10480] head: ffff8881067a9c00 000000000010000a 00000000f5000000 0000000000000000
[  139.419515][T10480] head: 057ff00000000002 ffffea000419ea01 00000000ffffffff 00000000ffffffff
[  139.422146][T10480] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  139.424650][T10480] page dumped because: kasan: bad access detected
[  139.426502][T10480] page_owner tracks the page as allocated
[  139.428176][T10480] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12, tgid 12 (kworker/u8:0), ts 58767848991, free_ts 58767500954
[  139.434116][T10480]  post_alloc_hook+0x240/0x2a0
[  139.435559][T10480]  get_page_from_freelist+0x21e4/0x22c0
[  139.437175][T10480]  __alloc_frozen_pages_noprof+0x181/0x370
[  139.438896][T10480]  alloc_pages_mpol+0x232/0x4a0
[  139.440446][T10480]  allocate_slab+0x8a/0x3b0
[  139.441827][T10480]  ___slab_alloc+0xbfc/0x1480
[  139.443190][T10480]  __kmalloc_cache_noprof+0x296/0x3d0
[  139.444744][T10480]  __ipv6_dev_mc_inc+0x420/0xaf0
[  139.446219][T10480]  addrconf_dad_work+0x3d0/0x14b0
[  139.447926][T10480]  process_scheduled_works+0xae1/0x17b0
[  139.449534][T10480]  worker_thread+0x8a0/0xda0
[  139.450899][T10480]  kthread+0x711/0x8a0
[  139.452128][T10480]  ret_from_fork+0x3fc/0x770
[  139.453494][T10480]  ret_from_fork_asm+0x1a/0x30
[  139.455073][T10480] page last free pid 5835 tgid 5835 stack trace:
[  139.457052][T10480]  __free_frozen_pages+0xc71/0xe70
[  139.458610][T10480]  stack_depot_save_flags+0x445/0x900
[  139.460208][T10480]  kasan_save_track+0x4f/0x80
[  139.461589][T10480]  __kasan_slab_alloc+0x6c/0x80
[  139.463063][T10480]  kmem_cache_alloc_lru_noprof+0x1c6/0x3d0
[  139.464809][T10480]  alloc_inode+0xb8/0x1b0
[  139.466309][T10480]  new_inode+0x22/0x170
[  139.467723][T10480]  gadgetfs_fill_super+0x103/0x590
[  139.469323][T10480]  get_tree_single+0xc0/0x150
[  139.470691][T10480]  vfs_get_tree+0x92/0x2b0
[  139.472015][T10480]  do_new_mount+0x24a/0xa40
[  139.473399][T10480]  __se_sys_mount+0x317/0x410
[  139.474815][T10480]  do_syscall_64+0xfa/0x3b0
[  139.476168][T10480]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.478216][T10480] 
[  139.478926][T10480] Memory state around the buggy address:
[  139.480813][T10480]  ffff8881067aab00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  139.483471][T10480]  ffff8881067aab80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  139.485781][T10480] >ffff8881067aac00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  139.488213][T10480]                                      ^
[  139.489890][T10480]  ffff8881067aac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  139.492314][T10480]  ffff8881067aad00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  139.494684][T10480] ==================================================================
[  139.535793][T10480] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  139.538140][T10480] CPU: 1 UID: 0 PID: 10480 Comm: syz.2.1555 Not tainted 6.16.0-rc6-syzkaller-00135-gcf074eca0065-dirty #0 PREEMPT(full) 
[  139.542012][T10480] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  139.545146][T10480] Call Trace:
[  139.546180][T10480]  <TASK>
[  139.547174][T10480]  dump_stack_lvl+0x99/0x250
[  139.548520][T10480]  ? __asan_memcpy+0x40/0x70
[  139.549989][T10480]  ? __pfx_dump_stack_lvl+0x10/0x10
[  139.551612][T10480]  ? __pfx__printk+0x10/0x10
[  139.553099][T10480]  panic+0x2db/0x790
[  139.554255][T10480]  ? __pfx_preempt_schedule+0x10/0x10
[  139.555798][T10480]  ? __pfx_panic+0x10/0x10
[  139.557293][T10480]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  139.559127][T10480]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  139.561106][T10480]  ? rose_transmit_link+0x5c3/0x740
[  139.562996][T10480]  check_panic_on_warn+0x89/0xb0
[  139.564546][T10480]  ? rose_transmit_link+0x5c3/0x740
[  139.566079][T10480]  end_report+0x78/0x160
[  139.567371][T10480]  kasan_report+0x129/0x150
[  139.568689][T10480]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  139.570500][T10480]  ? rose_transmit_link+0x5c3/0x740
[  139.571993][T10480]  rose_transmit_link+0x5c3/0x740
[  139.573474][T10480]  ? skb_put+0x11b/0x210
[  139.574755][T10480]  rose_write_internal+0x11dc/0x1ac0
[  139.576318][T10480]  ? __pfx_rose_write_internal+0x10/0x10
[  139.578313][T10480]  ? __timer_delete+0x5d/0x390
[  139.579717][T10480]  rose_release+0x24e/0x520
[  139.581075][T10480]  sock_close+0xc3/0x240
[  139.582327][T10480]  ? __pfx_sock_close+0x10/0x10
[  139.583778][T10480]  __fput+0x44c/0xa70
[  139.585106][T10480]  task_work_run+0x1d4/0x260
[  139.586492][T10480]  ? __pfx_task_work_run+0x10/0x10
[  139.588238][T10480]  ? task_work_add+0x377/0x420
[  139.589842][T10480]  ? __pfx_task_work_add+0x10/0x10
[  139.591741][T10480]  get_signal+0x11ed/0x1340
[  139.593078][T10480]  arch_do_signal_or_restart+0x9a/0x750
[  139.594821][T10480]  ? __pfx___sys_connect+0x10/0x10
[  139.596751][T10480]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  139.599126][T10480]  ? exit_to_user_mode_loop+0x40/0x110
[  139.601171][T10480]  exit_to_user_mode_loop+0x75/0x110
[  139.603133][T10480]  do_syscall_64+0x2bd/0x3b0
[  139.604902][T10480]  ? lockdep_hardirqs_on+0x9c/0x150
[  139.606850][T10480]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.609129][T10480]  ? exc_page_fault+0x9f/0xf0
[  139.610914][T10480]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.613152][T10480] RIP: 0033:0x7fc5e338e9a9
[  139.614867][T10480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  139.621924][T10480] RSP: 002b:00007fc5e41d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  139.625001][T10480] RAX: fffffffffffffe00 RBX: 00007fc5e35b5fa0 RCX: 00007fc5e338e9a9
[  139.627943][T10480] RDX: 000000000000001c RSI: 0000200000000100 RDI: 000000000000000a
[  139.630931][T10480] RBP: 00007fc5e3410d69 R08: 0000000000000000 R09: 0000000000000000
[  139.633868][T10480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  139.636812][T10480] R13: 0000000000000000 R14: 00007fc5e35b5fa0 R15: 00007ffe1f6fd6e8
[  139.639772][T10480]  </TASK>
[  139.641641][T10480] Kernel Offset: disabled
[  139.643334][T10480] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:56:33  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffff88804b03b1c0 RCX=ffff88803a913980 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90021d7f4c0 RSP=ffffc90021d7f360
R8 =ffffffff8fa1d6f7 R9 =1ffffffff1f43ade R10=dffffc0000000000 R11=fffffbfff1f43adf
R12=1ffff11026cc7f5d R13=dffffc0000000000 R14=0000000000000001 R15=ffff88813663fae8
RIP=ffffffff81b4beae RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3119e5 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=00000000000000ff fffffa0000000000
XMM02=0000000a00050005 0000000600010005 XMM03=317a797300020009 0000000000040005
XMM04=81bfbab1ebbc4816 00000000317a7973 XMM05=0002000900000000 000400050000000a
XMM06=0005000500000006 0001000554000000 XMM07=400800088007000c 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fed81411ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000122a RDI=000000000000122b RBP=00000000000003f8 RSP=ffffc90021d17210
R8 =ffff888108688237 R9 =1ffff110210d1046 R10=dffffc0000000000 R11=ffffffff85461d20
R12=dffffc0000000000 R13=ffffffff99af18d7 R14=ffffffff99df6300 R15=0000000000000000
RIP=ffffffff85461d9c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc5e41d66c0 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=000000003c1a4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fed81411ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
