last executing test programs:

2.098678157s ago: executing program 1 (id=841):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\"\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\"\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x2, 0x18}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001ccab"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)={0x64, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_LABELS_MASK={0x8, 0x17, [0x0]}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x24, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x8}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x5, 0x2}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x7f}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x2}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x24008801}, 0x14004804)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r10}, &(0x7f0000000000), &(0x7f0000000140)=r7}, 0x20)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4) (async)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4)
sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x44, r12, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x9}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x5}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x62}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x40840}, 0x4000001) (async)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x44, r12, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x9}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x5}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x62}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x40840}, 0x4000001)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x101, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x101}, 0x50)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0) (async)
r14 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x3c2392026b23f4e4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$NFT_BATCH(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES32=0x0], 0x190}}, 0x0)

1.820740822s ago: executing program 1 (id=844):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000070000010900010073797a3000007f003c000000090a010400000000000000000700ff000000000900020073797a31000000000900010073797a300000000008000540000000212c0000001e0a05010000000000007710684d5b0000070000070900020073797a31000000000900010473797a3000200000140000001000010000000000000000000084000a000000"], 0xb0}}, 0x40000)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e21, @empty}}, 0xfffffffe, 0x1, 0x3fc, 0x0, 0x32, 0x2, 0x53}, 0x9c)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100)=0x286d, 0x4)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x0)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r3 = socket$nl_crypto(0x10, 0x3, 0x15)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, &(0x7f0000000080)=0x1)
socket(0x1d, 0x2, 0x6)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b7c0140020203600e41b0000900ac00060311000000a4000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe87)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000040000000a"], 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r7)
sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x30, r8, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x30}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))

1.630330364s ago: executing program 0 (id=847):
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000500)=0xf, 0x4)

1.52967242s ago: executing program 0 (id=848):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="140000000000000000000000f3ff0000f7ffffff000005001c5394f2"], 0x188}, 0x4010800)
socket$netlink(0x10, 0x3, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe)
connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fa}, 0xe)
getsockopt$sock_buf(r3, 0x1, 0x1c, &(0x7f0000000140)=""/149, &(0x7f0000000000)=0x95)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), &(0x7f0000000800)=r4}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000004c0)=ANY=[@ANYRES8=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socket$kcm(0x10, 0x2, 0x4)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r6, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x3a1)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r8, 0x0)
r9 = socket$inet(0x2, 0x1, 0x0)
listen(r9, 0x364)
r10 = socket$inet(0x2, 0x1, 0x100)
listen(r10, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

1.418177756s ago: executing program 0 (id=850):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x207ffffe, 0x4) (async, rerun: 32)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async, rerun: 32)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
listen(r1, 0x400004)
r2 = socket(0xa, 0x3, 0x3a)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) (async)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, @remote, @empty, 0x7800, 0x80, 0xfffffffc, 0xdc67}}) (async)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', 0x0}) (async)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c) (async)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) (async)
setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="7307000000000000072000000002060f060008000000000000000f000000000000000500000000000000c204000000f1010700000000000000c20400018001c2040000000800000082"], 0x48) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r7, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000040a010128bd7000ffdbdf2501000008175a734ac1e9aff6a0666eb7e633a9be1d90be9ee9b81fd3aaf5e5a12b299429d1d2"], 0x14}, 0x1, 0x0, 0x0, 0x2004d805}, 0x8000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x90) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x800, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2, 0x0, 0x0, 0x2}, {}, {}, {}, {0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x100000}, {}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x7}, {}, {0x7}, {0x0, 0x800}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0xea3}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x40000}, {0x0, 0x0, 0x0, 0x0, 0xe8}, {}, {}, {}, {0x0, 0x2000000, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0x54a0b1ad}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {0xfffffffd}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0xa}, {0x0, 0x0, 0x0, 0x4}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x40, 0x88}], [{}, {}, {}, {0x5}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x4}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={0x0}) (async)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0080000000009aed30fb3dadbc907f1901002e2b92f35692b4541f4fd0b66142aa4367368bbdd7e71d5def4de6174f10e5071a44684c14aed5e55647cb2f217a1c9a163af7a992510f1d15a41223d665062ad638b02848242369fe388f7525faf84bc2697675e8c4cd134616563810f11be94105c9d4ceb1761bd971add2ae50f6989ebdb49b5ba1a529718b946f5b0f8bfadbf47e45bc17e94959e35c70cf9f7cc254a78e00bd2135b4e67e7fb2f38da111258ef4a54937b5601f", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 64)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) (rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
socket$can_bcm(0x1d, 0x2, 0x2)

1.270428982s ago: executing program 0 (id=851):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], 0x0, 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r0, 0x0, 0x1000000}, 0x38)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8001}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xe498}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.stat\x00', 0x0, 0x0)
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={0x1, @default, @rose={'rose', 0x0}, 0x5, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]})
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x80009, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r6, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x73)
r8 = accept4(r7, 0x0, 0x0, 0x80000)
write(r8, &(0x7f0000000040)="cb", 0xfffffdef)
setsockopt$sock_int(r8, 0x1, 0x49, &(0x7f00000009c0)=0xfefffffb, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0xf00)

1.210814094s ago: executing program 1 (id=853):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000026c0)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r1, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0x8, 0x401, 0x7, 0xffffffff, 0x7, 0x8, 0x7f, 0x101, 0x3, 0x9, 0x5, 0x4dc6, 0x7fff, 0x6, 0x8, 0x3, 0xd, 0x4, 0x3ae0, 0x5, 0x99, 0x1, 0xff, 0x1, 0x200006, 0x80, 0x7f1b, 0x5, 0xffff79c4, 0x80000000, 0xfffffffa, 0xffffffff, 0x800, 0xf20d, 0x800, 0x0, 0x1, 0x4, 0x80000000, 0x6, 0x9, 0x3, 0xff, 0x0, 0x9f0, 0x1ff, 0xdf7a, 0x7fffffff, 0x0, 0x0, 0xc, 0x14, 0x2, 0xc, 0x401, 0xffff, 0x9bf, 0x6f3c, 0x8, 0x9, 0x7ff, 0x3, 0x9, 0x8000, 0x8, 0xffffffc0, 0x4, 0x1, 0x2, 0x8, 0x4, 0x9, 0x200, 0x3ff, 0x8000, 0x81, 0x3, 0x8, 0x800, 0x1, 0x5, 0x80000000, 0x2, 0x5, 0x5, 0x1, 0x0, 0x10001, 0x81, 0xc, 0x6, 0x80000001, 0x401, 0x6, 0x0, 0x3, 0x800, 0xf79, 0x6, 0x1, 0x4, 0xfff, 0x2, 0x1, 0x37800000, 0x0, 0x3, 0xae5, 0x4, 0x4, 0xae, 0xfffffffe, 0x1, 0x6, 0x8, 0x400, 0x1, 0x8000, 0xc, 0x1, 0x8, 0x3, 0x95, 0x1, 0x6, 0x3, 0xca, 0x0, 0x0, 0x3, 0x7, 0xffffb09a, 0x1, 0xe, 0x9, 0x5, 0x6, 0x4b, 0x9, 0x4, 0xfffffffe, 0xfffffffe, 0x4, 0x69, 0x2, 0x2, 0x6c, 0xacc, 0x5, 0xffff, 0x4, 0x5, 0x2, 0x6, 0xffffffd1, 0x6, 0x1, 0xb3, 0x5, 0x5, 0x1, 0x9, 0x4, 0x3, 0x9, 0x0, 0x5, 0x2c9, 0x8bf, 0x0, 0xde39067, 0x9, 0x8, 0x6, 0x1534fe8b, 0x5, 0x0, 0x6, 0x2, 0x4, 0x81, 0xd16d, 0x0, 0xf9, 0x8, 0x401, 0xffffffff, 0xe19b, 0x80000000, 0x402, 0x81, 0x800, 0x9, 0x651, 0x10001, 0x6, 0x0, 0x5, 0x1d58, 0x401, 0x3, 0x8002, 0x8, 0x36, 0x15a, 0x2, 0x6, 0x5, 0x7, 0x6, 0x79, 0x8, 0x1da, 0x1, 0x9, 0x30, 0x0, 0xfffffff9, 0x0, 0x7, 0x0, 0x27b, 0x5, 0x1001, 0x3, 0x1, 0x6, 0x5, 0x64c, 0x4, 0xfffffff7, 0x9, 0x4, 0x80000000, 0x8000, 0x7, 0x7, 0x7, 0x3, 0xa, 0x8, 0xffff, 0x22, 0x9, 0x4, 0x3, 0x3, 0x9, 0xfffffffa, 0x1, 0x6, 0x3321, 0x9, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x7, 0x3ff, 0x7, 0x4, 0x2, 0xffffffc0, 0x7ff, 0x86, 0x9, 0x9, 0x2, 0x8c, 0x1000200, 0x5, 0x5, 0x40000000, 0x5, 0x7, 0x1, 0x0, 0x4, 0x0, 0xc, 0xd, 0x0, 0x9, 0x49, 0x80000000, 0x4d35, 0x25431060, 0xd2, 0x5, 0x9, 0xb5f0, 0x401, 0x7, 0x2, 0x6, 0x80000041, 0xa, 0x8, 0x9, 0x1, 0xccf1793, 0x2c800000, 0x5d, 0x1, 0x239, 0x100005, 0x5a5057fd, 0x5, 0x4, 0x6, 0x8, 0x5, 0x200, 0x6, 0x10000, 0xf9, 0x6, 0x8, 0x7, 0x3, 0xfffffeff, 0x9, 0x1, 0x401, 0x1ff, 0x2, 0x0, 0x0, 0x800, 0x3, 0x0, 0x8, 0x10000, 0x6, 0x7c, 0x1, 0x9, 0xffffff01, 0x9, 0x8, 0x8052, 0x9, 0x5, 0x8, 0x142, 0x2d, 0x7, 0x8, 0xb, 0x81, 0x9, 0x3ff, 0x1, 0x10000, 0x9, 0x1, 0x7, 0xffffffff, 0x5, 0xe8, 0x6, 0x8, 0xf, 0x3, 0x0, 0xff, 0xfffffffa, 0xfffffff7, 0x8001, 0x5, 0x9, 0x8, 0x5, 0x9, 0x2, 0x2, 0x10001, 0x8, 0x0, 0x6, 0x4, 0x866, 0x7fff, 0xe0, 0x7fffffff, 0xd3a, 0x6000000, 0xfffffffc, 0x9, 0x7fff, 0x7, 0x10000, 0x3, 0x7fff, 0x40000000, 0x1, 0x7, 0xfffffffb, 0x3, 0x1, 0xb, 0x0, 0x7, 0x6, 0x4, 0x700, 0x4, 0x1, 0x2, 0x0, 0x5, 0x7, 0x4, 0x7, 0x8, 0x8, 0xc, 0x9, 0x6, 0x5, 0x0, 0x5, 0x2, 0x2, 0x8, 0x9, 0x9, 0x9, 0x5847cb5c, 0x9, 0x2, 0xffffffd8, 0x10001, 0xfffffffc, 0x5, 0x401, 0x8, 0x1, 0x2, 0x0, 0x0, 0x1200, 0x2, 0x0, 0xef2c, 0x80000001, 0xac5ae1de, 0x0, 0x800, 0x1ff, 0x2, 0x3, 0x1, 0x8, 0x7785, 0x8001, 0x4, 0x5, 0x4, 0x7, 0x0, 0x6, 0xffffff2f, 0x8001, 0x3, 0x5, 0x3, 0x4, 0x7, 0x5, 0x7, 0xabd, 0x0, 0x10001, 0x6, 0x4, 0x30000000, 0x5, 0x13c1, 0x3, 0x7, 0x1, 0x8, 0x2, 0x6, 0x1, 0x2, 0x2, 0xb, 0x8, 0xa, 0x9, 0xfffffff9, 0x7, 0x7, 0x3, 0x8, 0x8, 0xfffffffc, 0x6, 0xe7a9, 0x10001, 0x6, 0x0, 0xb9, 0x8cca, 0xdda5, 0x1, 0xa, 0x7fffffff, 0x10, 0x31f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x4, 0x7f, 0x0, {0x6, 0x0, 0x6, 0x7ff, 0x6e6, 0xd74}, {0x8, 0x0, 0xffff, 0x8, 0x7f, 0x7fff}, 0x0, 0x8000, 0xbab2}}]}]}}]}, 0x87c}}, 0x4000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$NFT_MSG_GETGEN(r2, 0x0, 0x40)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x48080)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$rds(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)

990.133607ms ago: executing program 1 (id=856):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x530, 0x1a0, 0x3f8, 0x2b8, 0x0, 0xd0, 0x518, 0x518, 0x518, 0x518, 0x518, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, [0xffffffff, 0xffffffff, 0x7f000101, 0xff000000], [0xffffff00, 0xffffffff, 0xff000000, 0xff000000], 'pimreg\x00', 'veth1_to_bridge\x00', {}, {}, 0xfd, 0xff, 0x2, 0x8}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x5, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x5}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@private=0xa010101, 0x21, 0x3b, 0x200}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x3, 0x2, 0x17c, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000d80), 0x36f, 0x20102, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x40000000}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x8c2f, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
getsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000640)={@multicast2, @private}, &(0x7f0000001680)=0x8)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r1], 0x14}, 0x1, 0x0, 0x0, 0x400c804}, 0x0)
recvmmsg(r0, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000200)=""/215, 0xd7}, {&(0x7f0000000300)=""/107, 0x6b}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000050100"/28], 0x50)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000001cc0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
sendmmsg$inet(r5, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000600)={'vxcan1\x00', <r8=>0x0})
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x1d, r8}, 0x10, 0x0}, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711208000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x12, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000800"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000002575f0ff08000000180000000e0000000000000075790000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x401, 0x6c, &(0x7f0000000440)=""/108, 0x41100, 0x74, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000004c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0xa, 0xf226, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000540)=[{0x0, 0x1, 0x7, 0x7}, {0x3, 0x4, 0x4, 0xc}, {0x3, 0x1, 0xa, 0x3}, {0x1, 0x2, 0xb, 0x3}], 0x10, 0x8}, 0x94)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000016c0), 0x800, 0x0)
write$ppp(r10, &(0x7f0000001700)="1372fab5f7242b2ce497dbd1c728b9fe46f86d33af44", 0x16)

920.827019ms ago: executing program 0 (id=857):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r3=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x17)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r6, &(0x7f0000000140), 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r10=>0x0})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r7, @ANYBLOB="05005b"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r9, 0x2, 0x0, 0x25dfdbff, {{0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000004000000010000000400000000000000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000094a7d8c5b3b08675520b4aa225cee2336f3e0c61"], 0x50)
r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='rss_stat\x00', r14}, 0x18)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8)
sendto$inet6(r0, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c)
socket$inet6(0xa, 0x800000000000002, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)

915.543257ms ago: executing program 0 (id=859):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r1)
sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB="24010000", @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250100000008000100030000000800020002000000"], 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000)
sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c890}, 0x20000000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', <r6=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000005c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="bd1f00fedbdf25010000000c82d87eb3c704722a6034f1045f4b4ce26033ff3b01eb0fab27750fb177c71f577ab9343381e84ce04f346ea16ce22fb2cd64784838b1b35f2cecdcdb73449091665753a6e07a9ea3cb933b015a089c1deccf2bcb3665c2c6d561e6df42147aa87d4cb0f199796abebf52baa6e5a725af", @ANYRES32=r6, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400080000000800070000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b00400000000000000300000800010002000000"], 0x20}}, 0x0)
unshare(0x68040200)
socket$inet(0x2, 0x3, 0x7)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
epoll_create1(0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRES32], 0x6c}}, 0x40)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10)
ppoll(&(0x7f0000000500)=[{r8}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r10 = socket(0x1e, 0x4, 0x0)
r11 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r11, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0)
setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r10, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

731.089991ms ago: executing program 2 (id=860):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
r4 = socket(0x10, 0x803, 0x0)
sendto(r4, &(0x7f00000000c0)="120000001200e7ef007b00000000020000a1", 0x12, 0x0, 0x0, 0x5e)
recvmmsg(r4, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000000240)=""/159, 0x9f}, {&(0x7f0000000200)=""/45, 0x2d}, {&(0x7f0000002bc0)=""/118, 0x76}, {&(0x7f0000000100)=""/149, 0x95}, {&(0x7f0000002f00)=""/268, 0x10c}, {&(0x7f0000000380)=""/118, 0x76}, {&(0x7f0000000400)=""/60, 0x3c}], 0xa}, 0x10}], 0x1, 0x20, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0xffe2, 0xfff1}, {0xfff2, 0xffff}, {0x1, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)

632.36559ms ago: executing program 2 (id=861):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r2 = socket(0x10, 0x803, 0x0) (rerun: 64)
sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) (async)
r8 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64)
r9 = socket$unix(0x1, 0x1, 0x0) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
r11 = socket(0x400000000010, 0x3, 0x0) (async)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r13, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8810}, 0x240000b4) (async)
r14 = socket$rxrpc(0x21, 0x2, 0xa)
connect$rxrpc(r14, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x24) (async)
connect$rxrpc(r14, &(0x7f00000003c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24) (async)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) (async)
r15 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001e00210008006c92fbdbdf25070000003918690a2b7128c173e11a0300000008000200ffff0000"], 0x24}}, 0x0)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000200)={@remote, r3}, 0x14)
sendto$inet6(r0, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)

420.375152ms ago: executing program 2 (id=862):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x48, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES32=<r4=>r2, @ANYBLOB="05"], 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r5)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x30, r6, 0x201, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x28}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x80000}, 0x10000000)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3}, &(0x7f0000000500), &(0x7f0000000540)=r2}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0d02000000", @ANYRES32=r4, @ANYRES16=r8, @ANYRES32=r1, @ANYBLOB="24005a8020000180140003000000060006000200010007000100fb08"], 0x40}}, 0x0)

300.689213ms ago: executing program 2 (id=863):
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a3100000000050001"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0xfffc, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r1, 0x1}, &(0x7f0000000100)=0x8)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300010029bd7000fedbdf2500000000", @ANYRES32=r3, @ANYBLOB="d45006000200000024001a802000028014"], 0x44}, 0x1, 0x0, 0x0, 0x8081}, 0x20040000)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078005001500090000000500010006000000050005000a00000005000400140000000900020073797a686173683a69702c6d616300"], 0x54}}, 0x0)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000280)={0x0, 0x224e, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
sendmsg$nl_crypto(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="f0000000120001002bbd7000fedbdf256c72772d63616d656c6c69612d61736d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000240000000000000000000008000100070000000800010002000000"], 0xf0}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000)
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b702000040000000850000008600"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0x0, 0xe, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x5c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c000480380001800e000100627974656f726465720000002400028008000240000000000800034000000007080001400000000008000440000000000900010073797a3000000000140000001100010000000000000000000000000a2bfc6b999faabaccf738a73555afcd9cbcefea6ec332bc"], 0xd8}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c)
sendto$inet6(r11, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)

181.041819ms ago: executing program 2 (id=864):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
readv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/214, 0xd6}], 0x1)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e0001eb25bd70000000000001"], 0x114}], 0x1}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001a00010000000000fdffffff0a00", @ANYRES32=0x0, @ANYBLOB="0000000000b47d619900000000000014000100fc000000000000000000000000000001000000000000000000"], 0x44}}, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="f70a2d08ee7bfbc642cdac1ac54a45ddb1bbdcb5f4714667ba2a9e621f0294cd3882337e1d029e6a19bf790652a08e68f78f2259b7c498fc5d593ec9371af7d1935b746265f021b8dd2b00ccaaa5b233287ab7fa989b2dce88673ad021e0d9b1149a6f25aa9ca910ce55d88f886bf4c6985a9ef8fdef6485f099f54e72cb7b52a0ebeb59ab5d174cb88b815e8b", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0x11, &(0x7f0000000f80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000b7080000000000007baaf8ff00000000b5080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000064b567976956cc0085000000b300000095162e0994524f28c5d2819723129d1da52b275e0ec636a0493c89cf87ed8a5342ae27e6430fcc9d130f02934ffc89de1bf0067a47c4e42a804c65c53a99627a23c2efe1da33438a6f4727f35a259e974dc98f4d65776edbe2f6b22be3f2ad0bc9ad44fe7381b84b349092f454f740664a7dbb14eb33d0f4976acbde7d73aac1eccd6001f66a01a4ddd763"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={'nr', 0x0}, 0x10000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYBLOB="00000000000000000000000000694727bf3b00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0xfff2, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @loopback}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x32}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x6)
setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000200), 0x4)
sendmmsg(r10, &(0x7f0000000640)=[{{&(0x7f00000003c0)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000740)="25a2825fb2fda9506bcf541c89ad022d1f94272322713979e9763c69687f727313a5d87ec625880531c2399f4c4247a373b9dcb7167bea8ab748b6da1c503cd7b79690b1358404d175448d6c09050c831a74eee47f8e2bfb7138e569b5d3a483d59922ad4e7e4d66d7a04e09c7756d6aee7927c326104e07f991ddf79d1a2e9bba27aab66d7a82228feec5ab9c3aff07237fe627d533f2142369988639949a1caba88517cbc26cedad6c9b4ad1cd8c496190074eddea527da3fdc71f62c6ea", 0xbf}, {&(0x7f0000000180)="f3c22caa8081b880ee0a2a506ce47a04758083ebda5a305a516f3e83c249af258e9cf5f45a", 0x25}, {&(0x7f0000000bc0)="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", 0xfe}, {&(0x7f0000001300)="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", 0xfde}, {&(0x7f0000000600)="8f998605244090609d8db1537b23e98f6c84a510832ab2a5518a0c85d2ea173d51089f", 0x23}, {&(0x7f0000000940)="6531991a04eaba282399988aaaa880358ad8c7191fa4077be9c09664c36d0524ce8d07edf02032ce1d6a17bb19bf80f92745c9d1ef25e0205fd659f8ae5ee6b8730106a5c5874f52e648026009abf6dda2b355fd509200e035b22afb2ef3a14bd036cb9ce325", 0x66}, {&(0x7f0000000cc0)="183c05486ab33b00cc5039644e07062bd20fb6a98198fef3eca33dfdf73d28cc8b7b32c90c67abc94306d58d2838cabd95081d052e2a34b22cf9937e9d9b35650cbc510dc74ea29ef9aa4cf69253ac7a2f6036ec7fb70cdaccf9bbafca71398b6e581cef0d6c", 0x66}, {&(0x7f0000000d40)="42f6b26172679bee87043d51397bbf88172022a2aa1cff04ae1806d68650fc8a6db7bd49628010c13730c0917ff7f10866bb87b06f7e026e66a61542363fc2a012fbb1e399b5c6203fe8fc677ed6410cf315e0d34b87155316410a91bafadb1b814088cc5726d14c51e6cafa967509e9bacb77034856417639ba42736c93a31801ee423c622283108b6b433cbd366233a9a14e395297484cb501002fdd95621be60a3e3a851e292b3492d5db02802c524445b898acf898dff026a2f6a8125952bb224451dc", 0xc5}], 0x8}}], 0x1, 0x84)
sendmsg$NFT_BATCH(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x20085}, 0x2)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r11, 0x0)

109.566773ms ago: executing program 1 (id=865):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r0 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="010006000000ffdbdf25010001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x404)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtaction={0x98, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x84, 0x1, [@m_sample={0x80, 0x1, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x15, 0x10000000, 0xc, 0x2}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffffb}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xf}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xbbde}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0xfffffff9, 0x10000000, 0x6, 0x9}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}]}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x98}}, 0x800)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r2=>0x0})
sendmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f00000001c0)=@can={0x1d, r2}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000240)="51ef94fe46791391a7cf63f2dd842968a13f51b2101c23784c7938c6e17d4d1a", 0x20}, {&(0x7f0000000440)="1faaf617574ed8b306dcb87882f45b655d0d4fc45c41be94", 0x18}], 0x2, &(0x7f00000004c0)=[{0xc8, 0x118, 0x3, "f6a2942b8c82255a8e317e8126e2462ce6b4e5861870b042bb8e7591e983aaf37f6e4e03024c8f11098fda4e656d8de3c3a67a6f17d16039036300b832ccbf3ab140be8f5bfe5a48081cee981bf733414f55f40cc6f32a75b8983c7e4279f46cfe13545407b4db2a03555042d19ed0639aa5bf56b5f0dd15938b6ec49e15d303831ba0c54e0af5502c64b38e052a816c811406ebdfa4b426a9c20e5284aeeef3baa0c945feb93b5ce5bdc7a937f32c1fb779c0"}], 0xc8}, 0x4006)

752.911µs ago: executing program 1 (id=866):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180018000100000000000000000000009500000000000000"], &(0x7f00000006c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000700)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, <r2=>0x0})
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000c00)={0x1, 0x5, {0x5d86, @struct={0x0, 0x8001}, 0x0, 0x0, 0x5, 0xf, 0x5, 0x400, 0x0, @usage=0x8, 0x3, 0x6, [0x0, 0x7, 0x8, 0x9, 0xa, 0x7]}, {0xb1e6, @struct={0x0, 0x9}, 0x0, 0x3, 0x7, 0x3, 0x100000001, 0x9, 0x0, @usage=0x10001, 0x2, 0x5, [0x3, 0x10, 0x3cb5, 0x6, 0x4]}, {0x81, @usage=0x3, <r3=>0x0, 0x1, 0x80000000, 0x9, 0x3, 0x80000000000, 0x11, @struct={0x3, 0x9}, 0x8, 0x0, [0x6, 0x5fc2, 0x401, 0xa25, 0x2, 0x1]}, {0xda5, 0x9, 0x6}})
ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000001000)={{r0}, r2, 0x2, @inherit={0x78, &(0x7f0000000100)=ANY=[@ANYBLOB="00000086000000000000000c00000000000000ffffffffffffff7f31000000000000009c5d00000000000003000000000000000300000000000000090000000000000000000000100000008beb0000000000004b02000000000000100000000000000006000000000000000300000000000000"]}, @devid=r3})
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0xfff, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x4000881)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4008000)
socket$unix(0x1, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000000c0), 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e34ff65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd086004c4a56c6cce6e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e430a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b051f47db7aa110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c0000000000000000000a000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3938e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea875583e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba46cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5ccb9f10f615c87c441dc50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246e891e20ecaad7059866506c3000000000c3230e901e885b7a4a36bdfdb5ce7a2e5807a0f4c1d461d1243fccf51b875b49490cd7d044e7a1e1a4c013fae1f070a8a37ab90da2efc6c875b3aab34b75a252072691fc97bef0fed8ee597ab83bb53f89c36bc2ee3ad54904542f66dc94132df75fc9944882d6f2e13b7057e0000000000000000000000000000000000001b726c0ccd24000000000000cfd2f4d005578b9ed06e1c41ef3b411066739de953d39b968caaca1507928d68c8f052"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x2b)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xffffffe4}], 0x3}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r5, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff})
getsockopt$sock_cred(r9, 0x1, 0x11, 0x0, &(0x7f00000005c0)=0xfe)
bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x808b9027}, 0xc)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r10, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38)

0s ago: executing program 2 (id=867):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x1000, 0x0, 0x1d}}]}}]}, 0x14c}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@fallback=r2, r2, 0x2f, 0x8, 0xffffffffffffffff, @void, @value=0x0}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000040000000400000004"], 0x48)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000240)=0x1d)
sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000008c0)=@newsa={0x1c8, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x2000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@empty, {0x200000000, 0x0, 0x1000000000000007, 0x0, 0x3000000000, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x70bd2a, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0xd6, 0x3, {{'deflate\x00'}, 0x470, "0dcf85d8661e0e0fa5cc5e0f2311ea017f768a20c6621af2a0fb67132a792f023c7c53e408f9b491c62660a8b34e41bf8b001680ce5398c17a360c42821281c2293c15563531307326484577e7af238f241a6555f03ceb55a0cd0a2b493ba2c4705b996fc84eefe502287ef692606ed1298eab6e3f45783efdf9fda1c0d40f93373f2eae39adcc86c82ddf31d722"}}]}, 0x1c8}}, 0x20000000)
r7 = accept4(r4, 0x0, 0x0, 0x80000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv6_newrule={0x54, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x20}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0xa}, @FRA_SRC={0x14, 0x2, @private0}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2f}, @FRA_DST={0x14, 0x1, @remote}]}, 0x54}}, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00', @ANYRES32=0x0, @ANYBLOB="a739df"], 0x1c}}, 0x4000054)
socket$inet6(0xa, 0x5, 0x7fff)
setsockopt(r8, 0x4, 0x4, &(0x7f0000000840)="680614969fcdd69ddb9ed12ead965fe29d151ccb3b45fd965523bf31fdf0912a0ef051af6e39d790de34ff3b8d6f318aa45ec6e604ff9941390bf9fd809134be39445f74474206717c7acc70099e3e4d5183605dd718dd", 0x57)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), r7)
sendmsg$alg(r7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1)
socket$l2tp(0x2, 0x2, 0x73)
sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x30, 0x0, 0x2, 0x70bd23, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "0e4387aa3e2d356dcb1c5eb1d0"}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x90)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:2108' (ED25519) to the list of known hosts.
syzkaller login: [   49.711440][ T5771] cgroup: Unknown subsys name 'net'
[   49.852236][ T5771] cgroup: Unknown subsys name 'cpuset'
[   49.857030][ T5771] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.722685][ T5771] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.433640][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.436970][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.439650][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.442634][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.445834][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.462569][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.466339][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.469997][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.480130][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.483757][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.487463][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.494437][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.533071][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.536973][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.539752][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.837232][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   56.853061][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   56.885775][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   57.012352][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.015243][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.017677][ T5845] bridge_slave_0: entered allmulticast mode
[   57.021197][ T5845] bridge_slave_0: entered promiscuous mode
[   57.049674][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.052663][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.055592][ T5845] bridge_slave_1: entered allmulticast mode
[   57.060042][ T5845] bridge_slave_1: entered promiscuous mode
[   57.127424][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.131455][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.134074][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.136442][ T5843] bridge_slave_0: entered allmulticast mode
[   57.139622][ T5843] bridge_slave_0: entered promiscuous mode
[   57.143152][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.145861][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.148263][ T5843] bridge_slave_1: entered allmulticast mode
[   57.152328][ T5843] bridge_slave_1: entered promiscuous mode
[   57.170668][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.205228][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.208080][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.211805][ T5839] bridge_slave_0: entered allmulticast mode
[   57.215646][ T5839] bridge_slave_0: entered promiscuous mode
[   57.233926][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.239966][ T5845] team0: Port device team_slave_0 added
[   57.242152][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.244422][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.246671][ T5839] bridge_slave_1: entered allmulticast mode
[   57.250423][ T5839] bridge_slave_1: entered promiscuous mode
[   57.264418][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.279432][ T5845] team0: Port device team_slave_1 added
[   57.296169][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.300720][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.354129][ T5843] team0: Port device team_slave_0 added
[   57.357595][ T5839] team0: Port device team_slave_0 added
[   57.360910][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.362999][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.370870][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.376722][ T5843] team0: Port device team_slave_1 added
[   57.390909][ T5839] team0: Port device team_slave_1 added
[   57.393339][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.395856][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.406347][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.439972][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.442171][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.450495][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.454888][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.457296][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.466729][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.471870][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.473966][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.481790][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.487342][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.490624][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.500257][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.535349][ T5845] hsr_slave_0: entered promiscuous mode
[   57.537655][ T5845] hsr_slave_1: entered promiscuous mode
[   57.591210][ T5839] hsr_slave_0: entered promiscuous mode
[   57.593644][ T5839] hsr_slave_1: entered promiscuous mode
[   57.596054][ T5839] debugfs: 'hsr0' already exists in 'hsr'
[   57.599496][ T5839] Cannot create hsr debugfs directory
[   57.607070][ T5843] hsr_slave_0: entered promiscuous mode
[   57.610680][ T5843] hsr_slave_1: entered promiscuous mode
[   57.613311][ T5843] debugfs: 'hsr0' already exists in 'hsr'
[   57.615048][ T5843] Cannot create hsr debugfs directory
[   57.906988][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.914981][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.920930][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.927466][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.989506][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.996591][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.018019][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.034275][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.085980][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.103501][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.115991][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.125783][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.174652][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.195849][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   58.227453][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.230117][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.250373][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.252776][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.261894][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.285995][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.313439][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   58.317548][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   58.338126][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.340865][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.347518][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.350569][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.366109][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.368630][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.374599][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.377126][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.540272][ T5849] Bluetooth: hci1: command tx timeout
[   58.542697][ T5849] Bluetooth: hci0: command tx timeout
[   58.603522][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.609190][ T5842] Bluetooth: hci2: command tx timeout
[   58.666211][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.684438][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.707102][ T5843] veth0_vlan: entered promiscuous mode
[   58.723918][ T5843] veth1_vlan: entered promiscuous mode
[   58.772831][ T5845] veth0_vlan: entered promiscuous mode
[   58.788245][ T5843] veth0_macvtap: entered promiscuous mode
[   58.793726][ T5839] veth0_vlan: entered promiscuous mode
[   58.796484][ T5843] veth1_macvtap: entered promiscuous mode
[   58.802237][ T5845] veth1_vlan: entered promiscuous mode
[   58.822910][ T5839] veth1_vlan: entered promiscuous mode
[   58.832406][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.856082][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.871181][ T5854] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.876092][ T5845] veth0_macvtap: entered promiscuous mode
[   58.884259][ T5854] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.895040][ T5854] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.900570][ T5839] veth0_macvtap: entered promiscuous mode
[   58.911914][ T5845] veth1_macvtap: entered promiscuous mode
[   58.915367][ T5854] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.932362][ T5839] veth1_macvtap: entered promiscuous mode
[   58.949059][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.967949][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.972740][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.024244][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.033842][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.036629][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.042015][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.045526][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.054568][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.057790][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.060196][ T5854] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.064799][ T5854] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.067654][ T5854] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.085700][ T5854] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.164319][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.174794][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.214195][  T777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.216713][  T777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.251765][  T777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.254322][  T777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.272064][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.312795][  T777] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.317305][  T777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.344874][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.354650][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.407307][ T5908] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   59.419647][ T5908] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   59.422952][ T5908] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[   59.434534][ T5909] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   59.440309][ T5909] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   59.444524][ T5909] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[   59.665633][ T5931] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8'.
[   59.668369][ T5931] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8'.
[   59.676857][ T5931] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8'.
[   59.683092][ T5931] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8'.
[   59.694210][ T5931] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8'.
[   59.697189][ T5931] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8'.
[   59.709216][ T5931] Zero length message leads to an empty skb
[   59.948254][ T5944] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   59.990154][ T5944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'.
[   59.997657][ T5944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11'.
[   60.017301][ T5944] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11'.
[   60.136108][ T5950] netlink: 108 bytes leftover after parsing attributes in process `syz.2.12'.
[   60.165330][ T5953] warning: `syz.0.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   60.190688][ T5953] syz.0.14 uses obsolete (PF_INET,SOCK_PACKET)
[   60.443423][ T5955] unsupported nla_type 52263
[   60.447861][ T5957] netlink: 'syz.0.16': attribute type 1 has an invalid length.
[   60.453585][ T5955] tipc: Started in network mode
[   60.455739][ T5955] tipc: Node identity 66d3665c2f3e, cluster identity 4711
[   60.462748][ T5955] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   60.467925][ T5955] syzkaller0: entered promiscuous mode
[   60.476264][ T5955] syzkaller0: entered allmulticast mode
[   60.515045][ T5955] tipc: Resetting bearer <eth:syzkaller0>
[   60.609532][ T5842] Bluetooth: hci0: command tx timeout
[   60.610205][ T5849] Bluetooth: hci1: command tx timeout
[   60.615601][ T5966] netlink: 'syz.1.18': attribute type 1 has an invalid length.
[   60.619063][ T5966] netlink: 'syz.1.18': attribute type 3 has an invalid length.
[   60.621928][ T5966] NCSI netlink: No device for ifindex 246
[   60.676329][ T5966] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   60.682145][ T5966] macvtap1: entered allmulticast mode
[   60.684064][ T5966] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[   60.693046][ T5966] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[   60.695393][ T5966] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[   60.698801][ T5849] Bluetooth: hci2: command tx timeout
[   60.853672][ T5980] netlink: 'syz.1.20': attribute type 10 has an invalid length.
[   60.877695][ T5980] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.881787][ T5980] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   61.111144][ T5954] tipc: Resetting bearer <eth:syzkaller0>
[   61.129741][ T5954] tipc: Disabling bearer <eth:syzkaller0>
[   61.315198][ T5994] openvswitch: netlink: IP tunnel TTL not specified.
[   61.439676][ T5964] syz.0.17 (5964) used greatest stack depth: 19928 bytes left
[   61.462271][ T6004] tipc: Failed to remove unknown binding: 66,1,1/0:3232980839/3232980841
[   61.465984][ T6004] tipc: Failed to remove unknown binding: 66,1,1/0:3232980839/3232980841
[   61.468672][ T6004] tipc: Failed to remove unknown binding: 66,1,1/0:3232980839/3232980841
[   61.583812][ T6010] TC_ACT_REPEAT abuse ?
[   61.591163][ T6010] TC_ACT_REPEAT abuse ?
[   61.593511][ T6010] TC_ACT_REPEAT abuse ?
[   61.609142][ T6009] TC_ACT_REPEAT abuse ?
[   61.612063][ T6009] TC_ACT_REPEAT abuse ?
[   61.672506][ T6016] vlan2: entered promiscuous mode
[   61.677317][ T6016] vlan2: entered allmulticast mode
[   61.679261][ T6016] hsr_slave_1: entered allmulticast mode
[   61.701773][ T6020] netlink: 'syz.0.35': attribute type 4 has an invalid length.
[   61.730157][    C0] TC_ACT_REPEAT abuse ?
[   61.861624][ T6033] netlink: 'syz.0.38': attribute type 1 has an invalid length.
[   61.876576][ T6033] gretap1: entered promiscuous mode
[   61.887826][ T6027] netlink: 'syz.1.37': attribute type 10 has an invalid length.
[   61.897498][ T6027] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   62.346704][ T6055] syz_tun: entered allmulticast mode
[   62.431642][ T6056] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.435323][ T6056] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.505308][ T6056] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.512054][ T6056] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.593976][ T5870] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.599380][ T5870] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.602948][ T5870] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.606956][ T5870] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   62.689609][ T5849] Bluetooth: hci0: command tx timeout
[   62.699150][ T5849] Bluetooth: hci1: command tx timeout
[   62.715798][ T6062] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[   62.768602][ T5849] Bluetooth: hci2: command tx timeout
[   62.999508][ T6066] pimreg: entered allmulticast mode
[   63.251988][ T6083] netlink: 'syz.1.50': attribute type 1 has an invalid length.
[   63.376483][ T6097] netlink: 'syz.0.52': attribute type 6 has an invalid length.
[   63.577412][ T6122] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.712608][ T6127] bridge_slave_1: left allmulticast mode
[   63.718706][ T6127] bridge_slave_1: left promiscuous mode
[   63.720679][ T6127] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.732550][ T6127] bridge_slave_0: left allmulticast mode
[   63.734552][ T6127] bridge_slave_0: left promiscuous mode
[   63.736420][ T6127] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.745895][ T6126] Bluetooth: MGMT ver 1.23
[   63.811560][ T6130] netlink: 'syz.2.58': attribute type 9 has an invalid length.
[   64.145747][ T3558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.150146][ T3558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.181536][ T6155] tipc: Started in network mode
[   64.183447][ T6155] tipc: Node identity ac14140f, cluster identity 4711
[   64.186451][ T6155] tipc: New replicast peer: 255.255.255.255
[   64.192324][ T6155] tipc: Enabled bearer <udp:syz2>, priority 10
[   64.693294][ T6173] __nla_validate_parse: 84 callbacks suppressed
[   64.693309][ T6173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.73'.
[   64.723715][ T6173] vcan1: entered allmulticast mode
[   64.769003][ T5842] Bluetooth: hci1: command tx timeout
[   64.769660][   T54] Bluetooth: hci0: command tx timeout
[   64.815743][ T6175] netlink: 20 bytes leftover after parsing attributes in process `syz.0.74'.
[   64.831628][ T6175] batman_adv: batadv0: Adding interface: ip6gretap1
[   64.834412][ T6175] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.844444][ T6175] batman_adv: batadv0: Interface activated: ip6gretap1
[   64.849536][   T54] Bluetooth: hci2: command tx timeout
[   64.887994][ T6177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.75'.
[   64.906967][ T6177] team1: entered promiscuous mode
[   64.909358][ T6177] team1: entered allmulticast mode
[   64.912489][ T6177] 8021q: adding VLAN 0 to HW filter on device team1
[   64.952965][ T6179] Illegal XDP return value 51 on prog  (id 17) dev syz_tun, expect packet loss!
[   64.979554][   T10] cfg80211: failed to load regulatory.db
[   65.016195][ T6182] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20004
[   65.045320][ T6184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   65.309118][   T10] tipc: Node number set to 2886997007
[   65.832307][ T6202] netlink: 32 bytes leftover after parsing attributes in process `syz.2.81'.
[   65.837035][ T6201] bridge0: entered allmulticast mode
[   65.840814][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.81'.
[   65.844491][ T6201] bridge_slave_1: left allmulticast mode
[   65.847125][ T6201] bridge_slave_1: left promiscuous mode
[   65.850689][ T6201] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.856598][ T6201] bridge_slave_0: left allmulticast mode
[   65.859322][ T6201] bridge_slave_0: left promiscuous mode
[   65.861850][ T6201] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.877618][ T6201] bridge0 (unregistering): left allmulticast mode
[   66.035127][ T6210] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.049409][ T5849] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   66.130468][ T6214] syzkaller0: entered allmulticast mode
[   66.135383][ T6216] syzkaller0: entered promiscuous mode
[   66.137689][ T6216] syzkaller0: entered allmulticast mode
[   66.476570][ T6244] netlink: 'syz.0.95': attribute type 1 has an invalid length.
[   66.480313][ T6244] netlink: 144 bytes leftover after parsing attributes in process `syz.0.95'.
[   66.486368][ T6244] netlink: 28 bytes leftover after parsing attributes in process `syz.0.95'.
[   66.570223][ T6251] netlink: 28 bytes leftover after parsing attributes in process `syz.0.98'.
[   66.573762][ T6251] netlink: 28 bytes leftover after parsing attributes in process `syz.0.98'.
[   66.826597][ T6269] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   66.826993][ T5854] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4
[   66.842212][ T6283] netlink: 'syz.2.107': attribute type 1 has an invalid length.
[   66.845447][ T6284] netlink: 3 bytes leftover after parsing attributes in process `syz.2.107'.
[   66.851494][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout
[   66.941600][ T6283] bond1: entered promiscuous mode
[   66.943818][ T6283] 8021q: adding VLAN 0 to HW filter on device bond1
[   66.972854][ T6284] batadv2: entered promiscuous mode
[   66.980553][ T6284] batadv2: entered allmulticast mode
[   67.088606][ T5849] Bluetooth: hci2: command 0x0405 tx timeout
[   67.259758][ T6300] netlink: 'syz.0.110': attribute type 1 has an invalid length.
[   67.432350][ T6307] netem: change failed
[   67.534394][ T6310] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   67.547970][ T6313] !: renamed from dummy0 (while UP)
[   67.851555][ T6326] tipc: New replicast peer: 255.255.255.255
[   67.853939][ T6326] tipc: Enabled bearer <udp:syz2>, priority 10
[   67.890378][ T6325] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.968075][ T6325] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.041327][ T6325] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.106753][ T6325] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.213755][ T6360] team0: Device gtp0 is of different type
[   68.242670][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.261506][ T5854] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.290951][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.313397][ T5870] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.511250][ T6371] netlink: 'syz.2.132': attribute type 1 has an invalid length.
[   68.645311][ T6378] bond1: left promiscuous mode
[   68.647606][ T6378] batadv2: left promiscuous mode
[   68.649728][ T6378] batadv2: left allmulticast mode
[   68.667650][ T6378] hsr_slave_0: left promiscuous mode
[   68.859459][  T792] tipc: Node number set to 1240295004
[   68.994436][ T6391] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   69.246950][ T6406] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.457327][ T6421] netlink: 'syz.2.147': attribute type 4 has an invalid length.
[   69.627975][ T6427] delete_channel: no stack
[   69.681143][ T6427] netlink: 'syz.0.150': attribute type 11 has an invalid length.
[   69.684261][ T6427] netlink: 'syz.0.150': attribute type 11 has an invalid length.
[   69.744380][ T6431] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.748128][ T6431] syzkaller0: entered promiscuous mode
[   69.752418][ T6431] syzkaller0: entered allmulticast mode
[   69.767779][ T6431] tipc: Resetting bearer <eth:syzkaller0>
[   69.773295][ T6430] tipc: Resetting bearer <eth:syzkaller0>
[   69.783753][ T6430] tipc: Disabling bearer <eth:syzkaller0>
[   70.123850][ T6437] __nla_validate_parse: 45 callbacks suppressed
[   70.123865][ T6437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.153'.
[   70.184418][ T6439] netlink: 'syz.1.154': attribute type 10 has an invalid length.
[   70.187717][ T6439] netlink: 40 bytes leftover after parsing attributes in process `syz.1.154'.
[   70.192857][ T6439] dummy0: entered promiscuous mode
[   70.197020][ T6439] bridge0: port 3(dummy0) entered blocking state
[   70.201176][ T6439] bridge0: port 3(dummy0) entered disabled state
[   70.204807][ T6439] dummy0: entered allmulticast mode
[   70.211016][ T6439] bridge0: port 3(dummy0) entered blocking state
[   70.213712][ T6439] bridge0: port 3(dummy0) entered forwarding state
[   70.256651][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.156'.
[   70.364317][ T6450] netlink: 96 bytes leftover after parsing attributes in process `syz.1.158'.
[   70.369742][ T6450] netlink: 24 bytes leftover after parsing attributes in process `syz.1.158'.
[   70.595215][ T6456] syzkaller1: entered allmulticast mode
[   71.014534][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.017229][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.690556][ T6470] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.693986][ T6470] syzkaller0: entered promiscuous mode
[   71.696355][ T6470] syzkaller0: entered allmulticast mode
[   71.732702][ T6472] netlink: 'syz.2.164': attribute type 1 has an invalid length.
[   71.759942][ T6469] tipc: Resetting bearer <eth:syzkaller0>
[   71.786871][ T6469] tipc: Disabling bearer <eth:syzkaller0>
[   71.897833][ T6474] syzkaller1: entered promiscuous mode
[   71.902990][ T6474] syzkaller1: entered allmulticast mode
[   71.917028][ T6476] netlink: 44 bytes leftover after parsing attributes in process `syz.2.166'.
[   71.990321][ T6480] netlink: 'syz.2.168': attribute type 2 has an invalid length.
[   71.992035][ T6479] netlink: 16 bytes leftover after parsing attributes in process `syz.0.167'.
[   72.017017][ T6480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.168'.
[   72.021180][ T6480] netlink: 24 bytes leftover after parsing attributes in process `syz.2.168'.
[   72.057920][ T6485] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   72.091902][ T6490] netlink: 84 bytes leftover after parsing attributes in process `syz.2.170'.
[   72.102603][ T6492] batadv0: entered promiscuous mode
[   72.104482][ T6492] macsec1: entered promiscuous mode
[   72.107884][ T6492] batadv0: left promiscuous mode
[   72.542572][ T6525] dvmrp8: entered allmulticast mode
[   72.554241][ T6526] netlink: 'syz.1.179': attribute type 3 has an invalid length.
[   72.557607][ T6526] netlink: 'syz.1.179': attribute type 1 has an invalid length.
[   72.572068][ T6524] dvmrp8: left allmulticast mode
[   72.708091][ T6518] geneve0: entered promiscuous mode
[   72.872524][ T6534] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   72.986723][ T6541] syzkaller1: entered promiscuous mode
[   72.988879][ T6541] syzkaller1: entered allmulticast mode
[   73.012956][ T6546] netlink: 'syz.2.184': attribute type 7 has an invalid length.
[   73.053308][ T6547] bridge0: port 1(bond2) entered blocking state
[   73.055923][ T6547] bridge0: port 1(bond2) entered disabled state
[   73.058789][ T6547] bond2: entered allmulticast mode
[   73.153129][ T6553] policy can only be matched on NF_INET_PRE_ROUTING
[   73.153148][ T6553] unable to load match
[   73.159908][ T6555] netlink: 'syz.2.187': attribute type 1 has an invalid length.
[   73.195797][ T6555] 8021q: adding VLAN 0 to HW filter on device bond3
[   73.214663][ T6555] 8021q: adding VLAN 0 to HW filter on device bond3
[   73.217718][ T6555] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[   73.225136][ T6555] bond3: (slave vxcan3): Error -95 calling set_mac_address
[   73.280565][ T6557] veth3: entered promiscuous mode
[   73.289918][ T6557] bond3: (slave veth3): Enslaving as an active interface with a down link
[   73.305753][ T6559] bridge0: port 3(dummy0) entered disabled state
[   73.315780][ T6559] dummy0 (unregistering): left allmulticast mode
[   73.318607][ T6559] bridge0: port 3(dummy0) entered disabled state
[   73.326567][ T6555] 8021q: adding VLAN 0 to HW filter on device bond3
[   73.729333][ T6582] IPVS: Error connecting to the multicast addr
[   73.781779][ T6584] netlink: 'syz.2.199': attribute type 1 has an invalid length.
[   73.914269][ T6596] netlink: 'syz.2.202': attribute type 1 has an invalid length.
[   73.936877][ T6596] 8021q: adding VLAN 0 to HW filter on device bond5
[   74.712958][ T6633] netlink: 'syz.0.212': attribute type 16 has an invalid length.
[   74.715990][ T6633] netlink: 'syz.0.212': attribute type 17 has an invalid length.
[   74.903928][ T6633] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.922500][ T6633] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.152846][ T6640] __nla_validate_parse: 17 callbacks suppressed
[   75.152859][ T6640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.214'.
[   75.174619][ T6633] batman_adv: batadv0: Interface deactivated: ip6gretap1
[   75.196463][ T6639] bond0: (slave batadv0): Releasing backup interface
[   75.206798][ T6639] bridge_slave_0: left allmulticast mode
[   75.210580][ T6639] bridge_slave_0: left promiscuous mode
[   75.213084][ T6639] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.225854][ T6639] bridge_slave_1: left allmulticast mode
[   75.229899][ T6639] bridge_slave_1: left promiscuous mode
[   75.232387][ T6639] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.254762][ T6639] bond0: (slave bond_slave_0): Releasing backup interface
[   75.274538][ T6639] bond0: (slave bond_slave_1): Releasing backup interface
[   75.286695][ T6639] team0: Port device team_slave_0 removed
[   75.295905][ T6639] team0: Port device team_slave_1 removed
[   75.299970][ T6639] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.302331][ T6639] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.307176][ T6639] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.310518][ T6639] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.321312][ T6639] bond0: (slave wlan1): Releasing backup interface
[   75.341657][ T5854] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.345194][ T5854] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.348302][ T5854] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.365456][ T6644] netlink: 40 bytes leftover after parsing attributes in process `syz.0.215'.
[   75.385254][ T6645] netlink: 28 bytes leftover after parsing attributes in process `syz.0.215'.
[   75.388245][ T6645] netlink: 28 bytes leftover after parsing attributes in process `syz.0.215'.
[   75.395053][ T6639] syz.1.214 (6639) used greatest stack depth: 19864 bytes left
[   75.416164][ T6650] bond0: (slave bond_slave_0): Releasing backup interface
[   75.429675][ T6650] bond0: (slave bond_slave_1): Releasing backup interface
[   75.434850][ T6650] team0: Port device team_slave_0 removed
[   75.438830][ T6650] team0: Port device team_slave_1 removed
[   75.444878][ T6650] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.450136][ T6650] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.453621][ T6650] batman_adv: batadv0: Removing interface: ip6gretap1
[   75.456351][ T5854] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.465208][ T6644] batman_adv: batadv0: Adding interface: virt_wifi0
[   75.467555][ T6644] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.478284][ T6644] batman_adv: batadv0: Interface activated: virt_wifi0
[   75.485339][ T6657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.218'.
[   75.489420][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.218'.
[   75.491374][ T6644] syz.0.215 (6644) used greatest stack depth: 19144 bytes left
[   75.504277][ T6656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.218'.
[   75.532914][ T6649] netlink: 88 bytes leftover after parsing attributes in process `syz.2.217'.
[   75.536571][ T6659] netlink: 16 bytes leftover after parsing attributes in process `syz.0.219'.
[   75.543909][ T6659] netlink: 216 bytes leftover after parsing attributes in process `syz.0.219'.
[   75.795903][ T6678] IPVS: Scheduler module ip_vs_sip not found
[   75.800060][ T6678] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[   75.804179][ T6678] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[   76.031594][ T6695] 8021q: adding VLAN 0 to HW filter on device batadv0
[   76.037418][ T6695] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   76.053478][ T6695] batadv0: entered promiscuous mode
[   76.055270][ T6695] batadv0: entered allmulticast mode
[   76.061298][ T6695] bond0: (slave batadv0): Releasing backup interface
[   76.067349][ T6695] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[   76.404303][ T6720] team0: entered promiscuous mode
[   76.495655][ T6720] team0 (unregistering): left promiscuous mode
[   76.735403][ T6741] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000
[   77.049163][ T6757] validate_nla: 5 callbacks suppressed
[   77.049195][ T6757] netlink: 'syz.2.248': attribute type 12 has an invalid length.
[   77.470110][ T6775] ieee802154 phy0 wpan0: encryption failed: -90
[   77.527594][ T6777] batadv3: entered promiscuous mode
[   77.555117][ T6779] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   77.566578][ T6779] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   77.655537][   T10] IPVS: starting estimator thread 0...
[   77.657090][ T6781] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[   77.749316][ T6786] IPVS: using max 42 ests per chain, 100800 per kthread
[   78.197728][ T6820] syzkaller0: entered promiscuous mode
[   78.199871][ T6820] syzkaller0: entered allmulticast mode
[   79.536332][ T6834] team0: entered promiscuous mode
[   79.544351][ T6834] team_slave_0: entered promiscuous mode
[   79.546370][ T6834] team_slave_1: entered promiscuous mode
[   79.703566][ T6858] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[   79.707840][ T6858] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[   79.728811][ T6862] tipc: Started in network mode
[   79.730548][ T6862] tipc: Node identity , cluster identity 4711
[   79.732449][ T6862] tipc: Failed to obtain node identity
[   79.734420][ T6862] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   79.740482][ T6862] syzkaller0: entered promiscuous mode
[   79.742783][ T6862] syzkaller0: entered allmulticast mode
[   79.763306][ T6858] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.792483][ T6864] netlink: 'syz.2.284': attribute type 58 has an invalid length.
[   79.804929][ T6858] syzkaller0: entered promiscuous mode
[   79.807121][ T6858] syzkaller0: entered allmulticast mode
[   79.851064][ T6858] tipc: Resetting bearer <eth:syzkaller0>
[   79.873977][ T6858] tipc: Disabling bearer <eth:syzkaller0>
[   79.935409][ T6871] netlink: 'syz.2.286': attribute type 6 has an invalid length.
[   79.953097][ T6871] netlink: 'syz.2.286': attribute type 12 has an invalid length.
[   80.309371][ T6884] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   80.318321][ T6884] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   80.636226][ T6904] __nla_validate_parse: 43 callbacks suppressed
[   80.636242][ T6904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.296'.
[   80.706304][ T6909] netlink: 'syz.0.297': attribute type 1 has an invalid length.
[   80.731552][ T6909] 8021q: adding VLAN 0 to HW filter on device bond1
[   80.746232][ T6909] bond1: (slave geneve3): making interface the new active one
[   80.750608][ T6909] bond1: (slave geneve3): Enslaving as an active interface with an up link
[   80.754084][ T5871] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.759468][ T5871] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.782577][ T5871] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.786378][ T5871] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.977215][ T6916] netlink: 'syz.0.299': attribute type 3 has an invalid length.
[   80.980702][ T6916] netlink: 224 bytes leftover after parsing attributes in process `syz.0.299'.
[   81.010021][ T6919] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   81.198131][ T6937] netlink: 56 bytes leftover after parsing attributes in process `syz.1.302'.
[   81.316577][ T6949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.304'.
[   81.346833][ T6951] netlink: 32 bytes leftover after parsing attributes in process `syz.1.306'.
[   81.366238][ T6954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.307'.
[   81.417844][ T6951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.306'.
[   81.603474][ T6978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.313'.
[   81.776596][ T6987] macsec1: entered promiscuous mode
[   81.782927][ T6987] netlink: 'syz.2.315': attribute type 10 has an invalid length.
[   81.917914][ T6998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.318'.
[   81.927823][ T6998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.318'.
[   81.993950][ T7000] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   82.145473][ T7006] netlink: 'syz.2.321': attribute type 13 has an invalid length.
[   82.148916][ T7006] netlink: 'syz.2.321': attribute type 17 has an invalid length.
[   82.219455][ T7006] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.223919][ T7006] 8021q: adding VLAN 0 to HW filter on device team0
[   82.233211][ T7006] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   82.324771][ T7006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   82.631220][ T7019] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[   82.695988][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.699537][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.708295][ T7023] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   82.713894][ T7023] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   83.041674][ T7038] netlink: 'syz.1.329': attribute type 5 has an invalid length.
[   83.273376][ T7044] sctp: [Deprecated]: syz.1.331 (pid 7044) Use of struct sctp_assoc_value in delayed_ack socket option.
[   83.273376][ T7044] Use struct sctp_sack_info instead
[   84.676898][ T7050] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   84.688731][   T54] Bluetooth: hci0: command 0x0c1a tx timeout
[   85.663767][ T7090] veth0: entered promiscuous mode
[   85.668386][ T7090] __nla_validate_parse: 8 callbacks suppressed
[   85.668407][ T7090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.343'.
[   85.947238][ T7104] netlink: 'syz.2.347': attribute type 1 has an invalid length.
[   85.982934][ T7104] 8021q: adding VLAN 0 to HW filter on device bond6
[   86.001564][ T7104] bond6: (slave wlan0): Enslaving as an active interface with a down link
[   86.014344][ T7104] vlan3: entered allmulticast mode
[   86.016153][ T7104] veth1: entered allmulticast mode
[   86.020827][ T7104] bond6: (slave vlan3): Opening slave failed
[   86.149965][ T7121] netlink: 'syz.0.352': attribute type 3 has an invalid length.
[   86.154892][ T7123] netlink: 'syz.0.352': attribute type 3 has an invalid length.
[   86.267935][ T7136] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (17)
[   86.276948][ T7136] netlink: 16 bytes leftover after parsing attributes in process `syz.0.356'.
[   86.285789][ T7136] netlink: 16 bytes leftover after parsing attributes in process `syz.0.356'.
[   86.451864][ T7143] netlink: 'syz.2.359': attribute type 1 has an invalid length.
[   86.626447][ T7150] netlink: 'syz.2.362': attribute type 13 has an invalid length.
[   86.633828][ T7150] netlink: 'syz.2.362': attribute type 17 has an invalid length.
[   86.646891][ T7150] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   86.731607][ T7157] netlink: 'syz.1.364': attribute type 1 has an invalid length.
[   86.767187][ T7160] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.770961][ T7157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.364'.
[   86.784017][ T7160] syzkaller0: entered promiscuous mode
[   86.787971][ T7157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.364'.
[   86.792051][ T7160] syzkaller0: entered allmulticast mode
[   86.794859][ T7150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   86.850593][ T7160] tipc: Resetting bearer <eth:syzkaller0>
[   86.855550][ T7158] tipc: Resetting bearer <eth:syzkaller0>
[   86.876019][ T7158] tipc: Disabling bearer <eth:syzkaller0>
[   86.959369][ T7166] netlink: 1 bytes leftover after parsing attributes in process `syz.0.368'.
[   86.995781][ T7168] netlink: 60 bytes leftover after parsing attributes in process `syz.0.369'.
[   87.044137][ T7177] trusted_key: syz.0.371 sent an empty control message without MSG_MORE.
[   87.093808][ T7180] netlink: 16 bytes leftover after parsing attributes in process `syz.0.372'.
[   87.166543][ T7185] netlink: 6632 bytes leftover after parsing attributes in process `syz.1.373'.
[   87.172280][ T7185] openvswitch: netlink: Flow key attr not present in new flow.
[   87.200559][ T7187] netlink: 16 bytes leftover after parsing attributes in process `syz.0.375'.
[   87.564693][ T7217] lo speed is unknown, defaulting to 1000
[   87.566791][ T7217] lo speed is unknown, defaulting to 1000
[   87.572253][ T7217] lo speed is unknown, defaulting to 1000
[   87.577292][ T7217] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   87.607244][ T7217] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   87.616441][ T7222] bridge2: entered promiscuous mode
[   87.619770][ T7222] bridge2: entered allmulticast mode
[   87.623820][ T7222] team0: Port device bridge2 added
[   87.641681][ T7217] lo speed is unknown, defaulting to 1000
[   87.645355][ T7217] lo speed is unknown, defaulting to 1000
[   87.659707][ T7217] lo speed is unknown, defaulting to 1000
[   88.178318][ T7250] netlink: 'syz.1.393': attribute type 1 has an invalid length.
[   88.206941][ T7250] bond1: entered promiscuous mode
[   88.210475][ T7250] 8021q: adding VLAN 0 to HW filter on device bond1
[   88.214282][ T7253] netlink: 'syz.0.394': attribute type 3 has an invalid length.
[   88.230349][ T7250] batadv1: entered promiscuous mode
[   88.233213][ T7250] batadv1: entered allmulticast mode
[   88.236941][ T7250] 8021q: adding VLAN 0 to HW filter on device batadv1
[   88.242744][ T7250] bond1: (slave batadv1): making interface the new active one
[   88.246882][ T7250] bond1: (slave batadv1): Enslaving as an active interface with an up link
[   88.284563][ T7257] veth0_to_team: entered promiscuous mode
[   88.286562][ T7257] veth0_to_team: entered allmulticast mode
[   88.340715][ T7260] openvswitch: netlink: Tunnel attr 227 out of range max 16
[   89.461945][ T7291] (unnamed net_device) (uninitialized): (slave bridge_slave_0): Device is not bonding slave
[   89.466107][ T7291] (unnamed net_device) (uninitialized): option active_slave: invalid value (bridge_slave_0)
[   89.746359][ T7304] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[   89.778705][ T7304] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   89.814379][ T7308] netlink: 'syz.0.414': attribute type 1 has an invalid length.
[   89.846379][ T7308] 8021q: adding VLAN 0 to HW filter on device bond2
[   90.044538][ T7327] (unnamed net_device) (uninitialized): (slave bridge_slave_0): Device is not bonding slave
[   90.049803][ T7327] (unnamed net_device) (uninitialized): option active_slave: invalid value (bridge_slave_0)
[   90.102820][ T7330] tc_dump_action: action bad kind
[   90.112763][ T7332] netlink: 'syz.1.421': attribute type 21 has an invalid length.
[   90.222249][ T7339] can: request_module (can-proto-0) failed.
[   90.227573][ T7342] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   90.233782][ T7339] openvswitch: netlink: IP tunnel dst address not specified
[   90.513439][ T7363] netlink: 'syz.0.431': attribute type 6 has an invalid length.
[   90.533167][ T7363] netlink: 'syz.0.431': attribute type 12 has an invalid length.
[   90.625418][ T7366] netlink: 'syz.0.432': attribute type 1 has an invalid length.
[   90.660146][ T7366] veth3: entered promiscuous mode
[   90.724183][ T7369] __nla_validate_parse: 19 callbacks suppressed
[   90.724195][ T7369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.433'.
[   90.743934][ T7369] syz.0.433 uses old SIOCAX25GETINFO
[   90.764445][ T7372] netlink: 28 bytes leftover after parsing attributes in process `syz.2.434'.
[   90.767924][ T7372] netlink: 28 bytes leftover after parsing attributes in process `syz.2.434'.
[   90.864342][ T7379] netlink: 'syz.2.436': attribute type 23 has an invalid length.
[   91.013334][ T7390] netlink: 112 bytes leftover after parsing attributes in process `syz.0.439'.
[   91.039420][ T7392] netlink: 'syz.1.440': attribute type 1 has an invalid length.
[   91.042640][ T7392] netlink: 600 bytes leftover after parsing attributes in process `syz.1.440'.
[   91.102319][ T7398] netlink: 20 bytes leftover after parsing attributes in process `syz.2.441'.
[   91.116949][ T7397] netlink: 20 bytes leftover after parsing attributes in process `syz.2.441'.
[   91.147356][ T7397] netlink: 84 bytes leftover after parsing attributes in process `syz.2.441'.
[   91.186321][ T7408] ieee802154 phy0 wpan0: encryption failed: -22
[   91.517858][ T7397] lo speed is unknown, defaulting to 1000
[   91.523707][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.530584][ T7412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.538291][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.546667][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.551497][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.776405][ T7430] netlink: 24 bytes leftover after parsing attributes in process `syz.1.451'.
[   91.881881][ T7441] netlink: 'syz.1.453': attribute type 1 has an invalid length.
[   91.921656][ T7441] 8021q: adding VLAN 0 to HW filter on device bond2
[   91.942403][ T7441] 8021q: adding VLAN 0 to HW filter on device bond2
[   91.945545][ T7441] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   91.952840][ T7441] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   92.266773][ T7473] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[   92.271342][ T7472] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[   92.330442][ T7480] syzkaller1: entered promiscuous mode
[   92.341588][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.461'.
[   92.344892][ T7480] syzkaller1: entered allmulticast mode
[   92.791253][ T7526] syz_tun: entered allmulticast mode
[   92.796823][ T7526] dvmrp8: entered allmulticast mode
[   92.854680][ T7526] lo speed is unknown, defaulting to 1000
[   92.903695][ T7532] sit0: entered promiscuous mode
[   92.912893][ T7525] syz_tun: left allmulticast mode
[   92.915078][ T7525] dvmrp8: left allmulticast mode
[   92.997574][ T7539] netlink: 'syz.2.481': attribute type 11 has an invalid length.
[   93.037777][ T7544] gtp0: entered allmulticast mode
[   93.446056][ T7560] bond0: entered promiscuous mode
[   93.460728][ T7560] bond0: left promiscuous mode
[   94.053848][ T7590] syzkaller0: entered promiscuous mode
[   94.056298][ T7590] syzkaller0: entered allmulticast mode
[   94.075121][ T7590] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   94.092347][ T7590] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   94.097427][ T7590] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[   94.104559][ T7590] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[   94.107339][ T7590] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[   94.112316][ T7590] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[   94.116851][ T7590] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[   94.125192][ T7590] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[   94.129993][ T7590] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[   94.269257][ T7610] validate_nla: 3 callbacks suppressed
[   94.269273][ T7610] netlink: 'syz.2.505': attribute type 1 has an invalid length.
[   94.294421][ T7610] 8021q: adding VLAN 0 to HW filter on device bond7
[   94.490586][ T7626] nbd0: detected capacity change from 0 to 63
[   94.495893][ T7632] block nbd0: NBD_DISCONNECT
[   94.505927][ T7632] block nbd0: Disconnected due to user request.
[   94.513588][ T7632] block nbd0: shutting down sockets
[   94.516823][ T5848] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   94.528765][ T5848] Buffer I/O error on dev nbd0, logical block 1, async page read
[   94.543089][    C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   94.543407][ T1118] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2
[   94.546838][    C0] Buffer I/O error on dev nbd0, logical block 0, async page read
[   94.552227][ T1118] Buffer I/O error on dev nbd0, logical block 2, async page read
[   94.556937][ T1118] Buffer I/O error on dev nbd0, logical block 3, async page read
[   94.564101][ T5848] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   94.572599][ T5848] Buffer I/O error on dev nbd0, logical block 0, async page read
[   94.591438][ T5848] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   94.595413][ T5848] Buffer I/O error on dev nbd0, logical block 1, async page read
[   94.613242][ T5848] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   94.617357][ T5848] Buffer I/O error on dev nbd0, logical block 2, async page read
[   94.633875][ T5848] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   94.640755][ T5848] Buffer I/O error on dev nbd0, logical block 3, async page read
[   94.643916][ T5848] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   94.647491][ T5848] Buffer I/O error on dev nbd0, logical block 0, async page read
[   94.656910][ T5848] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   94.661448][ T5848] Buffer I/O error on dev nbd0, logical block 1, async page read
[   94.664462][ T5848] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   94.672355][ T5848] ldm_validate_partition_table(): Disk read failed.
[   94.678222][ T5848] Dev nbd0: unable to read RDB block 0
[   94.682765][ T5848]  nbd0: unable to read partition table
[   94.693881][ T5848] ldm_validate_partition_table(): Disk read failed.
[   94.697641][ T5848] Dev nbd0: unable to read RDB block 0
[   94.704297][ T5848]  nbd0: unable to read partition table
[   94.772081][ T7648] openvswitch: netlink: Key type 1286 is out of range max 32
[   94.778115][ T7650] openvswitch: netlink: Key type 1286 is out of range max 32
[   94.833636][ T7654] netlink: 'syz.1.515': attribute type 2 has an invalid length.
[   94.842561][ T7654] netlink: 'syz.1.515': attribute type 1 has an invalid length.
[   94.883608][ T7660] (unnamed net_device) (uninitialized): (slave bridge_slave_0): Device is not bonding slave
[   94.887565][ T7660] (unnamed net_device) (uninitialized): option active_slave: invalid value (bridge_slave_0)
[   94.943099][ T7665] sctp: [Deprecated]: syz.2.518 (pid 7665) Use of struct sctp_assoc_value in delayed_ack socket option.
[   94.943099][ T7665] Use struct sctp_sack_info instead
[   95.153827][ T7654] bond5 (unregistering): Released all slaves
[   95.169737][ T5849] Bluetooth: hci2: command 0x0405 tx timeout
[   95.515680][ T7708] netlink: 'syz.0.530': attribute type 1 has an invalid length.
[   95.521745][ T7708] netlink: 'syz.0.530': attribute type 1 has an invalid length.
[   95.705214][ T7729] netlink: 'syz.0.536': attribute type 1 has an invalid length.
[   95.732236][ T7729] bond3: entered promiscuous mode
[   95.734832][ T7729] 8021q: adding VLAN 0 to HW filter on device bond3
[   95.740494][ T7729] __nla_validate_parse: 33 callbacks suppressed
[   95.740508][ T7729] netlink: 3 bytes leftover after parsing attributes in process `syz.0.536'.
[   95.753943][ T7729] batadv2: entered promiscuous mode
[   95.756197][ T7729] batadv2: entered allmulticast mode
[   95.765042][ T7729] 8021q: adding VLAN 0 to HW filter on device batadv2
[   95.771702][ T7729] bond3: (slave batadv2): making interface the new active one
[   95.775575][ T7729] bond3: (slave batadv2): Enslaving as an active interface with an up link
[   95.907934][ T7736] netlink: 48 bytes leftover after parsing attributes in process `syz.0.536'.
[   95.925543][ T7739] netlink: 9 bytes leftover after parsing attributes in process `syz.1.539'.
[   95.936567][ T7739] ..0: renamed from hsr0
[   95.941205][ T7739] ..0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   95.944637][ T7739] ..0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   95.948090][ T7739] ..0: entered allmulticast mode
[   95.950557][ T7739] hsr_slave_0: entered allmulticast mode
[   95.952592][ T7739] hsr_slave_1: entered allmulticast mode
[   95.956159][ T7739] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[   96.168099][ T7751] netlink: 'syz.2.543': attribute type 4 has an invalid length.
[   96.176678][   T10] lo speed is unknown, defaulting to 1000
[   96.179760][   T10] syz1: Port: 1 Link DOWN
[   96.236482][ T7751] netlink: 25 bytes leftover after parsing attributes in process `syz.2.543'.
[   96.615614][ T7762] syzkaller0: entered promiscuous mode
[   96.617448][ T7762] syzkaller0: entered allmulticast mode
[   96.624577][ T7762] netlink: 16 bytes leftover after parsing attributes in process `syz.2.548'.
[   96.629721][ T7762] netlink: 16 bytes leftover after parsing attributes in process `syz.2.548'.
[   96.794900][ T7771] netlink: 'syz.1.551': attribute type 10 has an invalid length.
[   97.042147][ T7775] netlink: 'syz.0.552': attribute type 7 has an invalid length.
[   98.024661][ T7771] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   98.034675][ T7771] bond0: (slave lo): Enslaving as an active interface with an up link
[   98.257052][ T7798] delete_channel: no stack
[   98.261163][ T7794] netlink: 'syz.2.554': attribute type 13 has an invalid length.
[   98.280092][ T7794] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   98.296543][   T10] lo speed is unknown, defaulting to 1000
[   98.299053][   T10] syz1: Port: 1 Link ACTIVE
[   98.357894][ T7809] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   98.380560][ T7811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.559'.
[   98.383751][ T7811] netlink: 16 bytes leftover after parsing attributes in process `syz.1.559'.
[   98.431776][ T7816] bridge4: the hash_elasticity option has been deprecated and is always 16
[   98.435025][ T7816] bridge4: entered allmulticast mode
[   98.447721][ T7818] bridge0: entered allmulticast mode
[   98.533267][ T7827] pim6reg: entered allmulticast mode
[   98.536061][ T7827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.564'.
[   98.577868][ T7826] lo speed is unknown, defaulting to 1000
[   98.866345][ T7857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.574'.
[   98.897337][ T7854] lo speed is unknown, defaulting to 1000
[   99.295360][ T7876] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   99.650495][ T7895] validate_nla: 5 callbacks suppressed
[   99.650510][ T7895] netlink: 'syz.1.587': attribute type 12 has an invalid length.
[   99.689514][ T7905] netlink: 'syz.0.589': attribute type 10 has an invalid length.
[   99.694290][ T7905] team0: Device ipvlan1 failed to register rx_handler
[   99.794651][ T7911] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   99.797661][ T7911] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   99.862397][   T33] audit: type=1804 audit(1757360432.135:2): pid=7915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.590" name="memory.events" dev="tmpfs" ino=1059 res=1 errno=0
[   99.876339][   T33] audit: type=1800 audit(1757360432.135:3): pid=7915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.590" name="memory.events" dev="tmpfs" ino=1059 res=0 errno=0
[  100.032443][ T7928] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  100.035797][ T7930] mac80211_hwsim hwsim2 wlan0: Device is already in use.
[  100.123415][ T7935] netlink: 'syz.2.598': attribute type 10 has an invalid length.
[  100.174855][ T7940] netlink: 'syz.2.600': attribute type 1 has an invalid length.
[  100.213461][ T7940] bond8: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  100.267951][ T7948] netlink: 'syz.2.602': attribute type 12 has an invalid length.
[  100.350336][ T7953] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  100.871355][ T7977] __nla_validate_parse: 14 callbacks suppressed
[  100.871366][ T7977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.614'.
[  101.133165][ T7998] netlink: 28 bytes leftover after parsing attributes in process `syz.1.620'.
[  101.248267][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.622'.
[  101.628121][ T8013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.625'.
[  101.636678][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.625'.
[  101.645573][ T8013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.625'.
[  101.656789][ T8014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.624'.
[  101.918252][ T8020] delete_channel: no stack
[  102.095536][ T8019] veth3: left promiscuous mode
[  102.131741][ T8019] gtp0: left allmulticast mode
[  102.140521][ T8019] bridge4: left allmulticast mode
[  102.145845][    T9] lo speed is unknown, defaulting to 1000
[  102.148223][    T9] syz1: Port: 1 Link DOWN
[  102.238222][ T8029] netlink: 48 bytes leftover after parsing attributes in process `syz.1.629'.
[  102.386169][ T8031] lo speed is unknown, defaulting to 1000
[  102.533292][ T8038] (unnamed net_device) (uninitialized): (slave bridge_slave_0): Device is not bonding slave
[  102.537610][ T8038] (unnamed net_device) (uninitialized): option active_slave: invalid value (bridge_slave_0)
[  102.594520][ T8040] netlink: 36 bytes leftover after parsing attributes in process `syz.1.632'.
[  102.642519][ T8040] openvswitch: netlink: IPv4 tunnel dst address is zero
[  102.670115][ T8043] netlink: 204 bytes leftover after parsing attributes in process `syz.2.633'.
[  102.836519][ T8053] 8021q: adding VLAN 0 to HW filter on device bond5
[  102.955970][ T8078] netlink: 'syz.1.642': attribute type 4 has an invalid length.
[  102.962349][ T8081] netlink: 'syz.1.642': attribute type 4 has an invalid length.
[  103.029944][ T8082] netlink: 'syz.0.643': attribute type 1 has an invalid length.
[  103.070086][ T8087] netlink: 'syz.2.644': attribute type 18 has an invalid length.
[  103.403937][ T8106] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  103.854718][ T8140] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  103.860334][ T8140] batman_adv: batadv0: Removing interface: virt_wifi0
[  103.866393][ T8140] bond1: (slave geneve3): Releasing active interface
[  103.886794][ T8140] team0: Port device bridge2 removed
[  103.892137][ T8140] bond3: (slave batadv2): Releasing active interface
[  103.913808][ T5870] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.918574][ T5870] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.921487][ T5870] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.924211][ T5870] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.436724][ T8160] lo speed is unknown, defaulting to 1000
[  104.881430][ T8192] netlink: 'syz.2.668': attribute type 1 has an invalid length.
[  105.793704][ T8211] netlink: 'syz.1.675': attribute type 2 has an invalid length.
[  105.797933][ T8211] netlink: 'syz.1.675': attribute type 2 has an invalid length.
[  105.838397][ T8215] netlink: 'syz.0.676': attribute type 12 has an invalid length.
[  105.855218][ T8215] netlink: 'syz.0.676': attribute type 58 has an invalid length.
[  105.965901][ T8229] bond0: Master is either lo or non-ether device
[  106.005892][ T8234] __nla_validate_parse: 20 callbacks suppressed
[  106.005903][ T8234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.681'.
[  106.020182][ T8232] netlink: 16 bytes leftover after parsing attributes in process `syz.0.680'.
[  106.060772][ T8236] netlink: 36 bytes leftover after parsing attributes in process `syz.2.683'.
[  106.104322][ T8232] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  106.124699][   T10] IPVS: starting estimator thread 0...
[  106.127810][ T8241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.684'.
[  106.226907][ T8252] netlink: 'syz.2.688': attribute type 1 has an invalid length.
[  106.230194][ T8251] netlink: 'syz.2.688': attribute type 1 has an invalid length.
[  106.239445][ T8242] IPVS: using max 55 ests per chain, 132000 per kthread
[  106.251730][ T8252] 8021q: adding VLAN 0 to HW filter on device bond10
[  106.256511][ T8251] bond6: (slave wlan0): Releasing active interface
[  106.266484][ T8251] bond10: (slave wlan0): Enslaving as an active interface with a down link
[  106.270260][ T8256] xfrm0: entered promiscuous mode
[  106.273490][ T8256] xfrm0: entered allmulticast mode
[  106.294276][ T8251] syzkaller0: entered promiscuous mode
[  106.296496][ T8251] syzkaller0: entered allmulticast mode
[  106.335795][ T8259] netlink: 128 bytes leftover after parsing attributes in process `syz.0.689'.
[  106.337480][ T8256] lo speed is unknown, defaulting to 1000
[  106.374188][ T8260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.374799][ T8259] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  106.381065][ T8259] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  106.437552][ T8256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.706406][ T8266] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.691'.
[  106.757351][ T8271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.692'.
[  106.761870][ T8271] netlink: 24 bytes leftover after parsing attributes in process `syz.2.692'.
[  106.775748][ T8271] geneve2: entered promiscuous mode
[  106.778238][ T8271] geneve2: entered allmulticast mode
[  106.783275][ T5870] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.786635][ T5870] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.798159][ T5870] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.802371][ T5870] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.008400][ T8279] netlink: 'syz.2.695': attribute type 2 has an invalid length.
[  107.196494][ T8281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.696'.
[  107.282052][ T8288] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  107.289882][ T8288] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  107.632607][ T5892] IPVS: starting estimator thread 0...
[  107.719046][ T8297] IPVS: using max 64 ests per chain, 153600 per kthread
[  107.875194][ T8302] netlink: 'syz.2.701': attribute type 8 has an invalid length.
[  108.239679][ T8310] (unnamed net_device) (uninitialized): (slave bridge_slave_0): Device is not bonding slave
[  108.243952][ T8310] (unnamed net_device) (uninitialized): option active_slave: invalid value (bridge_slave_0)
[  108.385104][ T8314] veth5: entered allmulticast mode
[  108.581113][ T8323] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:19999
[  108.653976][ T8326] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  108.755002][ T8332] sctp: [Deprecated]: syz.1.712 (pid 8332) Use of int in max_burst socket option deprecated.
[  108.755002][ T8332] Use struct sctp_assoc_value instead
[  108.765246][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.711'.
[  108.790590][ T8332] vxlan0: entered promiscuous mode
[  108.792846][ T8332] vxlan0: entered allmulticast mode
[  108.795464][ T7064] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  108.811519][ T7064] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  108.821782][ T7064] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  108.829467][ T7064] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  109.017114][ T8353] netlink: 'syz.0.717': attribute type 18 has an invalid length.
[  109.041864][ T8356] macvtap0: entered promiscuous mode
[  109.044031][ T8356] erspan0: entered promiscuous mode
[  109.046354][ T8356] macvtap0: entered allmulticast mode
[  109.049413][ T8356] erspan0: entered allmulticast mode
[  109.108991][ T8361] tipc: Can't bind to reserved service type 0
[  109.216410][ T8368] : entered promiscuous mode
[  109.230057][ T8369] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  109.233290][ T8369] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  109.491723][ T8377] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  109.544398][ T8377] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  109.602057][ T8377] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  109.643878][ T8377] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  109.697702][ T7064] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  109.706369][ T7064] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  109.718206][ T5854] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  109.729111][ T7064] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  110.240783][ T8409] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.259559][ T8412] validate_nla: 2 callbacks suppressed
[  110.259575][ T8412] netlink: 'syz.1.736': attribute type 5 has an invalid length.
[  110.325960][ T8418] openvswitch: netlink: Multiple metadata blocks provided
[  110.344402][ T8416] 8021q: adding VLAN 0 to HW filter on device bond11
[  110.353931][ T8420] netlink: 'syz.1.739': attribute type 13 has an invalid length.
[  110.355574][ T8418] bridge0: port 1(batadv0) entered blocking state
[  110.356737][ T8420] netlink: 'syz.1.739': attribute type 17 has an invalid length.
[  110.359595][ T8418] bridge0: port 1(batadv0) entered disabled state
[  110.364799][ T8418] batadv0: entered allmulticast mode
[  110.369835][ T8418] batadv0: entered promiscuous mode
[  110.434161][ T8420] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.439535][ T8420] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  110.445702][ T8423] bond0: (slave bond_slave_0): Releasing backup interface
[  110.452050][ T8423] bond0: (slave bond_slave_1): Releasing backup interface
[  110.455387][ T8423] team_slave_0: left promiscuous mode
[  110.458997][ T8423] team0: Port device team_slave_0 removed
[  110.463151][ T8423] team_slave_1: left promiscuous mode
[  110.467496][ T8423] team0: Port device team_slave_1 removed
[  110.473293][ T8423] batman_adv: batadv0: Removing interface: batadv_slave_0
[  110.476741][ T8423] batman_adv: batadv0: Removing interface: batadv_slave_1
[  110.482504][ T8423] bond10: (slave wlan0): Releasing active interface
[  110.493222][ T8423] bond2: left allmulticast mode
[  110.495279][ T8423] bridge0: port 1(bond2) entered disabled state
[  110.502148][ T8423] bond3: (slave veth3): Releasing active interface
[  110.506571][ T8423] bond8: (slave ip6gretap1): Releasing backup interface
[  110.552270][ T8420] lo speed is unknown, defaulting to 1000
[  110.581199][ T8431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.680136][ T8443] bridge0: failed insert local address into bridge forwarding table
[  110.749501][ T8441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.850375][ T5854] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  110.853758][ T5854] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  111.057801][ T8453] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.061895][ T8454] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.074395][ T8455] __nla_validate_parse: 20 callbacks suppressed
[  111.074411][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.748'.
[  111.081424][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.748'.
[  111.097419][ T8453] netlink: 40 bytes leftover after parsing attributes in process `syz.2.748'.
[  111.147419][ T8458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.749'.
[  111.206533][ T8459] netlink: 104 bytes leftover after parsing attributes in process `syz.2.749'.
[  111.465112][ T8486] netlink: 12 bytes leftover after parsing attributes in process `syz.2.755'.
[  111.499224][ T8486] netlink: 14 bytes leftover after parsing attributes in process `syz.2.755'.
[  111.519874][ T8486] bond0 (unregistering): Released all slaves
[  111.598938][ T8494] netlink: 120 bytes leftover after parsing attributes in process `syz.1.756'.
[  111.635408][ T8496] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  111.699001][ T8501] netlink: 36 bytes leftover after parsing attributes in process `syz.1.759'.
[  111.814109][ T8508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.760'.
[  112.068702][ T8540] bridge0: port 1(erspan0) entered blocking state
[  112.072903][ T8540] bridge0: port 1(erspan0) entered disabled state
[  112.075611][ T8540] erspan0: entered allmulticast mode
[  112.079517][ T8540] erspan0: entered promiscuous mode
[  112.085408][ T8540] erspan0: left allmulticast mode
[  112.087427][ T8540] erspan0: left promiscuous mode
[  112.098104][ T8540] bridge0: port 1(erspan0) entered disabled state
[  112.194898][ T8556] netlink: 'syz.0.771': attribute type 1 has an invalid length.
[  112.232670][ T8556] 8021q: adding VLAN 0 to HW filter on device bond4
[  112.241532][ T7064] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  112.245504][ T7064] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  112.263354][ T8556] bond4: (slave gretap1): making interface the new active one
[  112.268146][ T8556] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  112.272736][ T7064] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  112.286977][ T7064] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  112.386596][ T8571] openvswitch: netlink: Flow actions attr not present in new flow.
[  112.442670][ T8577] netlink: 'syz.2.780': attribute type 5 has an invalid length.
[  112.605363][ T8586] netlink: 'syz.0.783': attribute type 1 has an invalid length.
[  112.654706][ T8586] syzkaller1: entered promiscuous mode
[  112.656880][ T8586] syzkaller1: entered allmulticast mode
[  112.794893][ T8601] lo speed is unknown, defaulting to 1000
[  112.833211][ T8594] geneve0: entered promiscuous mode
[  112.835024][ T8594] geneve0: entered allmulticast mode
[  113.145774][ T8620] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.150047][ T8620] syzkaller0: entered promiscuous mode
[  113.152208][ T8620] syzkaller0: entered allmulticast mode
[  113.179122][ T8620] tipc: Resetting bearer <eth:syzkaller0>
[  113.224187][ T8620] 8021q: adding VLAN 0 to HW filter on device bond5
[  113.227276][ T8620] bridge0: port 2(bond5) entered blocking state
[  113.258964][ T8620] bridge0: port 2(bond5) entered disabled state
[  113.261592][ T8620] bond5: entered allmulticast mode
[  113.273675][ T8620] bond5: entered promiscuous mode
[  113.282069][ T8618] tipc: Resetting bearer <eth:syzkaller0>
[  113.293865][ T8618] tipc: Disabling bearer <eth:syzkaller0>
[  113.589828][ T8642] netlink: 'syz.2.796': attribute type 6 has an invalid length.
[  113.724597][ T8649] macvtap1: entered promiscuous mode
[  113.726553][ T8649] erspan0: entered promiscuous mode
[  113.733762][ T8649] macvtap1: entered allmulticast mode
[  113.735824][ T8649] erspan0: entered allmulticast mode
[  113.832833][ T8663] netlink: 'syz.1.802': attribute type 4 has an invalid length.
[  113.864915][ T8665] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.867849][ T8665] syzkaller0: entered promiscuous mode
[  113.870274][ T8665] syzkaller0: entered allmulticast mode
[  113.885838][ T8665] tbf_change: 24 callbacks suppressed
[  113.885853][ T8665] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  113.912225][ T8665] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) !
[  113.934405][ T8665] tipc: Resetting bearer <eth:syzkaller0>
[  113.947913][ T8664] tipc: Resetting bearer <eth:syzkaller0>
[  113.990328][ T8664] tipc: Disabling bearer <eth:syzkaller0>
[  114.152111][ T8676] veth7: entered promiscuous mode
[  114.206022][ T8684] openvswitch: netlink: nsh attr 20 is out of range max 3
[  114.209543][ T8684] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  114.677341][ T8697] netlink: 'syz.2.813': attribute type 6 has an invalid length.
[  114.865764][ T8715] netlink: 'syz.1.818': attribute type 3 has an invalid length.
[  114.935495][ T8723] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  115.012182][ T8723] delete_channel: no stack
[  115.201262][ T8740] bond6: entered promiscuous mode
[  115.204338][ T8740] 8021q: adding VLAN 0 to HW filter on device bond6
[  115.365294][ T8740] bond6 (unregistering): Released all slaves
[  115.384111][ T8741] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  115.510816][ T8761] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  115.522632][ T8761] validate_nla: 1 callbacks suppressed
[  115.522644][ T8761] netlink: 'syz.2.829': attribute type 1 has an invalid length.
[  115.740948][ T8776] syzkaller0: entered promiscuous mode
[  115.743110][ T8776] syzkaller0: entered allmulticast mode
[  117.482998][ T8800] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  117.486432][ T8800] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.511750][ T8793] __nla_validate_parse: 31 callbacks suppressed
[  117.511765][ T8793] netlink: 28 bytes leftover after parsing attributes in process `syz.1.841'.
[  117.517683][ T8793] netlink: 28 bytes leftover after parsing attributes in process `syz.1.841'.
[  117.524605][ T8793] netlink: 'syz.1.841': attribute type 4 has an invalid length.
[  117.535268][ T8800] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  117.540519][ T8800] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.593509][ T8800] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  117.596817][ T8800] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.645406][ T8800] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  117.649658][ T8800] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.762777][ T8806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.845'.
[  117.797532][ T5871] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  117.802076][ T5871] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.813854][ T8808] netlink: 40 bytes leftover after parsing attributes in process `syz.1.844'.
[  117.827113][ T5871] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  117.831528][ T5871] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.839479][ T5871] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  117.842489][ T5871] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.856866][ T5871] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  117.860205][ T5871] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.867235][ T8806] netlink: 'syz.0.845': attribute type 29 has an invalid length.
[  117.873499][ T8806] netlink: 'syz.0.845': attribute type 29 has an invalid length.
[  118.157563][ T8832] lo speed is unknown, defaulting to 1000
[  118.335091][ T8847] sit0: left promiscuous mode
[  118.341031][ T8847] veth0_to_team: left promiscuous mode
[  118.344144][ T8847] veth0_to_team: left allmulticast mode
[  118.406985][ T8847] team1: left promiscuous mode
[  118.409129][ T8847] team1: left allmulticast mode
[  118.418283][ T8847] bridge2: left promiscuous mode
[  118.421899][ T8847] bridge2: left allmulticast mode
[  118.426834][ T8847] veth3: left promiscuous mode
[  118.431723][ T8847] bond3: left promiscuous mode
[  118.440203][ T8847] batadv2: left promiscuous mode
[  118.442142][ T8847] batadv2: left allmulticast mode
[  118.446697][ T8847] veth5: left allmulticast mode
[  118.466969][ T8847] veth7: left promiscuous mode
[  118.473743][ T8842] TC_ACT_REPEAT abuse ?
[  118.475750][ T8842] TC_ACT_REPEAT abuse ?
[  118.666088][ T8863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.859'.
[  118.697500][ T8863] lo speed is unknown, defaulting to 1000
[  118.797028][ T8872] netlink: 24 bytes leftover after parsing attributes in process `syz.2.860'.
[  118.885537][ T8876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.861'.
[  119.217592][ T8886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.863'.
[  119.224028][ T8886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.863'.
[  119.378226][ T8888] netlink: 40 bytes leftover after parsing attributes in process `syz.2.864'.
[  119.651329][ T8908] ==================================================================
[  119.654317][ T8908] BUG: KASAN: slab-use-after-free in __xfrm_state_insert+0x8af/0x1450
[  119.657302][ T8908] Read of size 1 at addr ffff8881062919b0 by task syz.2.867/8908
[  119.660659][ T8908] 
[  119.661871][ T8908] CPU: 1 UID: 0 PID: 8908 Comm: syz.2.867 Not tainted syzkaller #0 PREEMPT(full) 
[  119.661887][ T8908] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  119.661895][ T8908] Call Trace:
[  119.661903][ T8908]  <TASK>
[  119.661910][ T8908]  dump_stack_lvl+0x189/0x250
[  119.661937][ T8908]  ? __virt_addr_valid+0x1c8/0x5c0
[  119.661953][ T8908]  ? rcu_is_watching+0x15/0xb0
[  119.661966][ T8908]  ? __pfx_dump_stack_lvl+0x10/0x10
[  119.661980][ T8908]  ? rcu_is_watching+0x15/0xb0
[  119.661991][ T8908]  ? lock_release+0x4b/0x3e0
[  119.662008][ T8908]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  119.662021][ T8908]  ? __virt_addr_valid+0x1c8/0x5c0
[  119.662035][ T8908]  ? __virt_addr_valid+0x4a5/0x5c0
[  119.662050][ T8908]  print_report+0xca/0x240
[  119.662061][ T8908]  ? __xfrm_state_insert+0x8af/0x1450
[  119.662076][ T8908]  kasan_report+0x118/0x150
[  119.662093][ T8908]  ? __xfrm_state_insert+0x8af/0x1450
[  119.662111][ T8908]  __xfrm_state_insert+0x8af/0x1450
[  119.662132][ T8908]  xfrm_state_insert+0x54/0x60
[  119.662146][ T8908]  ipcomp6_init_state+0x655/0x900
[  119.662163][ T8908]  __xfrm_init_state+0xa76/0x13f0
[  119.662180][ T8908]  ? __xfrm_init_state+0x7ef/0x13f0
[  119.662198][ T8908]  xfrm_add_sa+0x2f5b/0x4070
[  119.662217][ T8908]  ? __pfx_xfrm_add_sa+0x10/0x10
[  119.662232][ T8908]  ? apparmor_capable+0x137/0x1b0
[  119.662247][ T8908]  ? __nla_parse+0x40/0x60
[  119.662259][ T8908]  xfrm_user_rcv_msg+0x7a3/0xab0
[  119.662277][ T8908]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  119.662304][ T8908]  ? __pfx___mutex_trylock_common+0x10/0x10
[  119.662318][ T8908]  ? rcu_is_watching+0x15/0xb0
[  119.662329][ T8908]  ? trace_contention_end+0x39/0x120
[  119.662341][ T8908]  ? __mutex_lock+0x335/0x1350
[  119.662356][ T8908]  netlink_rcv_skb+0x208/0x470
[  119.662370][ T8908]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  119.662387][ T8908]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  119.662404][ T8908]  ? netlink_deliver_tap+0x2e/0x1b0
[  119.662416][ T8908]  ? netlink_deliver_tap+0x2e/0x1b0
[  119.662428][ T8908]  xfrm_netlink_rcv+0x79/0x90
[  119.662445][ T8908]  netlink_unicast+0x82f/0x9e0
[  119.662460][ T8908]  ? __pfx_netlink_unicast+0x10/0x10
[  119.662471][ T8908]  ? netlink_sendmsg+0x642/0xb30
[  119.662484][ T8908]  ? skb_put+0x11b/0x210
[  119.662499][ T8908]  netlink_sendmsg+0x805/0xb30
[  119.662514][ T8908]  ? __pfx_netlink_sendmsg+0x10/0x10
[  119.662528][ T8908]  ? aa_sock_msg_perm+0xf1/0x1d0
[  119.662539][ T8908]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  119.662552][ T8908]  ? __pfx_netlink_sendmsg+0x10/0x10
[  119.662566][ T8908]  __sock_sendmsg+0x21c/0x270
[  119.662584][ T8908]  ____sys_sendmsg+0x505/0x830
[  119.662600][ T8908]  ? __pfx_____sys_sendmsg+0x10/0x10
[  119.662617][ T8908]  ? import_iovec+0x74/0xa0
[  119.662631][ T8908]  ___sys_sendmsg+0x21f/0x2a0
[  119.662646][ T8908]  ? __pfx____sys_sendmsg+0x10/0x10
[  119.662671][ T8908]  ? __fget_files+0x2a/0x420
[  119.662681][ T8908]  ? __fget_files+0x3a0/0x420
[  119.662694][ T8908]  __x64_sys_sendmsg+0x19b/0x260
[  119.662708][ T8908]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  119.662726][ T8908]  ? rcu_is_watching+0x15/0xb0
[  119.662738][ T8908]  ? do_syscall_64+0xbe/0x3b0
[  119.662793][ T8908]  do_syscall_64+0xfa/0x3b0
[  119.662807][ T8908]  ? lockdep_hardirqs_on+0x9c/0x150
[  119.662820][ T8908]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.662833][ T8908]  ? exc_page_fault+0x9f/0xf0
[  119.662847][ T8908]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.662859][ T8908] RIP: 0033:0x7f539a78ebe9
[  119.662871][ T8908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  119.662881][ T8908] RSP: 002b:00007f539b524038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  119.662895][ T8908] RAX: ffffffffffffffda RBX: 00007f539a9c6090 RCX: 00007f539a78ebe9
[  119.662904][ T8908] RDX: 0000000020000000 RSI: 00002000000035c0 RDI: 0000000000000008
[  119.662912][ T8908] RBP: 00007f539a811e19 R08: 0000000000000000 R09: 0000000000000000
[  119.662919][ T8908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  119.662927][ T8908] R13: 00007f539a9c6128 R14: 00007f539a9c6090 R15: 00007ffc3d40d0e8
[  119.662942][ T8908]  </TASK>
[  119.662946][ T8908] 
[  119.802393][ T8908] Allocated by task 6801:
[  119.804102][ T8908]  kasan_save_track+0x3e/0x80
[  119.806038][ T8908]  __kasan_slab_alloc+0x6c/0x80
[  119.807998][ T8908]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  119.810085][ T8908]  xfrm_state_alloc+0x24/0x2f0
[  119.811951][ T8908]  __find_acq_core+0x8a7/0x1c00
[  119.813881][ T8908]  xfrm_find_acq+0x78/0xa0
[  119.815607][ T8908]  xfrm_alloc_userspi+0x6b3/0xc90
[  119.817561][ T8908]  xfrm_user_rcv_msg+0x7a3/0xab0
[  119.819480][ T8908]  netlink_rcv_skb+0x208/0x470
[  119.821313][ T8908]  xfrm_netlink_rcv+0x79/0x90
[  119.823190][ T8908]  netlink_unicast+0x82f/0x9e0
[  119.825090][ T8908]  netlink_sendmsg+0x805/0xb30
[  119.826938][ T8908]  __sock_sendmsg+0x21c/0x270
[  119.828760][ T8908]  ____sys_sendmsg+0x505/0x830
[  119.830608][ T8908]  ___sys_sendmsg+0x21f/0x2a0
[  119.832435][ T8908]  __x64_sys_sendmsg+0x19b/0x260
[  119.834336][ T8908]  do_syscall_64+0xfa/0x3b0
[  119.836104][ T8908]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.838356][ T8908] 
[  119.839297][ T8908] Freed by task 6634:
[  119.840836][ T8908]  kasan_save_track+0x3e/0x80
[  119.842651][ T8908]  kasan_save_free_info+0x46/0x50
[  119.844831][ T8908]  __kasan_slab_free+0x5b/0x80
[  119.846791][ T8908]  kmem_cache_free+0x18f/0x400
[  119.848707][ T8908]  xfrm_state_gc_task+0x52d/0x6b0
[  119.850676][ T8908]  process_scheduled_works+0xae1/0x17b0
[  119.852879][ T8908]  worker_thread+0x8a0/0xda0
[  119.854624][ T8908]  kthread+0x711/0x8a0
[  119.856244][ T8908]  ret_from_fork+0x3fc/0x770
[  119.858067][ T8908]  ret_from_fork_asm+0x1a/0x30
[  119.859977][ T8908] 
[  119.860955][ T8908] The buggy address belongs to the object at ffff888106291680
[  119.860955][ T8908]  which belongs to the cache xfrm_state of size 928
[  119.866195][ T8908] The buggy address is located 816 bytes inside of
[  119.866195][ T8908]  freed 928-byte region [ffff888106291680, ffff888106291a20)
[  119.871337][ T8908] 
[  119.872291][ T8908] The buggy address belongs to the physical page:
[  119.874756][ T8908] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888106291b00 pfn:0x106290
[  119.878569][ T8908] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  119.881837][ T8908] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  119.884764][ T8908] page_type: f5(slab)
[  119.886339][ T8908] raw: 057ff00000000040 ffff88801bf1ac80 dead000000000122 0000000000000000
[  119.889701][ T8908] raw: ffff888106291b00 00000000800e000b 00000000f5000000 0000000000000000
[  119.893002][ T8908] head: 057ff00000000040 ffff88801bf1ac80 dead000000000122 0000000000000000
[  119.895776][ T8908] head: ffff888106291b00 00000000800e000b 00000000f5000000 0000000000000000
[  119.898481][ T8908] head: 057ff00000000002 ffffea000418a401 00000000ffffffff 00000000ffffffff
[  119.901756][ T8908] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  119.904618][ T8908] page dumped because: kasan: bad access detected
[  119.906894][ T8908] page_owner tracks the page as allocated
[  119.909104][ T8908] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5955, tgid 5954 (syz.2.15), ts 60442811969, free_ts 60438935325
[  119.916422][ T8908]  post_alloc_hook+0x240/0x2a0
[  119.918294][ T8908]  get_page_from_freelist+0x21e4/0x22c0
[  119.920481][ T8908]  __alloc_frozen_pages_noprof+0x181/0x370
[  119.922723][ T8908]  alloc_pages_mpol+0x232/0x4a0
[  119.924611][ T8908]  allocate_slab+0x8a/0x370
[  119.926423][ T8908]  ___slab_alloc+0xbeb/0x1420
[  119.928235][ T8908]  kmem_cache_alloc_noprof+0x283/0x3c0
[  119.930331][ T8908]  xfrm_state_alloc+0x24/0x2f0
[  119.932185][ T8908]  __find_acq_core+0x8a7/0x1c00
[  119.934072][ T8908]  xfrm_find_acq+0x78/0xa0
[  119.935900][ T8908]  xfrm_alloc_userspi+0x6b3/0xc90
[  119.937886][ T8908]  xfrm_user_rcv_msg+0x7a3/0xab0
[  119.939827][ T8908]  netlink_rcv_skb+0x208/0x470
[  119.941868][ T8908]  xfrm_netlink_rcv+0x79/0x90
[  119.943840][ T8908]  netlink_unicast+0x82f/0x9e0
[  119.945754][ T8908]  netlink_sendmsg+0x805/0xb30
[  119.947607][ T8908] page last free pid 5962 tgid 5956 stack trace:
[  119.950005][ T8908]  __free_frozen_pages+0xbc4/0xd30
[  119.951982][ T8908]  __slab_free+0x303/0x3c0
[  119.953751][ T8908]  qlist_free_all+0x97/0x140
[  119.955516][ T8908]  kasan_quarantine_reduce+0x148/0x160
[  119.957588][ T8908]  __kasan_slab_alloc+0x22/0x80
[  119.959495][ T8908]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  119.961559][ T8908]  security_inode_alloc+0x39/0x330
[  119.963529][ T8908]  inode_init_always_gfp+0x9ed/0xdc0
[  119.965568][ T8908]  alloc_inode+0x82/0x1b0
[  119.967271][ T8908]  __sock_create+0x12d/0x9f0
[  119.969103][ T8908]  __sys_socket+0xd7/0x1b0
[  119.970851][ T8908]  __x64_sys_socket+0x7a/0x90
[  119.972663][ T8908]  do_syscall_64+0xfa/0x3b0
[  119.974427][ T8908]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.976659][ T8908] 
[  119.977600][ T8908] Memory state around the buggy address:
[  119.979913][ T8908]  ffff888106291880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  119.983031][ T8908]  ffff888106291900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  119.985553][ T8908] >ffff888106291980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  119.988146][ T8908]                                      ^
[  119.990397][ T8908]  ffff888106291a00: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  119.993531][ T8908]  ffff888106291a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  119.996676][ T8908] ==================================================================
[  120.000368][ T8908] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  120.003293][ T8908] CPU: 1 UID: 0 PID: 8908 Comm: syz.2.867 Not tainted syzkaller #0 PREEMPT(full) 
[  120.006834][ T8908] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  120.010870][ T8908] Call Trace:
[  120.012120][ T8908]  <TASK>
[  120.013062][ T8908]  dump_stack_lvl+0x99/0x250
[  120.014865][ T8908]  ? __asan_memcpy+0x40/0x70
[  120.016392][ T8908]  ? __pfx_dump_stack_lvl+0x10/0x10
[  120.017953][ T8908]  ? __pfx__printk+0x10/0x10
[  120.019791][ T8908]  vpanic+0x281/0x750
[  120.021219][ T8908]  ? __pfx_vpanic+0x10/0x10
[  120.022911][ T8908]  ? irqentry_exit+0x74/0x90
[  120.024571][ T8908]  panic+0xb9/0xc0
[  120.025961][ T8908]  ? __pfx_panic+0x10/0x10
[  120.027485][ T8908]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  120.029486][ T8908]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  120.031471][ T8908]  ? is_module_address+0x17/0xf0
[  120.033060][ T8908]  ? __xfrm_state_insert+0x8af/0x1450
[  120.034781][ T8908]  check_panic_on_warn+0x89/0xb0
[  120.036322][ T8908]  ? __xfrm_state_insert+0x8af/0x1450
[  120.038078][ T8908]  end_report+0x78/0x160
[  120.039705][ T8908]  kasan_report+0x129/0x150
[  120.041497][ T8908]  ? __xfrm_state_insert+0x8af/0x1450
[  120.043338][ T8908]  __xfrm_state_insert+0x8af/0x1450
[  120.045302][ T8908]  xfrm_state_insert+0x54/0x60
[  120.047128][ T8908]  ipcomp6_init_state+0x655/0x900
[  120.048833][ T8908]  __xfrm_init_state+0xa76/0x13f0
[  120.050552][ T8908]  ? __xfrm_init_state+0x7ef/0x13f0
[  120.052243][ T8908]  xfrm_add_sa+0x2f5b/0x4070
[  120.053637][ T8908]  ? __pfx_xfrm_add_sa+0x10/0x10
[  120.055175][ T8908]  ? apparmor_capable+0x137/0x1b0
[  120.056762][ T8908]  ? __nla_parse+0x40/0x60
[  120.058202][ T8908]  xfrm_user_rcv_msg+0x7a3/0xab0
[  120.059889][ T8908]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  120.061665][ T8908]  ? __pfx___mutex_trylock_common+0x10/0x10
[  120.063664][ T8908]  ? rcu_is_watching+0x15/0xb0
[  120.065401][ T8908]  ? trace_contention_end+0x39/0x120
[  120.067320][ T8908]  ? __mutex_lock+0x335/0x1350
[  120.069023][ T8908]  netlink_rcv_skb+0x208/0x470
[  120.070554][ T8908]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  120.072220][ T8908]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  120.073880][ T8908]  ? netlink_deliver_tap+0x2e/0x1b0
[  120.075698][ T8908]  ? netlink_deliver_tap+0x2e/0x1b0
[  120.077648][ T8908]  xfrm_netlink_rcv+0x79/0x90
[  120.079350][ T8908]  netlink_unicast+0x82f/0x9e0
[  120.081022][ T8908]  ? __pfx_netlink_unicast+0x10/0x10
[  120.082589][ T8908]  ? netlink_sendmsg+0x642/0xb30
[  120.084094][ T8908]  ? skb_put+0x11b/0x210
[  120.085509][ T8908]  netlink_sendmsg+0x805/0xb30
[  120.087075][ T8908]  ? __pfx_netlink_sendmsg+0x10/0x10
[  120.088787][ T8908]  ? aa_sock_msg_perm+0xf1/0x1d0
[  120.090617][ T8908]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  120.092509][ T8908]  ? __pfx_netlink_sendmsg+0x10/0x10
[  120.094469][ T8908]  __sock_sendmsg+0x21c/0x270
[  120.096174][ T8908]  ____sys_sendmsg+0x505/0x830
[  120.097733][ T8908]  ? __pfx_____sys_sendmsg+0x10/0x10
[  120.099419][ T8908]  ? import_iovec+0x74/0xa0
[  120.100894][ T8908]  ___sys_sendmsg+0x21f/0x2a0
[  120.102392][ T8908]  ? __pfx____sys_sendmsg+0x10/0x10
[  120.104064][ T8908]  ? __fget_files+0x2a/0x420
[  120.105576][ T8908]  ? __fget_files+0x3a0/0x420
[  120.107227][ T8908]  __x64_sys_sendmsg+0x19b/0x260
[  120.109202][ T8908]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  120.111260][ T8908]  ? rcu_is_watching+0x15/0xb0
[  120.112900][ T8908]  ? do_syscall_64+0xbe/0x3b0
[  120.114376][ T8908]  do_syscall_64+0xfa/0x3b0
[  120.116179][ T8908]  ? lockdep_hardirqs_on+0x9c/0x150
[  120.117964][ T8908]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.120076][ T8908]  ? exc_page_fault+0x9f/0xf0
[  120.121553][ T8908]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.123833][ T8908] RIP: 0033:0x7f539a78ebe9
[  120.125318][ T8908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  120.131463][ T8908] RSP: 002b:00007f539b524038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  120.134348][ T8908] RAX: ffffffffffffffda RBX: 00007f539a9c6090 RCX: 00007f539a78ebe9
[  120.137329][ T8908] RDX: 0000000020000000 RSI: 00002000000035c0 RDI: 0000000000000008
[  120.140050][ T8908] RBP: 00007f539a811e19 R08: 0000000000000000 R09: 0000000000000000
[  120.142473][ T8908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  120.145374][ T8908] R13: 00007f539a9c6128 R14: 00007f539a9c6090 R15: 00007ffc3d40d0e8
[  120.147938][ T8908]  </TASK>
[  120.149455][ T8908] Kernel Offset: disabled
[  120.150810][ T8908] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:40:52  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b44fbb RBX=1ffff11026cc7f61 RCX=ffff888021271cc0 RDX=0000000000000002
RSI=000000000004b3bc RDI=000000000004b3bd RBP=ffffc90007b47720 RSP=ffffc90007b47598
R8 =ffffffff8fa39537 R9 =1ffffffff1f472a6 R10=dffffc0000000000 R11=fffffbfff1f472a7
R12=ffff88813663fb08 R13=dffffc0000000000 R14=ffff88804b03b1c0 R15=0000000000000001
RIP=ffffffff81bfae87 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ff8b78536c0 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c334951 CR3=000000010f60a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007ff8b6b97498 00007ff8b6b97470 XMM03=00007ff8b6b974a8 00007ff8b6b974a0
XMM04=00007ff8b76fd100 00007ff8b6b97460 XMM05=00007ff8b6b97478 00007ff8b6b974c0
XMM06=00007ff8b6b974b8 00007ff8b6b974b0 XMM07=00007ff8b6b974a8 00007ff8b6b974a0
XMM08=0000000000000000 00007ff8b6a12ee7 XMM09=0000000000000000 00007ff8b6a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bee60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=000000000000171d RDI=000000000000171e RBP=ffffffff99df76b0 RSP=ffffc90007b36990
R8 =ffff888021538237 R9 =1ffff110042a7046 R10=dffffc0000000000 R11=ffffffff854f54c0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99df7420 R15=0000000000000000
RIP=ffffffff854f5537 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f539b5246c0 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000000035c0 CR3=0000000027744000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f539a997498 00007f539a997470 XMM03=00007f539a9974a8 00007f539a9974a0
XMM04=00007f539b4fd100 00007f539a997460 XMM05=00007f539a997478 00007f539a9974c0
XMM06=00007f539a9974b8 00007f539a9974b0 XMM07=00007f539a9974a8 00007f539a9974a0
XMM08=ecb9bd254a244474 bd017d684f66805a XMM09=0000000000000000 00007f539a812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
