last executing test programs:

2.280703128s ago: executing program 1 (id=1848):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'vlan1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newlink={0x2c, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, 0x2420, 0x900}, [@IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x2c}}, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x20050800)

2.193932117s ago: executing program 1 (id=1851):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0xf}}]}}]}, 0x3c}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000540000005400000002000000000000"], 0x0, 0x6e, 0x0, 0x1}, 0x28)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001300010000000000000000", @ANYRES32=r8, @ANYBLOB="000000000000000010000c800c00"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x400000}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x2000cc0, r10}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r10}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r10, &(0x7f00000001c0)="9ad632f5d53e48b6657ac4023f35075a16eb3cd6a7c702f40ba6afaa0a2688b116772543345b3481c7567ab81d592796b779f8b6381dba2ccb0b5df6d2ea94662d5ee6acae65c6707085e30d018346441108cecc52195b6111285d68b63567f3fab09b4333c21b74d82150f85d38e6ed6c614a1aeab5e8a32da64fcd89f4728285a5e06a481c880d6a4524cc62e9e1c7724a702c34ac960dda193ba98e1d79ef14ade033cd1e7f86d9bca8eb9894a2d8ae8959a5add1153afb072f1ffe1414c777a1436e1ae82f11aee820c8bdceebbe00cf554a4bb70b8df8d13967ad5a41c6d1fca22ce87de3cd1a9ba642f437cbe376177bb25e1a2e95d372fcf1ed", &(0x7f0000000040)=""/30}, 0x20)
r11 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r9)
sendmsg$NLBL_CALIPSO_C_ADD(r9, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="01002cbd7000ffdbdf25010000000800020002000b00"], 0x1c}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', 0x0})
ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f0000000300)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffc01, 0x0, 0x9, 0x100, 0x5c3})
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = socket(0x1, 0x803, 0x0)
getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x48, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, r14, 0x0, 0x41400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r14, 0x0, 0x343}}}}}}]}, 0x48}}, 0x0)
sendmsg$NLBL_CALIPSO_C_REMOVE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r11, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

2.032478158s ago: executing program 1 (id=1856):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098", 0x38}, {&(0x7f00000002c0)="016e530b0e63ae07", 0x8}], 0x2, 0x0, 0x0, 0x40005}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec970006d03c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000104c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000200003801c00008018000180140001"], 0xd0}}, 0x0)

1.902688652s ago: executing program 1 (id=1859):
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x5452, &(0x7f0000000000))
ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x6)
setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000280)=0x1, 0x4)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000340)={0x0, 0x9, 0xc3, "fd30214fdbc562ac8d02474bf93b9c6d23d76bbbe3927da2320df6c19496d6935725b2290f7c83cf5b5ff87f3ad2280caa316e3c8110aa067482a09aefdf8bae5553553ac1a9cd030355f436ec26badecbd0c113449f94848fabb26a3922dc6f7da9bf0296cdba5043c7f6294ade73c48c88fda9f0e5474ed310d327080e7407b3ea9dfa87f34790ad8db8eb463657a3c91b30fc4c2238cfe1927fae3979d2a2c551f923f511f276a26632bc034aab6ee17e69d785aa53d606cc3ec957c0b72bfae78e"}, 0xcb)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x11, &(0x7f0000000100)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}}, 0xb8}}, 0x0)
recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000000, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x12)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r4, &(0x7f0000000180)={0x1a, 0x30c, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x7af2, 0x0, 0x0, 0x41000, 0x55, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0)
close(0x3)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001640)=""/4096, 0x103f}], 0x1, 0x0, 0xffffffffffffff13}, 0x0)
write$cgroup_int(r6, &(0x7f0000000200), 0xffffffc1)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070040000900010073797a30000000003c0000001c0a010400000000000000000700000008000a40000000000900020073797a31000000000900"], 0x364}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r6, 0x0)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r6, 0x0)

1.06294144s ago: executing program 1 (id=1867):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac0100001000330600000f0000000000fc000000000000000000000000000000ffffffff00ffffffff00000000ffff0000004000000080010000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1ac}}, 0x0)

733.949434ms ago: executing program 1 (id=1871):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000100)=""/243, 0xf3}, {0x0}], 0x2}, 0x4}], 0x1, 0x2, 0x0) (async)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff0180c20000000800450000200000000000119078000000000000000000004e20000c9078010000001ebf42678215fec71d032416"], 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000038000000080a050000000000000000000200000a0c00034000df6d1c670000020900020073797a32000000000900010073797a30"], 0x8c}}, 0x20000000) (async, rerun: 64)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000074000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021380011800a0001006c696d6974000000280002800c00024000000000000000030c00014000000000000001010c0001400000000000000101b81700000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000008c1703800c0000800800034000000002b0"], 0x1874}}, 0x0) (rerun: 64)

628.879506ms ago: executing program 2 (id=1874):
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f00000002c0)={0x5c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x3c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "7406ff4fb4d63e1e98a8e422ce5bd778"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x26}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4008010)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000012000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)

453.439223ms ago: executing program 0 (id=1876):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="020200090f000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000002000100000004d20000020300000020050005002f8000000a00000000000000ff0100000000000000000000000000010000000000000000010010", @ANYRES8=0x0, @ANYRES16=r0, @ANYRES64=r1, @ANYRES16=r0, @ANYRESHEX=r1], 0x78}}, 0x5) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES8=r2, @ANYRESHEX=r1, @ANYRES64=r2], 0x70}}, 0x4000004) (async)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r4, 0x29, 0x24, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x75) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x38}, 0x0, 0x1, 0x4, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0xee00}, {0x0, 0x800000, 0x0, 0x0, 0x0, 0x40000, 0x4, 0xfffffffffffffff7}, {0x0, 0x2, 0xd, 0x40000000000}, 0x101, 0x7, 0x1, 0x0, 0x3, 0x1}, {{@in6=@private0, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0xfffffffe, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x35ced141}}, 0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@mcast1, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x2f}, {0xfffffefffffffffd, 0xeca, 0x2d, 0x0, 0x0, 0x0, 0x400778e, 0xffff}, {0xfffffffffffffff7, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0x3c}, 0x0, @in=@multicast1, 0x0, 0x4}}, 0xe8)
close(r6) (async)
sendmsg$kcm(r4, 0x0, 0x4000000)
r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_procs(r7, 0x0, 0x2, 0x0) (async)
r8 = socket(0x2a, 0x2, 0x0) (async)
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r9, 0x28, 0x1, &(0x7f0000000480)=0xffffffff00000041, 0x8) (async)
bind$vsock_stream(r9, &(0x7f0000000940), 0x10) (async)
close(0x3) (async)
listen(r9, 0x0)
r10 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r10, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) (async)
writev(r10, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1)
getsockname$packet(r8, 0x0, &(0x7f00000001c0))

453.012407ms ago: executing program 2 (id=1877):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x100000000, 0x4}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xbd000000}}, 0xe4)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x5}, 0x6)
write$bt_hci(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="01422006020607f6"], 0xa)
bind$bt_hci(r2, &(0x7f00000019c0)={0x1f, 0x3, 0x2}, 0x6)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000980)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000009c0)=ANY=[@ANYBLOB="5063f7e5a808aa49a8000000000000000600000008001a400000000508001a40000000062c000f80080001400000000908000240000000000800024000007fff0800024000007fff080003400000ffffb396611a6b1acac7c3787ee4df38748a99eead921f9926074815d936c9647e6660c36c8eff63d661546830a066e80be9ffdafead413bd162cd3d4c5ce265766b844c5f5c0c796900f8a8119501cc244242fadc28c04b87b74d69dbf6a44c4f623544420c4e1459f9dbf4327e746f9170eacbf1acda65c181b931710982"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000095)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1b, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180200000100000000000000010000008500007d0000009500000000000000d2b73b4ff697ced88a1a7d25e66eefdaf14fac3ceb9d35d61b30d1045eb1568fdbedea02e2e0af5c920eef5669a70a4c618002a5445928dca590496e926ae79c796ddd410d21076daef828b109"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x83d08d779caa4fd5, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r6, @ANYBLOB="800202000a000200577f00"], 0x48}}, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x806000)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0)
r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000a8000000a8000000070000000200000000000009050000000000000000000003000000000400000003000000010000000b0000000000000b030000001000000007000013050000001001000001000000008000001000000001090000000000000900000000800000080000000600000073150000008000000600000000000000d5bf00000500000000000000040000000100000001000080fdffffff0000000000000003000000000100000003000000b5f20000002e612e003000"], &(0x7f00000006c0)=""/237, 0xc7, 0xed, 0x1}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x1a, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000002207000000000000d000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085200000030000009c700000fcffffff180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000e900000085000000063352e2b00b4c5f3d163b0000008520000002000000bf91000000000000b7020000010000008500000084000000b70000000000"], &(0x7f0000000240)='syzkaller\x00', 0xf7, 0x0, 0x0, 0x40f00, 0x20, '\x00', r6, 0x25, r11, 0x8, &(0x7f0000000440)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000440), &(0x7f00000007c0)=[{0x4, 0x2, 0x8, 0x6}, {0x4, 0x3, 0x5, 0x2}, {0x0, 0x5, 0x9, 0x3}], 0x10, 0x7}, 0x94)

451.707598ms ago: executing program 0 (id=1878):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac0100001000330600000f0000000000fc000000000000000000000000000000ffffffff00ffffffff00000000ffff0000004000000080010000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1ac}}, 0x0)

304.016063ms ago: executing program 0 (id=1879):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='inet_sk_error_report\x00', r2}, 0x18)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
sendmmsg$inet6(r3, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, 0x0, &(0x7f0000000300))
r5 = openat$cgroup_devices(r1, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='c 1:'], 0xa)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001d2c0000000b0a05000000000000000000070000000900010073797a30000000000c0010"], 0xb0}}, 0x0)

253.58271ms ago: executing program 0 (id=1880):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xc, [@struct={0x4, 0x0, 0x0, 0x4, 0x0, 0x1}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x61, 0x0, 0x2e, 0x0, 0x0, 0x5f]}}, 0x0, 0x3c}, 0x28)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYRESHEX=r0], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x40080d4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1200000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="0400000100da55dce12abdc8762a4c0d38d8af021b", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="05"], 0x10)
close(r4)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="080100003400010000000000ffdbdf25f60000800c002200000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bb7fefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df974307f6f6897c01f6a69e6a8e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc3"], 0xfffffffffffffc62}], 0x1}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r8=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r5}, &(0x7f0000000500), &(0x7f0000000540)=r4}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r8}, 0x20)
socket$netlink(0x10, 0x3, 0x0)
gettid()

182.002104ms ago: executing program 0 (id=1881):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000100)={0x8, 'pimreg1\x00', {'ipvlan1\x00'}, 0x81})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x48}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) (async, rerun: 32)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32)
setsockopt$inet6_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000140)="3ef59ffa6776b15e602b6154750dc811bbe537e62c1b3f00a11c430b4a9b1fe6f890fc10395e6061905c670eef2f1ece291fffd9e67ba881facff5120ca16ea1db51194394b5e4fa002df1fb4e6cdb961978fba2722620efa643468ede3a2f3c86660d39715c5661", 0x68)
setsockopt$inet6_int(r1, 0x29, 0x8, 0x0, 0x0)
r2 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async)
setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0x18000}, {0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x3}, 0x17}, 0x0, {[0x6, 0x200, 0x2, 0xfffffef9, 0x0, 0x0, 0x1464410e, 0x4]}}, 0x5c) (async)
r3 = socket$inet(0x2, 0x3, 0x30) (async)
r4 = socket(0xa, 0x3, 0x3a)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async)
setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x26}, 0xc) (async)
getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) (async)
r6 = socket$inet(0x2, 0x2, 0x73)
getsockopt$inet_pktinfo(r6, 0x0, 0x50, 0x0, &(0x7f0000000040)) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c0001802500010021"], 0xf0}}, 0x0) (async, rerun: 64)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64)
bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6)

181.069716ms ago: executing program 2 (id=1882):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)}, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})
ioctl$sock_netdev_private(r1, 0x89f0, &(0x7f0000000000))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x0, 0x2, 0xc, 0x0, 0x5e}, 0x20)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c0016"], 0x38}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1ac}}, 0x0)

161.673805ms ago: executing program 2 (id=1883):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4)
getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f00000004c0))
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'veth1_virt_wifi\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x8003}}}, @TCA_TBF_PTAB={0x404, 0x3, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffd, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x101, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}]}}]}, 0x45c}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000008000000040000000000000700000000030000000000000f0100000000000000000000020200000000002e2e5f"], 0x0, 0x44}, 0x20)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x0)

104.212202ms ago: executing program 2 (id=1884):
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f00000002c0)={0x5c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x3c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "7406ff4fb4d63e1e98a8e422ce5bd778"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x26}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4008010)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc0000000000000000000000000000000086009078000000000000002b000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)

93.405979ms ago: executing program 0 (id=1885):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004502007000650000720190780a010101ac1414bb0467f9342bb70608070090780000000045010003006500781188000ee0000001e000000100863cffffffff010d2f00000000000003373ae1051123f1102ca3b5164f26fba9873b17d400129de374ed5fd2a7e2d5a19d2a825bba52020632ced964000000"], 0x0)
connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
accept4$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0x2711}, 0x10, 0x80000)
shutdown(r2, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
unshare(0x6a040000)
r5 = socket(0x8, 0x3, 0x0)
ioctl$sock_netrom_SIOCADDRT(r5, 0x6180, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000040), r5)
sendmsg$DEVLINK_CMD_TRAP_SET(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0xe0, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0xe0}}, 0x40000000)
socket$igmp(0x2, 0x3, 0x2)

0s ago: executing program 2 (id=1886):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0x4, 0x4, 0x398, 0xffffffff, 0x1a8, 0x1a8, 0xd0, 0xfeffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private2, [0x0, 0x0, 0x0, 0xff000000], [0xff000000], 'pim6reg0\x00', 'team_slave_1\x00', {}, {}, 0x6, 0x0, 0x1}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x0, 0x1}, {0x4, 0x5, 0x7}, 0x1, 0xf0f}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x58}}, @common=@eui64={{0x28}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES64, @ANYRESDEC=0x0, @ANYRES16=r0], 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="b400000000000000000800"/20, @ANYRES32=0x0, @ANYBLOB="a020000004b103000c002b80080003000000000008001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x45}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="b400000000000000000800"/20, @ANYRES32=0x0, @ANYBLOB="a020000004b103000c002b80080003000000000008001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x45}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xc}, {0xb, 0xfff1}, {0x5, 0xf}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048001}, 0x40054)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) (async)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x3100, 0x11, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x3100, 0x11, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair(0x5, 0x6, 0x7ff, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x51}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000100)={0x74, 0x101, 0x6, 0x7, 0x6, 0x81}) (async)
ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000100)={0x74, 0x101, 0x6, 0x7, 0x6, 0x81})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b40000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xb8}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r13=>0x0})
r14 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r14, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x89, 0x0, 0x0, 0x0, @empty, @private}}}})
sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r11, @ANYBLOB, @ANYRES32=r13, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r10)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x2c, r15, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x15}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) (async)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x2c, r15, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x15}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x24000880)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0x28, r8, 0x8, 0x870bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0xfffff8fc, 0x3a}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) (async)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)={0x28, r8, 0x8, 0x870bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0xfffff8fc, 0x3a}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20008000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:2493' (ED25519) to the list of known hosts.
syzkaller login: [   41.594650][ T5770] cgroup: Unknown subsys name 'net'
[   41.721772][ T5770] cgroup: Unknown subsys name 'cpuset'
[   41.728503][ T5770] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   43.039030][ T5770] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   47.356588][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   47.359655][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   47.362828][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   47.366501][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   47.369764][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   47.373350][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   47.385353][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   47.387896][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   47.392784][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   47.396393][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   47.400269][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   47.402576][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   47.405475][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   47.410161][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   47.412738][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   47.671468][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   47.710849][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   47.738611][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   47.790332][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.793201][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.796693][ T5851] bridge_slave_0: entered allmulticast mode
[   47.799700][ T5851] bridge_slave_0: entered promiscuous mode
[   47.803744][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.807002][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.809427][ T5851] bridge_slave_1: entered allmulticast mode
[   47.812121][ T5851] bridge_slave_1: entered promiscuous mode
[   47.863376][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.867364][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.869801][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.872274][ T5842] bridge_slave_0: entered allmulticast mode
[   47.874922][ T5842] bridge_slave_0: entered promiscuous mode
[   47.879523][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.881957][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.884315][ T5842] bridge_slave_1: entered allmulticast mode
[   47.888329][ T5842] bridge_slave_1: entered promiscuous mode
[   47.898477][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.900901][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.903433][ T5846] bridge_slave_0: entered allmulticast mode
[   47.907072][ T5846] bridge_slave_0: entered promiscuous mode
[   47.911077][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.933353][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.935952][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.938331][ T5846] bridge_slave_1: entered allmulticast mode
[   47.940974][ T5846] bridge_slave_1: entered promiscuous mode
[   47.952299][ T5851] team0: Port device team_slave_0 added
[   47.956674][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.967697][ T5851] team0: Port device team_slave_1 added
[   47.970790][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.989552][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.008696][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.026780][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.029303][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.038404][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.043397][ T5842] team0: Port device team_slave_0 added
[   48.053631][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.056394][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.065848][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.071453][ T5842] team0: Port device team_slave_1 added
[   48.080090][ T5846] team0: Port device team_slave_0 added
[   48.098345][ T5846] team0: Port device team_slave_1 added
[   48.143164][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.146844][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.157959][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.176596][ T5851] hsr_slave_0: entered promiscuous mode
[   48.179118][ T5851] hsr_slave_1: entered promiscuous mode
[   48.182106][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.184744][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.194296][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.199318][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.202128][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.213112][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.219277][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.222177][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.232719][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.310423][ T5842] hsr_slave_0: entered promiscuous mode
[   48.313169][ T5842] hsr_slave_1: entered promiscuous mode
[   48.315785][ T5842] debugfs: 'hsr0' already exists in 'hsr'
[   48.317989][ T5842] Cannot create hsr debugfs directory
[   48.342269][ T5846] hsr_slave_0: entered promiscuous mode
[   48.347205][ T5846] hsr_slave_1: entered promiscuous mode
[   48.350079][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   48.352430][ T5846] Cannot create hsr debugfs directory
[   48.586253][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   48.597630][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   48.604006][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   48.618603][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   48.670067][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   48.676774][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   48.707694][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   48.714105][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   48.751636][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   48.765386][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   48.770376][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   48.774508][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   48.863098][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.894732][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   48.908301][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.922344][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.925654][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.936515][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.947660][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   48.953156][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.956308][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.973792][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.976889][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.000756][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   49.005438][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.008513][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.034197][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.037357][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.062762][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.065933][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.088112][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   49.128578][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   49.191137][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.214848][ T5851] veth0_vlan: entered promiscuous mode
[   49.221531][ T5851] veth1_vlan: entered promiscuous mode
[   49.248211][ T5851] veth0_macvtap: entered promiscuous mode
[   49.254759][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.258406][ T5851] veth1_macvtap: entered promiscuous mode
[   49.272744][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.284435][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.297317][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.303855][ T5872] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.310076][ T5872] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.314315][ T5872] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.320910][ T5872] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.333264][ T5846] veth0_vlan: entered promiscuous mode
[   49.349993][ T5846] veth1_vlan: entered promiscuous mode
[   49.394966][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.399938][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.402163][ T5842] veth0_vlan: entered promiscuous mode
[   49.422456][ T5846] veth0_macvtap: entered promiscuous mode
[   49.432716][ T5842] veth1_vlan: entered promiscuous mode
[   49.436138][   T54] Bluetooth: hci2: command tx timeout
[   49.438214][   T54] Bluetooth: hci0: command tx timeout
[   49.440142][   T54] Bluetooth: hci1: command tx timeout
[   49.445468][ T5846] veth1_macvtap: entered promiscuous mode
[   49.448609][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.452297][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.456333][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.472252][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.484729][ T5872] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.490466][ T5872] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.493944][ T5872] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.500416][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   49.508109][ T5842] veth0_macvtap: entered promiscuous mode
[   49.511260][ T5872] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.516633][ T5842] veth1_macvtap: entered promiscuous mode
[   49.527465][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.532410][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.540991][ T5872] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.554502][ T5872] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.561929][ T5872] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.572357][ T5872] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.577260][ T5909] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   49.605523][ T5880] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   49.632157][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.635038][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.673366][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.677389][ T5872] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   49.684615][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.694707][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.699951][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.720290][  T943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.723415][  T943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.741636][ T5913] netlink: 460 bytes leftover after parsing attributes in process `syz.0.5'.
[   49.816600][ T5919] sctp: failed to load transform for md5: -2
[   49.823691][ T5917] syz_tun: entered allmulticast mode
[   49.879476][ T5932] syz.0.7 uses obsolete (PF_INET,SOCK_PACKET)
[   49.927219][ T5917] dvmrp8: entered allmulticast mode
[   50.009899][ T5916] syz_tun: left allmulticast mode
[   50.012120][ T5916] dvmrp8: left allmulticast mode
[   50.049413][ T5945] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   50.054884][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'.
[   50.059588][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'.
[   50.161252][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   50.164444][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   50.475483][ T5880] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   50.997684][ T5974] lo speed is unknown, defaulting to 1000
[   51.000310][ T5974] lo speed is unknown, defaulting to 1000
[   51.004057][ T5974] lo speed is unknown, defaulting to 1000
[   51.011358][ T5974] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   51.019573][ T5974] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   51.041811][ T5974] lo speed is unknown, defaulting to 1000
[   51.046405][ T5974] lo speed is unknown, defaulting to 1000
[   51.050350][ T5974] lo speed is unknown, defaulting to 1000
[   51.085409][ T5964] syz.2.17 (5964) used greatest stack depth: 19976 bytes left
[   51.142176][ T5981] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   51.149954][ T5981] 8021q: VLANs not supported on wg0
[   51.160650][ T5986] Zero length message leads to an empty skb
[   51.163346][ T5984] netlink: 36 bytes leftover after parsing attributes in process `syz.2.20'.
[   51.172864][ T5981] netlink: 36 bytes leftover after parsing attributes in process `syz.2.20'.
[   51.218781][ T5983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21'.
[   51.287543][ T5996] vxcan2: entered promiscuous mode
[   51.301186][ T5998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25'.
[   51.393743][ T6008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27'.
[   51.400121][ T6008] tipc: Started in network mode
[   51.402222][ T6008] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[   51.418913][ T6008] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000
[   51.422237][ T6008] tipc: Enabled bearer <udp:syz1>, priority 10
[   51.434403][ T6015] netlink: 256 bytes leftover after parsing attributes in process `syz.1.30'.
[   51.437775][ T6015] netlink: 48 bytes leftover after parsing attributes in process `syz.1.30'.
[   51.446448][ T6015] lo speed is unknown, defaulting to 1000
[   51.449395][ T6015] lo speed is unknown, defaulting to 1000
[   51.452294][ T6015] lo speed is unknown, defaulting to 1000
[   51.515735][   T54] Bluetooth: hci1: command tx timeout
[   51.517512][ T5850] Bluetooth: hci2: command tx timeout
[   51.518294][ T5233] Bluetooth: hci0: command tx timeout
[   51.539483][ T6020] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   51.638910][ T6015] infiniband syz0: set active
[   51.641107][ T6015] infiniband syz0: added lo
[   51.661400][    T9] lo speed is unknown, defaulting to 1000
[   51.664584][ T6015] RDS/IB: syz0: added
[   51.666790][ T6015] smc: adding ib device syz0 with port count 1
[   51.669105][ T6015] smc:    ib device syz0 port 1 has pnetid 
[   51.674484][    T9] lo speed is unknown, defaulting to 1000
[   51.679923][ T6015] lo speed is unknown, defaulting to 1000
[   51.713050][ T6031] netlink: 'syz.0.33': attribute type 2 has an invalid length.
[   51.781635][ T6015] lo speed is unknown, defaulting to 1000
[   51.897686][ T6015] lo speed is unknown, defaulting to 1000
[   52.044364][ T6044] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   52.046544][ T6015] syz.1.30 (6015) used greatest stack depth: 19264 bytes left
[   52.537034][ T5311] tipc: Node number set to 1
[   52.559065][ T6072] vxcan2: entered promiscuous mode
[   52.637738][ T6076] lo speed is unknown, defaulting to 1000
[   52.641114][ T6076] lo speed is unknown, defaulting to 1000
[   53.491007][ T6121] netlink: 'syz.2.66': attribute type 4 has an invalid length.
[   53.595442][ T5233] Bluetooth: hci1: command tx timeout
[   53.598419][   T54] Bluetooth: hci2: command tx timeout
[   54.081500][ T6148] syzkaller0: entered promiscuous mode
[   54.083836][ T6148] syzkaller0: entered allmulticast mode
[   54.577450][ T6201] vxcan2: entered promiscuous mode
[   54.770428][ T6213] __nla_validate_parse: 33 callbacks suppressed
[   54.770437][ T6213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.96'.
[   54.971080][ T6224] IPv6: NLM_F_CREATE should be specified when creating new route
[   54.976672][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.100'.
[   54.979724][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.100'.
[   55.166121][ T6250] netlink: 60 bytes leftover after parsing attributes in process `syz.0.105'.
[   55.204922][ T6258] netlink: 'syz.0.108': attribute type 14 has an invalid length.
[   55.210350][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.108'.
[   55.214101][ T6258] netlink: 'syz.0.108': attribute type 14 has an invalid length.
[   55.216826][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.108'.
[   55.260744][ T6260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.109'.
[   55.267880][ T6260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.109'.
[   55.312186][ T6265] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   55.365172][ T6268] netlink: 'syz.1.112': attribute type 1 has an invalid length.
[   55.367757][ T6268] netlink: 600 bytes leftover after parsing attributes in process `syz.1.112'.
[   55.432066][ T6274] netlink: 208128 bytes leftover after parsing attributes in process `syz.1.114'.
[   55.438196][ T6274] openvswitch: netlink: Message has 4 unknown bytes.
[   55.491202][ T6279] smc: removing ib device syz0
[   55.560085][ T6285] Bluetooth: MGMT ver 1.23
[   55.605717][ T6287] netlink: 'syz.1.119': attribute type 4 has an invalid length.
[   55.677458][ T5233] Bluetooth: hci1: command tx timeout
[   55.679796][   T54] Bluetooth: hci2: command tx timeout
[   56.303077][ T6347] lo speed is unknown, defaulting to 1000
[   56.308510][ T6347] lo speed is unknown, defaulting to 1000
[   56.311035][ T6347] lo speed is unknown, defaulting to 1000
[   56.329472][ T6347] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   56.348006][ T6347] lo speed is unknown, defaulting to 1000
[   56.352523][ T6347] lo speed is unknown, defaulting to 1000
[   56.357769][ T6347] lo speed is unknown, defaulting to 1000
[   56.401187][ T6363] vxcan2: entered promiscuous mode
[   56.799377][ T6427] netlink: 'syz.2.163': attribute type 1 has an invalid length.
[   56.801895][ T6427] netlink: 'syz.2.163': attribute type 4 has an invalid length.
[   56.844752][ T6433] netlink: 'syz.1.165': attribute type 1 has an invalid length.
[   57.481412][ T6484] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   57.551157][ T6489] warning: `syz.1.180' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   57.797901][ T6498] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.839477][ T6498] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.907379][ T6498] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.996075][ T6498] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.116575][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.143778][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.165266][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.181243][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.803082][ T6548] lo speed is unknown, defaulting to 1000
[   58.806054][ T6548] lo speed is unknown, defaulting to 1000
[   58.849705][ T6564] tipc: Started in network mode
[   58.851373][ T6564] tipc: Node identity 667f60f0b629, cluster identity 4711
[   58.853927][ T6564] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.870945][ T6564] syzkaller0: entered promiscuous mode
[   58.872942][ T6564] syzkaller0: entered allmulticast mode
[   58.886641][ T6564] tipc: Resetting bearer <eth:syzkaller0>
[   58.900921][ T6563] tipc: Resetting bearer <eth:syzkaller0>
[   58.915246][ T6563] tipc: Disabling bearer <eth:syzkaller0>
[   59.003730][ T6577] netlink: 'syz.2.210': attribute type 1 has an invalid length.
[   59.422457][ T6615] vxcan2: entered promiscuous mode
[   59.715691][ T6638] syzkaller0: entered promiscuous mode
[   59.717610][ T6638] syzkaller0: entered allmulticast mode
[   59.750576][ T6651] netlink: 'syz.2.233': attribute type 1 has an invalid length.
[   59.753913][ T6651] netlink: 'syz.2.233': attribute type 4 has an invalid length.
[   59.799750][ T6654] __nla_validate_parse: 50 callbacks suppressed
[   59.799762][ T6654] netlink: 1 bytes leftover after parsing attributes in process `syz.2.234'.
[   60.417387][ T6658] syzkaller0: entered promiscuous mode
[   60.419242][ T6658] syzkaller0: entered allmulticast mode
[   60.605430][ T6669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.237'.
[   61.209895][ T6687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   61.254471][ T6700] netlink: 48 bytes leftover after parsing attributes in process `syz.0.241'.
[   61.788299][ T6739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.249'.
[   61.951182][ T6754] netlink: 'syz.0.247': attribute type 4 has an invalid length.
[   62.023274][    T9] lo speed is unknown, defaulting to 1000
[   62.026915][    T9] syz2: Port: 1 Link DOWN
[   62.070291][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'.
[   62.083423][ T6766] netlink: 'syz.2.254': attribute type 10 has an invalid length.
[   62.096953][ T6766] 8021q: adding VLAN 0 to HW filter on device team0
[   62.104012][ T6766] bond0: (slave team0): Enslaving as an active interface with an up link
[   62.132359][ T6768] netlink: 'syz.1.255': attribute type 3 has an invalid length.
[   62.201979][ T6776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.258'.
[   62.239835][ T6776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.258'.
[   62.303428][ T6776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.258'.
[   62.352075][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.261'.
[   62.410656][ T6799] Driver unsupported XDP return value 0 on prog  (id 96) dev N/A, expect packet loss!
[   62.444120][ T6799] netlink: 'syz.2.264': attribute type 3 has an invalid length.
[   62.474054][ T6804] netlink: 28 bytes leftover after parsing attributes in process `syz.2.265'.
[   62.598063][ T6816] netlink: 'syz.2.269': attribute type 13 has an invalid length.
[   62.605332][ T6816] netlink: 'syz.2.269': attribute type 11 has an invalid length.
[   62.682462][ T6832] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[   62.917521][ T6851] : entered promiscuous mode
[   62.920762][ T6851] netlink: 'syz.0.280': attribute type 1 has an invalid length.
[   63.041277][ T6875] vxcan2: entered promiscuous mode
[   63.712728][ T6943] macvlan0: entered allmulticast mode
[   63.716260][ T6943] veth1_vlan: entered allmulticast mode
[   63.864667][ T6966] lo speed is unknown, defaulting to 1000
[   63.869214][ T6966] lo speed is unknown, defaulting to 1000
[   63.997086][ T6975] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.999624][ T6975] syzkaller0: entered promiscuous mode
[   64.001472][ T6975] syzkaller0: entered allmulticast mode
[   64.009861][ T6975] tipc: Resetting bearer <eth:syzkaller0>
[   64.013409][ T6974] tipc: Resetting bearer <eth:syzkaller0>
[   64.020111][ T6974] tipc: Disabling bearer <eth:syzkaller0>
[   64.034417][ T6969] netlink: 'syz.2.309': attribute type 13 has an invalid length.
[   64.039082][ T6969] netlink: 'syz.2.309': attribute type 17 has an invalid length.
[   64.070637][ T6969] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   65.205449][ T7010] siw: device registration error -23
[   65.214478][ T7010] syzkaller0: refused to change device tx_queue_len
[   65.287490][ T7012] __nla_validate_parse: 23 callbacks suppressed
[   65.287500][ T7012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.323'.
[   65.292674][ T7012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.323'.
[   65.301803][ T7012] vxcan2: entered promiscuous mode
[   65.327351][ T7014] netlink: 16 bytes leftover after parsing attributes in process `syz.2.324'.
[   65.419033][ T7019] vxcan2: entered promiscuous mode
[   65.467060][ T7023] netlink: 'syz.2.328': attribute type 1 has an invalid length.
[   65.469738][ T7023] netlink: 232 bytes leftover after parsing attributes in process `syz.2.328'.
[   65.473717][ T7023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.328'.
[   65.685795][ T7040] netlink: 12 bytes leftover after parsing attributes in process `syz.2.334'.
[   65.745165][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.334'.
[   66.419163][ T7070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.342'.
[   66.619755][ T7077] netlink: 72 bytes leftover after parsing attributes in process `syz.2.344'.
[   66.682918][ T7079] netlink: 24 bytes leftover after parsing attributes in process `syz.2.345'.
[   66.928473][ T7096] IPv6: sit1: Disabled Multicast RS
[   67.137533][ T7129] syzkaller0: entered promiscuous mode
[   67.139903][ T7129] syzkaller0: entered allmulticast mode
[   67.788081][ T7133] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[   67.839310][ T7145] xfrm1: entered promiscuous mode
[   67.841355][ T7145] xfrm1: entered allmulticast mode
[   68.663117][ T7247] lo speed is unknown, defaulting to 1000
[   68.665896][ T7247] lo speed is unknown, defaulting to 1000
[   68.841856][ T7247] validate_nla: 1 callbacks suppressed
[   68.841866][ T7247] netlink: 'syz.1.403': attribute type 13 has an invalid length.
[   68.850153][ T7256] lo speed is unknown, defaulting to 1000
[   68.852858][ T7247] netlink: 'syz.1.403': attribute type 17 has an invalid length.
[   68.853653][ T7256] lo speed is unknown, defaulting to 1000
[   68.867014][ T7247] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   69.050915][ T7255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.087293][ T7280] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[   69.192294][ T7291] netlink: 'syz.1.416': attribute type 16 has an invalid length.
[   69.195940][ T7291] netlink: 'syz.1.416': attribute type 17 has an invalid length.
[   69.229737][ T7291] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.232463][ T7291] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.279455][ T7291] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.284954][ T7291] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.346890][    T9] lo speed is unknown, defaulting to 1000
[   69.348976][    T9] syz1: Port: 1 Link DOWN
[   69.354103][ T5873] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.357418][ T5873] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.360661][ T5873] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.363814][ T5873] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.287465][ T7317] team0 (unregistering): Port device team_slave_0 removed
[   70.304888][ T7317] team0 (unregistering): Port device team_slave_1 removed
[   70.385404][ T7320] __nla_validate_parse: 45 callbacks suppressed
[   70.385413][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.426'.
[   70.491492][ T7326] netlink: 20 bytes leftover after parsing attributes in process `syz.0.429'.
[   70.517367][ T7330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.430'.
[   70.520284][ T7330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.430'.
[   70.569830][ T7336] openvswitch: netlink: Missing valid actions attribute.
[   70.572350][ T7336] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.574356][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.433'.
[   70.576657][ T7336] netlink: 28 bytes leftover after parsing attributes in process `syz.0.432'.
[   70.576684][ T7336] netlink: 32 bytes leftover after parsing attributes in process `syz.0.432'.
[   70.576692][ T7336] netlink: 28 bytes leftover after parsing attributes in process `syz.0.432'.
[   70.576827][ T7336] netlink: 32 bytes leftover after parsing attributes in process `syz.0.432'.
[   70.596225][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.433'.
[   70.632932][ T7345] ip6gre1: entered allmulticast mode
[   70.877280][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   70.879638][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   70.930123][ T7375] openvswitch: netlink: Flow key attr not present in new flow.
[   70.941557][ T7375] netlink: 'syz.2.444': attribute type 29 has an invalid length.
[   70.972838][ T7377] siw: device registration error -23
[   70.981400][ T7377] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) !
[   72.083695][ T7466] vxcan2: entered promiscuous mode
[   72.453958][ T7514] tipc: Started in network mode
[   72.457336][ T7514] tipc: Node identity aec31b144411, cluster identity 4711
[   72.459861][ T7514] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.482925][ T7514] syzkaller0: entered promiscuous mode
[   72.486157][ T7514] syzkaller0: entered allmulticast mode
[   72.488702][ T7514] tipc: Resetting bearer <eth:syzkaller0>
[   72.500471][ T7513] tipc: Resetting bearer <eth:syzkaller0>
[   72.574307][ T7523] netlink: 'syz.2.473': attribute type 1 has an invalid length.
[   73.164681][ T7513] tipc: Disabling bearer <eth:syzkaller0>
[   73.352194][ T7545] netlink: 'syz.0.481': attribute type 1 has an invalid length.
[   73.366628][ T7545] bond2: entered promiscuous mode
[   73.368825][ T7545] 8021q: adding VLAN 0 to HW filter on device bond2
[   73.379799][ T7545] bond2: (slave bridge1): making interface the new active one
[   73.382455][ T7545] bridge1: entered promiscuous mode
[   73.384862][ T7545] bond2: (slave bridge1): Enslaving as an active interface with an up link
[   73.478288][ T7557] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.279072][ T7625] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[   75.497010][ T7651] netlink: 'syz.1.510': attribute type 11 has an invalid length.
[   75.503475][ T7651] syzkaller0: entered promiscuous mode
[   75.505413][ T7651] syzkaller0: entered allmulticast mode
[   75.594649][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.598571][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.813139][ T7685] vxcan2: entered promiscuous mode
[   75.854915][ T7692] tipc: Enabled bearer <ib:caif0>, priority 14
[   75.897164][ T7696] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[   75.965645][ T7705] __nla_validate_parse: 37 callbacks suppressed
[   75.965654][ T7705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.525'.
[   76.066156][ T7717] netlink: 96 bytes leftover after parsing attributes in process `syz.1.529'.
[   76.288139][ T7737] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[   76.320217][ T7745] siw: device registration error -23
[   76.323642][ T7747] netlink: 80 bytes leftover after parsing attributes in process `syz.2.538'.
[   76.355865][ T7752] netlink: 348 bytes leftover after parsing attributes in process `syz.2.541'.
[   76.525569][ T7765] netlink: 52 bytes leftover after parsing attributes in process `syz.0.547'.
[   76.529039][ T7765] netlink: 52 bytes leftover after parsing attributes in process `syz.0.547'.
[   76.530013][ T7763] netlink: 28 bytes leftover after parsing attributes in process `syz.2.546'.
[   76.532497][ T7765] netlink: 52 bytes leftover after parsing attributes in process `syz.0.547'.
[   76.541788][ T7765] netlink: 16 bytes leftover after parsing attributes in process `syz.0.547'.
[   76.694751][ T7780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.552'.
[   76.964968][ T7800] netlink: 'syz.0.558': attribute type 3 has an invalid length.
[   76.965831][   T24] tipc: Node number set to 3939638036
[   76.967629][ T7800] netlink: 'syz.0.558': attribute type 3 has an invalid length.
[   77.781918][ T7879] vxcan2: entered promiscuous mode
[   77.971276][ T7907] netlink: 'syz.2.598': attribute type 5 has an invalid length.
[   78.092931][ T7920] netlink: 'syz.1.602': attribute type 1 has an invalid length.
[   78.098142][ T7920] netlink: 'syz.1.602': attribute type 2 has an invalid length.
[   78.148812][   T10] IPVS: starting estimator thread 0...
[   78.197918][ T7933] netlink: 'syz.2.608': attribute type 4 has an invalid length.
[   78.235260][ T7926] IPVS: using max 81 ests per chain, 194400 per kthread
[   78.631589][ T7977] lo speed is unknown, defaulting to 1000
[   78.634152][ T7977] lo speed is unknown, defaulting to 1000
[   78.662692][   T24] IPVS: starting estimator thread 0...
[   78.757311][ T7982] IPVS: using max 81 ests per chain, 194400 per kthread
[   78.860527][ T5873] IPVS: stop unused estimator thread 0...
[   78.915487][ T7991] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.992359][ T7993] xfrm1: left promiscuous mode
[   78.993917][ T7993] xfrm1: left allmulticast mode
[   79.139352][ T7997] siw: device registration error -23
[   79.302512][  T973] cfg80211: failed to load regulatory.db
[   79.364328][ T8013] tipc: Can't bind to reserved service type 2
[   79.368892][ T8013] trusted_key: syz.0.629 sent an empty control message without MSG_MORE.
[   79.916032][ T8057] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20000
[   80.156134][ T8086] tap0: tun_chr_ioctl cmd 1074025677
[   80.158342][ T8086] tap0: linktype set to 804
[   80.361715][ T8100] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   80.368526][ T8101] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   80.471734][ T8107] lo speed is unknown, defaulting to 1000
[   80.476919][ T8107] lo speed is unknown, defaulting to 1000
[   80.528692][ T8115] unknown channel width for channel at 909000KHz?
[   80.826362][ T8146] netlink: 'syz.1.672': attribute type 16 has an invalid length.
[   80.959508][ T8165] vxcan2: entered promiscuous mode
[   81.051594][ T8174] IPv6: sit1: Disabled Multicast RS
[   81.095036][ T8178] netlink: 'syz.0.686': attribute type 1 has an invalid length.
[   81.108017][ T8178] 8021q: adding VLAN 0 to HW filter on device bond3
[   81.111949][ T8183] __nla_validate_parse: 53 callbacks suppressed
[   81.111957][ T8183] netlink: 16 bytes leftover after parsing attributes in process `syz.2.688'.
[   81.276908][ T8200] netlink: 140 bytes leftover after parsing attributes in process `syz.2.695'.
[   81.302058][ T8206] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.309914][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.697'.
[   81.346466][ T8214] netlink: 172 bytes leftover after parsing attributes in process `syz.0.700'.
[   81.349940][ T8214] netlink: 172 bytes leftover after parsing attributes in process `syz.0.700'.
[   81.445376][   T33] audit: type=1800 audit(1755360249.632:2): pid=8222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.702" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1255 res=0 errno=0
[   81.603457][ T8230] netlink: 96 bytes leftover after parsing attributes in process `syz.1.706'.
[   81.888464][ T8261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.716'.
[   81.907024][ T8274] netlink: 'syz.2.719': attribute type 3 has an invalid length.
[   82.067552][ T8296] netlink: 'syz.2.727': attribute type 4 has an invalid length.
[   82.112394][ T8298] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.161091][ T8303] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.164098][ T8303] syzkaller0: entered promiscuous mode
[   82.167082][ T8303] syzkaller0: entered allmulticast mode
[   82.171331][ T8303] tipc: Resetting bearer <eth:syzkaller0>
[   82.184006][ T8298] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.192551][ T8301] tipc: Resetting bearer <eth:syzkaller0>
[   82.199114][ T8301] tipc: Disabling bearer <eth:syzkaller0>
[   82.225692][ T8298] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.238311][ T8307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.731'.
[   82.247622][ T8309] netlink: 28 bytes leftover after parsing attributes in process `syz.0.731'.
[   82.284406][ T8298] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.334697][ T5872] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.342314][ T5872] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.354442][ T5872] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.387629][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.608370][ T8349] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.776667][ T8358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.748'.
[   82.984330][ T8369] vxcan2: entered promiscuous mode
[   83.255743][ T8373] block nbd0: server does not support multiple connections per device.
[   83.258988][ T8373] block nbd0: shutting down sockets
[   83.283272][ T8376] rdma_rxe: rxe_newlink: failed to add wg0
[   83.321991][ T8376] syz_tun: entered promiscuous mode
[   83.324449][ T8376] batadv_slave_0: entered promiscuous mode
[   83.327013][ T8376] hsr1: entered allmulticast mode
[   83.328635][ T8376] syz_tun: entered allmulticast mode
[   83.330433][ T8376] batadv_slave_0: entered allmulticast mode
[   83.380778][ T8383] Bluetooth: hci1: Opcode 0x0401 failed: -4
[   83.418078][ T8394] netlink: 'syz.1.760': attribute type 1 has an invalid length.
[   83.447252][ T8394] 8021q: adding VLAN 0 to HW filter on device bond2
[   83.481666][ T8402] tipc: Enabling of bearer <dp:sH> rejected, media not registered
[   83.528833][ T8405] bond0: option packets_per_slave: invalid value (18446744071562067968)
[   83.532160][ T8405] bond0: option packets_per_slave: allowed values 0 - 65535
[   84.228155][ T8480] syzkaller1: entered promiscuous mode
[   84.230021][ T8480] syzkaller1: entered allmulticast mode
[   84.758862][ T8508] netlink: 'syz.1.794': attribute type 7 has an invalid length.
[   84.777245][ T8508] bridge_slave_0: left allmulticast mode
[   84.779098][ T8508] bridge_slave_0: left promiscuous mode
[   84.781081][ T8508] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.786003][ T8508] bridge_slave_1: left allmulticast mode
[   84.787943][ T8508] bridge_slave_1: left promiscuous mode
[   84.790008][ T8508] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.794437][ T8508] bond0: (slave bond_slave_0): Releasing backup interface
[   84.799417][ T8508] bond0: (slave bond_slave_1): Releasing backup interface
[   84.803170][ T8508] team0: Port device team_slave_0 removed
[   84.806488][ T8508] team0: Port device team_slave_1 removed
[   84.808540][ T8508] batman_adv: batadv0: Removing interface: batadv_slave_0
[   84.811739][ T8508] batman_adv: batadv0: Removing interface: batadv_slave_1
[   84.826887][ T8508] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[   85.060345][ T8533] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   85.064107][ T8535] sctp: [Deprecated]: syz.1.805 (pid 8535) Use of struct sctp_assoc_value in delayed_ack socket option.
[   85.064107][ T8535] Use struct sctp_sack_info instead
[   85.079170][ T8535] 8021q: adding VLAN 0 to HW filter on device bond3
[   85.435205][   T54] Bluetooth: hci1: command 0x0401 tx timeout
[   86.296674][ T8601] netlink: 'syz.1.824': attribute type 3 has an invalid length.
[   86.300382][ T8601] netlink: 'syz.1.824': attribute type 3 has an invalid length.
[   86.429751][ T8623] __nla_validate_parse: 23 callbacks suppressed
[   86.429761][ T8623] netlink: 52 bytes leftover after parsing attributes in process `syz.1.832'.
[   86.434669][ T8623] netlink: 52 bytes leftover after parsing attributes in process `syz.1.832'.
[   86.438881][ T8623] netlink: 52 bytes leftover after parsing attributes in process `syz.1.832'.
[   86.448039][ T8623] netlink: 16 bytes leftover after parsing attributes in process `syz.1.832'.
[   86.598740][ T8644] netlink: 20 bytes leftover after parsing attributes in process `syz.0.839'.
[   86.635265][   T54] Bluetooth: hci2: command tx timeout
[   86.718560][ T8660] netlink: 60 bytes leftover after parsing attributes in process `syz.0.843'.
[   86.727056][ T8662] openvswitch: netlink: Flow actions attr not present in new flow.
[   86.908098][ T8677] netlink: 'syz.2.850': attribute type 1 has an invalid length.
[   86.929319][ T8677] bond1 (unregistering): Released all slaves
[   86.948429][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.852'.
[   86.958294][ T8690] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   87.053514][ T8701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.857'.
[   87.058820][ T8701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.857'.
[   87.150849][ T8715] netlink: 172 bytes leftover after parsing attributes in process `syz.2.864'.
[   87.151548][ T8713] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   87.165451][ T8717] xt_policy: too many policy elements
[   87.302706][ T8727] netlink: 'syz.0.870': attribute type 13 has an invalid length.
[   87.305560][ T8727] netlink: 'syz.0.870': attribute type 17 has an invalid length.
[   87.311183][ T8727] gretap0: refused to change device tx_queue_len
[   87.313320][ T8727] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   87.323069][    T9] lo speed is unknown, defaulting to 1000
[   87.325695][    T9] syz2: Port: 1 Link ACTIVE
[   88.459417][ T8832] netlink: 'syz.2.901': attribute type 18 has an invalid length.
[   89.503924][ T8873] C: renamed from team_slave_0 (while UP)
[   89.510464][ T8873] netlink: 'syz.2.914': attribute type 3 has an invalid length.
[   89.516522][ T8873] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   89.678109][ T8854] Bluetooth: hci1: Opcode 0x0401 failed: -4
[   89.723270][ T8888] netlink: 'syz.1.920': attribute type 5 has an invalid length.
[   89.727470][ T8888] netlink: 'syz.1.920': attribute type 5 has an invalid length.
[   89.838216][ T8900] netlink: 'syz.2.922': attribute type 21 has an invalid length.
[   89.983910][ T5872] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   89.988366][ T5872] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   89.991694][ T5872] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   89.996981][ T5872] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   90.009876][ T8917] vlan0: entered promiscuous mode
[   90.885703][   T54] Bluetooth: hci1: command 0x0401 tx timeout
[   90.956643][   T10] IPVS: starting estimator thread 0...
[   91.049867][ T8938] IPVS: using max 81 ests per chain, 194400 per kthread
[   91.440447][ T9011] __nla_validate_parse: 50 callbacks suppressed
[   91.440456][ T9011] netlink: 52 bytes leftover after parsing attributes in process `syz.0.954'.
[   91.449121][ T9011] netlink: 52 bytes leftover after parsing attributes in process `syz.0.954'.
[   91.452001][ T9011] netlink: 52 bytes leftover after parsing attributes in process `syz.0.954'.
[   91.458058][ T9011] netlink: 16 bytes leftover after parsing attributes in process `syz.0.954'.
[   91.464155][ T9010] netlink: 16 bytes leftover after parsing attributes in process `syz.0.954'.
[   91.490091][ T9018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.956'.
[   91.685186][ T9057] netlink: 52 bytes leftover after parsing attributes in process `syz.2.957'.
[   91.688842][ T9057] netlink: 52 bytes leftover after parsing attributes in process `syz.2.957'.
[   91.692232][ T9057] netlink: 52 bytes leftover after parsing attributes in process `syz.2.957'.
[   91.696618][ T9059] netlink: 16 bytes leftover after parsing attributes in process `syz.1.958'.
[   91.749706][ T9061] validate_nla: 4 callbacks suppressed
[   91.749715][ T9061] netlink: 'syz.1.961': attribute type 32 has an invalid length.
[   91.968012][ T9099] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   91.986769][ T9099] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.028715][ T9102] netlink: 'syz.2.973': attribute type 32 has an invalid length.
[   92.927485][ T9132] netlink: 'syz.2.981': attribute type 32 has an invalid length.
[   93.265561][ T9163] netlink: 'syz.2.991': attribute type 32 has an invalid length.
[   94.071632][ T9191] netlink: 'syz.1.999': attribute type 32 has an invalid length.
[   94.085970][ T9188] Bluetooth: MGMT ver 1.23
[   94.302376][ T9213] vxcan2: entered promiscuous mode
[   94.421672][ T9223] netlink: 'syz.0.1009': attribute type 32 has an invalid length.
[   94.708169][ T9262] netlink: 'syz.2.1020': attribute type 1 has an invalid length.
[   94.711719][ T9262] netlink: 'syz.2.1020': attribute type 2 has an invalid length.
[   94.791086][ T9274] netlink: 'syz.2.1023': attribute type 32 has an invalid length.
[   94.878096][ T9286] IPv6: NLM_F_REPLACE set, but no existing node found!
[   95.803678][ T9318] netlink: 'syz.1.1035': attribute type 32 has an invalid length.
[   96.083623][ T9346] siw: device registration error -23
[   96.123290][ T9352] lo speed is unknown, defaulting to 1000
[   96.126888][ T9352] lo speed is unknown, defaulting to 1000
[   96.308869][ T9352] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   96.463229][ T9394] __nla_validate_parse: 32 callbacks suppressed
[   96.463241][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1053'.
[   97.357809][ T9410] IPVS: Unknown mcast interface: pim6reg
[   97.359955][ T9404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1056'.
[   97.402094][ T9413] validate_nla: 3 callbacks suppressed
[   97.402104][ T9413] netlink: 'syz.2.1059': attribute type 32 has an invalid length.
[   97.470002][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1061'.
[   97.659899][ T9437] lo speed is unknown, defaulting to 1000
[   97.663437][ T9437] lo speed is unknown, defaulting to 1000
[   97.765977][ T9450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1070'.
[   97.772452][ T9452] netlink: 'syz.0.1071': attribute type 32 has an invalid length.
[   97.791796][ T9446] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1066'.
[   97.811647][ T9446] netlink: 'syz.1.1066': attribute type 13 has an invalid length.
[   97.853863][ T9458] syzkaller0: tun_chr_ioctl cmd 1074025677
[   97.857342][ T9458] syzkaller0: linktype set to 1
[   97.861234][ T9458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1072'.
[   97.971206][ T9464] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1074'.
[   98.042255][ T9470] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1075'.
[   98.063355][ T9474] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1075'.
[   98.069631][ T9476] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1077'.
[   98.541046][ T9509] netlink: 'syz.0.1085': attribute type 32 has an invalid length.
[   98.924038][ T9524] lo speed is unknown, defaulting to 1000
[   98.931752][ T9524] lo speed is unknown, defaulting to 1000
[   99.194005][ T9546] netlink: 'syz.0.1095': attribute type 32 has an invalid length.
[   99.381514][ T9564] netlink: 'syz.2.1099': attribute type 3 has an invalid length.
[   99.411939][ T9566] siw: device registration error -23
[   99.474741][ T9577] netlink: 'syz.0.1105': attribute type 32 has an invalid length.
[   99.719063][ T9614] netlink: 'syz.0.1115': attribute type 32 has an invalid length.
[   99.833229][ T9630] can: request_module (can-proto-0) failed.
[   99.871542][ T9635] lo speed is unknown, defaulting to 1000
[   99.874414][ T9635] lo speed is unknown, defaulting to 1000
[   99.960456][ T9637] lo speed is unknown, defaulting to 1000
[   99.962988][ T9637] lo speed is unknown, defaulting to 1000
[  100.187279][ T9661] netlink: 'syz.2.1129': attribute type 32 has an invalid length.
[  100.654082][ T9693] lo speed is unknown, defaulting to 1000
[  100.656761][ T9693] lo speed is unknown, defaulting to 1000
[  100.886475][ T9704] netlink: 'syz.1.1139': attribute type 32 has an invalid length.
[  100.947111][ T9710] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  101.040878][ T9724] openvswitch: netlink: IPv4 tun info is not correct
[  102.027894][ T9746] nbd: must specify at least one socket
[  102.030636][ T9746] __nla_validate_parse: 28 callbacks suppressed
[  102.030644][ T9746] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1152'.
[  102.037011][ T9746] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1152'.
[  102.040470][ T9746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1152'.
[  102.051567][ T9746] netlink: 9896 bytes leftover after parsing attributes in process `syz.0.1152'.
[  102.059507][ T9746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1152'.
[  102.062806][ T9746] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1152'.
[  102.126212][ T9758] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1154'.
[  102.131776][ T9758] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1154'.
[  102.316786][ T9776] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1160'.
[  102.947534][ T9781] validate_nla: 2 callbacks suppressed
[  102.947544][ T9781] netlink: 'syz.1.1161': attribute type 1 has an invalid length.
[  102.953421][ T9781] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1161'.
[  102.986001][ T9787] dvmrp1: tun_chr_ioctl cmd 1074025677
[  102.989525][ T9787] dvmrp1: linktype set to 773
[  103.006174][ T9792] netlink: 'syz.1.1165': attribute type 32 has an invalid length.
[  103.323130][ T9826] netlink: 'syz.0.1175': attribute type 32 has an invalid length.
[  103.391238][ T9833] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  103.400965][ T9831] tipc: Disabling bearer <eth:syzkaller0>
[  103.448164][ T9841] siw: device registration error -23
[  103.449397][ T9842] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20004
[  103.588252][ T9861] netlink: 'syz.2.1184': attribute type 3 has an invalid length.
[  103.642627][ T9861] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  103.688266][ T9871] netlink: 'syz.2.1187': attribute type 32 has an invalid length.
[  103.754600][ T9886] netlink: 'syz.1.1191': attribute type 1 has an invalid length.
[  103.756245][ T9883] bridge5: entered allmulticast mode
[  103.864004][ T9900] netlink: 'syz.2.1196': attribute type 1 has an invalid length.
[  103.879701][ T9900] 8021q: adding VLAN 0 to HW filter on device bond1
[  103.949806][ T9906] syzkaller1: entered promiscuous mode
[  103.951693][ T9906] syzkaller1: entered allmulticast mode
[  104.026378][ T9922] netlink: 'syz.1.1203': attribute type 32 has an invalid length.
[  104.258899][ T9949] ieee802154 phy0 wpan0: encryption failed: -126
[  104.348826][ T9961] netlink: 'syz.1.1213': attribute type 32 has an invalid length.
[  104.558686][ T9985] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  104.885671][ T9995] netlink: 'syz.2.1223': attribute type 32 has an invalid length.
[  105.348797][T10015] 0: renamed from hsr0 (while UP)
[  105.353067][T10015] 0: entered allmulticast mode
[  105.354695][T10015] hsr_slave_0: entered allmulticast mode
[  105.358464][T10015] hsr_slave_1: entered allmulticast mode
[  105.363678][T10015] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  105.604579][T10028] vcan1: entered allmulticast mode
[  105.719833][T10050] macvlan0: left allmulticast mode
[  105.722085][T10050] veth1_vlan: left allmulticast mode
[  105.785027][T10061] GUP no longer grows the stack in syz.0.1241 (10061): 200000006000-20000000a000 (200000005000)
[  105.788555][T10061] CPU: 1 UID: 0 PID: 10061 Comm: syz.0.1241 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59-dirty #0 PREEMPT(full) 
[  105.788565][T10061] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  105.788569][T10061] Call Trace:
[  105.788573][T10061]  <TASK>
[  105.788576][T10061]  dump_stack_lvl+0x189/0x250
[  105.788589][T10061]  ? __pfx_dump_stack_lvl+0x10/0x10
[  105.788597][T10061]  ? __pfx__printk+0x10/0x10
[  105.788605][T10061]  ? find_vma+0xe7/0x160
[  105.788613][T10061]  ? mas_next_slot+0xc27/0xcf0
[  105.788627][T10061]  __get_user_pages+0x24d0/0x2ce0
[  105.788634][T10061]  ? __lock_acquire+0xab9/0xd20
[  105.788653][T10061]  ? __gup_longterm_locked+0xc68/0x1660
[  105.788664][T10061]  __gup_longterm_locked+0xde9/0x1660
[  105.788675][T10061]  ? try_grab_folio_fast+0x1be/0x4f0
[  105.788687][T10061]  ? gup_fast_fallback+0x195f/0x2010
[  105.788697][T10061]  gup_fast_fallback+0x1e6a/0x2010
[  105.788719][T10061]  ? __pfx_gup_fast_fallback+0x10/0x10
[  105.788726][T10061]  ? __mutex_lock+0x335/0x1360
[  105.788738][T10061]  ? is_valid_gup_args+0x11f/0x200
[  105.788746][T10061]  ? get_user_pages_fast+0x4d/0xb0
[  105.788755][T10061]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  105.788765][T10061]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  105.788774][T10061]  ? wait_for_space+0x24d/0x2d0
[  105.788784][T10061]  iov_iter_get_pages2+0x5e/0xa0
[  105.788792][T10061]  __se_sys_vmsplice+0x548/0x10d0
[  105.788804][T10061]  ? futex_private_hash_put+0x4b/0x280
[  105.788815][T10061]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  105.788825][T10061]  ? __pfx_futex_wake+0x10/0x10
[  105.788837][T10061]  ? __lock_acquire+0xab9/0xd20
[  105.788859][T10061]  ? do_pipe2+0xf7/0x170
[  105.788870][T10061]  ? rcu_is_watching+0x15/0xb0
[  105.788878][T10061]  ? do_syscall_64+0xbe/0x3b0
[  105.788889][T10061]  do_syscall_64+0xfa/0x3b0
[  105.788896][T10061]  ? lockdep_hardirqs_on+0x9c/0x150
[  105.788904][T10061]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.788910][T10061]  ? exc_page_fault+0x9f/0xf0
[  105.788919][T10061]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.788925][T10061] RIP: 0033:0x7f08f818ebe9
[  105.788932][T10061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  105.788938][T10061] RSP: 002b:00007f08f8f4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  105.788945][T10061] RAX: ffffffffffffffda RBX: 00007f08f83b5fa0 RCX: 00007f08f818ebe9
[  105.788950][T10061] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000012
[  105.788954][T10061] RBP: 00007f08f8211e19 R08: 0000000000000000 R09: 0000000000000000
[  105.788958][T10061] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  105.788962][T10061] R13: 00007f08f83b6038 R14: 00007f08f83b5fa0 R15: 00007fffd9e45148
[  105.788973][T10061]  </TASK>
[  105.961757][T10068] tap0: tun_chr_ioctl cmd 1074812118
[  106.789871][T10139] vxcan2: entered promiscuous mode
[  107.206757][T10187] __nla_validate_parse: 40 callbacks suppressed
[  107.206767][T10187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1273'.
[  107.380871][   T24] IPVS: starting estimator thread 0...
[  107.427270][T10231] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1283'.
[  107.431315][T10233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1284'.
[  107.434321][T10233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1284'.
[  107.445522][T10235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1284'.
[  107.451578][T10235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1284'.
[  107.469748][T10239] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1286'.
[  107.497137][T10223] IPVS: using max 82 ests per chain, 196800 per kthread
[  107.673836][T10264] vxcan2: entered promiscuous mode
[  107.698916][T10266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1294'.
[  107.761931][T10279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1298'.
[  107.879292][T10296] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  107.896760][T10295] bond2: left promiscuous mode
[  107.899615][T10295] bridge1: left promiscuous mode
[  107.927083][T10303] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1304'.
[  108.025796][T10324] validate_nla: 7 callbacks suppressed
[  108.025806][T10324] netlink: 'syz.1.1309': attribute type 32 has an invalid length.
[  108.057518][T10329] batadv_slave_1: entered promiscuous mode
[  108.067673][T10328] batadv_slave_1: left promiscuous mode
[  108.333795][T10359] atomic_op ffff888028df6198 conn xmit_atomic 0000000000000000
[  108.461877][T10369] netlink: 'syz.2.1319': attribute type 32 has an invalid length.
[  108.597659][T10381] netlink: 'syz.0.1320': attribute type 3 has an invalid length.
[  108.601367][T10382] netlink: 'syz.0.1320': attribute type 3 has an invalid length.
[  108.687073][T10391] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  108.743976][T10396] can: request_module (can-proto-3) failed.
[  108.746933][T10396] netlink: 'syz.2.1326': attribute type 2 has an invalid length.
[  108.749729][T10396] netlink: 'syz.2.1326': attribute type 2 has an invalid length.
[  108.777301][T10402] netlink: 'syz.2.1329': attribute type 32 has an invalid length.
[  109.046798][T10434] syzkaller1: entered promiscuous mode
[  109.048644][T10434] syzkaller1: entered allmulticast mode
[  109.107605][T10440] tipc: Resetting bearer <ib:caif0>
[  109.146275][T10442] netlink: 'syz.0.1339': attribute type 32 has an invalid length.
[  109.458065][T10483] netlink: 'syz.1.1349': attribute type 32 has an invalid length.
[  109.896729][T10526] netlink: 'syz.0.1361': attribute type 32 has an invalid length.
[  110.009617][T10536] delete_channel: no stack
[  110.256632][T10570] siw: device registration error -23
[  110.717252][T10626] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  110.722079][T10630] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  110.837290][T10643] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  110.965564][T10656] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  110.967607][T10656] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  110.974317][T10656] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  110.981433][T10656] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  111.063520][T10671] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  111.065997][T10671] IPv6: NLM_F_CREATE should be set when creating new route
[  111.068364][T10671] IPv6: NLM_F_CREATE should be set when creating new route
[  111.159510][T10691] IPVS: length: 83 != 24
[  111.566295][T10752] vxcan2: entered promiscuous mode
[  111.604638][T10754] lo speed is unknown, defaulting to 1000
[  111.609757][T10754] lo speed is unknown, defaulting to 1000
[  111.647811][T10753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  111.732898][T10762] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  112.274946][T10768] vxcan2: entered promiscuous mode
[  112.615376][T10789] vlan0: entered promiscuous mode
[  112.669536][T10794] __nla_validate_parse: 41 callbacks suppressed
[  112.669545][T10794] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1439'.
[  112.674714][T10794] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1439'.
[  112.959863][T10818] lo speed is unknown, defaulting to 1000
[  112.963777][T10818] lo speed is unknown, defaulting to 1000
[  113.057465][T10818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1444'.
[  113.060394][T10818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1444'.
[  113.071109][ T5311] IPVS: starting estimator thread 0...
[  113.186513][T10821] IPVS: using max 82 ests per chain, 196800 per kthread
[  113.302554][T10829] validate_nla: 9 callbacks suppressed
[  113.302563][T10829] netlink: 'syz.1.1447': attribute type 1 has an invalid length.
[  113.335254][T10829] 8021q: adding VLAN 0 to HW filter on device bond4
[  113.348395][T10829] bond4: (slave gretap1): making interface the new active one
[  113.355455][T10829] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  113.366491][T10832] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1448'.
[  113.388789][ T9700] IPVS: stop unused estimator thread 0...
[  113.393247][T10834] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1449'.
[  113.419334][T10837] netlink: 'syz.0.1450': attribute type 32 has an invalid length.
[  113.507094][T10765] Set syz1 is full, maxelem 65536 reached
[  113.533456][T10847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1451'.
[  113.697988][T10863] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1458'.
[  113.828232][T10872] netlink: 'syz.0.1460': attribute type 32 has an invalid length.
[  114.139119][T10892] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1465'.
[  114.169783][T10894] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1466'.
[  114.211619][T10898] netlink: 'syz.1.1468': attribute type 32 has an invalid length.
[  114.408622][T10919] lo speed is unknown, defaulting to 1000
[  114.412471][T10919] lo speed is unknown, defaulting to 1000
[  114.850641][T10968] vxcan2: entered promiscuous mode
[  114.918025][T10984] netlink: 'syz.0.1489': attribute type 3 has an invalid length.
[  114.920622][T10984] netlink: 'syz.0.1489': attribute type 1 has an invalid length.
[  114.942956][T10985] netlink: 'syz.2.1492': attribute type 32 has an invalid length.
[  115.119774][T11009] netlink: 'syz.1.1500': attribute type 1 has an invalid length.
[  115.137604][T11009] 8021q: adding VLAN 0 to HW filter on device bond5
[  115.171951][T11017] vxcan2: entered promiscuous mode
[  115.198910][T11018] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  115.245984][T11021] netlink: 'syz.1.1503': attribute type 1 has an invalid length.
[  115.301495][T11021] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  115.330636][T11024] netlink: 'syz.1.1504': attribute type 32 has an invalid length.
[  115.594813][T11039] lo speed is unknown, defaulting to 1000
[  115.598442][T11039] lo speed is unknown, defaulting to 1000
[  115.861272][T11042] lo speed is unknown, defaulting to 1000
[  115.863944][T11042] lo speed is unknown, defaulting to 1000
[  116.588430][T11115] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.870827][T11135] siw: device registration error -23
[  117.014707][T11149] sch_fq: defrate 0 ignored.
[  117.017662][T11149] siw: device registration error -23
[  117.753320][T11221] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  117.760718][T11221] syzkaller0: entered promiscuous mode
[  117.762621][T11221] syzkaller0: entered allmulticast mode
[  118.489546][T11229] __nla_validate_parse: 43 callbacks suppressed
[  118.489556][T11229] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1563'.
[  118.698975][T11249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1569'.
[  118.702006][T11249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1569'.
[  118.749705][T11258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1572'.
[  118.752741][T11258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1572'.
[  118.798219][T11268] netlink: 276 bytes leftover after parsing attributes in process `syz.0.1575'.
[  118.825656][T11268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1575'.
[  118.859366][T11278] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1578'.
[  118.862441][T11278] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1578'.
[  118.922567][T11286] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1581'.
[  118.987978][T11299] validate_nla: 2 callbacks suppressed
[  118.987986][T11299] netlink: 'syz.2.1585': attribute type 32 has an invalid length.
[  119.398346][T11337] vxcan2: entered promiscuous mode
[  119.700662][T11369] netlink: 'syz.1.1609': attribute type 32 has an invalid length.
[  119.837124][T11379] netlink: 'syz.1.1610': attribute type 3 has an invalid length.
[  119.989324][T11390] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  121.102793][T11433] lo speed is unknown, defaulting to 1000
[  121.105615][T11433] lo speed is unknown, defaulting to 1000
[  121.165226][T11442] netlink: 'syz.2.1624': attribute type 32 has an invalid length.
[  121.432175][T11472] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  121.527834][T11491] netlink: 'syz.2.1636': attribute type 32 has an invalid length.
[  121.876172][T11530] netlink: 'syz.0.1648': attribute type 32 has an invalid length.
[  122.146097][T11551] siw: device registration error -23
[  122.371994][T11564] netlink: 'syz.0.1657': attribute type 32 has an invalid length.
[  122.516894][T11590] lo speed is unknown, defaulting to 1000
[  122.523170][T11590] lo speed is unknown, defaulting to 1000
[  122.559989][T11597] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  122.736953][T11608] netlink: 'syz.2.1668': attribute type 32 has an invalid length.
[  123.110775][T11661] netlink: 'syz.0.1681': attribute type 32 has an invalid length.
[  123.278495][T11682] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.280981][T11682] syzkaller0: entered promiscuous mode
[  123.282836][T11682] syzkaller0: entered allmulticast mode
[  123.299336][T11682] tipc: Resetting bearer <eth:syzkaller0>
[  123.306991][T11674] tipc: Resetting bearer <eth:syzkaller0>
[  123.312758][T11674] tipc: Disabling bearer <eth:syzkaller0>
[  123.559542][T11702] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.562722][T11702] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.608988][T11703] sctp: [Deprecated]: syz.2.1694 (pid 11703) Use of struct sctp_assoc_value in delayed_ack socket option.
[  123.608988][T11703] Use struct sctp_sack_info instead
[  123.609256][T11702] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  123.628887][T11702] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  123.715307][ T5872] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.718706][ T5872] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.721863][ T5872] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.726345][ T5872] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.761289][T11717] siw: device registration error -23
[  123.792343][T11719] vxcan2: entered promiscuous mode
[  123.811283][T11723] __nla_validate_parse: 33 callbacks suppressed
[  123.811294][T11723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1700'.
[  123.888160][T11737] netlink: 'syz.1.1702': attribute type 32 has an invalid length.
[  123.938942][T11745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1704'.
[  123.956411][T11746] lo speed is unknown, defaulting to 1000
[  123.959464][T11746] lo speed is unknown, defaulting to 1000
[  124.037960][T11755] netlink: 'syz.0.1705': attribute type 32 has an invalid length.
[  124.040637][T11755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1705'.
[  124.044242][T11755] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  124.133840][T11761] netlink: 'syz.2.1709': attribute type 6 has an invalid length.
[  124.141979][T11766] rdma_rxe: rxe_newlink: failed to add wg0
[  124.149703][T11761] netlink: 'syz.2.1709': attribute type 6 has an invalid length.
[  124.231672][T11766] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1708'.
[  124.269512][T11778] netlink: 'syz.2.1712': attribute type 13 has an invalid length.
[  124.272529][T11778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1712'.
[  124.274065][T11781] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1713'.
[  124.278043][T11778] netlink: 'syz.2.1712': attribute type 13 has an invalid length.
[  124.282257][T11778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1712'.
[  124.288127][T11781] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1713'.
[  124.294421][T11781] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1713'.
[  124.304726][T11781] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1713'.
[  125.329172][T11817] netlink: 'syz.0.1724': attribute type 32 has an invalid length.
[  125.440858][T11826] netlink: 'syz.1.1726': attribute type 2 has an invalid length.
[  125.605748][T11841] netlink: 'syz.1.1730': attribute type 29 has an invalid length.
[  125.608861][T11841] netlink: 'syz.1.1730': attribute type 29 has an invalid length.
[  125.611874][T11841] netlink: 'syz.1.1730': attribute type 29 has an invalid length.
[  125.784097][T11869] syzkaller0: entered promiscuous mode
[  125.786328][T11869] syzkaller0: entered allmulticast mode
[  125.792753][T11869] sctp: [Deprecated]: syz.1.1737 (pid 11869) Use of struct sctp_assoc_value in delayed_ack socket option.
[  125.792753][T11869] Use struct sctp_sack_info instead
[  126.611378][T11892] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  126.741859][T11902] bridge_slave_1: left allmulticast mode
[  126.743736][T11902] bridge_slave_1: left promiscuous mode
[  126.745852][T11902] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.758079][T11902] bridge_slave_0: left allmulticast mode
[  126.760014][T11902] bridge_slave_0: left promiscuous mode
[  126.761929][T11902] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.081820][T11942] netem: incorrect ge model size
[  127.083861][T11942] netem: change failed
[  127.139626][T11948] nbd: couldn't find device at index 536870912
[  127.189336][T11954] IPVS: set_ctl: invalid protocol: 46 0.0.0.0:20002
[  128.349681][T12023] vxcan2: entered promiscuous mode
[  128.676944][T12041] bond0: entered promiscuous mode
[  128.679429][T12041] bond0: left promiscuous mode
[  128.707708][T12041] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  129.268892][T12046] __nla_validate_parse: 149 callbacks suppressed
[  129.268905][T12046] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1797'.
[  129.709766][T12064] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1802'.
[  129.720982][T12064] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1802'.
[  129.760279][T12072] validate_nla: 38 callbacks suppressed
[  129.760288][T12072] netlink: 'syz.1.1805': attribute type 32 has an invalid length.
[  129.852199][T12085] netlink: 'syz.2.1808': attribute type 4 has an invalid length.
[  129.884118][T12093] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  129.887297][T12093] syzkaller0: entered promiscuous mode
[  129.889192][T12093] syzkaller0: entered allmulticast mode
[  129.892468][T12093] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  129.901728][T12093] tipc: Resetting bearer <eth:syzkaller0>
[  129.908323][T12092] tipc: Resetting bearer <eth:syzkaller0>
[  129.914004][T12092] tipc: Disabling bearer <eth:syzkaller0>
[  129.924071][T12095] netlink: 'syz.2.1810': attribute type 5 has an invalid length.
[  129.963604][T12097] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1811'.
[  130.010383][T12099] lo speed is unknown, defaulting to 1000
[  130.013659][T12099] lo speed is unknown, defaulting to 1000
[  130.037457][T12107] netlink: 676 bytes leftover after parsing attributes in process `syz.2.1814'.
[  130.040420][T12107] netlink: 676 bytes leftover after parsing attributes in process `syz.2.1814'.
[  130.073855][T12111] netlink: 'syz.1.1816': attribute type 32 has an invalid length.
[  130.085940][T12114] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1815'.
[  130.086634][T12112] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1815'.
[  130.088912][T12114] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1815'.
[  130.088922][T12114] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1815'.
[  130.309018][T12138] wireguard1: entered promiscuous mode
[  130.310865][T12138] wireguard1: entered allmulticast mode
[  130.738016][T12195] Unsupported ieee802154 address type: 0
[  130.769482][T12200] vxcan2: entered promiscuous mode
[  130.778902][T12210] netlink: 'syz.1.1842': attribute type 32 has an invalid length.
[  131.060270][T12252] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  131.106673][T12255] netlink: 'syz.2.1855': attribute type 32 has an invalid length.
[  131.880216][T12289] netlink: 'syz.2.1864': attribute type 1 has an invalid length.
[  131.883469][T12289] NCSI netlink: No device for ifindex 813332851
[  132.286743][T12296] netlink: 'syz.1.1867': attribute type 32 has an invalid length.
[  132.319391][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.394896][T12309] netlink: 'syz.0.1870': attribute type 1 has an invalid length.
[  132.400655][T12309] netlink: 'syz.0.1870': attribute type 11 has an invalid length.
[  133.054330][T12361] pim6reg: entered allmulticast mode
[  133.062302][T12368] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  133.193381][T12375] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  133.196853][T12376] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  133.241034][T12377] lo speed is unknown, defaulting to 1000
[  133.252198][T12377] lo speed is unknown, defaulting to 1000
Connection to localhost closed by remote host.
[  133.701993][T12373] syz_tun (unregistering): left promiscuous mode
[  133.734360][ T5872] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  133.848186][ T5872] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  133.896497][ T5872] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  133.942280][ T5872] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  134.090373][ T5872] bond4 (unregistering): (slave gretap1): Releasing active interface
[  134.257941][ T5872] bond0 (unregistering): Released all slaves
[  134.269101][ T5872] bond1 (unregistering): Released all slaves
[  134.340414][ T5872] bond2 (unregistering): Released all slaves
[  134.404167][ T5872] bond3 (unregistering): Released all slaves
[  134.458966][ T5872] bond4 (unregistering): Released all slaves
[  134.510807][ T5872] bond5 (unregistering): Released all slaves
[  134.580290][ T5872] tipc: Disabling bearer <ib:caif0>
[  134.587999][ T5872] tipc: Left network mode
[  134.719351][ T5872] hsr_slave_0: left promiscuous mode
[  134.721960][ T5872] hsr_slave_1: left promiscuous mode
[  135.391970][ T5872] IPVS: stop unused estimator thread 0...
[  135.396989][ T5872] ------------[ cut here ]------------
[  135.398820][ T5872] WARNING: CPU: 1 PID: 5872 at net/xfrm/xfrm_state.c:3308 xfrm_state_fini+0x289/0x2f0
[  135.402011][ T5872] Modules linked in:
[  135.403431][ T5872] CPU: 1 UID: 0 PID: 5872 Comm: kworker/u8:3 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59-dirty #0 PREEMPT(full) 
[  135.409457][ T5872] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  135.413374][ T5872] Workqueue: netns cleanup_net
[  135.415301][ T5872] RIP: 0010:xfrm_state_fini+0x289/0x2f0
[  135.417465][ T5872] Code: 41 5f 5d e9 29 d9 e1 f7 e8 04 af 9d f7 90 0f 0b 90 e9 fd fd ff ff e8 f6 ae 9d f7 90 0f 0b 90 e9 60 fe ff ff e8 e8 ae 9d f7 90 <0f> 0b 90 43 80 3c 2c 00 0f 85 c7 fe ff ff e9 ca fe ff ff e8 cf ae
[  135.424924][ T5872] RSP: 0018:ffffc900034cf898 EFLAGS: 00010293
[  135.427416][ T5872] RAX: ffffffff8a21fca8 RBX: ffff888111492440 RCX: ffff888021b99cc0
[  135.430495][ T5872] RDX: 0000000000000000 RSI: ffffffff8d9b70aa RDI: ffffffff8be33400
[  135.433584][ T5872] RBP: 0000000000000040 R08: ffffffff8fa38137 R09: 1ffffffff1f47026
[  135.436776][ T5872] R10: dffffc0000000000 R11: fffffbfff1f47027 R12: 1ffff1102229271c
[  135.439913][ T5872] R13: dffffc0000000000 R14: ffff8881114938e0 R15: ffff8881099acd00
[  135.442999][ T5872] FS:  0000000000000000(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  135.446554][ T5872] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  135.449108][ T5872] CR2: 00007fd6108e7d60 CR3: 000000000df36000 CR4: 00000000000006f0
[  135.452210][ T5872] Call Trace:
[  135.453546][ T5872]  <TASK>
[  135.454736][ T5872]  xfrm_net_exit+0x2d/0x70
[  135.456571][ T5872]  ops_undo_list+0x49a/0x990
[  135.458414][ T5872]  ? __pfx_ops_undo_list+0x10/0x10
[  135.460440][ T5872]  ? do_raw_spin_unlock+0x4d/0x240
[  135.462468][ T5872]  cleanup_net+0x4c5/0x800
[  135.464250][ T5872]  ? __pfx_cleanup_net+0x10/0x10
[  135.466265][ T5872]  ? _raw_spin_unlock_irq+0x23/0x50
[  135.468334][ T5872]  ? process_scheduled_works+0x9ef/0x17b0
[  135.470559][ T5872]  ? process_scheduled_works+0x9ef/0x17b0
[  135.472776][ T5872]  process_scheduled_works+0xae1/0x17b0
[  135.474974][ T5872]  ? __pfx_process_scheduled_works+0x10/0x10
[  135.477504][ T5872]  worker_thread+0x8a0/0xda0
[  135.479367][ T5872]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  135.481838][ T5872]  ? __kthread_parkme+0x7b/0x200
[  135.483775][ T5872]  kthread+0x711/0x8a0
[  135.485461][ T5872]  ? __pfx_worker_thread+0x10/0x10
[  135.487467][ T5872]  ? __pfx_kthread+0x10/0x10
[  135.489301][ T5872]  ? _raw_spin_unlock_irq+0x23/0x50
[  135.491341][ T5872]  ? lockdep_hardirqs_on+0x9c/0x150
[  135.493391][ T5872]  ? __pfx_kthread+0x10/0x10
[  135.495279][ T5872]  ret_from_fork+0x3fc/0x770
[  135.497132][ T5872]  ? __pfx_ret_from_fork+0x10/0x10
[  135.499141][ T5872]  ? __switch_to_asm+0x39/0x70
[  135.501023][ T5872]  ? __switch_to_asm+0x33/0x70
[  135.502928][ T5872]  ? __pfx_kthread+0x10/0x10
[  135.504740][ T5872]  ret_from_fork_asm+0x1a/0x30
[  135.506706][ T5872]  </TASK>
[  135.507947][ T5872] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  135.510760][ T5872] CPU: 1 UID: 0 PID: 5872 Comm: kworker/u8:3 Not tainted 6.17.0-rc1-syzkaller-00201-g88250d40ed59-dirty #0 PREEMPT(full) 
[  135.515623][ T5872] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  135.519529][ T5872] Workqueue: netns cleanup_net
[  135.521417][ T5872] Call Trace:
[  135.522736][ T5872]  <TASK>
[  135.523918][ T5872]  dump_stack_lvl+0x99/0x250
[  135.525728][ T5872]  ? __asan_memcpy+0x40/0x70
[  135.527557][ T5872]  ? __pfx_dump_stack_lvl+0x10/0x10
[  135.529596][ T5872]  ? __pfx__printk+0x10/0x10
[  135.531427][ T5872]  vpanic+0x281/0x750
[  135.533012][ T5872]  ? __pfx__printk+0x10/0x10
[  135.534827][ T5872]  ? __pfx_vpanic+0x10/0x10
[  135.536629][ T5872]  ? is_bpf_text_address+0x292/0x2b0
[  135.538731][ T5872]  panic+0xb9/0xc0
[  135.540223][ T5872]  ? __pfx_panic+0x10/0x10
[  135.541994][ T5872]  __warn+0x31b/0x4b0
[  135.543559][ T5872]  ? xfrm_state_fini+0x289/0x2f0
[  135.545501][ T5872]  ? xfrm_state_fini+0x289/0x2f0
[  135.547622][ T5872]  report_bug+0x2be/0x4f0
[  135.549423][ T5872]  ? xfrm_state_fini+0x289/0x2f0
[  135.551454][ T5872]  ? xfrm_state_fini+0x289/0x2f0
[  135.553484][ T5872]  ? xfrm_state_fini+0x28b/0x2f0
[  135.555532][ T5872]  handle_bug+0x84/0x160
[  135.557284][ T5872]  exc_invalid_op+0x1a/0x50
[  135.559141][ T5872]  asm_exc_invalid_op+0x1a/0x20
[  135.561130][ T5872] RIP: 0010:xfrm_state_fini+0x289/0x2f0
[  135.563369][ T5872] Code: 41 5f 5d e9 29 d9 e1 f7 e8 04 af 9d f7 90 0f 0b 90 e9 fd fd ff ff e8 f6 ae 9d f7 90 0f 0b 90 e9 60 fe ff ff e8 e8 ae 9d f7 90 <0f> 0b 90 43 80 3c 2c 00 0f 85 c7 fe ff ff e9 ca fe ff ff e8 cf ae
[  135.570756][ T5872] RSP: 0018:ffffc900034cf898 EFLAGS: 00010293
[  135.572758][ T5872] RAX: ffffffff8a21fca8 RBX: ffff888111492440 RCX: ffff888021b99cc0
[  135.575382][ T5872] RDX: 0000000000000000 RSI: ffffffff8d9b70aa RDI: ffffffff8be33400
[  135.578014][ T5872] RBP: 0000000000000040 R08: ffffffff8fa38137 R09: 1ffffffff1f47026
[  135.580645][ T5872] R10: dffffc0000000000 R11: fffffbfff1f47027 R12: 1ffff1102229271c
[  135.583313][ T5872] R13: dffffc0000000000 R14: ffff8881114938e0 R15: ffff8881099acd00
[  135.586003][ T5872]  ? xfrm_state_fini+0x288/0x2f0
[  135.587744][ T5872]  ? xfrm_state_fini+0x288/0x2f0
[  135.589690][ T5872]  xfrm_net_exit+0x2d/0x70
[  135.591470][ T5872]  ops_undo_list+0x49a/0x990
[  135.593303][ T5872]  ? __pfx_ops_undo_list+0x10/0x10
[  135.595340][ T5872]  ? do_raw_spin_unlock+0x4d/0x240
[  135.597455][ T5872]  cleanup_net+0x4c5/0x800
[  135.599303][ T5872]  ? __pfx_cleanup_net+0x10/0x10
[  135.601320][ T5872]  ? _raw_spin_unlock_irq+0x23/0x50
[  135.603372][ T5872]  ? process_scheduled_works+0x9ef/0x17b0
[  135.605671][ T5872]  ? process_scheduled_works+0x9ef/0x17b0
[  135.607921][ T5872]  process_scheduled_works+0xae1/0x17b0
[  135.610183][ T5872]  ? __pfx_process_scheduled_works+0x10/0x10
[  135.612618][ T5872]  worker_thread+0x8a0/0xda0
[  135.614473][ T5872]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  135.616985][ T5872]  ? __kthread_parkme+0x7b/0x200
[  135.618945][ T5872]  kthread+0x711/0x8a0
[  135.620592][ T5872]  ? __pfx_worker_thread+0x10/0x10
[  135.622677][ T5872]  ? __pfx_kthread+0x10/0x10
[  135.624512][ T5872]  ? _raw_spin_unlock_irq+0x23/0x50
[  135.626619][ T5872]  ? lockdep_hardirqs_on+0x9c/0x150
[  135.628678][ T5872]  ? __pfx_kthread+0x10/0x10
[  135.630481][ T5872]  ret_from_fork+0x3fc/0x770
[  135.632324][ T5872]  ? __pfx_ret_from_fork+0x10/0x10
[  135.634379][ T5872]  ? __switch_to_asm+0x39/0x70
[  135.636347][ T5872]  ? __switch_to_asm+0x33/0x70
[  135.638316][ T5872]  ? __pfx_kthread+0x10/0x10
[  135.640305][ T5872]  ret_from_fork_asm+0x1a/0x30
[  135.642339][ T5872]  </TASK>
[  135.644344][ T5872] Kernel Offset: disabled
[  135.645794][ T5872] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:05:03  Registers:
info registers vcpu 0

CPU#0
RAX=d752316b68198100 RBX=ffffffff81968308 RCX=d752316b68198100 RDX=0000000000000001
RSI=ffffffff8d9b70aa RDI=ffffffff8be33400 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38130 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7953f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000002100 CR3=00000000264c8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 0000000000000000 XMM01=6f6c2f7261762f00 6469756e69676f6c
XMM02=0000ffffffffff00 0000000000000000 XMM03=0000000000000000 000000000000002f
XMM04=74772f676f6c2f72 61762f00706d7475 XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0020202000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900034cf030
R8 =ffff88801f2c0237 R9 =1ffff11003e58046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af98e5 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd6108e7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=007473616369746c 756d5f73695f6361
XMM02=00007f08f8387498 00007f08f8387470 XMM03=00007f08f83874a8 00007f08f83874a0
XMM04=00007f08f8eed100 00007f08f8387460 XMM05=00007f08f8387478 00007f08f83874c0
XMM06=00007f08f83874b8 00007f08f83874b0 XMM07=00007f08f83874a8 00007f08f83874a0
XMM08=0000000000002f0d 01ffffffff3c8600 XMM09=0000000000000000 00007f08f8212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
