last executing test programs:

3.305664783s ago: executing program 2 (id=1109):
r0 = socket$inet(0x2, 0x3, 0x6)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x12, 0x3, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xbd}}, 0x0, 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="080005"], 0x164}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r3)
socket$packet(0x11, 0x2, 0x300)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={0x0, &(0x7f0000000980)=""/165, 0x0, 0xa5, 0x1, 0x5}, 0x28)
sendmsg$nl_route_sched(r1, 0x0, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback={0x0, 0x7ffffffe}}, 0x1c)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r6=>0x0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="120000002f0000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r8}, &(0x7f0000000700), &(0x7f0000000740)=r7}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r8, &(0x7f0000000080)="37ea86a49ac289e5b852230f661e39c8c1156664cb67047715f21a55000fb075", 0x0}, 0x20)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r6, 0x800, 0x55007}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xf}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000000)='gre0\x00'})

3.158570781s ago: executing program 1 (id=1111):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000000b2000000100013f000000000000100000000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0xfff}, 0x8)
sendto$inet6(r1, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xa}, 0x1c)
setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0)
mmap(&(0x7f000009f000/0x800000)=nil, 0x800000, 0x0, 0x11, r0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x800)
bind$bt_l2cap(r3, &(0x7f00000001c0)={0x1f, 0x9, @any, 0xd, 0x2}, 0xe)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15, 0xc3072, 0xffffffffffffffff, 0x0)

2.289207877s ago: executing program 2 (id=1117):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1b0, 0x65, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0xfff2, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x17c, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xfff1}}, @TCA_BPF_ACT={0x170, 0x1, [@m_ctinfo={0x16c, 0x1b, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xd, 0x6, 0x3, 0x101, 0x4}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x8, 0x5, 0xf0, 0x9}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x4, 0x8, 0x8, 0x40}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0xe, 0x8, 0x512ce089}}]}, {0xdd, 0x6, "2bc35728923701721aa3c1206907dcc9d8b543e2dff0e6c1f1c72f4bbe95b4d012071a9cd3a52c916baa192f13d49bd561d5cb8659385439830e75fb270a20c9e3cb09000067e8ad8dad5ee238c14d852e875544791bf401256a485ce63d670b94d0c0e72e83ff493f9f7832c0ac62b9be5206ab85931897350a76185eaa0a086f3f9c723ed1f1ae47fadcce83f0df3ec18ad73df9e2dbbf597a81169d561156ddae652f19d529a52ec8bce706bc317ce6d5d0dd605c256dbe2d08b90e595b41e88386bdd18542dd8b689a7975b590b240426a577bd91c6427"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket(0x2a, 0x800, 0xfffffffd)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x40000000, 0xfffff001}}]}, 0x40}}, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1b0, 0x65, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0xfff2, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x17c, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xfff1}}, @TCA_BPF_ACT={0x170, 0x1, [@m_ctinfo={0x16c, 0x1b, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xd, 0x6, 0x3, 0x101, 0x4}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x8, 0x5, 0xf0, 0x9}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x4, 0x8, 0x8, 0x40}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0xe, 0x8, 0x512ce089}}]}, {0xdd, 0x6, "2bc35728923701721aa3c1206907dcc9d8b543e2dff0e6c1f1c72f4bbe95b4d012071a9cd3a52c916baa192f13d49bd561d5cb8659385439830e75fb270a20c9e3cb09000067e8ad8dad5ee238c14d852e875544791bf401256a485ce63d670b94d0c0e72e83ff493f9f7832c0ac62b9be5206ab85931897350a76185eaa0a086f3f9c723ed1f1ae47fadcce83f0df3ec18ad73df9e2dbbf597a81169d561156ddae652f19d529a52ec8bce706bc317ce6d5d0dd605c256dbe2d08b90e595b41e88386bdd18542dd8b689a7975b590b240426a577bd91c6427"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) (async)
socket(0x10, 0x803, 0x0) (async)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
socket(0x2a, 0x800, 0xfffffffd) (async)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x40000000, 0xfffff001}}]}, 0x40}}, 0x0) (async)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (async)

2.147195171s ago: executing program 0 (id=1118):
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = gettid()
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="68000000100003040e000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="049c01000750050008001300", @ANYRES32=r1, @ANYBLOB="1400030076657468305f766972745f77e966690008001f00ba00000024000e"], 0x68}, 0x1, 0x0, 0x0, 0x400c0d6}, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000007, 0x20010, r0, 0xcb188000)
r3 = socket(0x10, 0x3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000060000000400000005"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000002500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRESHEX=r0, @ANYRESDEC=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="280200001900010000000000000000001d010900500011"], 0x228}, 0x1, 0x0, 0x0, 0x5}, 0x10)
ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f00000003c0))
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002300)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="c9a81d96cd88469e22ec0c5e2655bbaf1c21e14e834c19bb2a7d82709df7896847afa08aa360f35383a7a4bc48ecd96a98bf8c0933bc92d1ad69da727e22b82a866ced67ad48d599", 0x48}, {&(0x7f00000001c0)="5332a440fd2732f1a9daec5590e6407b1a5ced3a342070525665ba40e91dd8017c56d79be3fc9470d77c217ccf991d3ca18858aa4e51d358cac6ea292108647224d796bb7e5ab0f9cb72c04bd4a520a6bd0de2d30db6bc9baf0ff969ca8fb6a9e7396c74e8d13390620c4ccfe39156d9588f2ac542e2b376d84eece236b3851b2d0ef7801b9f17f0f2054a0cfdf2cf9f8b0f5415", 0x94}, {&(0x7f0000000280)="1003b784a6f27da1831f097be6ed7ab9635331940315bab28b88f6d6a4a5254f4634c22091149532b5caa8eed39ac80d0cfb965fdfdac291d56d1ec097f3e94635427a62e0c56f336d1c6f2486baa5d1d85c20cee352e71fa40fbe0194b7a6caa6f11e9c7bbc68a9e8ab7cafd8d0eeecd52a3e16a4c7a36e1016e1873a7b94119de53b2c6a2bb4a323c3d70a18371423f0af3cc0abc45f83738f", 0x9a}, {&(0x7f0000000340)="041298f3a06ece5bb8", 0x9}, {&(0x7f0000000380)="d4e9319f6bf0da8cfd645e14baa108fc07be7d1ee59c471718399073768f", 0x1e}, {&(0x7f0000002440)="b1a61abf56983f13e41a33022a51996a8e534a1f2f4b72fc34b099ab5677f1a07cda6b9028bd9b0f01eb4f2d7c9774b76f8da50277bc67daf19086fcbfce14703d444762b54327154aaca34a70a0b8611275d7c9e35492bc2f9e00965c43d795cd162ad797ce37652a5fa42823f08e4d1b4a3b9357469eecb07f55a18b814e28df8393", 0x83}], 0x6, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1d8}, {0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000480)="a12ceb7a1ea4f9a787dca071822ec02bb666257f460aff03b9339a5d4ba14112862ff0", 0x23}, {&(0x7f0000000780)="56ac55bd96c20149d003160c4bfad81481a8a6f0c4cc3749814e49b83518d3d43f2c251b4275718adadfde62f394465001520b8f053119ce94beda1da537ee3711199220c5b8afe4a9948cc06a597e8df238c1af85071a0292607758891debf7048f209dd2b8d982121a57c8175382e5411b1832bf11ce62f282fb4e0f12febc10b64c6c6a90c1c3d8bd08b20a4c554cce724912ac07814feb019b29654c3db7e77a0f56b5742d1e6ebbd6fddace02c38b69e54bd80c8f1e27e000e089fb091664a4ed36f22c2d6f4cdc43dfbfb04ba26433097af40eb15bbb800341ff", 0xdd}], 0x2, &(0x7f0000000880)=[@iv={0x28, 0x117, 0x2, 0x13, "981950644d83ceb3b3887172baab70b283d561"}, @assoc={0x18, 0x117, 0x4, 0xfffffffa}, @op={0x18}, @iv={0xb8, 0x117, 0x2, 0xa1, "566a05f781c4b246185cc6832bea65d8f3525f42796e8a3fe3905cd10ad2e8053a14d887458d9407c9f63e6da46031e78e77ccd2b28a5b766f92206138015c06cd5aa348c36ed52b4857c758aa1b3a7cd223a67c4630c5598a875a0c94cb0c9be1847b6b597bf5041c094875c685c19158d8edc6e3d48acc05eb6ee77717bdf61af9a377825d9ca9477080722ae035d0592da841bb66729788a96cf34470eb5596"}, @assoc={0x18, 0x117, 0x4, 0x722}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x52}], 0x158, 0x4004001}, {0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000a00)="d91a892e0f54fee4b95ba6edfe8a0ae6bc2d55eb5376d5389d2ead0ba73f1ba28a0b55f36fdd85bede42e4a48bd3580fd734dd69dbcb150301c403241a4a69aa60f65b2974fa668ea88a218e9dcb527625eff925a4b270828c936c7a485bd42030f62430abe7b97f81e89a38152c3cd15910a68dfe68f080f5b59d1f65f234f76418fce55b499dc6d401341d", 0x8c}, {&(0x7f0000000ac0)="d03ed36c76805c3c1153639cdbb53abcd16819cdfdb9a3332a1df0dd88a1eca10307c962c8a6c1367d614b3c703983a7c22733c738365d7b42e036a8918cbc00fa89091151d64726dcf006375e2b061f715cb0514c667b0a3f69e093bd690edce93d8f58b89c5dcb7b609382ca7d4f1e0fabc8ce0e432da65c171f0288bf0973d21c9add61ec170708310fa87560479db7ee3d7d40edee9f3a85dbe69485b696d116b72ac4af45da5f8de105700d701e301c6752044adbac9fff0ada68c808815cd78e65a705b7da253ef32c86c2a7464685d74ab4a6a8f4", 0xd8}, {&(0x7f0000000bc0)="bf657e5cf3ed719543a8fe5e9a42f1f4a245a9c8b01233a649148c9586da2979f4498a83938a6269107eaa0e8fb6239a8560076ad7cb229e16e6e50a9b20a1af35a7ae9d40f6e541a0128a4daafc215c5e82e8d3d42f7bd39c14520137a61081ac7471968a751dca7c8ba60c88c39aa88f52acc639d31d308558829ba0b1644a13cb2a38a101f5d81babc75c802749b1565a432ba034c12b", 0x98}], 0x3, &(0x7f0000000c80)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0xf8, 0x117, 0x2, 0xe2, "3b4538094e40506cdfd6edcd97922c69f4d9ccffc4db99c75fae8fb29d02ece54b9c3306a84482f2a33a95d63eb5d4d29c3b4ca7bc3930c71352ebfc16433c5c5e0a189c3727845c97e0cde47713976f30945a7660bc75fc049b9381e5e12a10cd8e0373dbc29e2a7ce1929e30a367a59afe7df9c788b285831d7984d5982d1801d78746101025e0a198879f2d9d0f93f42ef381bd938579109c38404429222c5ae1fdbb1cc4bb99558d28b40d2a7d0282be71ec0a714bfa44cd2ce5bb9474af25a42e3f22619a7d43812d5cada01166a58eef8e1aafd7d443d35cc5cfc694518597"}], 0x110, 0x8010}, {0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000dc0)="e6090a1ac2d5", 0x6}, {&(0x7f0000000e00)="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", 0x1000}, {&(0x7f0000001e00)="8b7f12c686974bd70be9f435911bdbb131aa9a56769d49359ec84c5cdcf27ea99946171440bb4d2ee4161efec1b1647f12de6fc744ca87443406475fef9d55af837393f2017b41a5c340582ce9ad5e967d13ad8e7610f1bc4d12418de70e455e525d03ce21ddfa273e72eaea2032bc711813bbbb0c5388a646e6dc320866c9059699bd575ec9830fe229b3596dbeb53f20ddc1964be945aaf154", 0x9a}, {&(0x7f0000002d40)="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", 0x1000}, {&(0x7f0000001ec0)="62421733aee7460435c84f4441680af935392671e5580aef1c4f7db7f7af4a3bb1e8cdbf63834f499146f12e43b99dcb77ab12b2aa12d67441a530ef887ae284027c19d1374c7b307ff94763ef202d33f88d6421beb30eafb5f395e0e691d2167bcf1c7471560d053b39b16a09ec49478f68ad74", 0x74}, {&(0x7f0000001f40)="8b94fc71520b059cde2de88b3a65944c98f75d441b156ae3b66be19ed8e221156ca72444c60dc25e4df5032379b8647cbc447bcf777bcd609b8e2d6e98583a66b5d9b0d1ac1444973eba6a90f0c4a89d012413e7bfbed0cd4981a8bda528148dc8675a78102badb4b59091be20eaae09499bf5222128dedb9be010501b39a7ba471958", 0x83}], 0x6, &(0x7f0000002080)=[@op={0x18}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xc8}, @op={0x18, 0x117, 0x3, 0x1}], 0x78, 0x20000000}, {0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000002100)="05fb2488f73c651159170a3069eccc551da9cfc2f07693ef156c5193285faf6ade33755dfa29f9adc1bd949f397b", 0x2e}, {&(0x7f0000002140)="76c4a0dda8001fbcc777b71b79f13433592784b514d9b7b272db26b26e327d678fa7488acbaa24450aaa6edc743b745755c4d2eb66d5dbe249c75bb7223a77d19d29a4c251be925de0dc78da3705f3e2252619242f99dcb4aeae6e0d7cf310eb05a5f8902394c69c9b0c3a32a5eff0e3918af4c0af98143d9974368528d538f09396e1a4778d9d9a4663684bd3b9cabb4fa0e36080a66689c11d98c5eeb58a00842b08870f90f3bbf3280b45f2754013905111ab33d84a2c92b3ce0eb18789f62ff2cc81b314285fddb23392fe758588b3fc6aac1a651a", 0xd7}], 0x2, &(0x7f0000002280)=[@op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0xfffffff3}], 0x48, 0xc080}], 0x5, 0x80)
bind$rds(r0, &(0x7f0000002d00)={0x2, 0x4e21, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e61, @loopback}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000100)=""/188, 0xbc}], 0x1}, 0x0)
ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000003d40)="c8d6a6f7446025d171ed549f621a8c6416a0059291ae61bd17d79a3cf1e0ebdef1d9d0bdd967fea875e58887ed1e692b39149196c5645d2b4c5e333b0caf1e185923bb9822817e0e1070689b26b29534d6ce17c479c34580c5eadc9867814113ab33c9d5fed088e453ca9a5364976e141688bd20ea1f433652636eb30f9d84e02fd802bba9b2042919d42c7192acdd650c8b84c56c744b206a8ec9112e426501e74d03de076e8854c49a72610e984df607eb5b04845f702af2887841784e9fcdf3f1949ad3e730abfbb53abc1aae9d41c4d206937546d7084584f6795c2e846431bb3380b02e1d9461adadc2f391ae77448cbbdce8f25fffa0c342ebce363f4cd9fea8fa47c5669a69042758e432fa61fe0f7bfb0b71a824b2b72682a55e3e155b530616eca8b8912603a4f0599bb0adcf686cc0d345b992d1d495f2662093c725620e3e5882f8fd64c7a2d5138273bff60224db55e9f935298a629ccf80da19eaeaa8cf77eb9e6b33331d5a00f629899d76ddee1a097af6c1c8050eaab95b41007c5e990334e79eed749ee585adc628a2809794188a8f7c0451d92053b7d3f6893b2461791b22ba2ee781dafd34e85e910be2c97aa27bc286698963449f2342b7b7836f421dd3a7af1a5eb0310ce480716a7f32341a4a98f6cf6e0478694f80a144786d1c376370ce3439807ae15a8dec414b263ca45629d95423eed583e3c022786406097ba62e0e514bcce2fe280bcd8c13d05a2578992c687aade1972f650d197495265f019b896df36a5800465e53b9e20b56a56e862f98dcfcf81598231177ac63a01d233b8090aa59457d1a34949e307dac8b640100df5a1a25d13f3c959cf9693b7abb6a237e29c4b75ce4f1baef7c3a7dd9a9b643cd700e3aebd51b626e33b65519b2efdc4950f22d14e59455921223fd615f33fd21b0aa95a3c5204c5e19ba159798a0ec6ded00d3e9eba9c5a1009d24be9be8a50a7fe95c3f4793915be0e19a0387cf8c21bcedfab3b439ca75d76e8f8554250b1dce6d4eb6ec1358732628e53844646c234100b155cf5b0c260ae5e16858cdfe974567c2e0e241daf0205295c4f91ac34cb53186237aeaab7e7de8667aa599b68692c31a81cb1cfd6227e7b78ad0744e6724945c7fd8f33814ace9dcfe67471f7fe75099dc657819873a933a743ad033dc5bcf8ea68ddcafcd549556001dc3ffc37b799084c9f3333d9977421225cd0527383f4d1f333d4b109705dae49f6e224901ce23f6713f44c00668e2366bd0bae7bec9a9eb99a583cf2e06fc0fac84c4713bb612c1db0bf764d06ba5f65ec3fb9ff6c32c0863bc22703a6ea40fccc22a4e09bc80ad03d5936e707889c32ace1cc26580df86c8e4096f49fbeb14fa4897923066a756f5b5b5290edba27724429aa903531a14de8f94f0083fb375b549b6464494b7844c589730878300042286b58072439bab3e744dbdb99bf5118780844caffad1a96532a12feebf06392154b31537c4cfff013d877c955b010223c743bc6c9dfeabff7a38b081c9213f6e367b59ff6231f36951ba64ae7738909d132456cb31537167af5414d35e10fd2e2b154b8f5e77b990977f460df39cbaab52357fd41ad67c854057bfa6bd64dc8028dc16b459cf6954c5f927cc5c0e51bd9a6896e4b7df410eaa1c2f32ce24204b2c146ecb80332cf570a927e17cf609f75ea355ba1b956c45f8581cda76e95f79f0415413c119649ebec510a9ee5133796e9c8cd1a06bb4a12b523d269e149d04d691e8845d7b8ceb4a47c84c0c3c01aa21634b5498f7e0352beeadaa1dd64c15a1b6a346177ea32e12f997ceab429cedc8913469ce82e33ed0cf2d9e549e7ce014a1413aaaae86e230a7799d7e455a5f2d728282857bbc135ab1ada57a9445668feb84bd1ef2ce070ca042966331790d6dcec1c1c24314354441dab7443c32ab6060da885155ce5c122ed1fd39d8b596e5b2a80faadf43d58df9a72dc47e6d2ffaba5a143199af6fbd5403a982bccc23a0a7c4664d3534e26e4c34bb06d04822f077c466725d6c1ebe7871c489ce42e44bef90e85b05fc2029ad439f238f1cd6fc86dc94073bc8a99109f021b55a88ce9b39422336b78aa4e27ecb798b25bc0334565b557a8b055924fb814423adc021c948cc9e961f5697e2ae1733f1029ac5a5c15a0e81a15b9c589c281c4e2ca30e40f0bf5fc7c48179c2816a10576e6d6a098af6b549554bc7483f1829896998c478a6d2a8e100a33b985ab65540f56a9dfad775d69d995a4ca74bb9ec58ef498e1cd62f1974a33f269e3c27c696685400c2ee40045d6d81888201fb75ad55c3b230ad0fd55afbbb00fe411c910373fa0a4afae96ddfa9e1815c0a8e022ec7a13572b727f713dc992aa86ed6cdcbc12a029ff9a72698419f869cd3faabf3976e5c474742f6b9e4c41c72d24bcfd586fd6ef9967fee60149594a06fba363cde3a6f0c7c5af76b83c1090050afae8691dab1aab2ed9cf2a00b509d0a4b2787dde2576ccb3a1235bc9ab076542d506843f9ed3638134dd2c215c6410a909429fbf9f969fb7c75a4ede653f574769e06aea6934f940381792b633f3ed22a58618ae8dc07955b9621fdf6761a8565b63d276e6f56602b30236decee8360a6c29141a08c00452b0ece7ecf853a55f5d7c3a405eb45c01d469718d15220360ad30932551c91f7570f8640ac5257b09f50142936d85371e7ba83e0deeca778df9ad65ed2277ccc7d6ee89bbd3b320aaf0997742d3020f77445e9e1e3a5caeb043afe44cf98d160ba696aad76e3c8778a3fe72543cebc21cf944b8741d74a44cf85a78a1de220a1a62acda3ea228d479d7fb4aa0d352966918b901bf37e5e04fa316a52b57a586f183bd12782799cd1c551f8d0ffd2ce3031ad70a1db5828e819b71faa2744dcc6206f52cee33e7484aab32446d1f67f468f83b16d97785ce6962cf98f7c42cd92b83a3803cf45be0a4cb67d1e8e1d3263ebd62226571b719cc98864fe4937b823ffc14f7904ce9d9b9498c42c07454d5a54adaf291b27226372440466b345db0520e40b199293d48a466241779d5ea788aca064d107f4916fd929b9adeeaf7f2619c8bb261c76465dcd1f8f40fbccfff2a31a0842e86586ecf708f9e1034a074f10e9e8290881e2f2b29ba253449286116517d7eb35f8e4c4ed3794abd8737bccf72a8f0687401866d5d3f8a19567dd090e85d3af24472c1c49cb4655df80ec515da5682a459cec34d1c5f395555473ff95b17c71ad1f4c977db9e8662c461a1126ea9235bd4d2b74b8ee3d1c1921db5cb48084e86283ad2fbbe6925eb5de73da3dfb07727698c80b941cbdd34027f4bb2eaada43536d4f0932d4935f75fae86d752093bcd7cd6f9fec32cc5eec7f70cb70d184644045d92d30be93be267141c9d0f89a967d109c980279f2abfa03dadf86990f6e59d166ffe2a7ed2a53a5f4021fcd9e5b482279f7261751271c4410aa563c35a7149fd7ec1f5e6130ccfc122a017198d7c822bb7cc4baadfecc480b2496a801b97c28b7edc5bccdf770d689de21eb57833e8da884140161cb832ce562867a0a6df22fb8f801ab32cbc912345a78f62191eb5751dc26e1407486ff77609647864bcf0f87f16ed00ac32d26b52d69ff5ef3547597d7d664df2c35e868eaa57172d40c0891fbf960795aff39c2818682246e0af0ca4aaf7090a094df440566ce16faf1d49cc33dff6f734e99960df700d25dbdf03f155b2ba49332442a191be6c26e14ffb688560cdcf4a2c846903bc3a067a2b5ca83e1540464b5a5b7d04d8265310ed9f732c5fb086fedc896921abe9ddfb318dbb2b560c67b478608e0d941f4f576babe43808b159a5fd4670f6ca5b63a76b13a6b84e48b68751a5766d8b09ab3ffea852dc0c9216044a84d2b08a1c2934d50b3fe4f07336b56175e357f85bd5f77cffc82aeceae4f7a0352fe2b41a127e4388c851791ec2e98c804d775813909f6714448e41fc244bf8d4e88497f718fcdb1013a8c10244f55b4381a4540eb94ec3939840f6b0fb7a0b0b55f143478fa14256f66cef2010ec2dd43d1065a3249b6370d1416f5c670218030a2aacff85b96dd086e883194c5c8c2992cbf74717f7d0a88bcce4491d0d94c565104ad1c7fbb40736e769429f6157d25fb11c0ab03ea50e4856a73b3ba432980f5cc54f4dbc9d7e58b4e82cf4897e283c43df402f14c03210d8649bf3c752ff37e006cfdcbc3e55aab754ce9011ad0a0d8e1f009f7804fde6a2917a3b1dab6e4275e724717c49b8388a7b3741b641f88d3c4170f1b65b34f95a53d3187104a1a7d031de10681f1c62299fff6cb948baea83b61e9b5c6bb24ace478c1b82baaf305480d58012cb1ee0803911e8f8ccab2e5314b38edb7859fc6f65a089425de9259069cc4292195be4e86703793e385133cda1fa26a29cc1e701201bdcb20f637bcc827eb1da0071434f5576a4c6f99e0c7e9311ac76b1ecf773f93f4c2ec7ef0022c1e67c6f514e25f20ad70c7b94236fbc3768128884d3b6dceefef282fd8ffab7e352fb6f4b49b93f5fb14479a872ee7c3e24fe5b0669a238bbef61de22eef7ac50f52c0e18b197c382adcf280a0490e65c2da12ca7a6db1b752418bca6061dc9b8157acac4ad3c0bf2e7c5857918731a9c4a456f1bbcd4883af2361e3fab2a29261f7c233406605f66cb8790d192af3bff81357c1403447aeaf9a55a0fb9a1a4df29b5f670126a9916fe137d38210cbb6e3c158ecb2dfafd124f26338daf6ba86f3df863d6a83eece2ac55eab841411dfc4fb3cf91e176d1c35c0b29735843f7e7b4686a2b6523502fe30569425ceac3d0131e28fe450f953b89b2adabe222a465ac0e8796c585b8863e249762498354318b253002e99f1ca306510776ea24a303b70964ef7b40a5fd0feb10673a90505b07ee5ed01c9b289bb6b36c7ca29d9b6bb3ee6c3b9d523542083bedf7b5baeee378fcfca6947e7c0cafbb63fd7f24dbc814296523ee8e445e0485609f05b729c468442fd90d03e3372e8bf81d78653869ea06e2ed7471ccb52f8ba4467bfef97945343c6554eed4eb6a82ea901982b5fbcc3d73c1bebaa9397b1b42640d37b0a57e91caf466c50c03420bbeeb7a96f3efefb86f36f3a866245405782c1aebad2950f443a8d00292bffb1d6a9c602182fc0cb7d2dc041b06c1200543d45ddbfa067310c42c76236adc3b75b00872b17ba96035d937ded538b724828f58da353757f48786d18334eb591f80727087e9fd10842d4e8be7c206202c348958baa7c69d3a699626c68c70b1d9b1ea73d2f712df1cd1fec0235be0af408dbcfa892130ad183a904923015b648e26f3ccf7d88cd56fd84e4acc868953191b4f875d3b5c33eaacbe48eabb6d33409782e089bd9a8cbfc78f79824c63948b98246afbe4a36d58450d5c8fad2dbc170dae933e285ffe95434cfdfd287182aa829cef210fdee39cf8e51aacda2fcd5227c15871c6ffd6203956782062b7e3c8c774d75e95334e254ed41c1b7bd3685a723523463401cc9584384a192f695e479bfefd4b9c11043188cbd6207ef5f0768a050d75f2bb23bc7980e6870f3a58ffa8add1153e2fa7ceeef0f732cbe777dd58003eb472946540586e3f10702797aefa48c3b1a5e64cd443cf2ff2c985522b45a7e1aca28f7b059484fb5a26ac53c732f4476ea6c735fd35c043cfb8977a51ee39af1d2d86dcbb9fc165deeb97898915894d505c1a07faafdb27e9e9398fa4109229ac003f134d4f9c29898")

2.032199469s ago: executing program 3 (id=1119):
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYRESDEC=r2], 0x3c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c0001"], 0xd4}}, 0x4000010)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5], 0x3c}}, 0x0)

1.957910265s ago: executing program 2 (id=1120):
r0 = socket$inet6(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x4008045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c)
socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r2, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e8f", 0x2}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='vegas\x00', 0x6)
shutdown(r1, 0x1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000005000000080000000900000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000001be1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r3, &(0x7f0000000240), &(0x7f00000000c0)=@tcp6=r1}, 0x20)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)

1.9067511s ago: executing program 3 (id=1121):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f1ea3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b2213fdc2881e1a6ec9d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232f0485a2ca9f37fc9c3d2688efcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdcdeb2af1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f925f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308c"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x2, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x4000)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x33, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c)
setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4)
socket$inet(0x2, 0x1, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x88, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}]}, 0x88}}, 0x20000000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2033}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
bind$llc(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x803, 0x6)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

1.85537865s ago: executing program 0 (id=1123):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r0, 0x0, 0xdc0, 0x4000, &(0x7f0000001cc0)="633268f83ca3000000a2029e3815bb2fa117d8326687688b2c969fd7267d546214af00d1ca2524d00f9e4d9555f3ab381b5d44fd6bda8c509e66101d296f10c805252e7c5d48d9814f46db8f07441878734b13270fe47fba418b7358984b9a61c2bbf964a520459fd0d90590b46cf1677d580a26933b6e35aee75996b73a15a25aa8ae2f1f9bc9699a505c0dc4050ab2255fc35f508ccc52f10ac12febf28652fe36f725714868675ca2a7042ab4b26904b2f000589694f69ab0b22a5aec72c5036ce1c8974690045e4ab412a70336b4c65b2dfc8121af4143c2e10a0e5632bcd44e0b000029da424d86f298656822dae2c002e289fbfa6fe0dfb2fd57713a7684dc166c628dc45027ac174c5db54f22e409eb4e94263dbc9919f90f1af3290918b9824c3e0268b300bf69cc2eb3fc58f655439bdbe2b905", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22)

1.727119693s ago: executing program 0 (id=1124):
unshare(0x400)
r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000300)=0x2)
ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0)

1.651099s ago: executing program 4 (id=1125):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000008200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000}, 0x48)

1.600247575s ago: executing program 0 (id=1126):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000019600)=ANY=[@ANYBLOB="10000000004000"], 0x10}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000006d00010028bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="40010000a28202000800130013a9d76bfe3c757bd19eb34c9713", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$netlink(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r2, 0x400448de, &(0x7f0000000080))
socket$netlink(0x10, 0x3, 0x10)
r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0)
openat$cgroup_int(r3, &(0x7f00000002c0)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
setsockopt(r2, 0x4f3, 0x2, &(0x7f0000000340)="d55b856ad0302e81853b285768c2180e35061d6492147e520bc8283f4108ce8ba4822d32e942ecc8a5cc9ad8b145a4262dbd42fb03b27a4a2c76cf829b64398b138f620068205b24ec4a8d1495a032d52ccd6159abbd19e2fde06d554a73a9e878fa8e1dbf1023cb99ca593c70e15a5071e8c0f42deee3b24b4bf8b1dc1b5043f191a67ab217d8854b9e74b0", 0x8c)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r5, 0x0, 0x8000)
write$tun(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x12f)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200), 0x806000)
read$alg(r6, 0x0, 0x0)
write$cgroup_devices(r6, 0x0, 0x0)

1.590934283s ago: executing program 1 (id=1127):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38)
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x8080)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x44}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a0101000000000000000002000000090001007379990f5ab889bb8bfd29b5197a30000000000900030073797a3200000000140004800800024000000000080001400000000014000000160a0102000000000000000017000002140000001100010000"], 0x9c}}, 0x0)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$IP_SET_OP_VERSION(r5, 0x1, 0x53, &(0x7f0000000080), &(0x7f0000000100)=0x8)
setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000000)=[{{0x1, 0x1, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x0, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x1}}, {{0x3, 0x1, 0x1}, {0x2, 0x1, 0x0, 0x1}}, {{0x1, 0x0, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}], 0x20)

1.536473319s ago: executing program 4 (id=1128):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x4, &(0x7f0000000100)=0x1, 0x4)
getsockopt$inet6_tcp_int(r3, 0x6, 0x4, 0x0, &(0x7f0000000040))
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0xff7f}}, 0x20}}, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}}, 0x20}}, 0x0)

1.400440104s ago: executing program 1 (id=1129):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffff0180c200000186dd61fbddf000083a010000000000b7efd321ecaa0010000000000000000000000000000000000000aa81009078b0eca7b300000000"], 0x0)

1.347976767s ago: executing program 1 (id=1130):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0900000008000000020000000d"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000c40), 0x12)
r5 = openat$cgroup_procs(r0, &(0x7f0000000140)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000100), 0x12)
r6 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
pread64(r6, &(0x7f0000001840)=""/4096, 0x1000, 0x1)

1.229483862s ago: executing program 3 (id=1131):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000200000aac000000060a010400000000000000000a0000050900010073797a310000000054000480500001800a000100696e6e65720000004000"], 0xd4}, 0x1, 0x0, 0x0, 0x80040}, 0x24000000)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3800004, 0x12, r2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, "f456e077567a6800", "4ba6da809ef0d3073404deea3ba3d151e0185ef62196545d5466c1370a977c95", "dd9c1b00", "9f9bacb5a99b1ee3"}, 0x38)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r3)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000100)={'veth0_to_bridge\x00', {0x2, 0x0, @local}})
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400060000120800040043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0)
sendmsg$sock(r0, &(0x7f0000000180)={&(0x7f0000000300)=@in6={0xa, 0x4e22, 0x7a47, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000380)="d88bd6182232bf5121090772aec65950c716813eaf8006deeafa46dba19663cff870d074569c4e9f1449fd", 0x2b}, {0x0}, {0x0}], 0x3}, 0x48040)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a89e10000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000060000000060a010400000000000000000100000008000b400000000038000480340001800a0001006d61746368000000240002800c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30000000001400000011000100"], 0xe8}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xff80, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000ff07c200000018120020", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.148107149s ago: executing program 0 (id=1132):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={<r1=>0x0, 0x0, 0x20}, &(0x7f00000000c0)=0xc)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={r1, 0x1028, 0xa210, 0x7f, 0xffffffff, 0x9}, &(0x7f0000000140)=0x14) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000030a030000000000000000000300000009000b0073797a30000000000900010073797a300000000014000480080002400000000008000140000000001c0008800c00024000000000000000000c0001"], 0xcc}}, 0x0)

1.145753238s ago: executing program 1 (id=1133):
socket$inet_sctp(0x2, 0x400000000001, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r6=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800e50000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0xac, 0x65, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0xd, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x78, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xfff1}}, @TCA_BPF_ACT={0x6c, 0x1, [@m_ctinfo={0x68, 0x1b, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xd, 0x6, 0x3, 0x101, 0x4}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x8, 0x5, 0xf0, 0x9}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}}]}, 0xac}}, 0x20000080)
r8 = socket(0x10, 0x803, 0x0)
sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x40000000, 0xfffff001}}]}, 0x40}}, 0x0)
recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r9}, 0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r10}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50)
sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r6, @ANYBLOB="080002002e"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r8, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xfffffffffffffdb7, r4, 0x223, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED]}, 0x2c}}, 0x804)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
pwritev(r11, &(0x7f0000000180), 0x0, 0x8, 0x2)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bond0\x00'})
syz_emit_ethernet(0x7a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00442f00fe8000000000000000000000000000bb00000000000000000000ffff000000002421880b0000000000000021000086dd080088be00000000100000000100000000000000080022eb00000000200000a59bf2a5ec0ca1de06bec9141e4500020000000006"], 0x0)

1.05323994s ago: executing program 4 (id=1134):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r0, 0x0, 0xdc0, 0x4000, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22)

990.763955ms ago: executing program 3 (id=1135):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x14}}, 0x50}}, 0x0)
sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x1, 0x9, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFCTH_TUPLE={0x44, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x13}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x44) (async)
sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr=0x64010102, 0x100, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0}, 0x4}, [@migrate={0x50, 0x11, [{@in=@local, @in=@empty, @in=@multicast2, @in6=@private1, 0x3c, 0x4, 0x0, 0x2, 0x2, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

928.202383ms ago: executing program 2 (id=1136):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1bc}}, 0x4014)

861.072864ms ago: executing program 4 (id=1137):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
listen(r0, 0x5)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000300)={0x4c, 0x14, 0x101, 0x70bd25, 0x25dfdbfd, {0x1, 0x9, 0x8, 0x10, {0x4e24, 0x4e22, [0x3, 0x9, 0xf, 0xc3], [0x6, 0x0, 0x40000000, 0x7], 0x0, [0x1, 0x7ffffffb]}, 0x80, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x80)
syz_emit_ethernet(0x76, &(0x7f0000000180)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, '\t\x00', 0x0, 0x11, 0x0, @local, @empty, [@dstopts={0x87, 0x0, '\x00', [@pad1, @padn={0x1, 0x2, [0x0, 0x0]}]}]}}}}}}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x168, 0x9, 0x0, 0xb, 0x238, 0x250, 0x250, 0x238, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'veth0_to_bridge\x00', 'nicvf0\x00'}, 0x6000000, 0xa8, 0xf0, 0x0, {0x0, 0x28e}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'team0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)={<r4=>0xffffffffffffffff})
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000680)={0xd0, 0x2, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_PROTOINFO={0x48, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x0, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x0, 0x2, 0x1}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x0, 0x3, 0x2}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x0, 0x4, {0x0, 0xa5}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x0, 0x5, {0x9b, 0x3}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x0, 0x5, {0x2}}, @CTA_PROTOINFO_TCP_STATE={0x0, 0x1, 0x8}, @CTA_PROTOINFO_TCP_STATE={0x0, 0x1, 0x7}]}}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}, @CTA_NAT_SRC={0x58, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x0, 0x2, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010102}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40000c0}, 0x44010)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01f71800f7000000000024000000240000000200000000000000000000040000000300000000000000000000000000000000000000b77f376acb20"], 0xffffffffffffffff, 0x3e, 0x0, 0xa}, 0x28)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0xfc00)
r5 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
setsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18)
connect$inet6(r5, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000001840), 0x3b, 0x0)
socket$kcm(0x10, 0x2, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080006"], 0x68}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="b40000001500010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0800040000e40000140001000000000000000000cc0c3ae27f00000114000100fe8000000000000000000000000000aa2c0002"], 0xb4}}, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)

860.821171ms ago: executing program 2 (id=1138):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) (async)
shutdown(r1, 0x1) (async)
recvmmsg(r1, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)) (async)
r2 = socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket(0x2, 0x400000000002, 0x0)
setsockopt(r5, 0x0, 0x20, &(0x7f00000012c0)="15020000", 0x4) (async, rerun: 32)
r6 = socket$inet(0x10, 0x3, 0x0) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', <r7=>0x0}) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) (async)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@gettfilter={0x64, 0x2e, 0xa10, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xd, 0xd}, {0xfff3, 0xfff3}, {0xa, 0x10}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x8001}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x200}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0xfff}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048814}, 0x0) (async)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r12=>0x0})
accept4(r4, 0x0, &(0x7f0000000080), 0x400) (async)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000400016000000003900000008000300586545fad780ac55b6cc4bc70519ce8f3e7fc359490cd505d3aec68742e9a6a3b22c410768f2b16700d0baa68a46946f323abe7007281881e8d5f10dfdb9ac0d05e43e35f3939f80e72ee05cc7b5f9f92520d6ae7a50488310f444cda0eb4d00000000000000ac0fedaf96", @ANYRES32=r12, @ANYBLOB="24005a802000038014000500faffab3802005d0501ff0200080004000500070001000000"], 0x40}}, 0x0) (async)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0xff05, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x4a00, 0x0, 0x20002}}, 0x20}}, 0x0) (async)
socket$caif_stream(0x25, 0x1, 0x5) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'macvtap0\x00', <r13=>0x0}) (async)
r14 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r13, @ANYBLOB="1000b2060a0002"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800)

806.985058ms ago: executing program 0 (id=1139):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async)
r0 = epoll_create1(0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18)
connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18)
sendmmsg$inet(r1, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba606342672dabc", 0x9}], 0x1}}], 0x1, 0x20000010) (async)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/182, 0xb6}], 0x1}}], 0x1, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000100)={0x20000014})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f0000000340)={0x7}) (async)
pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r7=>0x0}) (async)
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}}, 0x18)
sendmsg$can_j1939(r8, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) (async)
setsockopt$SO_J1939_FILTER(r8, 0x6b, 0x1, &(0x7f0000000280)=[{0x1, 0x2, {0x1}, {0x1, 0xff, 0x2}, 0xfe}, {0x3, 0x0, {0x1, 0xf0, 0x2}, {0x3ca1d9a9d3f903f4, 0xff, 0x2}, 0xff, 0xff}, {0x0, 0xfffffffffffffffb, {0x0, 0xf0, 0x2}, {0x1}, 0x0, 0xff}], 0x60)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r7, {0x5, 0xb}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4014}, 0xc4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x20, &(0x7f0000000200)={&(0x7f0000000300)=""/85, 0x55, <r9=>0x0, &(0x7f00000003c0)=""/106, 0x6a}}, 0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0xd1, &(0x7f00000000c0)=""/209, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9}, 0x94) (async)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3}, 0x50)
bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r10, r11}, 0xc)

791.339664ms ago: executing program 3 (id=1140):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
unshare(0x24040400)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0xfffffffffffffd20}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611034000000000063012100000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52)

576.297244ms ago: executing program 4 (id=1141):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0)
r1 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4)
ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000540)={<r2=>0x0, 0x9f4, 0x0, [0x6, 0xfffffffffffffffe, 0xd3c, 0xff, 0x9], [0x8, 0x80000000, 0x8001, 0x5, 0x3, 0x80000000, 0xf5a, 0x4, 0x8, 0x400, 0x9, 0x400, 0x9, 0x4, 0xab, 0x9, 0xa4d, 0x9, 0x7, 0xb9a, 0x6, 0x8, 0x5, 0xfffffffffffffff9, 0xb, 0x8000, 0x100, 0x9, 0x8, 0x2e, 0x524c, 0x101, 0x8, 0x9, 0x4, 0x4, 0x0, 0xfe26, 0x8000, 0x4, 0x81, 0x10001, 0x4, 0x1, 0x0, 0x7, 0x81, 0x4, 0x5, 0x1, 0x5, 0xfffffffffffffffa, 0x17a3, 0xfffffffffffffffb, 0xffffffffffffffff, 0x100000001, 0xfffffffffffffff0, 0x3c8b, 0x10, 0xd, 0x8, 0x7, 0x9, 0xfffffffffffffffd, 0x1, 0xe7e, 0xffe0000000000000, 0xa9d1, 0xfffffffffffffff9, 0x77, 0x0, 0x101, 0x6, 0x6, 0x1, 0x6, 0x76, 0xfffffffffffffffc, 0x4, 0x9, 0x6, 0x8, 0x0, 0x8, 0x9, 0x3, 0xffffffffffffffff, 0x5, 0x0, 0x6, 0xfff, 0x200, 0x8000000000000001, 0x8000, 0xffffffffffffff81, 0xf00d, 0xcc, 0x8, 0x8, 0x400, 0xfffffffffffffeff, 0x4, 0x9, 0xd, 0x3, 0x9, 0x10001, 0x7, 0x6, 0x1, 0x9, 0x0, 0x3, 0xfffffffffffffff8, 0x2, 0x8000, 0xd, 0x0, 0xdd, 0xd, 0x8]})
ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000980)={r2, 0x1f36, 0x90bb7ad54bcb4b5d, [0x0, 0x8, 0xa, 0x3, 0x1], [0x8, 0x6, 0xffffffffffffffff, 0x8, 0x1, 0x9, 0x2, 0x0, 0x9, 0xde, 0x67, 0x480000000000, 0x6a6, 0x8, 0x2, 0xfffffffffffffffe, 0x8, 0x60, 0x1, 0x100000001, 0xf, 0x9, 0x1, 0x283, 0x6d7, 0x56b, 0x7, 0x200, 0x10, 0x1, 0xe2d, 0x5b2, 0x7415, 0x7, 0xf4, 0x4, 0xffff, 0x9, 0x1, 0x8, 0xffffffff00000001, 0x22fb26b8, 0x2, 0x80000001, 0x2, 0x1, 0x608, 0xaa82, 0x100000001, 0x142, 0x600000000, 0x8000000000000000, 0x80000000, 0x3, 0x3, 0xeaf4, 0xe621, 0x998, 0x7, 0x9, 0x0, 0x0, 0x2, 0x6, 0x6, 0x1000, 0x2, 0x1, 0x4, 0x9f6, 0x2, 0x1ff, 0x4, 0x9, 0x2fa, 0x40, 0x2, 0x9, 0x100000001, 0x81, 0x0, 0x7fffffffffffffff, 0xfffffffffffffffb, 0x3, 0x7, 0x1ff, 0x7, 0x1, 0x10, 0x7, 0x8, 0x7f, 0x46, 0x8, 0x9, 0x9, 0x9, 0xffff, 0xfffffffffffffff9, 0x100000000, 0x6bab, 0x4, 0x9, 0x7, 0x3, 0x40000000000, 0x7f, 0x7c, 0x400, 0x8, 0x10000, 0x80000001, 0x6, 0x8, 0x8, 0xffffffffffffffff, 0xfffffffffffffff9, 0x0, 0x1c000, 0x4, 0x80]})
sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f00000003c0)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x4, 0x2}}, 0x80, 0x0}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0x0, 0x0, 0xfd, 0x4, 0x0, @rand_addr, @private}}}})

575.913658ms ago: executing program 2 (id=1142):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0)
r2 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80000)
gettid()
ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000140))
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000c40), 0x12)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x87}], 0x1}, 0x8040)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0xfffffffffffffffd, 0x12)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0xffffffffffffff59, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0xb2, @empty, 0x400}]}, &(0x7f0000000080)=0x10)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x84, 0x0, 0x0, 0x0, 0x4c}, 0x94)
r7 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00'})

574.100187ms ago: executing program 3 (id=1143):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000027c0)=""/4096, 0x1000}], 0x2) (async)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@can_newroute={0x1c, 0x18, 0x821, 0x0, 0x0, {}, [@CGW_LIM_HOPS={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x800)

424.294827ms ago: executing program 1 (id=1144):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {0x0}], 0x2}}], 0x1, 0x6404c880)
socket(0x10, 0x803, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0xffffffffffffffff, 0x1}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r3=>0x0})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)=@newae={0x50, 0x1e, 0x121, 0x70bd29, 0x25dfdbfc, {{@in=@empty, 0x4d4, 0x2, 0xe8}, @in6=@empty, 0x7fff, 0x3502}, [@replay_val={0x10, 0xa, {0x70bd2c, 0x70bd2a}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', <r6=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = gettid()
r8 = socket(0x10, 0x803, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r6, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r7}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0)
r9 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000140)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x7ff, 0x913d, 0x0, 0x6, 0xf42, 0x7, 0x8}, {0x0, 0x0, 0x0, 0xfffefffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d4, 0x33}, 0x0, @in6=@empty, 0xfffffffd, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1}}, 0xe8)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
setsockopt$inet6_IPV6_PKTINFO(r9, 0x29, 0x32, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, r3}, 0x14)

0s ago: executing program 4 (id=1145):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000008200000095000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001900000226bd7000fcdb", @ANYBLOB], 0x58}}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1c0008000100000000003d00008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b40000009078001c0e030005020000e803414243440002d58838068b91000000"], 0x4e)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048810}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003480)=@newtfilter={0x54, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r7, {0xa, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7, 0x2, 0x9}, {0x6}}}]}]}]}}]}, 0x54}}, 0x20040054)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.212' (ED25519) to the list of known hosts.
[   83.940936][ T5851] cgroup: Unknown subsys name 'net'
[   84.055710][ T5851] cgroup: Unknown subsys name 'cpuset'
[   84.064524][ T5851] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   85.737539][ T5851] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   90.293295][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   90.303594][ T5875] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   90.312861][ T5878] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   90.320060][ T5878] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   90.327922][ T5878] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   90.335753][ T5878] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   90.344148][ T5878] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   90.354316][ T5878] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   90.363072][ T5878] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   90.371475][ T5878] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   90.379670][ T5878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   90.412674][ T5878] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   90.415503][ T5880] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   90.437075][ T5882] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   90.444848][ T5878] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   90.446012][ T5882] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   90.453606][ T5883] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   90.459108][ T5884] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   90.474092][ T5884] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   90.482441][ T5882] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   90.490852][ T5882] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   90.499056][ T5882] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   90.508974][ T5884] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   90.509795][ T5883] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   90.525269][ T5883] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   91.195772][ T5862] chnl_net:caif_netlink_parms(): no params data found
[   91.352246][ T5869] chnl_net:caif_netlink_parms(): no params data found
[   91.379239][ T5868] chnl_net:caif_netlink_parms(): no params data found
[   91.470602][ T5865] chnl_net:caif_netlink_parms(): no params data found
[   91.501752][ T5867] chnl_net:caif_netlink_parms(): no params data found
[   91.657943][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.665483][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.673581][ T5862] bridge_slave_0: entered allmulticast mode
[   91.680778][ T5862] bridge_slave_0: entered promiscuous mode
[   91.718413][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.726043][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.733321][ T5862] bridge_slave_1: entered allmulticast mode
[   91.740519][ T5862] bridge_slave_1: entered promiscuous mode
[   91.844077][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.851265][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.859227][ T5868] bridge_slave_0: entered allmulticast mode
[   91.867866][ T5868] bridge_slave_0: entered promiscuous mode
[   91.916699][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.924137][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.932045][ T5869] bridge_slave_0: entered allmulticast mode
[   91.940305][ T5869] bridge_slave_0: entered promiscuous mode
[   91.948413][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.956148][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.963801][ T5869] bridge_slave_1: entered allmulticast mode
[   91.971003][ T5869] bridge_slave_1: entered promiscuous mode
[   91.994895][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.002261][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.009413][ T5868] bridge_slave_1: entered allmulticast mode
[   92.016849][ T5868] bridge_slave_1: entered promiscuous mode
[   92.025524][  T960] cfg80211: failed to load regulatory.db
[   92.056106][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.064022][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.071247][ T5865] bridge_slave_0: entered allmulticast mode
[   92.078926][ T5865] bridge_slave_0: entered promiscuous mode
[   92.089758][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.103307][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.150406][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.158356][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.166899][ T5867] bridge_slave_0: entered allmulticast mode
[   92.176331][ T5867] bridge_slave_0: entered promiscuous mode
[   92.184030][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.191182][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.198668][ T5865] bridge_slave_1: entered allmulticast mode
[   92.205857][ T5865] bridge_slave_1: entered promiscuous mode
[   92.244933][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.260037][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.274817][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.284797][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.292041][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.300871][ T5867] bridge_slave_1: entered allmulticast mode
[   92.309708][ T5867] bridge_slave_1: entered promiscuous mode
[   92.374178][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.401074][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.415716][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.426464][ T5862] team0: Port device team_slave_0 added
[   92.436086][ T5862] team0: Port device team_slave_1 added
[   92.444254][ T5869] team0: Port device team_slave_0 added
[   92.496772][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.502514][ T5882] Bluetooth: hci0: command tx timeout
[   92.506027][ T5883] Bluetooth: hci1: command tx timeout
[   92.533978][ T5869] team0: Port device team_slave_1 added
[   92.566276][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.575542][ T5882] Bluetooth: hci3: command tx timeout
[   92.575761][ T5882] Bluetooth: hci2: command tx timeout
[   92.579409][ T5883] Bluetooth: hci4: command tx timeout
[   92.627061][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.634100][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.660429][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.674450][ T5868] team0: Port device team_slave_0 added
[   92.681208][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.688234][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.714193][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.739528][ T5865] team0: Port device team_slave_0 added
[   92.748460][ T5865] team0: Port device team_slave_1 added
[   92.769512][ T5868] team0: Port device team_slave_1 added
[   92.800471][ T5867] team0: Port device team_slave_0 added
[   92.821960][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.829149][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.855143][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.868994][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.876051][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.902520][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.929068][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.936102][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.962044][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.974948][ T5867] team0: Port device team_slave_1 added
[   93.020061][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.027191][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.053269][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.087980][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.095111][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.121288][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.134693][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.141675][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.168113][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.201307][ T5862] hsr_slave_0: entered promiscuous mode
[   93.208721][ T5862] hsr_slave_1: entered promiscuous mode
[   93.277624][ T5869] hsr_slave_0: entered promiscuous mode
[   93.284441][ T5869] hsr_slave_1: entered promiscuous mode
[   93.290757][ T5869] debugfs: 'hsr0' already exists in 'hsr'
[   93.296674][ T5869] Cannot create hsr debugfs directory
[   93.303566][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.310547][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.337049][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.404182][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.411161][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.438000][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.482419][ T5868] hsr_slave_0: entered promiscuous mode
[   93.488705][ T5868] hsr_slave_1: entered promiscuous mode
[   93.496006][ T5868] debugfs: 'hsr0' already exists in 'hsr'
[   93.501762][ T5868] Cannot create hsr debugfs directory
[   93.540164][ T5865] hsr_slave_0: entered promiscuous mode
[   93.546634][ T5865] hsr_slave_1: entered promiscuous mode
[   93.553098][ T5865] debugfs: 'hsr0' already exists in 'hsr'
[   93.558838][ T5865] Cannot create hsr debugfs directory
[   93.764463][ T5867] hsr_slave_0: entered promiscuous mode
[   93.771108][ T5867] hsr_slave_1: entered promiscuous mode
[   93.778697][ T5867] debugfs: 'hsr0' already exists in 'hsr'
[   93.784614][ T5867] Cannot create hsr debugfs directory
[   94.246907][ T5869] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   94.260806][ T5869] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   94.281238][ T5869] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   94.300265][ T5869] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   94.350126][ T5862] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   94.378225][ T5862] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   94.388836][ T5862] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   94.401707][ T5862] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   94.496917][ T5865] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   94.517450][ T5865] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   94.539236][ T5865] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   94.551483][ T5865] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   94.579989][   T51] Bluetooth: hci0: command tx timeout
[   94.585636][ T5883] Bluetooth: hci1: command tx timeout
[   94.653474][   T51] Bluetooth: hci2: command tx timeout
[   94.659077][   T51] Bluetooth: hci3: command tx timeout
[   94.665274][ T5883] Bluetooth: hci4: command tx timeout
[   94.690737][ T5867] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   94.714648][ T5867] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   94.729672][ T5867] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   94.741136][ T5867] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   94.839736][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.911006][ T5869] 8021q: adding VLAN 0 to HW filter on device team0
[   94.929677][ T5868] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   94.947861][ T3573] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.955161][ T3573] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.976020][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.984978][ T5868] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   95.000088][ T5868] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   95.011855][ T5868] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   95.043358][ T3573] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.050455][ T3573] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.097298][ T5862] 8021q: adding VLAN 0 to HW filter on device team0
[   95.169712][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.176919][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.200013][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.237179][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.244742][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.309266][ T5865] 8021q: adding VLAN 0 to HW filter on device team0
[   95.359135][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.366376][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.380691][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.387967][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.487097][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.530541][ T5867] 8021q: adding VLAN 0 to HW filter on device team0
[   95.585692][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.592974][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.659777][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.667090][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.790633][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.835192][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.941754][ T5868] 8021q: adding VLAN 0 to HW filter on device team0
[   95.988259][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.995500][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.047543][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.054741][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.161208][ T5869] veth0_vlan: entered promiscuous mode
[   96.242611][ T5869] veth1_vlan: entered promiscuous mode
[   96.301476][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.341775][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.430032][ T5869] veth0_macvtap: entered promiscuous mode
[   96.474612][ T5869] veth1_macvtap: entered promiscuous mode
[   96.487956][ T5862] veth0_vlan: entered promiscuous mode
[   96.509298][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.551375][ T5862] veth1_vlan: entered promiscuous mode
[   96.620213][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.658661][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.669097][   T51] Bluetooth: hci1: command tx timeout
[   96.672338][ T5883] Bluetooth: hci0: command tx timeout
[   96.721054][ T5862] veth0_macvtap: entered promiscuous mode
[   96.739429][ T5883] Bluetooth: hci3: command tx timeout
[   96.739451][   T51] Bluetooth: hci4: command tx timeout
[   96.746242][ T5883] Bluetooth: hci2: command tx timeout
[   96.775442][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.796518][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.809155][ T5865] veth0_vlan: entered promiscuous mode
[   96.821707][ T5862] veth1_macvtap: entered promiscuous mode
[   96.831944][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.842404][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.907264][ T5865] veth1_vlan: entered promiscuous mode
[   96.943851][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.980962][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.001886][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.063336][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.075239][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.107686][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.121449][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.155925][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.167158][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.186643][ T5865] veth0_macvtap: entered promiscuous mode
[   97.279394][ T5865] veth1_macvtap: entered promiscuous mode
[   97.327309][ T5868] veth0_vlan: entered promiscuous mode
[   97.364489][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.377204][ T3510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.385873][ T3510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.408117][ T5868] veth1_vlan: entered promiscuous mode
[   97.416536][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.429279][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.440635][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.506913][ T5869] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   97.529365][   T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.538845][   T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.557770][   T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.562551][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.576824][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.594419][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.674849][ T5867] veth0_vlan: entered promiscuous mode
[   97.718311][ T5982] Zero length message leads to an empty skb
[   97.739950][ T5867] veth1_vlan: entered promiscuous mode
[   97.759937][ T5868] veth0_macvtap: entered promiscuous mode
[   97.831446][ T5983] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3'.
[   97.850238][ T5868] veth1_macvtap: entered promiscuous mode
[   97.935521][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.949401][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.035228][ T5988] Bluetooth: MGMT ver 1.23
[   98.052859][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.095631][ T5867] veth0_macvtap: entered promiscuous mode
[   98.109710][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.132114][ T5867] veth1_macvtap: entered promiscuous mode
[   98.212704][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.265710][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.292764][   T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.309742][   T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.377830][   T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.678014][   T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.734365][ T5883] Bluetooth: hci0: command tx timeout
[   98.740004][ T5883] Bluetooth: hci1: command tx timeout
[   98.814926][   T51] Bluetooth: hci4: command tx timeout
[   98.820424][ T5883] Bluetooth: hci3: command tx timeout
[   98.823984][ T5882] Bluetooth: hci2: command tx timeout
[   99.190056][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.560959][ T6013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'.
[   99.583522][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.733435][ T3573] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.839195][ T3573] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.868697][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.911341][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.922314][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.070499][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.500647][ T3573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.521931][ T3573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.796256][ T3468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.849366][ T3468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.025957][ T3468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.067393][ T3468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.291569][ T5946] IPVS: starting estimator thread 0...
[  101.298356][ T6043] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  101.424601][ T6049] IPVS: using max 34 ests per chain, 81600 per kthread
[  101.794733][ T6063] netlink: 'syz.1.14': attribute type 1 has an invalid length.
[  102.533677][ T6082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16'.
[  102.721328][ T6082] bond_slave_0: entered promiscuous mode
[  102.727320][ T6082] bond_slave_1: entered promiscuous mode
[  102.760913][ T6082] macvlan2: entered promiscuous mode
[  102.775625][ T6082] bond0: entered promiscuous mode
[  102.827444][ T6082] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  103.362760][ T6108] Driver unsupported XDP return value 0 on prog  (id 10) dev N/A, expect packet loss!
[  103.430630][ T6111] team0: Device vxcan3 is of different type
[  103.548838][  T683] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.609205][  T683] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.718703][ T6119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23'.
[  103.818754][ T6120] netlink: 'syz.1.23': attribute type 11 has an invalid length.
[  103.839435][ T6119] netlink: 'syz.1.23': attribute type 11 has an invalid length.
[  103.857836][ T6120] netlink: 140 bytes leftover after parsing attributes in process `syz.1.23'.
[  103.891025][ T6119] netlink: 140 bytes leftover after parsing attributes in process `syz.1.23'.
[  103.895992][ T6127] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  103.924950][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25'.
[  104.575506][ T6150] netlink: 96 bytes leftover after parsing attributes in process `syz.1.30'.
[  104.730087][ T6160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.31'.
[  104.752602][ T6136] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.406081][ T6170] netlink: 'syz.0.32': attribute type 13 has an invalid length.
[  105.542801][ T6170] netlink: 'syz.0.32': attribute type 17 has an invalid length.
[  105.648821][ T6172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.765382][ T6174] netlink: 'syz.4.33': attribute type 21 has an invalid length.
[  105.974902][ T6136] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.061480][ T6178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.298824][ T6174] netlink: 132 bytes leftover after parsing attributes in process `syz.4.33'.
[  106.576732][ T6136] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.923896][ T6186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.35'.
[  106.959636][ T6185] netlink: 34 bytes leftover after parsing attributes in process `syz.3.34'.
[  107.166113][ T6136] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.414493][   T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.459130][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.549427][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.596570][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.744295][    C0] vcan0: j1939_tp_rxtimer: 0xffff888057872c00: rx timeout, send abort
[  107.753678][    C0] vcan0: j1939_tp_rxtimer: 0xffff888057872000: rx timeout, send abort
[  107.762308][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888057872c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  107.777552][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888057872000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  107.823252][ T6218] syz.0.39 uses obsolete (PF_INET,SOCK_PACKET)
[  108.348770][ T6237] netlink: 'syz.3.42': attribute type 39 has an invalid length.
[  109.092839][ T6270] netlink: 'syz.2.50': attribute type 21 has an invalid length.
[  109.871048][ T6299] netlink: 24 bytes leftover after parsing attributes in process `syz.1.51'.
[  109.904002][ T6281] syzkaller0: entered promiscuous mode
[  109.917980][ T6281] syzkaller0: entered allmulticast mode
[  110.012638][ T6299] netlink: 48 bytes leftover after parsing attributes in process `syz.1.51'.
[  111.878715][ T6315] tun0: tun_chr_ioctl cmd 1074812118
[  112.171266][ T6347] bridge0: port 3(batadv1) entered blocking state
[  112.186246][ T6347] bridge0: port 3(batadv1) entered disabled state
[  112.209247][ T6347] batadv1: entered allmulticast mode
[  112.231549][ T6347] batadv1: entered promiscuous mode
[  112.261354][ T6349] netlink: 'syz.2.57': attribute type 3 has an invalid length.
[  112.283961][ T6349] syz_tun: entered allmulticast mode
[  112.534461][ T6363] netlink: 'syz.3.61': attribute type 30 has an invalid length.
[  112.676174][   T13] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  112.686227][   T13] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  112.713411][ T6371] netlink: 28 bytes leftover after parsing attributes in process `syz.0.63'.
[  112.749342][ T6374] netlink: 16 bytes leftover after parsing attributes in process `syz.4.64'.
[  112.759813][ T6374] netlink: 64 bytes leftover after parsing attributes in process `syz.4.64'.
[  112.771039][ T6374] tipc: Invalid UDP bearer configuration
[  112.771108][ T6374] tipc: Enabling of bearer <udp:sy{±> rejected, failed to enable media
[  112.801675][ T6375] netlink: 16 bytes leftover after parsing attributes in process `syz.4.64'.
[  112.810865][ T6375] netlink: 64 bytes leftover after parsing attributes in process `syz.4.64'.
[  112.819821][ T6375] tipc: Invalid UDP bearer configuration
[  112.819874][ T6375] tipc: Enabling of bearer <udp:sy{±> rejected, failed to enable media
[  113.241581][ T6387] openvswitch: netlink: IP tunnel dst address not specified
[  113.260295][ T6386] warning: `syz.3.68' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  113.282805][ T6386] netlink: 'syz.3.68': attribute type 10 has an invalid length.
[  113.365032][ T6386] 8021q: adding VLAN 0 to HW filter on device batadv0
[  113.381448][ T6386] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  113.405919][ T6394] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.448175][ T6393] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  113.460483][ T6390] netlink: 28 bytes leftover after parsing attributes in process `syz.0.69'.
[  113.497421][ T6390] netlink: 28 bytes leftover after parsing attributes in process `syz.0.69'.
[  113.544997][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880317e3000: rx timeout, send abort
[  113.553650][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880317e3000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  113.591616][ T6390] netlink: 28 bytes leftover after parsing attributes in process `syz.0.69'.
[  113.650284][ T6348] syz_tun: left allmulticast mode
[  113.913618][ T6413] tipc: Started in network mode
[  113.928789][ T6413] tipc: Node identity 7e2949be5c1d, cluster identity 4711
[  113.961799][ T6413] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.009294][ T6413] tipc: Resetting bearer <eth:syzkaller0>
[  114.036832][ T6412] tipc: Disabling bearer <eth:syzkaller0>
[  114.126451][ T6416] "syz.4.77" (6416) uses obsolete ecb(arc4) skcipher
[  114.381973][ T6429] team1: entered promiscuous mode
[  114.391516][ T6429] team1: entered allmulticast mode
[  114.406543][ T6429] 8021q: adding VLAN 0 to HW filter on device team1
[  114.446097][ T6434] netlink: 'syz.0.80': attribute type 16 has an invalid length.
[  114.454739][ T6434] netlink: 'syz.0.80': attribute type 17 has an invalid length.
[  114.491974][ T6434] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  116.001085][ T6494] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[  116.108642][ T6497] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  116.130659][ T6497] __nla_validate_parse: 3 callbacks suppressed
[  116.130677][ T6497] netlink: 16 bytes leftover after parsing attributes in process `syz.1.98'.
[  116.207013][ T6498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  116.218001][ T6502] netlink: 44 bytes leftover after parsing attributes in process `syz.0.99'.
[  116.340501][ T6507] netlink: 24 bytes leftover after parsing attributes in process `syz.2.101'.
[  116.643393][ T6516] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.104'.
[  116.661336][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.106'.
[  116.706919][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.106'.
[  116.747525][ T6521] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  116.772765][ T6522] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  116.781561][ T6522] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.795884][ T6521] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.888938][ T6530] netlink: 'syz.0.107': attribute type 4 has an invalid length.
[  117.030354][ T6530] netlink: 14 bytes leftover after parsing attributes in process `syz.0.107'.
[  117.040044][ T6533] netlink: 'syz.3.108': attribute type 10 has an invalid length.
[  117.316084][ T6548] netlink: 256 bytes leftover after parsing attributes in process `syz.2.111'.
[  117.372431][   T51] Bluetooth: hci0: command 0x0c1a tx timeout
[  117.379206][ T5882] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  117.562959][ T6530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  117.600134][ T6554] netlink: 48 bytes leftover after parsing attributes in process `syz.1.112'.
[  117.643109][ T6530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  117.681729][ T6530] bond0 (unregistering): Released all slaves
[  118.278899][ T6568] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.116'.
[  118.310879][ T6567] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  118.581689][ T6581] netlink: 'syz.4.121': attribute type 2 has an invalid length.
[  118.893959][ T6600] netlink: 'syz.2.125': attribute type 1 has an invalid length.
[  119.006954][ T6610] netlink: 'syz.4.127': attribute type 1 has an invalid length.
[  119.278458][ T6602] bond1: entered promiscuous mode
[  119.311489][ T6602] bond1: entered allmulticast mode
[  119.344974][ T6602] 8021q: adding VLAN 0 to HW filter on device bond1
[  119.450493][ T6609] bridge1: entered promiscuous mode
[  119.456837][ T6609] bridge1: entered allmulticast mode
[  119.465441][ T6609] bond1: (slave bridge1): Enslaving as a backup interface with an up link
[  119.475723][   T36] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  119.584212][   T49] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  119.661574][ T6610] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.670863][ T6610] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.771060][ T5939] hid-generic 0005:16C0:0009.0001: unknown main item tag 0x0
[  119.827600][ T5939] hid-generic 0005:16C0:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[  119.998017][ T6610] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  120.064767][ T6610] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  120.191181][ T6610] bond0: left promiscuous mode
[  120.197073][ T6610] bond_slave_0: left promiscuous mode
[  120.206635][ T6610] bond_slave_1: left promiscuous mode
[  120.290150][  T683] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.326718][  T683] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.355027][  T683] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  120.410569][ T6651] _ÐZ`Ô€@ÿÿ: entered promiscuous mode
[  120.435657][  T683] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  121.180702][ T6688] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  121.312723][ T6688] syzkaller0: entered promiscuous mode
[  121.332391][ T6688] syzkaller0: entered allmulticast mode
[  121.416064][ T6688] tipc: Resetting bearer <eth:syzkaller0>
[  121.717749][ T6683] tipc: Resetting bearer <eth:syzkaller0>
[  121.790164][ T6683] tipc: Disabling bearer <eth:syzkaller0>
[  121.884559][ T6704] tipc: Started in network mode
[  121.891006][ T6704] tipc: Node identity 7a6194a304e9, cluster identity 4711
[  121.916266][ T6704] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  121.945415][ T6705] syzkaller0: entered promiscuous mode
[  121.950944][ T6705] syzkaller0: entered allmulticast mode
[  121.978198][ T6704] tipc: Resetting bearer <eth:syzkaller0>
[  121.997186][ T6703] tipc: Resetting bearer <eth:syzkaller0>
[  122.019195][ T6709] __nla_validate_parse: 3 callbacks suppressed
[  122.019213][ T6709] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.152'.
[  122.035892][ T6703] tipc: Disabling bearer <eth:syzkaller0>
[  122.043669][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.152'.
[  122.058542][ T6709] netlink: 24 bytes leftover after parsing attributes in process `syz.1.152'.
[  122.234543][ T6711] syzkaller1: entered promiscuous mode
[  122.240072][ T6711] syzkaller1: entered allmulticast mode
[  122.248896][ T6714] netlink: 20 bytes leftover after parsing attributes in process `syz.0.153'.
[  122.630689][ T6730] netlink: 'syz.2.155': attribute type 1 has an invalid length.
[  123.018650][ T6745] netlink: 40 bytes leftover after parsing attributes in process `syz.4.160'.
[  123.032135][ T6743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.159'.
[  123.130471][ T6749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.160'.
[  123.220521][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.4.160'.
[  123.453965][ T5939] IPVS: starting estimator thread 0...
[  123.462973][ T6765] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20004
[  123.563598][ T6771] IPVS: using max 27 ests per chain, 64800 per kthread
[  123.733295][ T6778] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  123.969969][ T6778] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.364395][ T6778] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.605424][ T5939] IPVS: starting estimator thread 0...
[  124.732493][ T6795] IPVS: using max 28 ests per chain, 67200 per kthread
[  124.811745][ T6778] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.897697][ T6778] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.199183][  T683] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.489865][  T683] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.539711][  T683] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.540776][ T6820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.177'.
[  125.594086][  T683] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.745254][ T6822] netlink: 'syz.0.177': attribute type 2 has an invalid length.
[  125.753598][ T6822] netlink: 'syz.0.177': attribute type 8 has an invalid length.
[  125.761260][ T6822] netlink: 132 bytes leftover after parsing attributes in process `syz.0.177'.
[  126.106702][ T6826] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.114596][ T6826] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.706994][ T6826] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  126.734252][ T6826] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  126.965161][ T6840] tipc: Started in network mode
[  126.970091][ T6840] tipc: Node identity ba5e0903454f, cluster identity 4711
[  126.994204][ T6840] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.001285][ T6841] netlink: 'syz.2.182': attribute type 3 has an invalid length.
[  127.080662][ T6841] __nla_validate_parse: 1 callbacks suppressed
[  127.080682][ T6841] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.182'.
[  127.105129][ T6868] netlink: 'syz.3.185': attribute type 11 has an invalid length.
[  127.119239][ T6868] netlink: 36 bytes leftover after parsing attributes in process `syz.3.185'.
[  127.305231][ T6843] syzkaller0: entered promiscuous mode
[  127.312019][ T6843] syzkaller0: entered allmulticast mode
[  127.328178][ T6876] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µ
â侦¸ÑKc'A¥»–
[  127.330370][ T3468] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.373458][   T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.398546][   T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.426506][ T6843] tipc: Resetting bearer <eth:syzkaller0>
[  127.490170][ T6843] tipc: Disabling bearer <eth:syzkaller0>
[  127.548921][   T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  127.685266][ T6880] Bluetooth: MGMT ver 1.23
[  128.249728][ T6903] bridge1: entered promiscuous mode
[  128.274930][ T6903] bridge1: entered allmulticast mode
[  129.544799][ T6940] netlink: 104 bytes leftover after parsing attributes in process `syz.0.205'.
[  129.714265][ T6947] syzkaller0: entered promiscuous mode
[  129.719799][ T6947] syzkaller0: entered allmulticast mode
[  129.780849][  T683] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  129.803446][ T6954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.208'.
[  129.902724][  T683] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  129.933712][  T683] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  130.050006][  T683] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  130.178230][  T849] IPVS: starting estimator thread 0...
[  130.198860][ T6970] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  130.282273][ T6973] IPVS: using max 32 ests per chain, 76800 per kthread
[  130.554421][ T6984] netlink: 20 bytes leftover after parsing attributes in process `syz.1.214'.
[  131.398950][ T7020] netlink: 28 bytes leftover after parsing attributes in process `syz.0.223'.
[  132.268192][ T7035] syz_tun: entered promiscuous mode
[  132.309364][ T7037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.228'.
[  132.343016][ T7035] batadv_slave_0: entered promiscuous mode
[  132.360692][ T7035] hsr1: entered allmulticast mode
[  132.366916][ T7035] syz_tun: entered allmulticast mode
[  132.372451][ T7035] batadv_slave_0: entered allmulticast mode
[  132.976587][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  132.988054][ T7088] netlink: 'syz.2.237': attribute type 1 has an invalid length.
[  132.988880][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  133.007321][ T7085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.236'.
[  133.026896][ T7085] ipvlan2: entered promiscuous mode
[  133.121964][ T7088] 8021q: adding VLAN 0 to HW filter on device bond2
[  133.181741][ T7088] netlink: 28 bytes leftover after parsing attributes in process `syz.2.237'.
[  133.254508][ T7097] netlink: 'syz.1.239': attribute type 7 has an invalid length.
[  133.275767][ T7095] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.238'.
[  133.297872][ T7090] 8021q: adding VLAN 0 to HW filter on device bond2
[  133.303202][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.239'.
[  133.307413][ T7090] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address
[  133.327373][ T7090] bond2: (slave vxcan5): Error -95 calling set_mac_address
[  133.387185][ T7088] 8021q: adding VLAN 0 to HW filter on device bond2
[  133.696926][ T7109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.242'.
[  134.069141][ T7125] netlink: 'syz.1.246': attribute type 1 has an invalid length.
[  134.328665][ T7129] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) !
[  134.493361][   T51] Bluetooth: hci4: command 0x0405 tx timeout
[  134.631313][ T7148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.249'.
[  134.848398][ T7157] block nbd0: not configured, cannot reconfigure
[  134.860739][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.254'.
[  134.973115][ T7161] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  135.178077][ T7167] netlink: 20 bytes leftover after parsing attributes in process `syz.2.258'.
[  135.580698][ T7186] ieee802154 phy0 wpan0: encryption failed: -22
[  135.902448][ T7199] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.264'.
[  135.913953][ T7197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  135.945074][ T7197] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  136.114868][ T7206] netlink: 'syz.1.267': attribute type 21 has an invalid length.
[  157.218581][ T7242] netlink: 'syz.2.272': attribute type 1 has an invalid length.
[  157.234486][ T7241] syz_tun: entered allmulticast mode
[  157.246206][ T7243] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  157.317484][ T7242] 8021q: adding VLAN 0 to HW filter on device bond3
[  157.344358][ T7241] dvmrp8: entered allmulticast mode
[  157.568455][ T7248] 8021q: adding VLAN 0 to HW filter on device bond3
[  157.601245][ T7258] netlink: 'syz.3.273': attribute type 23 has an invalid length.
[  157.609559][ T7248] bond3: (slave vcan1): The slave device specified does not support setting the MAC address
[  157.616482][ T7248] bond3: (slave vcan1): Error -95 calling set_mac_address
[  157.723302][ T7242] gretap1: entered promiscuous mode
[  157.751019][ T7242] bond3: (slave gretap1): making interface the new active one
[  157.773481][ T7242] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  157.822922][ T7256] macvlan2: entered promiscuous mode
[  157.830089][ T7256] macvlan2: entered allmulticast mode
[  158.210111][ T7235] syz_tun: left allmulticast mode
[  158.228638][ T7265] __nla_validate_parse: 2 callbacks suppressed
[  158.228658][ T7265] netlink: 176 bytes leftover after parsing attributes in process `syz.4.280'.
[  158.250413][ T7235] dvmrp8: left allmulticast mode
[  158.670990][ T7281] netlink: 60 bytes leftover after parsing attributes in process `syz.1.285'.
[  158.683498][ T7276] netlink: 60 bytes leftover after parsing attributes in process `syz.1.285'.
[  158.710730][ T7281] netlink: 60 bytes leftover after parsing attributes in process `syz.1.285'.
[  158.840707][ T7288] netlink: 'syz.2.290': attribute type 29 has an invalid length.
[  158.876310][ T7288] netlink: 'syz.2.290': attribute type 29 has an invalid length.
[  159.219836][ T7302] syzkaller0: create flow: hash 1040955550 index 1
[  159.333314][   T49] syzkaller0: tun_net_xmit 76
[  159.345907][   T49] syzkaller0: tun_net_xmit 48
[  159.362337][  T849] syzkaller0: tun_net_xmit 76
[  159.538209][ T7298] syzkaller0: delete flow: hash 1040955550 index 1
[  159.613146][ T7317] netlink: 'syz.4.301': attribute type 39 has an invalid length.
[  161.446258][ T7333] netlink: 44 bytes leftover after parsing attributes in process `syz.1.308'.
[  161.617816][ T7345] wg2: entered allmulticast mode
[  161.683193][ T7345] wg2: entered promiscuous mode
[  161.722615][ T7351] netlink: 'syz.4.317': attribute type 2 has an invalid length.
[  161.762390][ T7351] netlink: 'syz.4.317': attribute type 1 has an invalid length.
[  161.770105][ T7351] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.317'.
[  161.822499][ T7351] nbd: couldn't find device at index 16
[  161.909927][ T7353] wg2: entered promiscuous mode
[  161.928082][ T7353] wg2: entered allmulticast mode
[  162.141807][ T7365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.324'.
[  162.510603][ T7382] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  162.539277][ T7382] tipc: Enabled bearer <udp:s>, priority 10
[  163.653482][ T5986] tipc: Node number set to 573852094
[  166.016769][ T7408] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  166.266631][ T7472] netlink: 'syz.4.353': attribute type 10 has an invalid length.
[  166.409620][ T7472] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  166.441232][ T7472] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  170.171089][ T7539] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  170.178689][ T7539] IPv6: NLM_F_CREATE should be set when creating new route
[  170.369213][ T7530] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  170.587677][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.382'.
[  173.136513][ T7431] bond0: (slave bond_slave_0): interface is now down
[  173.149220][ T7579] 8021q: adding VLAN 0 to HW filter on device bond0
[  173.164470][ T7431] bond0: (slave bond_slave_1): interface is now down
[  173.180214][ T7579] 8021q: adding VLAN 0 to HW filter on device team0
[  173.189570][ T7431] bond0: (slave batadv0): interface is now down
[  173.204945][ T7579] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  173.226335][   T49] bond0: (slave bond_slave_0): interface is now down
[  173.240771][   T49] bond0: (slave bond_slave_1): interface is now down
[  173.253547][   T49] bond0: (slave batadv0): interface is now down
[  173.283496][   T13] bond0: (slave bond_slave_0): interface is now down
[  173.305367][   T13] bond0: (slave bond_slave_1): interface is now down
[  173.331650][   T13] bond0: (slave batadv0): interface is now down
[  173.372418][ T7429] bond0: (slave bond_slave_0): interface is now down
[  173.384974][ T7429] bond0: (slave bond_slave_1): interface is now down
[  173.399950][ T7429] bond0: (slave batadv0): interface is now down
[  173.438021][   T13] bond0: (slave bond_slave_0): interface is now down
[  173.455251][   T13] bond0: (slave bond_slave_1): interface is now down
[  173.462001][   T13] bond0: (slave batadv0): interface is now down
[  173.502448][   T13] bond0: (slave bond_slave_0): interface is now down
[  173.529727][   T13] bond0: (slave bond_slave_1): interface is now down
[  173.557920][   T13] bond0: (slave batadv0): interface is now down
[  173.610337][   T13] bond0: now running without any active interface!
[  174.127710][ T7645] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.135584][ T7645] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.172859][ T7645] bridge0: entered allmulticast mode
[  174.214628][ T7648] macsec0: entered allmulticast mode
[  174.242353][ T7645] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.249617][ T7645] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.258039][ T7645] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.265268][ T7645] bridge0: port 1(bridge_slave_0) entered forwarding state
[  174.289426][ T7645] bridge0: entered promiscuous mode
[  178.264089][ T7721] IPv4: Oversized IP packet from 127.202.26.0
[  178.868316][ T7748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.457'.
[  179.097723][ T7760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.464'.
[  181.865179][ T7818] lo: entered promiscuous mode
[  181.875376][ T7817] lo: left promiscuous mode
[  182.690272][ T7845] netlink: 48 bytes leftover after parsing attributes in process `syz.3.497'.
[  184.637898][ T7877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.508'.
[  185.598979][ T7911] netlink: 28 bytes leftover after parsing attributes in process `syz.0.515'.
[  185.608647][ T7911] netlink: 'syz.0.515': attribute type 7 has an invalid length.
[  185.635755][ T7911] netlink: 'syz.0.515': attribute type 8 has an invalid length.
[  185.677330][ T7911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.515'.
[  185.693674][ T7914] netlink: 'syz.1.520': attribute type 30 has an invalid length.
[  185.709918][ T7919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.519'.
[  185.760232][ T7911] dummy0: entered promiscuous mode
[  185.793028][ T7911] dummy0: left promiscuous mode
[  185.947340][ T7926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.523'.
[  186.221806][ T7942] netlink: 'syz.2.530': attribute type 1 has an invalid length.
[  186.256903][ T7942] netlink: 172 bytes leftover after parsing attributes in process `syz.2.530'.
[  186.384739][ T7947] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.488541][ T7948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.532'.
[  186.528044][ T7948] netlink: 'syz.0.532': attribute type 1 has an invalid length.
[  186.544351][ T7948] netlink: 'syz.0.532': attribute type 2 has an invalid length.
[  186.599872][ T7947] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.824842][ T7947] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.984412][ T7947] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.164092][ T7975] netlink: 'syz.1.540': attribute type 4 has an invalid length.
[  187.357591][ T7982] netlink: 324 bytes leftover after parsing attributes in process `syz.3.542'.
[  187.380860][ T7982] netlink: 36 bytes leftover after parsing attributes in process `syz.3.542'.
[  187.398612][   T49] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  187.418189][ T7982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.542'.
[  187.567871][ T7431] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  187.622505][ T7431] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  187.722535][ T3573] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.158555][ T7998] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.367691][ T8010] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  188.457987][ T8013] netlink: 'syz.3.547': attribute type 1 has an invalid length.
[  188.596978][ T7998] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.861171][ T7998] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.038175][ T7998] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.131364][ T8008] vxcan1: entered promiscuous mode
[  189.136910][ T8008] vxcan1: entered allmulticast mode
[  189.190923][ T8040] bond0: option mode: unable to set because the bond device has slaves
[  189.501086][ T8056] netlink: 'syz.4.556': attribute type 1 has an invalid length.
[  189.557817][ T8047] syzkaller1: entered promiscuous mode
[  189.563963][ T8047] syzkaller1: entered allmulticast mode
[  189.572118][ T3573] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  189.618603][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  189.717189][ T3546] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  189.791982][ T3546] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.027471][ T8069] __nla_validate_parse: 4 callbacks suppressed
[  190.027492][ T8069] netlink: 28 bytes leftover after parsing attributes in process `syz.1.560'.
[  191.302948][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.570'.
[  191.765922][ T8132] netlink: 'syz.0.575': attribute type 2 has an invalid length.
[  191.775654][   T10] IPVS: starting estimator thread 0...
[  191.785852][ T8122] IPVS: ovf: UDP 224.0.0.2:20004 - no destination available
[  191.840756][ T8132] k›*·]‘: entered promiscuous mode
[  191.882354][ T8134] IPVS: using max 31 ests per chain, 74400 per kthread
[  192.325945][ T8136] bridge0: left promiscuous mode
[  192.331178][ T8136] bridge0: left allmulticast mode
[  192.366202][ T8136] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  192.441674][ T8146] veth0_to_team: entered promiscuous mode
[  192.460151][ T8146] veth0_to_team: entered allmulticast mode
[  192.579852][ T8154] ip6gre1: entered allmulticast mode
[  193.586306][ T8178] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  193.620140][ T8182] bridge0: port 3(syz_tun) entered blocking state
[  193.655076][ T8182] bridge0: port 3(syz_tun) entered disabled state
[  194.066863][ T8205] bridge1: entered allmulticast mode
[  194.090253][ T8208] bridge2: entered allmulticast mode
[  194.417829][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  194.425407][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  194.457430][  T849] IPVS: starting estimator thread 0...
[  194.460109][ T8231] netlink: 'syz.3.600': attribute type 83 has an invalid length.
[  194.471268][ T8221] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  194.489806][ T8223] xt_HMARK: spi-set and port-set can't be combined
[  194.582312][ T8233] IPVS: using max 33 ests per chain, 79200 per kthread
[  194.832640][ T8242] netlink: 'syz.0.604': attribute type 1 has an invalid length.
[  194.849055][ T8244] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  194.861007][ T8242] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  194.900307][ T8248] netlink: 'syz.4.605': attribute type 11 has an invalid length.
[  194.977395][ T8254] netlink: 'syz.3.607': attribute type 1 has an invalid length.
[  195.123472][ T8260] netlink: 36 bytes leftover after parsing attributes in process `syz.2.609'.
[  195.257108][ T8266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.611'.
[  195.536835][ T8276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.614'.
[  195.833222][ T8276] netlink: 24 bytes leftover after parsing attributes in process `syz.2.614'.
[  196.163152][ T8295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.620'.
[  196.277055][ T8300] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  196.415820][ T8305] block nbd0: not configured, cannot reconfigure
[  196.462494][ T8300] syzkaller1: entered promiscuous mode
[  196.468024][ T8300] syzkaller1: entered allmulticast mode
[  196.506493][ T8315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.625'.
[  196.521200][ T8318] sctp: [Deprecated]: syz.4.621 (pid 8318) Use of struct sctp_assoc_value in delayed_ack socket option.
[  196.521200][ T8318] Use struct sctp_sack_info instead
[  196.873136][ T8329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.628'.
[  196.898407][ T8332] netlink: 60 bytes leftover after parsing attributes in process `syz.3.629'.
[  196.899124][ T8329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.628'.
[  196.998513][ T8337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.631'.
[  197.034227][ T8337] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.159799][ T8343] openvswitch: netlink: Unknown nsh attribute 0
[  197.166621][ T8343] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  197.215165][ T8345] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  197.224925][ T8343] netlink: 'syz.2.632': attribute type 6 has an invalid length.
[  197.274841][ T8337] bridge_slave_1 (unregistering): left allmulticast mode
[  197.292273][ T8337] bridge_slave_1 (unregistering): left promiscuous mode
[  197.299357][ T8337] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.319718][ T8347] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  197.760349][ T8345] !
: renamed from dummy0 (while UP)
[  198.304138][ T8376] netlink: 'syz.0.639': attribute type 1 has an invalid length.
[  198.486609][ T8376] 8021q: adding VLAN 0 to HW filter on device bond0
[  198.515371][ T7433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  198.553269][ T7433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.664534][ T8399] IPv4: Oversized IP packet from 172.20.20.24
[  198.672861][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  198.674436][ T8398] IPv4: Oversized IP packet from 172.20.20.24
[  198.679825][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  198.948514][ T8416] tipc: Failed to remove unknown binding: 66,1,1/0:170164857/170164859
[  199.028555][ T8416] tipc: Failed to remove unknown binding: 66,1,1/0:170164857/170164859
[  199.416701][ T8434] vlan4: entered allmulticast mode
[  199.484029][ T8448] net_ratelimit: 3 callbacks suppressed
[  199.484048][ T8448] openvswitch: netlink: Missing valid actions attribute.
[  199.530801][ T8448] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  199.715573][ T8438] syzkaller0: entered promiscuous mode
[  199.721180][ T8438] syzkaller0: entered allmulticast mode
[  199.737365][ T8438] tipc: Started in network mode
[  199.745751][ T8438] tipc: Node identity ce8a31f6f739, cluster identity 4711
[  199.773249][ T8438] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  199.912273][ T8436] tipc: Resetting bearer <eth:syzkaller0>
[  199.992639][ T8468] netlink: 'syz.1.659': attribute type 1 has an invalid length.
[  200.005514][ T8436] tipc: Disabling bearer <eth:syzkaller0>
[  200.195273][ T8478] batman_adv: batadv0: Adding interface: dummy0
[  200.223248][ T8478] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.295172][ T8478] batman_adv: batadv0: Interface activated: dummy0
[  200.386817][ T8486] __nla_validate_parse: 8 callbacks suppressed
[  200.386835][ T8486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.664'.
[  200.404261][ T8480] batadv0: mtu less than device minimum
[  200.411642][ T8480] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  200.424144][ T8480] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  200.436407][ T8480] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  200.448827][ T8480] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  200.461199][ T8480] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  200.473488][ T8480] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  200.485843][ T8480] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  200.782673][ T8501] netlink: 'syz.0.667': attribute type 12 has an invalid length.
[  200.875564][ T8486] batman_adv: batadv0: Removing interface: batadv_slave_1
[  200.892360][ T5882] Bluetooth: hci4: command 0x0405 tx timeout
[  201.067604][ T8507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.668'.
[  201.269462][ T8512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.668'.
[  201.360717][ T8512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.668'.
[  201.440049][ T8521] netlink: 76 bytes leftover after parsing attributes in process `syz.1.673'.
[  201.492995][ T8521] tipc: Can't bind to reserved service type 0
[  201.790564][ T8534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.676'.
[  201.856794][ T8536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.676'.
[  202.147137][ T8543] netlink: 16 bytes leftover after parsing attributes in process `syz.1.679'.
[  202.252500][ T8551] netlink: 20 bytes leftover after parsing attributes in process `syz.1.679'.
[  202.339709][ T8541] syzkaller0: entered promiscuous mode
[  202.366730][ T8541] syzkaller0: entered allmulticast mode
[  202.470339][ T8558] tipc: Started in network mode
[  202.483469][ T8558] tipc: Node identity 7ab7f723a6cf, cluster identity 4711
[  202.513618][ T8558] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  202.617193][ T8563] netlink: 'syz.4.677': attribute type 21 has an invalid length.
[  202.680418][ T8558] tipc: Resetting bearer <eth:syzkaller0>
[  202.730706][ T8563] netlink: 132 bytes leftover after parsing attributes in process `syz.4.677'.
[  202.886548][ T8540] tipc: Resetting bearer <eth:syzkaller0>
[  202.956875][ T8540] tipc: Disabling bearer <eth:syzkaller0>
[  203.322407][ T8590] gretap0: entered promiscuous mode
[  203.333830][ T8590] gretap0: left promiscuous mode
[  203.757774][ T8603] netlink: 'syz.1.689': attribute type 12 has an invalid length.
[  203.803449][ T8604] netlink: 'syz.1.689': attribute type 12 has an invalid length.
[  204.583389][ T8617] batadv1: left allmulticast mode
[  204.588528][ T8617] batadv1: left promiscuous mode
[  204.610073][ T8617] bridge0: port 3(batadv1) entered disabled state
[  204.625975][ T8617] bridge_slave_1: left allmulticast mode
[  204.631926][ T8617] bridge_slave_1: left promiscuous mode
[  204.639321][ T8617] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.649535][ T8617] bridge_slave_0: left allmulticast mode
[  204.657475][ T8617] bridge_slave_0: left promiscuous mode
[  204.667107][ T8617] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.815724][ T8627] pimreg: entered allmulticast mode
[  204.823515][ T8628] net_ratelimit: 14 callbacks suppressed
[  204.823532][ T8628] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  204.858444][ T8621] pimreg: left allmulticast mode
[  205.337030][ T8645] netlink: 'syz.2.701': attribute type 1 has an invalid length.
[  205.687443][ T8653] __nla_validate_parse: 5 callbacks suppressed
[  205.687462][ T8653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.703'.
[  205.690694][ T8663] netlink: 248 bytes leftover after parsing attributes in process `syz.4.705'.
[  205.732493][ T8654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.703'.
[  206.183760][ T5882] Bluetooth: hci4: link tx timeout
[  206.189873][ T5882] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  206.211892][ T5882] Bluetooth: hci4: link tx timeout
[  206.217218][ T5882] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  206.225419][ T5882] Bluetooth: hci4: link tx timeout
[  206.230571][ T5882] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  206.255214][ T5882] Bluetooth: hci4: link tx timeout
[  206.260532][ T5882] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  206.269982][ T5882] Bluetooth: hci4: link tx timeout
[  206.276787][ T5882] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  206.285195][ T5882] Bluetooth: hci4: link tx timeout
[  206.290426][ T5882] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  206.298789][ T5882] Bluetooth: hci4: link tx timeout
[  206.304518][ T5882] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  206.312855][ T5882] Bluetooth: hci4: link tx timeout
[  206.318094][ T5882] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  206.326246][ T5882] Bluetooth: hci4: link tx timeout
[  206.331457][ T5882] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  206.343521][ T5882] Bluetooth: hci4: link tx timeout
[  206.348677][ T5882] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  206.360811][ T5882] Bluetooth: hci4: link tx timeout
[  206.366018][ T5882] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  206.605642][ T8695] netlink: 'syz.0.713': attribute type 58 has an invalid length.
[  206.626571][ T8695] netlink: 20 bytes leftover after parsing attributes in process `syz.0.713'.
[  206.801410][ T8709] netlink: 20 bytes leftover after parsing attributes in process `syz.0.715'.
[  207.072623][ T8729] netlink: 132 bytes leftover after parsing attributes in process `syz.3.717'.
[  207.139493][ T8731] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  207.191621][ T8731] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  208.174508][ T8765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.725'.
[  208.252480][ T5882] Bluetooth: hci4: command 0x0405 tx timeout
[  208.493963][ T8780] netlink: 'syz.1.728': attribute type 32 has an invalid length.
[  208.514310][ T8780] netlink: 28 bytes leftover after parsing attributes in process `syz.1.728'.
[  208.537069][ T8780] netlink: 'syz.1.728': attribute type 3 has an invalid length.
[  208.679563][ T8787] netlink: 'syz.0.730': attribute type 13 has an invalid length.
[  208.728464][ T8787] netlink: 16 bytes leftover after parsing attributes in process `syz.0.730'.
[  208.771748][ T8787] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[  208.872389][ T8787] netlink: 28 bytes leftover after parsing attributes in process `syz.0.730'.
[  210.340864][ T8818] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  210.348439][ T8818] IPv6: NLM_F_CREATE should be set when creating new route
[  210.355750][ T8818] IPv6: NLM_F_CREATE should be set when creating new route
[  210.365168][ T8816] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  210.383611][ T8816] syzkaller0: entered promiscuous mode
[  210.401579][ T8816] syzkaller0: entered allmulticast mode
[  210.419426][ T8818] netlink: 'syz.3.737': attribute type 1 has an invalid length.
[  210.463243][ T8824] netlink: 'syz.1.739': attribute type 16 has an invalid length.
[  210.615593][ T8833] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  210.632217][ T8833] openvswitch: netlink: Duplicate key (type 0).
[  210.771042][ T8828] veth3: entered promiscuous mode
[  210.860596][ T8832] tipc: Resetting bearer <eth:syzkaller0>
[  210.943403][ T8815] tipc: Resetting bearer <eth:syzkaller0>
[  210.996538][ T8815] tipc: Disabling bearer <eth:syzkaller0>
[  211.087418][ T8837] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  211.523938][ T8867] __nla_validate_parse: 4 callbacks suppressed
[  211.523958][ T8867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.749'.
[  211.837349][ T8873] 8021q: VLANs not supported on wg1
[  211.976775][ T8842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  212.059204][ T8880] netlink: ct family unspecified
[  212.078958][ T8880] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  212.135204][ T8882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.753'.
[  212.240857][ T8886] netlink: 766 bytes leftover after parsing attributes in process `syz.4.753'.
[  212.304152][ T8882] netlink: 72 bytes leftover after parsing attributes in process `syz.4.753'.
[  213.499408][ T8919] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  213.517191][ T8928] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) !
[  213.561709][ T8936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.761'.
[  214.005194][ T8949] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  214.020573][ T8945] netlink: 76 bytes leftover after parsing attributes in process `syz.2.766'.
[  214.274436][ T8949] netlink: 240 bytes leftover after parsing attributes in process `syz.0.767'.
[  214.311167][ T8961] netlink: 28 bytes leftover after parsing attributes in process `syz.1.770'.
[  214.514964][ T8971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.772'.
[  214.868688][ T8995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.776'.
[  215.251975][ T9009] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  215.828605][ T9027] bond1: entered promiscuous mode
[  215.834097][ T9027] bond1: entered allmulticast mode
[  215.840404][ T9027] 8021q: adding VLAN 0 to HW filter on device bond1
[  216.071620][ T3546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  216.087155][ T3546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  216.220393][ T9050] netlink: 'syz.0.790': attribute type 10 has an invalid length.
[  216.248600][ T9054] netlink: 'syz.1.792': attribute type 10 has an invalid length.
[  216.261218][ T9050] team0: Device ipvlan1 failed to register rx_handler
[  216.308928][ T9043] syz.0.790 (9043) used greatest stack depth: 17864 bytes left
[  216.449434][ T9060] batadv0: entered promiscuous mode
[  216.462618][ T9060] macsec1: entered promiscuous mode
[  216.476543][ T9060] batadv0: left promiscuous mode
[  216.569419][ T9064] __nla_validate_parse: 10 callbacks suppressed
[  216.569440][ T9064] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.796'.
[  216.616955][ T9064] netlink: zone id is out of range
[  216.623978][ T9064] netlink: zone id is out of range
[  216.662199][ T9064] netlink: zone id is out of range
[  216.667362][ T9064] netlink: zone id is out of range
[  216.682274][ T9064] netlink: zone id is out of range
[  216.687565][ T9064] netlink: zone id is out of range
[  216.707187][ T9064] netlink: zone id is out of range
[  216.750223][ T9064] netlink: zone id is out of range
[  216.767011][ T9064] netlink: zone id is out of range
[  216.779912][ T9064] netlink: zone id is out of range
[  216.875008][ T9078] netlink: 'syz.4.801': attribute type 7 has an invalid length.
[  216.902863][ T9078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.801'.
[  216.975827][ T5884] Bluetooth: hci2: command 0x0406 tx timeout
[  216.982361][ T5875] Bluetooth: hci3: command 0x0406 tx timeout
[  216.988478][ T5866] Bluetooth: hci1: command 0x0406 tx timeout
[  216.988497][ T5184] Bluetooth: hci0: command 0x0c1a tx timeout
[  217.022645][ T9085] 8021q: adding VLAN 0 to HW filter on device bond3
[  217.030206][ T9085] bridge5: port 1(bond3) entered blocking state
[  217.036834][ T9085] bridge5: port 1(bond3) entered disabled state
[  217.043669][ T9085] bond3: entered allmulticast mode
[  217.055558][ T9085] bridge5: port 1(bond3) entered blocking state
[  217.062371][ T9085] bridge5: port 1(bond3) entered forwarding state
[  217.256432][ T9104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.807'.
[  217.284998][ T9110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.807'.
[  217.338576][ T9103] netlink: 'syz.2.807': attribute type 12 has an invalid length.
[  217.351319][ T9111] syzkaller1: entered promiscuous mode
[  217.366844][ T9111] syzkaller1: entered allmulticast mode
[  217.565507][ T3573] bridge5: port 1(bond3) entered disabled state
[  217.768506][ T9126] netlink: 32 bytes leftover after parsing attributes in process `syz.3.813'.
[  217.900989][ T9118] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  217.943169][ T9118] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.944076][ T9139] netlink: 'syz.4.816': attribute type 1 has an invalid length.
[  217.968746][ T9142] netlink: 28 bytes leftover after parsing attributes in process `syz.4.816'.
[  218.091042][ T9139] 8021q: adding VLAN 0 to HW filter on device bond4
[  218.149102][ T9118] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  218.176289][ T9118] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.260017][ T9118] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  218.284443][ T9118] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.386349][ T9118] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  218.432218][ T9118] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.474737][ T9166] netlink: 96 bytes leftover after parsing attributes in process `syz.0.821'.
[  218.637411][ T9171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.823'.
[  218.685544][   T49] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  218.694913][   T49] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  218.729308][   T49] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  218.737996][   T49] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  218.749385][ T9174] netlink: 165 bytes leftover after parsing attributes in process `syz.0.824'.
[  218.810374][ T9174] syzkaller0: entered promiscuous mode
[  218.817529][ T9174] syzkaller0: entered allmulticast mode
[  218.849153][ T7431] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  218.863725][ T7431] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.061124][ T5882] Bluetooth: hci2: command 0x0406 tx timeout
[  219.129359][ T9190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.828'.
[  220.252412][ T5882] Bluetooth: hci4: command 0x0405 tx timeout
[  220.481571][ T7431] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  220.490304][ T7431] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  220.537929][ T9190] 8021q: adding VLAN 0 to HW filter on device bond2
[  220.581057][ T9194] macvlan2: entered promiscuous mode
[  220.594363][ T9194] macvlan2: entered allmulticast mode
[  220.601468][ T9194] bond2: (slave macvlan2): Opening slave failed
[  220.944677][ T9222] IPVS: set_ctl: invalid protocol: 8 172.20.20.44:20002
[  220.977196][ T9222] lo speed is unknown, defaulting to 1000
[  220.986198][ T9222] lo speed is unknown, defaulting to 1000
[  220.995496][ T9222] lo speed is unknown, defaulting to 1000
[  221.037648][ T9222] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  221.126122][ T9222] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  221.226444][ T9226] netlink: 'syz.4.836': attribute type 4 has an invalid length.
[  221.240187][ T9234] trusted_key: syz.0.840 sent an empty control message without MSG_MORE.
[  221.300923][ T9222] lo speed is unknown, defaulting to 1000
[  221.376994][ T9222] lo speed is unknown, defaulting to 1000
[  221.454818][ T9222] lo speed is unknown, defaulting to 1000
[  221.477552][ T9237] bridge5: entered promiscuous mode
[  221.485198][ T9237] bridge5: entered allmulticast mode
[  221.495522][ T9237] team0: Port device bridge5 added
[  221.501613][ T9222] lo speed is unknown, defaulting to 1000
[  221.529582][ T9222] lo speed is unknown, defaulting to 1000
[  221.688501][ T9245] __nla_validate_parse: 3 callbacks suppressed
[  221.688521][ T9245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.843'.
[  221.764890][ T9248] netlink: 5 bytes leftover after parsing attributes in process `syz.0.843'.
[  221.807374][ T9252] netlink: 24 bytes leftover after parsing attributes in process `syz.4.844'.
[  221.878931][ T9251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.844'.
[  222.011007][ T9255] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µ
â侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!'
[  222.046396][ T9255] CPU: 0 UID: 0 PID: 9255 Comm: syz.3.845 Not tainted syzkaller #0 PREEMPT(full) 
[  222.046428][ T9255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  222.046453][ T9255] Call Trace:
[  222.046461][ T9255]  <TASK>
[  222.046470][ T9255]  dump_stack_lvl+0x189/0x250
[  222.046505][ T9255]  ? __pfx_dump_stack_lvl+0x10/0x10
[  222.046531][ T9255]  ? __pfx__printk+0x10/0x10
[  222.046563][ T9255]  ? kernfs_path_from_node+0x2f/0x290
[  222.046585][ T9255]  ? kernfs_path_from_node+0x250/0x290
[  222.046603][ T9255]  ? kernfs_path_from_node+0x2f/0x290
[  222.046630][ T9255]  sysfs_warn_dup+0x8e/0xa0
[  222.046652][ T9255]  sysfs_do_create_link_sd+0xc0/0x110
[  222.046677][ T9255]  device_add_class_symlinks+0x1cf/0x240
[  222.046703][ T9255]  device_add+0x475/0xb50
[  222.046730][ T9255]  wiphy_register+0x1ba6/0x28d0
[  222.046774][ T9255]  ? __pfx_wiphy_register+0x10/0x10
[  222.046793][ T9255]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  222.046829][ T9255]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  222.046861][ T9255]  ieee80211_register_hw+0x3425/0x4080
[  222.046910][ T9255]  ? ieee80211_register_hw+0x1461/0x4080
[  222.046947][ T9255]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  222.046978][ T9255]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  222.047018][ T9255]  ? __hrtimer_setup+0x187/0x210
[  222.047036][ T9255]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  222.047070][ T9255]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  222.047137][ T9255]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  222.047162][ T9255]  ? trace_kmalloc+0x1f/0xd0
[  222.047185][ T9255]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  222.047211][ T9255]  ? kstrndup+0xbf/0x160
[  222.047246][ T9255]  hwsim_new_radio_nl+0xea4/0x1b10
[  222.047278][ T9255]  ? __pfx___nla_validate_parse+0x10/0x10
[  222.047326][ T9255]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  222.047367][ T9255]  ? __nla_parse+0x40/0x60
[  222.047403][ T9255]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  222.047449][ T9255]  genl_family_rcv_msg_doit+0x215/0x300
[  222.047485][ T9255]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  222.047529][ T9255]  ? bpf_lsm_capable+0x9/0x20
[  222.047554][ T9255]  ? security_capable+0x7e/0x2e0
[  222.047592][ T9255]  genl_rcv_msg+0x60e/0x790
[  222.047628][ T9255]  ? __pfx_genl_rcv_msg+0x10/0x10
[  222.047661][ T9255]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  222.047706][ T9255]  netlink_rcv_skb+0x208/0x470
[  222.047723][ T9255]  ? __lock_acquire+0xab9/0xd20
[  222.047753][ T9255]  ? __pfx_genl_rcv_msg+0x10/0x10
[  222.047780][ T9255]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  222.047826][ T9255]  ? down_read+0x1ad/0x2e0
[  222.047853][ T9255]  genl_rcv+0x28/0x40
[  222.047875][ T9255]  netlink_unicast+0x82c/0x9e0
[  222.047918][ T9255]  ? __pfx_netlink_unicast+0x10/0x10
[  222.047949][ T9255]  ? netlink_sendmsg+0x642/0xb30
[  222.047966][ T9255]  ? skb_put+0x11b/0x210
[  222.047992][ T9255]  netlink_sendmsg+0x805/0xb30
[  222.048025][ T9255]  ? __pfx_netlink_sendmsg+0x10/0x10
[  222.048051][ T9255]  ? aa_sock_msg_perm+0xf1/0x1d0
[  222.048072][ T9255]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  222.048093][ T9255]  ? __pfx_netlink_sendmsg+0x10/0x10
[  222.048114][ T9255]  __sock_sendmsg+0x21c/0x270
[  222.048146][ T9255]  ____sys_sendmsg+0x505/0x830
[  222.048177][ T9255]  ? __pfx_____sys_sendmsg+0x10/0x10
[  222.048213][ T9255]  ? import_iovec+0x74/0xa0
[  222.048242][ T9255]  ___sys_sendmsg+0x21f/0x2a0
[  222.048285][ T9255]  ? __pfx____sys_sendmsg+0x10/0x10
[  222.048359][ T9255]  ? __fget_files+0x2a/0x420
[  222.048376][ T9255]  ? __fget_files+0x3a0/0x420
[  222.048409][ T9255]  __x64_sys_sendmsg+0x19b/0x260
[  222.048443][ T9255]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  222.048478][ T9255]  ? rcu_is_watching+0x15/0xb0
[  222.048505][ T9255]  ? do_syscall_64+0xbe/0x3b0
[  222.048530][ T9255]  do_syscall_64+0xfa/0x3b0
[  222.048548][ T9255]  ? lockdep_hardirqs_on+0x9c/0x150
[  222.048566][ T9255]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.048584][ T9255]  ? clear_bhb_loop+0x60/0xb0
[  222.048609][ T9255]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.048628][ T9255] RIP: 0033:0x7f32f2d8ebe9
[  222.048647][ T9255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  222.048663][ T9255] RSP: 002b:00007f32f3c86038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  222.048684][ T9255] RAX: ffffffffffffffda RBX: 00007f32f2fc5fa0 RCX: 00007f32f2d8ebe9
[  222.048697][ T9255] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  222.048709][ T9255] RBP: 00007f32f2e11e19 R08: 0000000000000000 R09: 0000000000000000
[  222.048721][ T9255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  222.048732][ T9255] R13: 00007f32f2fc6038 R14: 00007f32f2fc5fa0 R15: 00007ffcb2224b18
[  222.048770][ T9255]  </TASK>
[  222.697885][ T9266] netlink: 92 bytes leftover after parsing attributes in process `syz.4.848'.
[  222.744147][ T9268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.848'.
[  222.781633][ T9262] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  223.067580][ T9282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.852'.
[  223.095037][ T9262] syzkaller0: entered promiscuous mode
[  223.111869][ T9262] syzkaller0: entered allmulticast mode
[  223.160305][ T9262] tipc: Resetting bearer <eth:syzkaller0>
[  223.193020][ T9256] tipc: Resetting bearer <eth:syzkaller0>
[  225.066491][ T9256] tipc: Disabling bearer <eth:syzkaller0>
[  225.081223][ T9306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.857'.
[  225.168536][ T9322] netlink: 'syz.1.861': attribute type 1 has an invalid length.
[  225.176685][ T9317] netlink: 'syz.0.860': attribute type 2 has an invalid length.
[  225.249919][ T9322] bond2: entered promiscuous mode
[  225.269029][ T9322] bond2: entered allmulticast mode
[  225.276121][ T9322] 8021q: adding VLAN 0 to HW filter on device bond2
[  225.472587][ T9340] netlink: 248 bytes leftover after parsing attributes in process `syz.4.865'.
[  225.645149][ T9327] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  225.662867][ T9327] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  225.803789][ T9336] bridge_slave_0: left allmulticast mode
[  225.809653][ T9336] bridge_slave_0: left promiscuous mode
[  225.820587][ T9336] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.861431][ T9336] team0: Port device team_slave_0 removed
[  225.881745][ T9336] team0: Port device team_slave_1 removed
[  225.888958][ T9336] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  225.896944][ T9336] batman_adv: batadv0: Removing interface: batadv_slave_0
[  225.905729][ T9336] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  225.914176][ T9336] batman_adv: batadv0: Removing interface: batadv_slave_1
[  225.975989][ T3573] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  225.984751][ T3573] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.033658][ T3573] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.055770][ T3573] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  226.404853][ T9388] netlink: 'syz.3.876': attribute type 2 has an invalid length.
[  226.417011][ T9388] netlink: 'syz.3.876': attribute type 5 has an invalid length.
[  226.590692][ T9394] netlink: 20824 bytes leftover after parsing attributes in process `syz.4.879'.
[  226.608284][ T9394] net_ratelimit: 3 callbacks suppressed
[  226.608304][ T9394] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  226.622878][ T9394] tipc: Enabled bearer <udp:syz2>, priority 10
[  226.637676][ T9394] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  226.743504][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  226.892304][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  227.032612][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  227.172212][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  227.253412][ T9424] openvswitch: netlink: IP tunnel dst address not specified
[  227.274344][ T9424] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  227.312300][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  227.452380][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  227.592203][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  227.690818][ T9433] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  227.742241][   T24] tipc: Node number set to 3698915107
[  228.122321][ T9440] netlink: 24 bytes leftover after parsing attributes in process `syz.4.892'.
[  228.243702][ T9440] netlink: 16 bytes leftover after parsing attributes in process `syz.4.892'.
[  228.414593][ T9450] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.897'.
[  228.559849][ T9452] syzkaller0: entered promiscuous mode
[  228.576628][ T9452] syzkaller0: entered allmulticast mode
[  228.701803][ T9461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.900'.
[  228.715428][ T9460] netlink: 20 bytes leftover after parsing attributes in process `syz.2.899'.
[  229.352876][ T9479] netlink: 44 bytes leftover after parsing attributes in process `syz.4.903'.
[  229.386203][ T9479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.903'.
[  231.115218][ T9460] netlink: 32 bytes leftover after parsing attributes in process `syz.2.899'.
[  231.313854][ T9497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.907'.
[  231.549560][ T9495] lo speed is unknown, defaulting to 1000
[  231.549706][ T9504] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  231.735396][ T9510] netlink: 44 bytes leftover after parsing attributes in process `syz.4.910'.
[  231.752163][ T9510] netlink: 'syz.4.910': attribute type 5 has an invalid length.
[  231.772276][    C1] net_ratelimit: 5 callbacks suppressed
[  231.772295][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  232.357162][ T9541] vlan0: entered promiscuous mode
[  232.700133][ T9566] Bluetooth: MGMT ver 1.23
[  232.812194][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  233.497778][ T9604] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma?
[  233.591590][ T9609] __nla_validate_parse: 38 callbacks suppressed
[  233.591611][ T9609] netlink: 332 bytes leftover after parsing attributes in process `syz.2.935'.
[  233.614988][ T9609] netlink: 104 bytes leftover after parsing attributes in process `syz.2.935'.
[  233.652363][ T9609] netlink: 32 bytes leftover after parsing attributes in process `syz.2.935'.
[  233.899152][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  234.263031][ T9626] netlink: 20 bytes leftover after parsing attributes in process `syz.2.937'.
[  234.451310][ T9597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.932'.
[  234.578690][ T9597] macsec1: entered promiscuous mode
[  234.615892][ T9597] syzkaller0: entered promiscuous mode
[  234.704199][ T9597] syzkaller0: left promiscuous mode
[  234.972223][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  235.118868][ T9650] netlink: 'syz.3.943': attribute type 10 has an invalid length.
[  235.177961][ T9651] netlink: 'syz.3.943': attribute type 10 has an invalid length.
[  235.201401][ T9650] team0: Port device dummy0 added
[  235.284262][ T9651] team0: Port device dummy0 removed
[  235.377630][   T49] bond0: (slave dummy0): interface is now down
[  235.384733][ T9651] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  235.405154][   T49] bond0: (slave dummy0): interface is now down
[  235.427369][   T49] bond0: now running without any active interface!
[  235.753521][ T9664] lo speed is unknown, defaulting to 1000
[  236.012384][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  236.366297][ T9686] lo speed is unknown, defaulting to 1000
[  236.506758][ T9703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.957'.
[  236.728158][ T9708] lo speed is unknown, defaulting to 1000
[  236.841701][ T9712] lo speed is unknown, defaulting to 1000
[  236.867376][ T9718] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  236.888019][ T9724] netlink: 'syz.0.963': attribute type 21 has an invalid length.
[  236.907158][ T9724] netlink: 128 bytes leftover after parsing attributes in process `syz.0.963'.
[  236.918224][ T9718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.961'.
[  236.928435][ T9718] nbd: must specify an index to disconnect
[  237.052402][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  237.126296][ T9734] netlink: 'syz.3.965': attribute type 7 has an invalid length.
[  237.139902][ T9730] IPVS: set_ctl: invalid protocol: 98 100.1.1.1:20001
[  237.181719][ T9734] netlink: 'syz.3.965': attribute type 3 has an invalid length.
[  237.230409][ T9734] netlink: 224 bytes leftover after parsing attributes in process `syz.3.965'.
[  237.249250][ T9739] netlink: 'syz.3.965': attribute type 9 has an invalid length.
[  237.270162][ T9739] netlink: 'syz.3.965': attribute type 7 has an invalid length.
[  237.278437][ T9739] netlink: 'syz.3.965': attribute type 8 has an invalid length.
[  238.092227][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  238.690181][ T9724] netlink: 'syz.0.963': attribute type 5 has an invalid length.
[  238.698279][ T9724] netlink: 'syz.0.963': attribute type 6 has an invalid length.
[  238.706415][ T9724] netlink: 3 bytes leftover after parsing attributes in process `syz.0.963'.
[  238.728135][ T9735] tun0: tun_chr_ioctl cmd 1074025675
[  238.734436][ T9735] tun0: persist enabled
[  238.744706][ T9738] tun0: tun_chr_ioctl cmd 1074025675
[  238.750044][ T9738] tun0: persist disabled
[  238.816419][ T9746] netlink: 28 bytes leftover after parsing attributes in process `syz.3.968'.
[  239.132357][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  239.169282][ T9759] netlink: 'syz.0.970': attribute type 29 has an invalid length.
[  239.440582][ T9767] netlink: 'syz.3.974': attribute type 3 has an invalid length.
[  239.460650][ T9767] netlink: 666 bytes leftover after parsing attributes in process `syz.3.974'.
[  239.481114][ T9767] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  239.506281][ T9767] syzkaller0: entered promiscuous mode
[  239.555457][ T9769] netlink: 20 bytes leftover after parsing attributes in process `syz.1.975'.
[  239.561505][ T9767] syzkaller0: entered allmulticast mode
[  239.669208][ T9767] tipc: Resetting bearer <eth:syzkaller0>
[  239.716662][ T9767] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  239.744997][ T9782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.980'.
[  239.781123][ T9783] netlink: 52 bytes leftover after parsing attributes in process `syz.4.981'.
[  239.795369][ T9764] tipc: Resetting bearer <eth:syzkaller0>
[  239.850495][ T9764] tipc: Disabling bearer <eth:syzkaller0>
[  239.874058][ T9785] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  239.931446][ T9779] syzkaller0: entered promiscuous mode
[  239.951010][ T9779] syzkaller0: entered allmulticast mode
[  240.109461][ T9785] tipc: Resetting bearer <eth:syzkaller0>
[  240.162963][ T9778] tipc: Resetting bearer <eth:syzkaller0>
[  240.182184][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  240.342997][ T9778] tipc: Disabling bearer <eth:syzkaller0>
[  240.890572][ T9817] 8021q: adding VLAN 0 to HW filter on device bond5
[  240.956264][ T9817] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  240.995199][ T7429] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  241.084554][ T9828] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  241.093348][ T9828] syzkaller0: entered promiscuous mode
[  241.111581][ T9828] syzkaller0: entered allmulticast mode
[  241.143409][ T7433] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  241.205576][ T9828] tipc: Resetting bearer <eth:syzkaller0>
[  241.212544][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  241.258614][ T9826] tipc: Resetting bearer <eth:syzkaller0>
[  241.323778][ T9826] tipc: Disabling bearer <eth:syzkaller0>
[  241.455870][ T9846] lo speed is unknown, defaulting to 1000
[  241.541859][ T9854] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1002'.
[  241.905547][ T9869] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1007'.
[  241.940284][ T9872] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1004'.
[  242.012673][ T9867] netlink: 'syz.0.1005': attribute type 3 has an invalid length.
[  242.108069][ T9879] netlink: 'syz.2.1008': attribute type 1 has an invalid length.
[  242.252189][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  242.383482][ T9882] 8021q: adding VLAN 0 to HW filter on device bond5
[  242.396364][ T9882] bond4: (slave bond5): making interface the new active one
[  242.426619][ T9882] bond4: (slave bond5): Enslaving as an active interface with an up link
[  242.688784][ T9879] bond4: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  242.732475][ T9879] bond4: (slave ipvlan1): The slave device specified does not support setting the MAC address
[  243.014633][ T9889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1010'.
[  243.059139][ T9893] netlink: 'syz.3.1011': attribute type 1 has an invalid length.
[  243.130678][ T9893] 8021q: adding VLAN 0 to HW filter on device bond3
[  243.292223][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  243.355816][ T9909] openvswitch: netlink: Flow key attr not present in new flow.
[  243.404693][ T9904] can: request_module (can-proto-0) failed.
[  243.451808][ T9910] ip6tnl1: entered promiscuous mode
[  243.465689][ T9913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  243.469606][ T9910] ip6tnl1: entered allmulticast mode
[  243.527509][ T9910] team0: Device ip6tnl1 is of different type
[  243.685880][ T9916] lo speed is unknown, defaulting to 1000
[  243.753062][ T9930] sctp: [Deprecated]: syz.0.1022 (pid 9930) Use of int in max_burst socket option deprecated.
[  243.753062][ T9930] Use struct sctp_assoc_value instead
[  243.766663][ T9913] lo speed is unknown, defaulting to 1000
[  243.771228][ T9930] sctp: [Deprecated]: syz.0.1022 (pid 9930) Use of int in max_burst socket option deprecated.
[  243.771228][ T9930] Use struct sctp_assoc_value instead
[  244.090757][ T9938] __nla_validate_parse: 6 callbacks suppressed
[  244.090776][ T9938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1023'.
[  244.112459][ T9938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1023'.
[  244.121477][ T9938] netlink: 'syz.0.1023': attribute type 12 has an invalid length.
[  244.129639][ T9938] netlink: 'syz.0.1023': attribute type 14 has an invalid length.
[  244.267112][ T9943] lo speed is unknown, defaulting to 1000
[  244.332348][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  244.399796][ T9947] ieee802154 phy0 wpan0: encryption failed: -22
[  244.591213][ T9955] netlink: 'syz.4.1028': attribute type 4 has an invalid length.
[  244.620244][ T9955] netlink: 'syz.4.1028': attribute type 4 has an invalid length.
[  244.741071][ T5939] lo speed is unknown, defaulting to 1000
[  244.759103][ T5939] syz2: Port: 1 Link ACTIVE
[  244.866455][ T9969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1030'.
[  244.900463][ T9969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1030'.
[  244.926139][ T9969] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1030'.
[  245.011224][ T9973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1031'.
[  245.080294][ T9975] netlink: 'syz.4.1033': attribute type 1 has an invalid length.
[  245.136170][ T9978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1033'.
[  245.162363][ T9975] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1033'.
[  245.179995][ T9980] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1034'.
[  245.193230][ T9975] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1033'.
[  245.382325][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  246.012824][T10013] lo speed is unknown, defaulting to 1000
[  246.063340][T10022] lo speed is unknown, defaulting to 1000
[  246.412366][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  246.872240][T10024] lo speed is unknown, defaulting to 1000
[  247.452255][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  247.960636][T10051] lo speed is unknown, defaulting to 1000
[  248.492311][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  248.743282][T10063] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  248.807967][T10066] lo: entered allmulticast mode
[  248.894475][T10069] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  248.997290][T10067] syzkaller0: entered promiscuous mode
[  249.003856][T10067] syzkaller0: entered allmulticast mode
[  249.033259][T10066] dvmrp8: entered allmulticast mode
[  249.038999][T10066] lo: left allmulticast mode
[  249.044525][T10066] dvmrp8: left allmulticast mode
[  249.127343][T10073] __nla_validate_parse: 3 callbacks suppressed
[  249.127363][T10073] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1059'.
[  249.535094][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  249.639224][T10079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1060'.
[  250.582182][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  250.686328][T10079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1060'.
[  250.870115][T10090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1063'.
[  250.888222][T10092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1061'.
[  250.967423][T10096] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1064'.
[  251.003075][T10093] netlink: 'syz.1.1063': attribute type 10 has an invalid length.
[  251.061803][T10098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1063'.
[  251.098236][T10091] lo speed is unknown, defaulting to 1000
[  251.114348][T10090] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1063'.
[  251.217397][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1066'.
[  251.622228][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  252.662192][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  252.955212][T10107] 8021q: adding VLAN 0 to HW filter on device bond1
[  252.964885][T10107] bond0: (slave bond1): Enslaving as an active interface with a down link
[  253.159190][T10116] batadv_slave_1: entered promiscuous mode
[  253.170594][ T3546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  253.197688][T10116] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1069'.
[  253.221449][ T3546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  253.264933][T10115] batadv_slave_1: left promiscuous mode
[  253.357112][T10120] lo speed is unknown, defaulting to 1000
[  253.690070][T10146] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96
[  253.702303][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  253.838057][T10150] wg2: left promiscuous mode
[  253.849654][T10150] wg2: left allmulticast mode
[  253.898406][T10150] bridge1: left promiscuous mode
[  253.904290][T10150] bridge1: left allmulticast mode
[  253.910584][T10150] ip6gre1: left allmulticast mode
[  253.917357][T10150] bond1: left promiscuous mode
[  253.934771][T10150] bond1: left allmulticast mode
[  253.944165][T10150] bond2: left promiscuous mode
[  253.951975][T10154] netlink: 'syz.2.1080': attribute type 39 has an invalid length.
[  253.972824][T10150] bond2: left allmulticast mode
[  254.034549][T10158] bridge_slave_0: left allmulticast mode
[  254.047505][T10158] bridge_slave_0: left promiscuous mode
[  254.057657][T10158] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.070696][T10158] bridge_slave_1: left allmulticast mode
[  254.080791][T10158] bridge_slave_1: left promiscuous mode
[  254.090245][T10158] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.101113][T10160] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  254.119194][T10158] bond0: (slave bond_slave_0): Releasing backup interface
[  254.129115][T10158] bond0: (slave bond_slave_1): Releasing backup interface
[  254.141685][T10158] team0: Port device team_slave_0 removed
[  254.149764][T10158] team0: Port device team_slave_1 removed
[  254.156301][T10158] batman_adv: batadv0: Removing interface: batadv_slave_0
[  254.173833][T10158] bond1: (slave bridge1): Removing an active aggregator
[  254.183505][T10158] bond1: (slave bridge1): Releasing backup interface
[  254.191276][T10158] bridge1: left promiscuous mode
[  254.197079][T10158] bridge1: left allmulticast mode
[  254.206500][T10158] bond3: left allmulticast mode
[  254.212081][T10158] bridge5: port 1(bond3) entered disabled state
[  254.229225][T10158] bond5: (slave ip6gretap1): Removing an active aggregator
[  254.239654][T10158] bond5: (slave ip6gretap1): Releasing backup interface
[  254.477469][T10167] netlink: 'syz.3.1084': attribute type 1 has an invalid length.
[  254.488479][T10167] __nla_validate_parse: 2 callbacks suppressed
[  254.488499][T10167] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1084'.
[  254.590211][T10173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1084'.
[  254.742393][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  254.947023][T10173] bridge_slave_1: left allmulticast mode
[  254.957311][T10173] bridge_slave_1: left promiscuous mode
[  254.965568][T10173] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.977558][T10173] bridge_slave_0: left allmulticast mode
[  254.984643][T10173] bridge_slave_0: left promiscuous mode
[  254.990562][T10173] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.129101][T10172] geneve2: entered promiscuous mode
[  255.134603][T10172] geneve2: entered allmulticast mode
[  255.141589][T10180] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1088'.
[  255.160543][ T5986] lo speed is unknown, defaulting to 1000
[  255.175543][   T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  255.185038][ T5986] syz2: Port: 1 Link DOWN
[  255.232159][   T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  255.240413][   T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  255.273588][   T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  255.386905][T10192] netlink: 'syz.4.1090': attribute type 16 has an invalid length.
[  255.406872][T10192] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1090'.
[  255.487204][T10198] netlink: 'syz.1.1094': attribute type 15 has an invalid length.
[  255.550650][T10193] lo speed is unknown, defaulting to 1000
[  255.602305][T10195] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1093'.
[  255.658546][T10195] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1093'.
[  255.733757][T10209] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  255.772373][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  255.841953][T10208] lo speed is unknown, defaulting to 1000
[  255.859576][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  255.866024][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  255.877706][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  256.196824][T10221] lo speed is unknown, defaulting to 1000
[  256.253973][T10226] netlink: 360 bytes leftover after parsing attributes in process `syz.3.1101'.
[  256.319431][T10228] IPVS: ovf: FWM 3 0x00000003 - no destination available
[  256.567719][T10233] lo speed is unknown, defaulting to 1000
[  256.739324][T10234] lo speed is unknown, defaulting to 1000
[  256.800322][T10250] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1106'.
[  256.812500][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  257.084505][T10258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1109'.
[  257.107986][T10261] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  257.216117][T10261] tipc: Disabling bearer <eth:syzkaller0>
[  257.268724][T10263] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  257.293963][T10263] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.304696][T10263] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.545932][T10272] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1112'.
[  257.570434][T10275] netlink: 'syz.0.1112': attribute type 1 has an invalid length.
[  257.571258][T10273] netlink: 'syz.0.1112': attribute type 1 has an invalid length.
[  257.647317][T10275] 8021q: adding VLAN 0 to HW filter on device bond2
[  257.706697][T10272] bond2: (slave geneve2): making interface the new active one
[  257.717944][T10272] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  257.852266][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  257.963446][T10286] netlink: 'syz.4.1114': attribute type 13 has an invalid length.
[  258.018474][T10286] netlink: 'syz.4.1114': attribute type 17 has an invalid length.
[  258.191545][T10286] 8021q: adding VLAN 0 to HW filter on device team0
[  258.208403][T10286] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  258.224554][ T5986] lo speed is unknown, defaulting to 1000
[  258.230414][ T5986] syz2: Port: 1 Link ACTIVE
[  258.437571][T10310] netlink: 'syz.3.1121': attribute type 3 has an invalid length.
[  258.482317][T10310] syz_tun: entered allmulticast mode
[  258.605740][T10310] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  258.652307][T10315] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  258.686518][T10322] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  258.731748][T10325] netlink: 'syz.4.1128': attribute type 1 has an invalid length.
[  258.886658][T10326] bond6: entered promiscuous mode
[  258.892375][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  258.909247][T10326] bond6: entered allmulticast mode
[  258.931638][T10326] 8021q: adding VLAN 0 to HW filter on device bond6
[  258.954157][T10309] syz_tun: left allmulticast mode
[  259.310949][T10347] netlink: 'syz.0.1132': attribute type 11 has an invalid length.
[  259.535280][T10357] __nla_validate_parse: 8 callbacks suppressed
[  259.535300][T10357] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1137'.
[  259.697049][T10369] netlink: 'syz.2.1142': attribute type 9 has an invalid length.
[  259.708061][T10370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1141'.
[  259.720497][T10369] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1142'.
[  259.731569][T10370] netlink: 'syz.4.1141': attribute type 5 has an invalid length.
[  259.747964][T10371] netlink: 'syz.2.1142': attribute type 10 has an invalid length.
[  259.758115][T10370] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1141'.
[  259.932296][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  260.048957][T10371] 8021q: adding VLAN 0 to HW filter on device team0
[  260.069028][T10371] bond0: (slave team0): Enslaving as an active interface with an up link
[  260.111249][T10370] geneve3: entered promiscuous mode
[  260.119854][T10370] geneve3: entered allmulticast mode
[  260.235352][ T7433] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  260.247112][T10386] ==================================================================
[  260.255219][T10386] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  260.263151][T10386] Read of size 1 at addr ffff888057bc0330 by task syz.1.1144/10386
[  260.271068][T10386] 
[  260.273438][T10386] CPU: 1 UID: 0 PID: 10386 Comm: syz.1.1144 Not tainted syzkaller #0 PREEMPT(full) 
[  260.273465][T10386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  260.273477][T10386] Call Trace:
[  260.273485][T10386]  <TASK>
[  260.273493][T10386]  dump_stack_lvl+0x189/0x250
[  260.273520][T10386]  ? __kasan_check_byte+0x12/0x40
[  260.273550][T10386]  ? __pfx_dump_stack_lvl+0x10/0x10
[  260.273572][T10386]  ? lock_release+0x4b/0x3e0
[  260.273603][T10386]  ? __virt_addr_valid+0x4a5/0x5c0
[  260.273630][T10386]  print_report+0xca/0x240
[  260.273648][T10386]  ? xfrm_state_find+0x2cf2/0x5400
[  260.273668][T10386]  kasan_report+0x118/0x150
[  260.273695][T10386]  ? xfrm_state_find+0x2cf2/0x5400
[  260.273719][T10386]  xfrm_state_find+0x2cf2/0x5400
[  260.273738][T10386]  ? unwind_get_return_address+0x4d/0x90
[  260.273761][T10386]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  260.273795][T10386]  ? xfrm_state_find+0x1da/0x5400
[  260.273818][T10386]  ? __pfx_xfrm_state_find+0x10/0x10
[  260.273838][T10386]  ? kasan_save_stack+0x4d/0x60
[  260.273859][T10386]  ? kasan_save_stack+0x3e/0x60
[  260.273880][T10386]  ? kasan_record_aux_stack+0xbd/0xd0
[  260.273900][T10386]  ? ip_route_output_key_hash_rcu+0x196a/0x23e0
[  260.273924][T10386]  ? ip_route_output_key_hash+0x174/0x280
[  260.273946][T10386]  ? __ip4_datagram_connect+0x8f4/0x1270
[  260.273966][T10386]  ? __ip6_datagram_connect+0x9f0/0x1150
[  260.273991][T10386]  ? ip6_datagram_connect_v6_only+0x63/0xa0
[  260.274018][T10386]  ? __x64_sys_connect+0x7a/0x90
[  260.274035][T10386]  ? do_syscall_64+0xfa/0x3b0
[  260.274054][T10386]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.274076][T10386]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  260.274135][T10386]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  260.274162][T10386]  ? __lock_acquire+0xab9/0xd20
[  260.274199][T10386]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  260.274231][T10386]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  260.274258][T10386]  ? xfrm_expand_policies+0x41f/0x6a0
[  260.274287][T10386]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  260.274318][T10386]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  260.274342][T10386]  ? rcuref_put+0x1b7/0x210
[  260.274366][T10386]  ? __pfx_rcuref_put+0x10/0x10
[  260.274389][T10386]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  260.274420][T10386]  xfrm_lookup_route+0x3c/0x1c0
[  260.274447][T10386]  __ip4_datagram_connect+0x9a5/0x1270
[  260.274480][T10386]  __ip6_datagram_connect+0x9f0/0x1150
[  260.274514][T10386]  ? __pfx___ip6_datagram_connect+0x10/0x10
[  260.274541][T10386]  ? __local_bh_enable_ip+0x12d/0x1c0
[  260.274560][T10386]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  260.274583][T10386]  ip6_datagram_connect_v6_only+0x63/0xa0
[  260.274613][T10386]  __sys_connect+0x316/0x440
[  260.274632][T10386]  ? __pfx___sys_connect+0x10/0x10
[  260.274657][T10386]  ? rcu_is_watching+0x15/0xb0
[  260.274679][T10386]  __x64_sys_connect+0x7a/0x90
[  260.274697][T10386]  do_syscall_64+0xfa/0x3b0
[  260.274714][T10386]  ? lockdep_hardirqs_on+0x9c/0x150
[  260.274732][T10386]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.274751][T10386]  ? clear_bhb_loop+0x60/0xb0
[  260.274771][T10386]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.274787][T10386] RIP: 0033:0x7f01d618ebe9
[  260.274805][T10386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  260.274821][T10386] RSP: 002b:00007f01d3f91038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  260.274843][T10386] RAX: ffffffffffffffda RBX: 00007f01d63c6270 RCX: 00007f01d618ebe9
[  260.274857][T10386] RDX: 000000000000001c RSI: 0000200000000040 RDI: 000000000000000d
[  260.274869][T10386] RBP: 00007f01d6211e19 R08: 0000000000000000 R09: 0000000000000000
[  260.274881][T10386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  260.274893][T10386] R13: 00007f01d63c6308 R14: 00007f01d63c6270 R15: 00007ffe829d8d38
[  260.274915][T10386]  </TASK>
[  260.274922][T10386] 
[  260.292306][ T7433] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  260.294438][T10386] Allocated by task 10253:
[  260.297747][ T7433] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  260.300656][T10386]  kasan_save_track+0x3e/0x80
[  260.300685][T10386]  __kasan_slab_alloc+0x6c/0x80
[  260.300707][T10386]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  260.300729][T10386]  xfrm_state_alloc+0x24/0x2f0
[  260.693474][T10386]  pfkey_add+0x6e4/0x2e00
[  260.697903][T10386]  pfkey_sendmsg+0xbfe/0x1090
[  260.702665][T10386]  __sock_sendmsg+0x21c/0x270
[  260.707340][T10386]  ____sys_sendmsg+0x505/0x830
[  260.712104][T10386]  ___sys_sendmsg+0x21f/0x2a0
[  260.716842][T10386]  __x64_sys_sendmsg+0x19b/0x260
[  260.721947][T10386]  do_syscall_64+0xfa/0x3b0
[  260.726451][T10386]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.732349][T10386] 
[  260.734668][T10386] Freed by task 5939:
[  260.738638][T10386]  kasan_save_track+0x3e/0x80
[  260.743312][T10386]  kasan_save_free_info+0x46/0x50
[  260.748421][T10386]  __kasan_slab_free+0x5b/0x80
[  260.753212][T10386]  kmem_cache_free+0x18f/0x400
[  260.757986][T10386]  xfrm_state_gc_task+0x52d/0x6b0
[  260.763013][T10386]  process_scheduled_works+0xae1/0x17b0
[  260.768559][T10386]  worker_thread+0x8a0/0xda0
[  260.773169][T10386]  kthread+0x70e/0x8a0
[  260.777241][T10386]  ret_from_fork+0x3f9/0x770
[  260.781832][T10386]  ret_from_fork_asm+0x1a/0x30
[  260.786596][T10386] 
[  260.788917][T10386] The buggy address belongs to the object at ffff888057bc0000
[  260.788917][T10386]  which belongs to the cache xfrm_state of size 928
[  260.802881][T10386] The buggy address is located 816 bytes inside of
[  260.802881][T10386]  freed 928-byte region [ffff888057bc0000, ffff888057bc03a0)
[  260.816687][T10386] 
[  260.819009][T10386] The buggy address belongs to the physical page:
[  260.825416][T10386] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888057bc1540 pfn:0x57bc0
[  260.835473][T10386] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  260.843964][T10386] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  260.851763][T10386] page_type: f5(slab)
[  260.855741][T10386] raw: 00fff00000000040 ffff8880202e1640 dead000000000122 0000000000000000
[  260.864324][T10386] raw: ffff888057bc1540 00000000800f000c 00000000f5000000 0000000000000000
[  260.872903][T10386] head: 00fff00000000040 ffff8880202e1640 dead000000000122 0000000000000000
[  260.881573][T10386] head: ffff888057bc1540 00000000800f000c 00000000f5000000 0000000000000000
[  260.890239][T10386] head: 00fff00000000002 ffffea00015ef001 00000000ffffffff 00000000ffffffff
[  260.898905][T10386] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  260.907571][T10386] page dumped because: kasan: bad access detected
[  260.913985][T10386] page_owner tracks the page as allocated
[  260.919701][T10386] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6150, tgid 6146 (syz.1.30), ts 104652501699, free_ts 104633947686
[  260.938974][T10386]  post_alloc_hook+0x240/0x2a0
[  260.943739][T10386]  get_page_from_freelist+0x21e4/0x22c0
[  260.949279][T10386]  __alloc_frozen_pages_noprof+0x181/0x370
[  260.955082][T10386]  alloc_pages_mpol+0x232/0x4a0
[  260.959943][T10386]  allocate_slab+0x8a/0x370
[  260.964525][T10386]  ___slab_alloc+0xbeb/0x1410
[  260.969205][T10386]  kmem_cache_alloc_noprof+0x283/0x3c0
[  260.974662][T10386]  xfrm_state_alloc+0x24/0x2f0
[  260.979429][T10386]  __find_acq_core+0x8a7/0x1c00
[  260.984371][T10386]  xfrm_find_acq+0x78/0xa0
[  260.988784][T10386]  xfrm_alloc_userspi+0x6b3/0xc90
[  260.993809][T10386]  xfrm_user_rcv_msg+0x7a0/0xab0
[  260.998747][T10386]  netlink_rcv_skb+0x208/0x470
[  261.003525][T10386]  xfrm_netlink_rcv+0x79/0x90
[  261.008203][T10386]  netlink_unicast+0x82c/0x9e0
[  261.012968][T10386]  netlink_sendmsg+0x805/0xb30
[  261.017729][T10386] page last free pid 6155 tgid 6131 stack trace:
[  261.024053][T10386]  __free_frozen_pages+0xbc4/0xd30
[  261.029168][T10386]  stack_depot_save_flags+0x436/0x860
[  261.034538][T10386]  kasan_save_track+0x4f/0x80
[  261.039298][T10386]  __kasan_slab_alloc+0x6c/0x80
[  261.044145][T10386]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  261.050394][T10386]  kmalloc_reserve+0xbd/0x290
[  261.055122][T10386]  __alloc_skb+0x142/0x2d0
[  261.059638][T10386]  __tcp_send_ack+0xaf/0x620
[  261.064229][T10386]  tcp_release_cb+0x3a0/0x490
[  261.068925][T10386]  release_sock+0xc2/0x1f0
[  261.073366][T10386]  tcp_sendmsg+0x39/0x50
[  261.077621][T10386]  __sock_sendmsg+0x19c/0x270
[  261.082305][T10386]  ____sys_sendmsg+0x52d/0x830
[  261.087069][T10386]  ___sys_sendmsg+0x21f/0x2a0
[  261.091747][T10386]  __sys_sendmmsg+0x227/0x430
[  261.096419][T10386]  __x64_sys_sendmmsg+0xa0/0xc0
[  261.101269][T10386] 
[  261.103586][T10386] Memory state around the buggy address:
[  261.109209][T10386]  ffff888057bc0200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  261.117371][T10386]  ffff888057bc0280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  261.125465][T10386] >ffff888057bc0300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  261.133611][T10386]                                      ^
[  261.139335][T10386]  ffff888057bc0380: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  261.147569][T10386]  ffff888057bc0400: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[  261.155629][T10386] ==================================================================
[  261.165304][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  261.172517][    C1] vcan0: j1939_tp_rxtimer: 0xffff888057bd0000: rx timeout, send abort
[  261.181175][ T7433] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  261.213114][ T5882] Bluetooth: hci0: command tx timeout
[  261.238192][T10386] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  261.245453][T10386] CPU: 1 UID: 0 PID: 10386 Comm: syz.1.1144 Not tainted syzkaller #0 PREEMPT(full) 
[  261.254855][T10386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  261.265025][T10386] Call Trace:
[  261.268345][T10386]  <TASK>
[  261.271299][T10386]  dump_stack_lvl+0x99/0x250
[  261.275929][T10386]  ? __asan_memcpy+0x40/0x70
[  261.280535][T10386]  ? __pfx_dump_stack_lvl+0x10/0x10
[  261.285733][T10386]  ? __pfx__printk+0x10/0x10
[  261.290595][T10386]  vpanic+0x281/0x750
[  261.294580][T10386]  ? preempt_schedule+0xae/0xc0
[  261.299451][T10386]  ? __pfx_vpanic+0x10/0x10
[  261.303956][T10386]  ? preempt_schedule_common+0x83/0xd0
[  261.309421][T10386]  ? preempt_schedule+0xae/0xc0
[  261.314275][T10386]  ? __pfx_preempt_schedule+0x10/0x10
[  261.319660][T10386]  panic+0xb9/0xc0
[  261.323384][T10386]  ? __pfx_panic+0x10/0x10
[  261.327827][T10386]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  261.334076][T10386]  ? xfrm_state_find+0x2cf2/0x5400
[  261.339198][T10386]  check_panic_on_warn+0x89/0xb0
[  261.344156][T10386]  ? xfrm_state_find+0x2cf2/0x5400
[  261.349266][T10386]  end_report+0x78/0x160
[  261.353519][T10386]  kasan_report+0x129/0x150
[  261.358034][T10386]  ? xfrm_state_find+0x2cf2/0x5400
[  261.363190][T10386]  xfrm_state_find+0x2cf2/0x5400
[  261.368261][T10386]  ? unwind_get_return_address+0x4d/0x90
[  261.373930][T10386]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  261.380113][T10386]  ? xfrm_state_find+0x1da/0x5400
[  261.385145][T10386]  ? __pfx_xfrm_state_find+0x10/0x10
[  261.390434][T10386]  ? kasan_save_stack+0x4d/0x60
[  261.395285][T10386]  ? kasan_save_stack+0x3e/0x60
[  261.400140][T10386]  ? kasan_record_aux_stack+0xbd/0xd0
[  261.405525][T10386]  ? ip_route_output_key_hash_rcu+0x196a/0x23e0
[  261.411773][T10386]  ? ip_route_output_key_hash+0x174/0x280
[  261.417492][T10386]  ? __ip4_datagram_connect+0x8f4/0x1270
[  261.423215][T10386]  ? __ip6_datagram_connect+0x9f0/0x1150
[  261.428867][T10386]  ? ip6_datagram_connect_v6_only+0x63/0xa0
[  261.434772][T10386]  ? __x64_sys_connect+0x7a/0x90
[  261.439731][T10386]  ? do_syscall_64+0xfa/0x3b0
[  261.444492][T10386]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.450649][T10386]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  261.456905][T10386]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  261.463518][T10386]  ? __lock_acquire+0xab9/0xd20
[  261.468390][T10386]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  261.473773][T10386]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  261.479148][T10386]  ? xfrm_expand_policies+0x41f/0x6a0
[  261.484621][T10386]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  261.490003][T10386]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  261.495817][T10386]  ? rcuref_put+0x1b7/0x210
[  261.500325][T10386]  ? __pfx_rcuref_put+0x10/0x10
[  261.505203][T10386]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  261.510601][T10386]  xfrm_lookup_route+0x3c/0x1c0
[  261.515471][T10386]  __ip4_datagram_connect+0x9a5/0x1270
[  261.521027][T10386]  __ip6_datagram_connect+0x9f0/0x1150
[  261.526506][T10386]  ? __pfx___ip6_datagram_connect+0x10/0x10
[  261.532429][T10386]  ? __local_bh_enable_ip+0x12d/0x1c0
[  261.537826][T10386]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  261.543558][T10386]  ip6_datagram_connect_v6_only+0x63/0xa0
[  261.549290][T10386]  __sys_connect+0x316/0x440
[  261.553884][T10386]  ? __pfx___sys_connect+0x10/0x10
[  261.559006][T10386]  ? rcu_is_watching+0x15/0xb0
[  261.563790][T10386]  __x64_sys_connect+0x7a/0x90
[  261.568558][T10386]  do_syscall_64+0xfa/0x3b0
[  261.573062][T10386]  ? lockdep_hardirqs_on+0x9c/0x150
[  261.578262][T10386]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.584414][T10386]  ? clear_bhb_loop+0x60/0xb0
[  261.589095][T10386]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.595025][T10386] RIP: 0033:0x7f01d618ebe9
[  261.599535][T10386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  261.619139][T10386] RSP: 002b:00007f01d3f91038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  261.627584][T10386] RAX: ffffffffffffffda RBX: 00007f01d63c6270 RCX: 00007f01d618ebe9
[  261.635562][T10386] RDX: 000000000000001c RSI: 0000200000000040 RDI: 000000000000000d
[  261.643631][T10386] RBP: 00007f01d6211e19 R08: 0000000000000000 R09: 0000000000000000
[  261.651619][T10386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  261.659602][T10386] R13: 00007f01d63c6308 R14: 00007f01d63c6270 R15: 00007ffe829d8d38
[  261.667596][T10386]  </TASK>
[  261.670775][T10386] Kernel Offset: disabled
[  261.675096][T10386] Rebooting in 86400 seconds..