last executing test programs:

3.067281752s ago: executing program 0 (id=1458):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000001800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r4, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000c40)=""/69, 0x45}], 0x1}}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000e00)=""/185, 0xb9}], 0x1}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001640)=""/112, 0x70}], 0x1}}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001a80)=""/8, 0x8}], 0x1}}], 0x4, 0x400123a0, 0x0)
sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0x1}, 0x1c)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000140)=0x5, 0x4)
r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r5, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000005000)=ANY=[], 0x1198}, 0x1, 0x0, 0x0, 0x40}, 0x880)
recvmmsg$unix(r1, &(0x7f0000006540)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000004000)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

2.743289867s ago: executing program 3 (id=1463):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000340)=0x7e, 0x4)
close(0x3)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001140)={'wlan0\x00'})
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8)
ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000180)=0x4)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @multicast1}})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000000)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4008800}, 0x20004010)

2.484947805s ago: executing program 3 (id=1468):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x3, 0x300)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x14, 0x38, 0x1, 0x70bd2c, 0x25dfdbff, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0xc804)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000109ee8f30817502a460000000000000a50000000060a01040000000000000000020000002400048020000180080001006f73660014000280050002001f00000008000140000000000900010073797a30000000000900020073797a3200000000140000001100010000050000000000000000000a"], 0x78}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff})
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0), r2)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x28, r6, 0x203, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x21}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4e808}, 0x4000)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000018c0)={&(0x7f0000001780), 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x78, r4, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x14a, 0x3e}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x101}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x29c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x5, 0x56e9, 0x6, 0x2]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, <r8=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f00000002c0)={'erspan0\x00', <r9=>0x0, 0x7, 0x80, 0x1, 0x80, {{0xb, 0x4, 0x2, 0x2, 0x2c, 0x68, 0x0, 0xe, 0x29, 0x0, @remote, @multicast2, {[@generic={0x83, 0x6, "21013d69"}, @rr={0x7, 0xf, 0xcc, [@dev={0xac, 0x14, 0x14, 0x3e}, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}})
r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x1d, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x1, 0x6, 0x1, 0x9, 0xfffffffffffffff0, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80000000}]}, &(0x7f0000000280)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000600)=""/4096, 0x41100, 0x0, '\x00', r9, 0x25, r10, 0x8, &(0x7f0000001600)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000001640)=[{0x4, 0x3, 0xc, 0xa}, {0x1, 0x3, 0xa, 0x8}, {0x0, 0x1, 0x4, 0x7}, {0x1, 0x2, 0x2, 0x1}, {0x1, 0x2, 0x5, 0x6}, {0x2, 0x5, 0xc, 0xb}], 0x10, 0x401}, 0x94)

2.458937398s ago: executing program 2 (id=1469):
r0 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e25, 0xeb, @initdev={0xfe, 0x88, '\x00', 0x21, 0x0}, 0x5b56}, 0x1c)
sendto$inet6(r0, &(0x7f00000000c0)="800037e92208a19e", 0x8, 0x4890, &(0x7f0000000040)={0xa, 0x1000, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xfff3}}}, 0x24}}, 0x24040010)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff5653f, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x29, 0x200, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x8, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080)
r9 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r11 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r11, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4)
bind$inet(r11, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r11, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
sendto$inet(r11, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xfffa}, {}, {0x1c, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_TTL={0x5}, @TCA_FLOWER_KEY_TCP_SRC_MASK={0x6}]}}]}, 0x4c}}, 0x24004000)
socket$netlink(0x10, 0x3, 0x0)

2.244037764s ago: executing program 4 (id=1470):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x108, 0x11, 0x8, 0x70bd2c, 0x25dfdbfc, {0x19}, [@generic="7c2470df5321b862cb0275e7c715c63c1639273b7c0f3d8722add58b1c8b3d2d002c6177766fc5a1363fb2f5111bd39e436a2b74a93172b88c490727c7897c3d20d7d47c480cde45dd7cbba65c4146cc5eac8e6a18a3c76ef21001fd687e6e4c0114491246c73d104b5729d241fca0a0c3efaa0db7f5fa055def77be395137890f8ed531e93471a519eb28d8ad0defc95e2d55e995567aeed6575885ca37b4dd1e3c7d781ff3dfdd4cecf5d9df600a55f923c5dd93536e19e0986c187e0fcfef1b17347de68f9aa53427b9d1f617e6c983b77062710c924ed22aa716dead", @typed={0x14, 0x29, 0x0, 0x0, @ipv6=@mcast2}]}, 0x108}, 0x1, 0x0, 0x0, 0x40001}, 0x800)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000014060000400012800b00010067656e6576650000300002801400070000000000000000000000ffffac14140005000a0002000000050009"], 0x68}, 0x9}, 0x0)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x7, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c000}, 0x40)

2.243544007s ago: executing program 1 (id=1471):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275c, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = socket$caif_seqpacket(0x25, 0x5, 0x1)
setsockopt$CAIFSO_REQ_PARAM(r3, 0x116, 0x80, 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000400)={0x1, 0x1, 0x1000, 0x7, &(0x7f0000000200)="fed74c9ec3c52d", 0x66, 0x0, &(0x7f0000000380)="cf42459efa9c6b8138d5716b5b5cf50ab7e73638b7bb7a41205e47e98e537e1d610bba7136cb840f572bf72e8d3dcfd5da3f76ff06250b96c5dd05b07a9bb0c1fe17e8a65157804b17e0a3fd6867bd93d25458b399634923502a22a57c7e63afd3a65366b0bb"})
r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000e4ff0000000000020202000900030073797a32000000000500040002000000090001"], 0x34}, 0x1, 0x40030000000000}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x51, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, r6, 0x1, 0x0, 0x0, {0x28}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x2c}}, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000001c0)={0x10, 0xffff, 0x0, 0x7, 0x1})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1400000004000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0000000000000000000000000000fbff00000000000000000000060055"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r7, &(0x7f0000000080), &(0x7f0000000100)=""/122}, 0x20)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfee3, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfe, {0x6, 0x0, 0x8100, 0x0, {0x545747c6de737373, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0xb, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)

2.134363962s ago: executing program 3 (id=1472):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @local, 0xb}, 0x1c)
syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {0x4e22, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e11f41e5fff9620915b6f78670dfaf9a195fcb2a79cf6b7931c9b400"}}}}}}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050006000000140017800400050004000400060001"], 0x60}}, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280080018000bac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

2.084558566s ago: executing program 2 (id=1473):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES64=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="6400000010003904fcffffff0000000000000000", @ANYRES32=r2, @ANYBLOB="00000000422200001800128008000100677265000c000280080006007f"], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x844)

1.911646144s ago: executing program 4 (id=1474):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet(0x2, 0x3, 0x8d)
setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) (async)
setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) (async)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={<r2=>0x0, @local, @local}, &(0x7f0000000140)=0xc)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x7c, r2})
r4 = socket(0xa, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x43, 0x3, 0x1}, 0x10)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000040)=""/112, &(0x7f0000000100)=0x70) (async)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000040)=""/112, &(0x7f0000000100)=0x70)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r0)
sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) (async)
sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24000000)
ioctl(r3, 0x8916, &(0x7f0000000000)) (async)
ioctl(r3, 0x8916, &(0x7f0000000000))
ioctl(r4, 0x8936, &(0x7f0000000000)) (async)
ioctl(r4, 0x8936, &(0x7f0000000000))
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8)
r7 = syz_init_net_socket$llc(0x1a, 0x3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000380)={0x8})
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9)
write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000500000000000000050008000d000000", 0x24)

1.873964102s ago: executing program 0 (id=1475):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffffffffffff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1bffd9e381956a2fde5a3ee3921b8d0a0cef9dea0ed0c8d8404336910c8f348963ecaebe203b0ed8403fbc892ad1a94d5a91a15d94fceb81269fe8c7a7739871f132383c2c21acfbe5368f01b21fd3bf9ce157277fc2155967e9689ee9ff9d66bfb04f5a6135e399a0606d14bf7f8ef0e9d8eb7b81d2bfafbe0b45cfe982b0423106c2bb7552f4568b7fc2cd9082ea9c2090e871e4fbeba79ecb6a8f", @ANYRES32=r3, @ANYBLOB="100001800c0004800800020011000000100001800c00048008000200110000000c0001800500030004000000100001800c0004800800020011000000"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x20000040)

1.106394011s ago: executing program 1 (id=1476):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5}}, @NHA_ID={0x8, 0x6, 0xee}, @NHA_OIF={0x8, 0x5, r1}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x6}]}, 0x3c}}, 0x4900)

1.043947202s ago: executing program 4 (id=1477):
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)='G', 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000000000000840000000800000018"], 0x28}, 0x41)
r1 = socket(0x10, 0x80002, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042801800018006000600800a00000c001c000500030000000000040002"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
bind$unix(r1, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20044890}, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711067000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90)

1.042272915s ago: executing program 2 (id=1478):
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000008c0)=ANY=[@ANYBLOB="28000000010000000000000000000000000000000000000000000000003300"/40], 0x28}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001a80), r1)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001b00)={0x34, r2, 0x1, 0x1000000, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0x34}}, 0x20004000)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002", @ANYBLOB="40e8317375a0af3c641429d7f637cccdfbec00c8693a07082237045f96a4f0f64704bbadc6097b38a16c4cceba270172fc907d37e45d65b651e2b226eee96ac35ad6"])
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r3, 0x1, 0x2, 0x0, 0x48)
getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)
syz_emit_ethernet(0x3e, &(0x7f00000006c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6012100800083a00fe8000000000000000000000000000bbfe8000fffffffffffffff300000000aa80009078fffc0000"], 0x0)

998.099801ms ago: executing program 3 (id=1479):
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x11, 0x4, 0x4, 0x2}, 0x48) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x11, 0x4, 0x4, 0x2}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000000)="f4", &(0x7f00000000c0)=""/85}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f000001a100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000001a040)=@bridge_delneigh={0x1c, 0x1d, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x12, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

934.391245ms ago: executing program 0 (id=1480):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="38010000100013"], 0x138}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$inet6_sctp(0xa, 0x801, 0x84) (async)
setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) (async)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, 0x0, 0x0) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="38010000100013"], 0x138}}, 0x0) (async)

859.999298ms ago: executing program 1 (id=1481):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events.local\x00', 0x275a, 0x0) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r3=>0x0})
sendmsg$can_raw(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@can={{0x4, 0x1}, 0xfc, 0x2, 0x0, 0x0, "33ee736ec0420be4"}, 0x10}}, 0x4004800) (async, rerun: 64)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) (async, rerun: 64)
syz_emit_ethernet(0x4e, &(0x7f0000000300)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x9, 0x2, 0x0, 0x0, 0x24, 0x0, 0x9, 0x2, 0x0, 0x0, @local, @rand_addr=0xe0000000, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}, @timestamp_addr={0x44, 0x0, 0x6b, 0x1, 0xa, [{@dev={0xac, 0x14, 0x14, 0x1d}}, {@local, 0x4}, {@rand_addr=0x64010102, 0x3}, {@multicast2, 0x81}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x8000}, {@loopback, 0x22e}, {@loopback, 0x10001}, {@multicast2, 0xa}]}]}}}}}}}, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x24, &(0x7f0000000040)=0x1000, 0x4) (async)
ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000540)={0x1100, 0x204, 0x52, 0x10000}) (async, rerun: 64)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) (async, rerun: 32)
close(r4) (async, rerun: 32)
setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000001100)=0x80001000, 0x43) (async)
getsockopt$inet_tcp_buf(r4, 0x6, 0x1a, &(0x7f0000000080)=""/83, &(0x7f0000000000)=0x53)

799.949851ms ago: executing program 4 (id=1482):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000002000010300000000fbdbdf25022000000000000000000000080001000000000008001b"], 0x2c}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48f40, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0xfffffcebfff, 0x1000, 0x800}, 0x20)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r5=>0x0})
r6 = gettid() (async)
r7 = socket(0x10, 0x803, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r5, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r6}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) (async)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000040)=0x9)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152)

758.984916ms ago: executing program 2 (id=1483):
r0 = socket(0x15, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async)
recvmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1ff001}, {{0x0, 0xfffffe16, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/202, 0xca}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000004e40)=""/4111, 0x100f}], 0x3}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/165, 0xa5}, {&(0x7f0000000340)=""/215, 0xd7}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000002e00)=""/4089, 0xff9}, {&(0x7f0000000440)=""/117, 0x75}], 0x5}}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40012020, 0x0) (async)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x7ffffffc}, 0x1c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x24, r3, 0xdac7a804b810efff, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}]}, 0x24}}, 0x0) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r4=>0x0}) (async, rerun: 32)
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bond0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r6, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) (async)
recvfrom(r2, &(0x7f0000000a00)=""/4096, 0x1000, 0x2, 0x0, 0x0) (async)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'erspan0\x00', <r8=>0x0}) (async, rerun: 64)
r9 = socket(0x1d, 0x2, 0x6) (rerun: 64)
bind$can_j1939(r9, &(0x7f0000000280)={0x1d, r8, 0x2, {0x0, 0xf0}, 0x2}, 0x18)
getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@loopback, <r10=>0x0}, &(0x7f0000000240)=0x14)
sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)={0xcc, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x4000084) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64)
sendto$unix(r0, &(0x7f00000000c0)="507c376ca81e40ac7708df7873b9321979b2790feeab85b666ad182b8f01aa0acf02449057cde582e8c8a79d48c23d1b116defb65b88952debf67fc3e9a8ef9485bd1b55f33e8beecd50acb4998d46677e5d0622127a6d0f4fafcf5f88b5628043c998f6a52172a8d3c6f8e2cc264d356b483fc049b299d2bb5394f50b874727fced3ce5648b7c5cfa3ad7e796fed07155df09c787ce9c6f2f4e840e23498fbe4a6771027ac8b6ce3e7249fd76ca69db34058232453782dd22c65f9d3fb8b0249a539b8363d6e75f460e9646ac7b9923709e410699e9", 0xd6, 0x805, 0x0, 0x0) (rerun: 64)

692.024119ms ago: executing program 3 (id=1484):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000080)={'veth1_to_bridge\x00'})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0xf6}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0xfe, 0x0, 0x18}}}}}, 0x36)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRES8=r0], 0xb0}, 0x1, 0x0, 0x0, 0x4000854}, 0x0)

682.089189ms ago: executing program 0 (id=1485):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket(0x10, 0x803, 0x2) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="7f3451ef3b3857d895a5d6f643d2c0557c9840a7c3eb00010000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) (async)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) (async)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_time\x00', 0x0, 0x0) (async)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001940)=@raw={'raw\x00', 0x8, 0x3, 0xb50, 0x1d0, 0xffffffff, 0xffffffff, 0x1d0, 0xffffffff, 0xa80, 0xffffffff, 0xffffffff, 0xa80, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x73, 0x0, 0x0, 0x45}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x9, 'system_u:object_r:systemd_logind_exec_t:s0\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, [], [0x0, 0xffffffff, 0xff000000], 'wg1\x00', 'gre0\x00'}, 0x0, 0x888, 0x8b0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x7fff, 0x1}, {0x8, 0x3}, {0xfffff7ec, 0x1}, {0xfff, 0xbd3626e1c8b1df09}, {0x5, 0x2}, {0xb34c, 0x3}, {0x2}, {0xe48b, 0x2}, {0x101, 0x2}, {0x5, 0x2}, {0x5}], [{0x400}, {0x6, 0x8001}, {0x401, 0x40}, {0x7fff}, {0xffffc1b1, 0x32de}, {0xfff, 0x8}, {0x2, 0x9}, {0x1, 0xbbca}, {0x83, 0x1}, {0x5, 0x7}, {0x3}], 0x1, 0x7}, {[{0x9, 0x3}, {0x6, 0x3}, {0x4, 0x3}, {0x1, 0x2}, {0x9, 0x1}, {0xfffffffa}, {0x0, 0x2}, {0x80000000, 0x3}, {0x80000001}, {0x8001, 0x2}, {0xff, 0x3}], [{0x7, 0x5}, {0x3, 0x6b6}, {0x4, 0x400}, {0x3}, {0x4, 0xfff}, {0x3ff, 0xe5d7}, {0x6, 0x3ff}, {0xa78, 0xffffffff}, {0xa9e1, 0x3}, {0x8, 0x1000}, {0xc7, 0xf385}], 0x6, 0x3}, {[{0x101, 0x2}, {0x9}, {0x3, 0x3}, {0x2, 0x3}, {0x48}, {0x9, 0x2}, {0x1, 0x2}, {0x7, 0x2}, {0x9}, {0x7, 0x1}, {0x0, 0x3}], [{0xfffffffb, 0x5}, {0x8, 0xa17}, {0x80, 0x4}, {0x8}, {0x3, 0x7}, {0x5e18, 0x7}, {0x4, 0x101}, {0x7, 0xfff}, {0xd, 0x7f}, {0x2, 0x2}, {0xfb3, 0xa94}], 0xb, 0x4}, {[{0x8, 0x1}, {0x4, 0x2}, {0x4e, 0xc781c4f1f9c1fa4f}, {0x8, 0x1}, {0x4e5, 0x2}, {0x3, 0x3}, {0x6, 0x1}, {0x7, 0x1}, {0x5, 0x2}, {0xfff}, {0x4}], [{0x9, 0x8001}, {0xffff, 0x4}, {0x7fff, 0xf}, {0x66d, 0x9}, {0x92, 0xb}, {0x3, 0x6}, {0x7, 0xfff}, {0x1, 0xff}, {0x1, 0x1}, {0x0, 0x8}, {0x1, 0xff}], 0xa}, {[{0x5, 0x2}, {0x7a3, 0x2}, {0x1, 0x3}, {0x100, 0x3}, {0x40}, {0x8d, 0x1}, {0x8, 0x3}, {0x9, 0x3}, {0x8, 0x2}, {0x1, 0x1}, {0x7}], [{0x854f, 0x6b}, {0x7, 0x7}, {0x6, 0x80}, {0x3, 0xffc00000}, {0x7}, {0x3, 0x6}, {0x2, 0xf17}, {0x25, 0x401}, {0x200, 0x84b}, {0x7fff, 0x80}, {0x3, 0x1}], 0x4, 0x8}, {[{0xc3d, 0x147d12363fe5c40a}, {0x64, 0x1}, {0xf, 0x3}, {0x5, 0x1}, {0x7fffffff, 0x2}, {0x5}, {0x2af0, 0x2}, {0x1bd6, 0x2}, {0x1, 0x2}, {0x7, 0x1}, {0x7, 0x2}], [{0x92b, 0x1ff}, {0x1, 0xf458}, {0x5, 0x3}, {0x84, 0x1}, {0xe923, 0x7fff}, {0x4, 0xe}, {0x3, 0x6}, {0xad3f, 0x59f}, {0x4, 0xfffffffc}, {0x6}, {0x5, 0x6f}], 0x9}, {[{0x8}, {0x2f, 0x1}, {0x7, 0x1}, {0x0, 0x2}, {0x3, 0x3}, {0x0, 0x1}, {0x1, 0x3}, {0x8, 0x3}, {0x7}, {0x2}, {0x2, 0x3}], [{0x101, 0x80000000}, {0x1, 0x9}, {0x40, 0xff}, {0x4, 0x2}, {0x5, 0x6}, {0x2, 0x5}, {0x0, 0x3}, {0xe, 0x5}, {0x6, 0x1ff}, {0xc, 0x7}, {0x1, 0x4}], 0xb, 0x7}, {[{0x8c, 0x1}, {0xd}, {0x10000, 0x2}, {0x8, 0x2}, {0x3, 0x3}, {0x0, 0x3}, {0x1ff, 0x1}, {}, {0xc, 0x1}, {0xf0f}, {0xf629}], [{0x4, 0x5}, {0x35f7, 0x1}, {0x401, 0xf6}, {0x94, 0xd16}, {0x8, 0x5}, {0x35, 0x4929}, {0x8001, 0x5}, {0x1000, 0x9}, {0x9f, 0x65}, {0x9, 0x4}, {0x9, 0xf0a9}], 0x1, 0x4}, {[{0x9, 0x1}, {0x9, 0x2}, {0x7, 0x1}, {0x4, 0x4adbb8db8b6f3087}, {0x3}, {0x3, 0x3}, {0x7ff}, {0x7, 0x1}, {0x10000, 0x3}, {0x0, 0x2}, {0x80000000, 0x1}], [{0xf767, 0x8}, {0xc, 0x5}, {0x9, 0x8}, {0x6, 0xb23}, {0x101, 0x4}, {0xfffffff7, 0xb98}, {0x10001, 0x8f}, {0x9, 0xa83}, {0xd, 0x1}, {0x4, 0xe00}, {0x3, 0x444}], 0x6, 0x4}, {[{0x2, 0x3}, {0x2}, {0x26914786, 0x3}, {0x3}, {0xd7f, 0x1}, {0x7fffffff}, {0xf}, {0x4, 0x2}, {0x8, 0x1}, {0x4, 0x3}, {0xe, 0x1}], [{0xb59, 0x6}, {0x4, 0x70c063f5}, {0x2, 0xfffffffe}, {0x5, 0x6}, {0x10000, 0x872}, {0x6, 0x8}, {0xffff, 0x3}, {0x7, 0x4}, {0x6, 0x10}, {0xfff, 0xa}, {0x81, 0x4}], 0xb, 0x4}, {[{0x200, 0x1}, {0x2, 0x3}, {0xa, 0x1}, {0x3ff, 0x1}, {0x7}, {0x1, 0x2}, {0x6, 0x3}, {0x7}, {0x92, 0x3}, {0x6, 0x1}, {0x7fffffff, 0x2}], [{0x3, 0xbbb9}, {0x4, 0x400}, {0xdec, 0x9}, {0x7, 0x1d}, {0x0, 0x9a}, {0x1, 0x7}, {0x1, 0xf580}, {0x4, 0x9f}, {0x2, 0x4}, {0x5, 0x7}, {0xfff, 0x1}], 0x5, 0x7}], 0x4, 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xbb0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010) (async)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_eee={0x45, 0x4, 0x6, 0x80000001, 0x81, 0x5, 0x100, 0x7, [0xd9bb, 0xd]}})
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000880)=0x3f, 0x4)
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000018c0)=ANY=[@ANYBLOB="540000001200010300"/56, @ANYRES32=0x0, @ANYBLOB="0000000000000000fffffff0000000000800030011"], 0x54}}, 0x0)
readv(r7, &(0x7f0000001840)=[{&(0x7f0000001500)=""/35, 0x23}], 0x1) (async)
connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket(0x1, 0x803, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000640012800b00010067656e657665000054000280050004000100000005000900000000000500090000000000050008000000000008000200e00000010800020064010102050009000100000005000a00000000000500040009000000050008000000000008000500", @ANYRES32=0x0, @ANYBLOB="08000300a5eb1e25"], 0x94}}, 0x0) (async)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
epoll_create1(0x0) (async)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00855f7f0e8165e208fc28148ed0918b5400d522e38de56804b86f0813868b1d3c716ae596be2a3cd2c5266215a30a77f1834dd2e0c73c9a55c3126d455d4b61e1edb3aa29260d7cc66b5497f1645fa2656c1f22058ecdc6ec709815f37fbba80cf9200f58f238759c57035a47adefd304cad7eb070fdc05dc2bb3b3f7740a8fbf2e29e17e1c8c0b2e474edae6610de135c1a594021fda928e26", @ANYRES32=r11], 0x54}}, 0x0)

532.152801ms ago: executing program 1 (id=1486):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000031e000000000000000000000300", @ANYRES32=0x0, @ANYBLOB="000000000439df48200012800b00010067656e65766500001000028005000a000000000004000e00"], 0x40}}, 0x0)

531.235145ms ago: executing program 2 (id=1487):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000080)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xfffffd, 0x6, 0x400}, 0x10) (async)
write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000005000000000800040001000000", 0x24) (async)
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800140600fc010000000000000000000000000000fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\t'], 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) (async)
sendmsg$alg(r4, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004011}, 0x4c040) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r6})
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r8, 0x107, 0x13, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) (async)
socket$nl_generic(0x10, 0x3, 0x10)

443.730794ms ago: executing program 0 (id=1488):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, 0x140c, 0x400, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x800)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x1}], 0x1}, 0x44)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x40000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x81}}}}]}, 0x38}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000440)="66b05bf1f7b03612bcb8838fde61ccb8a73c0f8b7806a6a5da17ad705e7e0d9ebd8e1afaf02b9a66405fc45d41b68eb95198c9e5664ae8997af1f8bbf4d1c998f818d6c1d9a17068f4eb65eac605b326c7b8d5db9edf1b1f5dad44cca66478d22e7ade09faf3d3a41c0ffaaaec2cb8f8885eb72de5024680a2324e"}, {&(0x7f00000004c0)="6a9cf4f7e0686314cc899c6594092abd76fe03ae4c8cd676ace2f944ebbbc5ebdcf7250f73662c18ee1543036c8fb207fd470b7772edcd312046ec260a97d695709a2a304038918938b074ca3062d577f9c819d0981b3af88c602ab58bc12d085ab662d414f5bac81db164c0dc097ddaee53ba3ada69cc91d54f7e9c749c0a2dd000f6be6ed86dde7e39d7413b86a8d43c8d36eef0e9024ddcf2d3ca14874148ebf8d0b60cd92bfd8731ab507e85d31e0fd7047739af2f52c7bee237f067aa8087317ddc47d7e29b68818478477b1aab"}, {&(0x7f0000000340)="03"}, {&(0x7f0000000b00)="d3a25cb9f7f4f19bbf6efb58c27dad0e65c0ae7ad850d705e47c526d86240e9259910fd7db7d4511611b473e8e5ce42fa633e1b010d3b1c059336ffff0984f80d48176b2c9ebddfaffad686a637cf1ff2bbcfa5bbd61749dd5593902a669606c06c113910de4191635b975369f22638f60212387a64ee5858853b1b00f5faf993b92865cf025aede0e42fcc63333ac5ec2f6796a15dd656cd15176b9b1f6ed8997cac74b475c41a9434c88962658e77e8f9728d40154896a4f"}, {&(0x7f0000001300)="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"}, {&(0x7f0000000680)="421541ed7c84d57c02796c23231aa4c33b4b9f14b65006f3eecca5d3c7eb1b747bf3da3379a9c44c6241442c0e180955cad851c70516b518dbed2ee9f6757e02397d292dce87bfd06be0d9753c31e9d739f4eff8f6d10582926e1f50b9cd59bb18c04c5c3b33c4126d2b430ee1457f0388bfac7c0e9a8c7c09c5f9aa93d8cf93d24234998f5151cec01d2b092ac8782864f87413645903e5e74cf018e664a652420f2999601c08d17569e1e00ea172095df5e8ab28a80d8457d0f63b8337702cba9d4f2c9081c4e43f55cf733c6067"}, {&(0x7f0000000780)="03a32cacdf549b87fba2c8e316d2ada0bced4f1faa152dd5935ff5fc910db5d98f2da405a8e85e2fa98d49ba68f01bc79fc1d4ef64b7fd7aa7d416dcdc3377048128124e7162719af447d20557ad0a29b4feecb0e49f73377377a2435374b498b6df6fe1d4fdea43d8048dbce4296d5a45e34f0e01d08c15e48b161d8d2c36a2f93dff473710a1a2c76ab9b502bf146aac8d47002bd791aae2b2a08283fd6d15014169feacd086da7fad82f63af2d54e7d076402fe0ead93267eb6522073858f5ce5e4bbb52705b9ed817e6faff2c06bb15f983409c2c45759"}, {&(0x7f0000000880)="c25927127ba8420536aa118a06ee55b5e0d3d5dff847a70771ccbb1c4fa9fe8dab630ffefa86c2aab9680439421d18a69df3f6088ff42c12a781be4886fb86ec4e5c56ed0c0f2d67b8bb4fad8ae44ee011316ffadbf480965fc4f2ce6c3d8b1843a4fdb6a66b7507f89f2454a363569546542a46515d7376f6d1966d2937ef04450ae6042a9f2179827539f6fa"}, {&(0x7f0000000940)="3b296d0dd34fdf8daf82398a04620048db8d748fb5ad6bdb4f376b58ea6f5d7aecd042778f75c2d5c339890ec5ea855e783d0ab47f63de4ef319a3377daa9ebcf6fff147487aea2d4b0f11ca078ec68c4b05ca2716821d191bd9fcdc7c1cf3355559f0afbd2b6ca38b2108de2e29b36747e9e6af64a7319db69c31e3a81272ad48db1a746fb6dc0717a4d55498e834d4b86993815c06e233847b91b4c6e281ce207ea544978ad713787a862f436ce691cf01ec6b1cf34d30f88fceaf616c602d3f916b7f866d2c35382e24318d9885c0e96f2758a6049d8e1bb695e809ef74fb44fe414ce237ec39ec37f5f4c7dfc3bd"}], 0x61}, 0x4895)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r9=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r8, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYRES32=r4], 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000bc0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(r7, &(0x7f0000000c80)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x28, r10, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xfffffffc, 0x44}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03030000000000000000020000000c00024000000000000000020900010073797a30"], 0x54}}, 0x0)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000002540)={0x2, 0x2}, 0x4)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, &(0x7f0000000040)={0x7, 'nr0\x00', {0xfffffffd}, 0x7})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="a000000010001b0e2a0400eb2636037f00000100", @ANYRES8=r3, @ANYBLOB="00000000000000000000001eccd0f05484cc8f83c147dff5465e1a99c4f00ac8fe150b250ec4eea4ca5659b7eef2402d67aa852d87ac6800003e4ae0f4f3bc9f00b97e00"/77], 0xa0}, 0x1, 0x0, 0x0, 0x8010}, 0x41)

309.99348ms ago: executing program 3 (id=1489):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) (async)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$SIOCAX25GETINFO(r1, 0x89ed, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @empty}, 0x1c)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r4)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x54, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4800)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1c)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000400)) (async)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}}, 0x0) (async)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async)
r9 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) (async, rerun: 64)
syz_emit_ethernet(0x9a, &(0x7f00000004c0)={@local, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x64, 0x11, 0x0, @empty, @empty, {[], {0x0, 0x4f22, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x3, "8a8bebc4b04ccb77e7f3a5ca93d7c73e6c0c42d91e27fb2f15030dcafcdaca76", "e24fcb751eeaa8add0b2f075633f64c7", {"10fa9742846dea296c9d16d6e1249908", "51f3b6750c654f5d43fbb564be51ddae"}}}}}}}}, 0x0) (async, rerun: 64)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e)
getsockopt(r10, 0x111, 0x5, 0x0, &(0x7f0000000080)=0x5a)
r11 = socket$nl_rdma(0x10, 0x3, 0x14) (async)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0)
syz_emit_ethernet(0x1076, &(0x7f0000000580)={@empty, @local, @void, {@ipv4={0x800, @udp={{0x18, 0x4, 0x2, 0x4, 0x1068, 0x65, 0x0, 0x8, 0x11, 0x0, @loopback, @local, {[@rr={0x7, 0xb, 0xc9, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @end, @timestamp_addr={0x44, 0x24, 0x22, 0x1, 0x0, [{@broadcast, 0x7}, {@remote, 0x40}, {@local, 0xd}, {@broadcast, 0x6}]}, @timestamp_prespec={0x44, 0x1c, 0x33, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x2c}, 0x2}, {@multicast2, 0x7fffffff}, {@broadcast, 0x7}]}]}}, {0x4e24, 0x4e24, 0x1008, 0x0, @opaque="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"}}}}}, &(0x7f0000000440)={0x1, 0x3, [0xc59, 0xed8, 0x7fd, 0x7c2]}) (async, rerun: 64)
sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xf0, r12, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3b34}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x800}, 0x24004004) (rerun: 64)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r11, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000101401002ccc040000000000d5a83734b40ed79a010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x83cd5ee2fa2aa4c2}, 0x8010)

270.506033ms ago: executing program 1 (id=1490):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0xa)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001800010300000000000000000a0000000003"], 0x24}}, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async)
sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="1c00000022"], 0x1c}], 0x1}, 0x0) (async)
listen(r1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000100), 0x1c) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x91, @remote, 0x1}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0) (async)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca64196953e92a07b3937730a33b6deca160d8c2fbff48eb964283"}, 0xd8) (async)
listen(r7, 0x0) (async)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)

265.901844ms ago: executing program 4 (id=1491):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r0, &(0x7f0000002200), 0x10)
r1 = socket(0x2d, 0x2, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006b11a400000000008600000000000400950000000004f8ff"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x4300, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x26}, 0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=r3], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffe}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x7}, 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="a3", 0x2}, 0x50)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket$inet(0x2, 0x4000000805, 0x0)
sendmmsg(r10, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x10, 0x84, 0xffffff44}], 0x10}}], 0x2, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000013002f0a25bd70000000000007006800", @ANYRES32=r8, @ANYBLOB="000900001020060024001a8009000100766c616e0000000004"], 0x44}}, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4)
sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500000005000000fd0900008400000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000ec4233bf00000000000000"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800, r12}, 0x38)
r13 = socket$nl_rdma(0x10, 0x3, 0x14)
bind$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
getsockopt(r13, 0x20, 0x200, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000011140100000000090000000008004a000200000008000100000000000800030004000000e4f75e3534e56f88d4073596b693f93fc920784a7c62c49fb74775ac13"], 0x28}}, 0x0)
r14 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r14, &(0x7f0000000100)={0xa, 0xffff, 0x0, @private1, 0x200000}, 0x1c)
sendto$inet6(r14, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)

211.779098ms ago: executing program 2 (id=1492):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
r3 = socket$inet6(0xa, 0x3, 0x84)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@multicast2, 0x0, 0x56, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1, 0x8}, {0x7, 0x0, 0x4}, 0x932, 0x0, 0x1, 0x0, 0x3}, {{@in6=@empty, 0x4d4, 0x6c}, 0x2, @in=@loopback, 0x2, 0x4, 0x0, 0x0, 0xfffffffc, 0x8, 0x4}}, 0xe8)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
socket(0x1d, 0x80000, 0x3)
sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='hrtimer_start\x00', r13}, 0x18)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r14=>0xffffffffffffffff, <r15=>0xffffffffffffffff})
sendmsg$inet(r15, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r14, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x2710})
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r4, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c)
sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xfff7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x4c}}, 0x0)

173.307898ms ago: executing program 0 (id=1493):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000019000000010000010900010073797a31000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000050a05000000000000000000010000000c00024000000000000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a310000000008000240000000011400"], 0xc8}}, 0x0)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0)
getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d40)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xc}, {0xfff2}, {0xa, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_csum={0x30, 0x10, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x64}}, 0x0)

47.93838ms ago: executing program 1 (id=1494):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWOBJ={0x54, 0x12, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_DATA={0x40, 0x4, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x263}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x166d24d0}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x5}]}}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x800}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}}], {0x14}}, 0xb0}}, 0x0)

0s ago: executing program 4 (id=1495):
socketpair(0x10, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x4, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f00000001c0)={'bond0\x00', {0x2, 0x0, @loopback}})
r3 = socket(0x10, 0x2, 0x0)
write(r3, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d0a0b49ff708800008002280008020200ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r6, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r4], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendto$packet(r2, &(0x7f0000000240)="3f6dc38a8d4e715114c3888479ec07e15fb1c5fc5bcd5758129d88fa61ec4d05610319a1341a6055752309b62827d65d7f063e3534e5a5852d078f4e5105bc0d9a984364b2993c7364b9f129082883ab6df955850d304e64268b0bef10fbe62d927494a30d", 0x65, 0x8040, &(0x7f0000000180)={0x11, 0x1a, r6, 0x1, 0xa2}, 0x14)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x0, 0xf}, {0x0, 0x0, 0x0, 0x81}]})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.50' (ED25519) to the list of known hosts.
[   69.674698][ T5850] cgroup: Unknown subsys name 'net'
[   69.779824][ T5850] cgroup: Unknown subsys name 'cpuset'
[   69.788430][ T5850] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   71.158462][ T5850] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   71.468958][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[   71.475413][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[   75.013398][ T5863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   75.023151][ T5863] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   75.031751][ T5863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   75.039781][ T5863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   75.048375][ T5863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   75.056266][ T5863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   75.078138][ T5865] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   75.086800][ T5865] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   75.111587][ T5865] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   75.121206][ T5865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   75.172372][ T5865] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   75.180735][ T5865] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   75.189453][ T5865] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   75.198332][ T5865] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   75.206388][ T5865] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   75.282299][ T5865] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   75.290552][ T5865] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   75.299062][ T5865] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   75.314940][ T5865] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   75.322925][ T5865] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   75.389325][ T5865] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   75.397677][ T5865] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   75.406395][ T5865] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   75.415484][ T5865] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   75.423935][ T5865] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   75.836122][ T5864] chnl_net:caif_netlink_parms(): no params data found
[   75.924149][ T5860] chnl_net:caif_netlink_parms(): no params data found
[   76.049063][ T5871] chnl_net:caif_netlink_parms(): no params data found
[   76.128085][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.136555][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.144142][ T5864] bridge_slave_0: entered allmulticast mode
[   76.151846][ T5864] bridge_slave_0: entered promiscuous mode
[   76.165064][ T5869] chnl_net:caif_netlink_parms(): no params data found
[   76.190564][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.198012][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.205195][ T5864] bridge_slave_1: entered allmulticast mode
[   76.212850][ T5864] bridge_slave_1: entered promiscuous mode
[   76.360338][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.367857][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.375051][ T5860] bridge_slave_0: entered allmulticast mode
[   76.382449][ T5860] bridge_slave_0: entered promiscuous mode
[   76.395079][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.405231][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.413750][ T5871] bridge_slave_0: entered allmulticast mode
[   76.424607][ T5871] bridge_slave_0: entered promiscuous mode
[   76.435334][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.448484][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.462608][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.470484][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.477756][ T5860] bridge_slave_1: entered allmulticast mode
[   76.484968][ T5860] bridge_slave_1: entered promiscuous mode
[   76.507015][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.514177][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.521447][ T5871] bridge_slave_1: entered allmulticast mode
[   76.529153][ T5871] bridge_slave_1: entered promiscuous mode
[   76.582806][ T5873] chnl_net:caif_netlink_parms(): no params data found
[   76.623049][ T5864] team0: Port device team_slave_0 added
[   76.658407][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.677926][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.694437][ T5864] team0: Port device team_slave_1 added
[   76.712913][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.720145][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.727678][ T5869] bridge_slave_0: entered allmulticast mode
[   76.734683][ T5869] bridge_slave_0: entered promiscuous mode
[   76.744297][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.767043][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.811481][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.819077][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.826830][ T5869] bridge_slave_1: entered allmulticast mode
[   76.833811][ T5869] bridge_slave_1: entered promiscuous mode
[   76.885238][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.892542][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.919652][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.945501][ T5860] team0: Port device team_slave_0 added
[   76.953282][ T5871] team0: Port device team_slave_0 added
[   76.966240][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.973272][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.999859][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.027589][ T5860] team0: Port device team_slave_1 added
[   77.036450][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.047851][ T5871] team0: Port device team_slave_1 added
[   77.058047][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.133472][ T5869] team0: Port device team_slave_0 added
[   77.146339][ T5865] Bluetooth: hci0: command tx timeout
[   77.152270][   T51] Bluetooth: hci1: command tx timeout
[   77.188743][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.195744][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.222031][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.236672][ T5869] team0: Port device team_slave_1 added
[   77.264256][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.271699][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.297693][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.308701][   T51] Bluetooth: hci2: command tx timeout
[   77.313227][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.321627][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.347974][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.359707][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.366921][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.389538][   T51] Bluetooth: hci3: command tx timeout
[   77.393194][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.434583][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.441909][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.449478][ T5873] bridge_slave_0: entered allmulticast mode
[   77.456855][ T5873] bridge_slave_0: entered promiscuous mode
[   77.465876][   T51] Bluetooth: hci4: command tx timeout
[   77.500651][ T5864] hsr_slave_0: entered promiscuous mode
[   77.507355][ T5864] hsr_slave_1: entered promiscuous mode
[   77.514843][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.522750][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.530165][ T5873] bridge_slave_1: entered allmulticast mode
[   77.538250][ T5873] bridge_slave_1: entered promiscuous mode
[   77.571836][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.578955][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.605392][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.651199][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.661131][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.668671][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.694999][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.746447][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.794860][ T5871] hsr_slave_0: entered promiscuous mode
[   77.801657][ T5871] hsr_slave_1: entered promiscuous mode
[   77.808643][ T5871] debugfs: 'hsr0' already exists in 'hsr'
[   77.814452][ T5871] Cannot create hsr debugfs directory
[   77.825368][ T5860] hsr_slave_0: entered promiscuous mode
[   77.831705][ T5860] hsr_slave_1: entered promiscuous mode
[   77.837990][ T5860] debugfs: 'hsr0' already exists in 'hsr'
[   77.843713][ T5860] Cannot create hsr debugfs directory
[   77.911715][ T5873] team0: Port device team_slave_0 added
[   77.958872][ T5873] team0: Port device team_slave_1 added
[   77.971145][ T5869] hsr_slave_0: entered promiscuous mode
[   77.977528][ T5869] hsr_slave_1: entered promiscuous mode
[   77.983717][ T5869] debugfs: 'hsr0' already exists in 'hsr'
[   77.989948][ T5869] Cannot create hsr debugfs directory
[   78.104062][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.111167][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.137573][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.181592][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.188724][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.215244][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.407532][ T5873] hsr_slave_0: entered promiscuous mode
[   78.413778][ T5873] hsr_slave_1: entered promiscuous mode
[   78.420803][ T5873] debugfs: 'hsr0' already exists in 'hsr'
[   78.427125][ T5873] Cannot create hsr debugfs directory
[   78.600215][ T5864] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   78.647071][ T5864] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   78.671562][ T5864] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   78.698032][ T5864] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   78.756974][ T5871] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   78.769469][ T5871] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   78.812682][ T5871] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   78.845666][ T5871] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   78.940947][ T5860] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   78.953549][ T5860] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   78.979775][ T5860] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   78.991254][ T5860] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   79.075312][ T5869] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   79.093977][ T5869] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   79.109575][ T5869] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   79.135167][ T5869] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   79.223236][ T5873] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   79.226673][   T51] Bluetooth: hci1: command tx timeout
[   79.236439][   T51] Bluetooth: hci0: command tx timeout
[   79.257610][ T5873] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   79.292507][ T5873] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   79.304968][ T5873] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   79.354629][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.372724][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.385982][ T5865] Bluetooth: hci2: command tx timeout
[   79.418319][ T5864] 8021q: adding VLAN 0 to HW filter on device team0
[   79.450068][ T5871] 8021q: adding VLAN 0 to HW filter on device team0
[   79.467121][ T5865] Bluetooth: hci3: command tx timeout
[   79.483173][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.490570][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.533844][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.541044][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.549675][ T5865] Bluetooth: hci4: command tx timeout
[   79.555763][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.562888][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.597242][ T2908] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.604375][ T2908] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.653551][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.742427][ T5871] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   79.767989][ T5860] 8021q: adding VLAN 0 to HW filter on device team0
[   79.784282][ T5864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   79.821538][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.861909][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.869098][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.891396][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.928310][ T5869] 8021q: adding VLAN 0 to HW filter on device team0
[   79.978317][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.985459][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.012214][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.019443][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.038852][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.046041][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.144222][ T5873] 8021q: adding VLAN 0 to HW filter on device team0
[   80.171801][  T149] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.179017][  T149] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.225533][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.232671][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.359975][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.372781][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.651171][ T5871] veth0_vlan: entered promiscuous mode
[   80.672711][ T5864] veth0_vlan: entered promiscuous mode
[   80.691559][ T5871] veth1_vlan: entered promiscuous mode
[   80.731014][ T5864] veth1_vlan: entered promiscuous mode
[   80.853984][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.876764][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.884295][ T5871] veth0_macvtap: entered promiscuous mode
[   80.920809][ T5871] veth1_macvtap: entered promiscuous mode
[   80.935232][ T5864] veth0_macvtap: entered promiscuous mode
[   80.970533][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.993671][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.001242][ T5864] veth1_macvtap: entered promiscuous mode
[   81.013530][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.072097][ T5869] veth0_vlan: entered promiscuous mode
[   81.091702][ T2908] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.107725][ T5860] veth0_vlan: entered promiscuous mode
[   81.133794][ T2908] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.142989][ T2908] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.162291][ T5869] veth1_vlan: entered promiscuous mode
[   81.173709][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.185242][ T5860] veth1_vlan: entered promiscuous mode
[   81.192614][ T2908] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.240418][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.307721][ T5865] Bluetooth: hci0: command tx timeout
[   81.313169][ T5865] Bluetooth: hci1: command tx timeout
[   81.337291][ T2908] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.348923][ T2908] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.383078][ T2908] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.407256][ T5860] veth0_macvtap: entered promiscuous mode
[   81.452442][ T2908] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.466315][ T5865] Bluetooth: hci2: command tx timeout
[   81.483046][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.485123][ T5869] veth0_macvtap: entered promiscuous mode
[   81.509810][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.529950][ T5869] veth1_macvtap: entered promiscuous mode
[   81.541967][ T5860] veth1_macvtap: entered promiscuous mode
[   81.546013][ T5865] Bluetooth: hci3: command tx timeout
[   81.580957][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.594782][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.625204][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.634014][ T5865] Bluetooth: hci4: command tx timeout
[   81.659135][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.685055][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.705270][ T5871] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   81.719970][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.746139][   T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.810839][   T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.824611][   T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.842509][ T5873] veth0_vlan: entered promiscuous mode
[   81.864950][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.878775][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.922645][   T56] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.933704][   T56] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.973989][   T56] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.984665][   T56] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.999634][ T5873] veth1_vlan: entered promiscuous mode
[   82.029964][   T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.061048][   T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.074958][   T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.174420][ T5979] netlink: 'syz.2.3': attribute type 11 has an invalid length.
[   82.204097][ T5873] veth0_macvtap: entered promiscuous mode
[   82.242483][ T5873] veth1_macvtap: entered promiscuous mode
[   82.287990][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.313837][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.374697][ T2908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.402884][ T2908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.442028][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.455921][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.479116][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.514121][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.525186][   T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.543786][   T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.593433][   T56] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.644421][   T56] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.686682][   T56] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.720415][   T56] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.846525][ T5989] netlink: 404 bytes leftover after parsing attributes in process `syz.3.4'.
[   82.872412][ T5992] trusted_key: syz.1.2 sent an empty control message without MSG_MORE.
[   82.895376][ T5989] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'.
[   82.923993][ T5995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8'.
[   82.939204][ T5989] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'.
[   82.950950][ T5989] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4'.
[   83.033148][ T6001] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   83.044647][  T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.060064][  T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.097419][ T5998] tipc: Started in network mode
[   83.098319][ T6001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'.
[   83.102474][ T5998] tipc: Node identity aeb1bde146f, cluster identity 4711
[   83.119032][ T5998] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.131916][ T6001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'.
[   83.145400][ T6001] netlink: 'syz.0.10': attribute type 2 has an invalid length.
[   83.152188][   T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.164902][   T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.360686][ T5997] tipc: Disabling bearer <eth:syzkaller0>
[   83.370465][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'.
[   83.390633][ T5865] Bluetooth: hci1: command tx timeout
[   83.390631][   T51] Bluetooth: hci0: command tx timeout
[   83.421098][ T6003] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11'.
[   83.547175][   T51] Bluetooth: hci2: command tx timeout
[   83.626259][   T51] Bluetooth: hci3: command tx timeout
[   83.653715][ T6013] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   83.706365][   T51] Bluetooth: hci4: command tx timeout
[   83.841429][ T6018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18'.
[   83.884797][ T6025] netlink: 'syz.3.15': attribute type 7 has an invalid length.
[   83.928286][ T6023] erspan0: entered allmulticast mode
[   84.358670][ T6057] vcan0: tx drop: invalid sa for name 0x0000000000000003
[   84.558700][ T6067] Bluetooth: MGMT ver 1.23
[   84.634316][ T5943] IPVS: starting estimator thread 0...
[   84.735924][ T6072] IPVS: using max 34 ests per chain, 81600 per kthread
[   84.903679][ T6083] ip_vti0: entered promiscuous mode
[   85.191820][ T6100] netlink: 'syz.4.35': attribute type 1 has an invalid length.
[   85.676132][ T6133] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   86.046838][ T6158] tipc: Started in network mode
[   86.051754][ T6158] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[   86.096133][ T6158] tipc: Enabled bearer <eth:ipvlan0>, priority 10
[   86.171649][ T6160] tipc: Enabling of bearer <dth:sy> rejected, media not registered
[   86.181049][ T6165] syz.2.50 uses obsolete (PF_INET,SOCK_PACKET)
[   86.253226][ T6172] netlink: 'syz.4.53': attribute type 1 has an invalid length.
[   86.434162][ T6172] gretap1: entered promiscuous mode
[   86.856959][  T980] cfg80211: failed to load regulatory.db
[   87.048273][ T6208] atomic_op ffff888047343198 conn xmit_atomic 0000000000000000
[   87.180719][ T6213] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   87.216551][ T5914] tipc: Node number set to 10136234
[   87.236164][ T6213] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   87.282681][ T6217] Zero length message leads to an empty skb
[   87.684227][ T6234] netlink: 'syz.1.75': attribute type 15 has an invalid length.
[   87.834957][ T6242] veth0_to_batadv: mtu less than device minimum
[   88.042847][ T6252] netlink: 'syz.3.80': attribute type 1 has an invalid length.
[   88.228415][ T6259] netlink: 'syz.1.82': attribute type 4 has an invalid length.
[   88.318964][ T6263] __nla_validate_parse: 9 callbacks suppressed
[   88.318981][ T6263] netlink: 12 bytes leftover after parsing attributes in process `syz.4.86'.
[   88.650927][ T6283] netlink: 81 bytes leftover after parsing attributes in process `syz.4.91'.
[   88.979288][ T6297] IPv4: Oversized IP packet from 127.202.26.0
[   89.086835][ T6301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.98'.
[   89.117235][ T6304] netlink: 44 bytes leftover after parsing attributes in process `syz.3.99'.
[   89.130648][ T6301] bridge_slave_1: left allmulticast mode
[   89.136558][ T6306] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21
[   89.164249][ T6301] bridge_slave_1: left promiscuous mode
[   89.186841][ T6301] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.199249][ T6311] netlink: 56 bytes leftover after parsing attributes in process `syz.3.99'.
[   89.231405][ T6301] bridge_slave_0: left allmulticast mode
[   89.241349][ T6301] bridge_slave_0: left promiscuous mode
[   89.266116][ T6301] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.385389][ T6307] netlink: 'syz.4.100': attribute type 3 has an invalid length.
[   89.508502][ T6328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.102'.
[   89.538364][ T6328] netlink: 'syz.0.102': attribute type 1 has an invalid length.
[   89.602436][ T6328] netlink: 'syz.0.102': attribute type 1 has an invalid length.
[   89.659714][ T6332] openvswitch: netlink: Key type 85 is out of range max 32
[   89.661949][ T6328] netlink: 'syz.0.102': attribute type 2 has an invalid length.
[   89.716333][ T6328] netlink: 68 bytes leftover after parsing attributes in process `syz.0.102'.
[   89.740133][ T6338] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.757838][ T6338] syzkaller0: entered promiscuous mode
[   89.763373][ T6338] syzkaller0: entered allmulticast mode
[   89.774153][ T6339] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[   89.786096][ T6339] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[   89.804444][ T6338] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   89.862100][ T6342] netlink: 'syz.1.109': attribute type 1 has an invalid length.
[   89.872801][ T6342] netlink: 224 bytes leftover after parsing attributes in process `syz.1.109'.
[   89.884097][ T6342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.109'.
[   89.886465][ T6341] netlink: 72 bytes leftover after parsing attributes in process `syz.3.108'.
[   89.912963][ T6338] tipc: Resetting bearer <eth:syzkaller0>
[   89.933624][ T6335] tipc: Resetting bearer <eth:syzkaller0>
[   90.003285][ T6335] tipc: Disabling bearer <eth:syzkaller0>
[   90.049920][ T6348] openvswitch: netlink: IP tunnel dst address not specified
[   90.101374][ T6350] xt_time: unknown flags 0xf4
[   90.308342][ T6360] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[   91.441611][ T6410] netlink: 'syz.1.125': attribute type 13 has an invalid length.
[   91.521839][ T6410] netlink: 'syz.1.125': attribute type 17 has an invalid length.
[   91.775348][ T6410] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   91.817324][ T5974] IPVS: starting estimator thread 0...
[   91.837265][ T6439] IPVS: rr: FWM 3 0x00000003 - no destination available
[   91.955813][ T6440] IPVS: using max 26 ests per chain, 62400 per kthread
[   92.210673][ T6458] openvswitch: netlink: EtherType 50a is less than min 600
[   92.635672][ T6477] syzkaller0: entered promiscuous mode
[   92.654007][ T6477] syzkaller0: entered allmulticast mode
[   92.732488][ T6477] syzkaller0: mtu less than device minimum
[   93.441962][ T6521] __nla_validate_parse: 15 callbacks suppressed
[   93.441980][ T6521] netlink: 404 bytes leftover after parsing attributes in process `syz.1.159'.
[   93.475057][ T6521] netlink: 28 bytes leftover after parsing attributes in process `syz.1.159'.
[   93.490431][ T6521] netlink: 28 bytes leftover after parsing attributes in process `syz.1.159'.
[   93.502659][ T6521] netlink: 20 bytes leftover after parsing attributes in process `syz.1.159'.
[   93.634753][ T6528] validate_nla: 2 callbacks suppressed
[   93.634771][ T6528] netlink: 'syz.0.163': attribute type 1 has an invalid length.
[   93.696668][ T6528] netlink: 'syz.0.163': attribute type 2 has an invalid length.
[   93.818864][ T6539] netlink: 'syz.3.167': attribute type 10 has an invalid length.
[   93.927914][ T6539] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.944589][ T6539] bridge_slave_1: left allmulticast mode
[   93.957351][ T6539] bridge_slave_1: left promiscuous mode
[   93.963298][ T6539] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.009048][ T6539] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[   94.272741][ T6559] veth0: entered promiscuous mode
[   94.319628][ T6559] xt_time: invalid argument - start or stop time greater than 23:59:59
[   94.417590][ T6559] batadv_slave_1: entered promiscuous mode
[   94.439232][ T6559] batman_adv: batadv0: Adding interface: macsec1
[   94.445594][ T6559] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500.
[   94.529018][ T6559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.541720][ T6559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.552010][ T6559] batman_adv: batadv0: Interface activated: macsec1
[   94.568681][ T6557] veth0: left promiscuous mode
[   94.574661][ T6573] netlink: 44 bytes leftover after parsing attributes in process `syz.4.179'.
[   94.708981][ T6572] netlink: 'syz.1.180': attribute type 18 has an invalid length.
[   94.764665][ T6050] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   94.790331][ T6582] netlink: 'syz.4.183': attribute type 10 has an invalid length.
[   94.818779][ T6050] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   94.839262][ T6582] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.880770][ T6582] bridge_slave_1: left allmulticast mode
[   94.911864][ T6582] bridge_slave_1: left promiscuous mode
[   94.921702][ T6582] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.964643][ T6582] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[   94.982729][ T6050] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   95.000722][ T6050] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   95.014223][ T6588] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   95.034138][ T6592] warning: `syz.2.186' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   95.164307][ T6605] netlink: 'syz.2.190': attribute type 8 has an invalid length.
[   95.175241][ T6605] netlink: 'syz.2.190': attribute type 8 has an invalid length.
[   95.186858][ T6605] netlink: 'syz.2.190': attribute type 8 has an invalid length.
[   95.205503][ T6605] netlink: 'syz.2.190': attribute type 8 has an invalid length.
[   95.223860][ T6605] netlink: 'syz.2.190': attribute type 8 has an invalid length.
[   95.699606][ T6045] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   95.714569][ T6045] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   95.737354][ T6045] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   95.764638][ T6045] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   95.807260][ T6637] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   95.816381][ T6637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.199'.
[   95.996700][ T6645] netlink: 52 bytes leftover after parsing attributes in process `syz.2.201'.
[   96.002653][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.204'.
[   96.027267][ T6645] netlink: 52 bytes leftover after parsing attributes in process `syz.2.201'.
[   96.049750][ T6645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.201'.
[   96.081430][ T6650] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[   96.119901][ T6650] openvswitch: netlink: Actions may not be safe on all matching packets
[   96.192377][ T6659] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.401534][ T6665] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222)
[   96.854721][ T6683] openvswitch: netlink: Message has 4 unknown bytes.
[   96.908313][ T6691] IPVS: Error joining to the multicast group
[   97.711695][ T6724] netlink: 'syz.2.226': attribute type 11 has an invalid length.
[   98.388031][ T6769] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64)
[   98.446687][ T6776] only policy match revision 0 supported
[   98.446707][ T6776] unable to load match
[   98.466690][ T6765] __nla_validate_parse: 9 callbacks suppressed
[   98.466707][ T6765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.240'.
[   98.587631][ T6788] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.595274][ T6779] syzkaller0: entered promiscuous mode
[   98.600927][ T6779] syzkaller0: entered allmulticast mode
[   98.702627][ T6788] netlink: 180 bytes leftover after parsing attributes in process `syz.3.245'.
[   98.708214][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.248'.
[   98.712941][ T6779] netlink: 180 bytes leftover after parsing attributes in process `syz.3.245'.
[   98.777072][ T6777] tipc: Resetting bearer <eth:syzkaller0>
[   98.836555][ T6791] nbd2: detected capacity change from 0 to 63
[   98.861320][ T6796] block nbd2: NBD_DISCONNECT
[   98.870265][ T6796] block nbd2: Disconnected due to user request.
[   98.879866][ T6777] tipc: Disabling bearer <eth:syzkaller0>
[   98.887103][ T6796] block nbd2: shutting down sockets
[   98.897635][    C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   98.907053][    C0] Buffer I/O error on dev nbd2, logical block 0, async page read
[   98.914892][    C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   98.924002][    C0] Buffer I/O error on dev nbd2, logical block 1, async page read
[   98.931900][    C0] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   98.941104][    C0] Buffer I/O error on dev nbd2, logical block 2, async page read
[   98.947378][ T6808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.253'.
[   98.948966][    C0] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   98.966740][    C0] Buffer I/O error on dev nbd2, logical block 3, async page read
[   98.975293][ T6149] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   98.987357][ T6149] Buffer I/O error on dev nbd2, logical block 0, async page read
[   98.995403][ T6149] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   99.075793][ T6149] Buffer I/O error on dev nbd2, logical block 1, async page read
[   99.083767][ T6149] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   99.148862][ T6149] Buffer I/O error on dev nbd2, logical block 2, async page read
[   99.182571][ T6149] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   99.225393][ T6149] Buffer I/O error on dev nbd2, logical block 3, async page read
[   99.236466][ T6817] nftables ruleset with unbound set
[   99.266291][ T6149] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   99.296109][ T6149] Buffer I/O error on dev nbd2, logical block 0, async page read
[   99.304491][ T6149] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   99.356025][ T6149] Buffer I/O error on dev nbd2, logical block 1, async page read
[   99.373771][ T6149] ldm_validate_partition_table(): Disk read failed.
[   99.403216][ T6826] netlink: 20 bytes leftover after parsing attributes in process `syz.2.259'.
[   99.413459][ T6149] Dev nbd2: unable to read RDB block 0
[   99.438277][ T6149]  nbd2: unable to read partition table
[   99.484418][ T6149] ldm_validate_partition_table(): Disk read failed.
[   99.514473][ T6149] Dev nbd2: unable to read RDB block 0
[   99.538789][ T6149]  nbd2: unable to read partition table
[   99.611592][ T6839] netlink: 16 bytes leftover after parsing attributes in process `syz.2.263'.
[   99.876003][ T6849] netlink: 10 bytes leftover after parsing attributes in process `syz.1.265'.
[   99.949499][ T6849] bridge_slave_0: entered promiscuous mode
[  100.082452][ T6864] vcan0: tx drop: invalid sa for name 0x0000000000000003
[  100.119601][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.269'.
[  100.278963][ T6877] validate_nla: 4 callbacks suppressed
[  100.278981][ T6877] netlink: 'syz.1.275': attribute type 1 has an invalid length.
[  100.410402][ T6886] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.466017][ T6886] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.475356][ T6886] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.550440][ T6886] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.572584][ T6886] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.582672][ T6886] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.748930][ T6900] netlink: 32 bytes leftover after parsing attributes in process `syz.1.281'.
[  100.821100][ T6904] Bluetooth: MGMT ver 1.23
[  101.404819][ T6939] can: request_module (can-proto-0) failed.
[  101.475108][ T6948] veth1_macvtap: left promiscuous mode
[  101.586329][ T6954] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.682759][ T6961] netlink: 'syz.4.301': attribute type 7 has an invalid length.
[  102.012528][ T6979] netlink: zone id is out of range
[  102.021795][ T6979] netlink: zone id is out of range
[  102.028385][ T6979] netlink: zone id is out of range
[  102.034308][ T6979] netlink: zone id is out of range
[  102.039938][ T6979] netlink: zone id is out of range
[  102.045140][ T6979] netlink: zone id is out of range
[  102.052992][ T6979] netlink: zone id is out of range
[  102.058613][ T6979] netlink: zone id is out of range
[  102.064020][ T6979] netlink: zone id is out of range
[  102.069909][ T6979] netlink: zone id is out of range
[  102.199206][ T6983] netlink: 'syz.4.307': attribute type 30 has an invalid length.
[  102.250701][ T6983] netlink: 'syz.4.307': attribute type 30 has an invalid length.
[  102.261827][ T6983] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  102.564795][ T7004] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.602213][ T7004] syzkaller0: entered promiscuous mode
[  102.618024][ T7004] syzkaller0: entered allmulticast mode
[  102.652414][ T7004] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  102.696760][ T7012] netlink: 'syz.3.315': attribute type 1 has an invalid length.
[  102.704447][ T7012] netlink: 'syz.3.315': attribute type 1 has an invalid length.
[  102.725557][ T7003] tipc: Resetting bearer <eth:syzkaller0>
[  102.729894][ T7019] ieee802154 phy0 wpan0: encryption failed: -22
[  102.739169][ T7012] netlink: 'syz.3.315': attribute type 23 has an invalid length.
[  102.786934][ T7003] tipc: Disabling bearer <eth:syzkaller0>
[  102.951196][ T7027] netlink: 'syz.0.318': attribute type 12 has an invalid length.
[  103.059944][ T7032] netlink: 'syz.0.318': attribute type 12 has an invalid length.
[  103.084911][ T7033] unsupported nlmsg_type 40
[  103.112117][  T149] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  103.123683][ T7032] netlink: 'syz.0.318': attribute type 12 has an invalid length.
[  103.153962][  T149] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  103.154257][ T7029] nbd: must specify a device to reconfigure
[  103.188544][ T7035] tc_dump_action: action bad kind
[  103.206003][   T49] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  103.236783][   T49] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  103.256953][ T6050] nci: nci_rx_work: unknown MT 0x1
[  103.514958][ T7058] __nla_validate_parse: 14 callbacks suppressed
[  103.514991][ T7058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.327'.
[  103.937819][ T7049] netlink: 252 bytes leftover after parsing attributes in process `syz.2.323'.
[  104.157136][ T7060] bond0: (slave geneve1): Enslaving as an active interface with an up link
[  104.284465][ T7076] netlink: 24 bytes leftover after parsing attributes in process `syz.1.333'.
[  104.408258][ T7083] netlink: 224 bytes leftover after parsing attributes in process `syz.4.335'.
[  104.470255][ T7056] Bluetooth: hci0: Opcode 0x080f failed: -4
[  104.470498][ T7081] sch_tbf: burst 88 is lower than device veth3 mtu (1514) !
[  104.754224][ T7097] IPv6: NLM_F_CREATE should be specified when creating new route
[  104.783427][ T7097] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  104.791036][ T7097] IPv6: NLM_F_CREATE should be set when creating new route
[  104.798460][ T7097] IPv6: NLM_F_CREATE should be set when creating new route
[  104.805763][ T7097] IPv6: NLM_F_CREATE should be set when creating new route
[  104.863288][ T7111] netlink: 156 bytes leftover after parsing attributes in process `syz.0.340'.
[  105.241372][ T7127] netlink: 68 bytes leftover after parsing attributes in process `syz.2.345'.
[  105.469765][   T51] Bluetooth: hci0: command 0x080f tx timeout
[  105.769283][ T7161] netlink: 788 bytes leftover after parsing attributes in process `syz.0.351'.
[  105.937991][ T7163] netlink: 788 bytes leftover after parsing attributes in process `syz.0.351'.
[  106.087231][ T7166] validate_nla: 4 callbacks suppressed
[  106.087247][ T7166] netlink: 'syz.4.353': attribute type 12 has an invalid length.
[  106.753834][ T7208] tipc: Started in network mode
[  106.771118][ T7208] tipc: Node identity 821ff1cffe72, cluster identity 4711
[  106.787340][ T7214] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.367'.
[  106.787641][ T7208] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.814077][ T7208] syzkaller0: entered promiscuous mode
[  106.826921][ T7208] syzkaller0: entered allmulticast mode
[  106.849276][ T7210] tipc: Started in network mode
[  106.857446][ T7210] tipc: Node identity cea0d573a1e2, cluster identity 4711
[  106.875543][ T7210] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.898867][ T7208] tipc: Resetting bearer <eth:syzkaller0>
[  106.920864][ T7211] syzkaller0: entered promiscuous mode
[  106.942805][ T7211] syzkaller0: entered allmulticast mode
[  106.954608][ T7210] netlink: 12 bytes leftover after parsing attributes in process `syz.4.366'.
[  106.967828][ T7204] tipc: Resetting bearer <eth:syzkaller0>
[  107.003361][ T7204] tipc: Disabling bearer <eth:syzkaller0>
[  107.244641][ T7231] team0: Device vti0 is of different type
[  107.304279][ T7207] tipc: Resetting bearer <eth:syzkaller0>
[  107.338964][ T7207] tipc: Disabling bearer <eth:syzkaller0>
[  109.054401][ T7281] Bluetooth: hci1: Opcode 0x0401 failed: -4
[  109.089765][ T7324] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  109.167374][ T7328] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP)
[  109.335003][ T7328] netlink: 'syz.1.395': attribute type 14 has an invalid length.
[  109.430445][   T30] audit: type=1107 audit(1758616178.813:2): pid=7331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹�5ž÷Œ•%èÍUýAÊ�ÃËÙ ë0ä�™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›
[  109.430445][   T30] 
'
[  109.763773][ T7356] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.813534][ T7356] bond0: (slave rose0): Enslaving as an active interface with an up link
[  109.819599][ T7366] __nla_validate_parse: 4 callbacks suppressed
[  109.819617][ T7366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.406'.
[  110.150536][ T7379] netlink: 'syz.4.409': attribute type 11 has an invalid length.
[  110.159898][ T7378] netlink: 196 bytes leftover after parsing attributes in process `syz.1.411'.
[  110.192459][ T7379] netlink: 224 bytes leftover after parsing attributes in process `syz.4.409'.
[  110.202957][ T7378] netlink: 196 bytes leftover after parsing attributes in process `syz.1.411'.
[  110.239895][ T7383] netlink: 'syz.3.412': attribute type 19 has an invalid length.
[  110.247859][ T7378] netlink: 19 bytes leftover after parsing attributes in process `syz.1.411'.
[  110.347574][   T51] Bluetooth: hci1: command 0x0401 tx timeout
[  110.515582][ T7398] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1500) !
[  110.638694][ T7404] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.653545][ T7404] syzkaller0: entered promiscuous mode
[  110.677598][ T7404] syzkaller0: entered allmulticast mode
[  110.744581][ T7404] sch_tbf: peakrate 13 is lower than or equals to rate 73 !
[  110.786416][ T7410] vlan2: entered allmulticast mode
[  110.795821][ T7410] hsr0: entered allmulticast mode
[  110.815862][ T7410] hsr_slave_0: entered allmulticast mode
[  110.824949][ T7410] hsr_slave_1: entered allmulticast mode
[  110.859189][ T7404] tipc: Resetting bearer <eth:syzkaller0>
[  110.915243][ T7403] tipc: Resetting bearer <eth:syzkaller0>
[  110.995143][ T7403] tipc: Disabling bearer <eth:syzkaller0>
[  111.249586][ T7428] netlink: 56 bytes leftover after parsing attributes in process `syz.1.424'.
[  111.284774][ T7428] netlink: 48 bytes leftover after parsing attributes in process `syz.1.424'.
[  111.327691][ T7427] veth0_to_team: entered promiscuous mode
[  111.386142][ T7427] veth0_to_team: entered allmulticast mode
[  111.551941][ T7448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.428'.
[  111.595482][ T7448] net_ratelimit: 218 callbacks suppressed
[  111.595501][ T7448] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4
[  111.669451][ T7448] sctp: [Deprecated]: syz.3.428 (pid 7448) Use of struct sctp_assoc_value in delayed_ack socket option.
[  111.669451][ T7448] Use struct sctp_sack_info instead
[  112.012051][ T7463] netlink: 52 bytes leftover after parsing attributes in process `syz.2.433'.
[  112.411776][ T7480] macvtap1: entered promiscuous mode
[  112.435099][ T7480] macvtap1: entered allmulticast mode
[  112.467431][ T7480] bond_slave_0: entered promiscuous mode
[  112.473334][ T7480] bond_slave_1: entered promiscuous mode
[  112.531237][ T7480] bond0: entered allmulticast mode
[  112.538849][ T7480] bond_slave_0: entered allmulticast mode
[  112.544672][ T7480] bond_slave_1: entered allmulticast mode
[  112.554962][ T7480] bond0: entered promiscuous mode
[  112.556439][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.444'.
[  112.566549][ T7480] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  112.622683][ T7480] team0: Device macvtap1 failed to register rx_handler
[  112.632710][ T7480] bond0: left allmulticast mode
[  112.639173][ T7480] bond_slave_0: left allmulticast mode
[  112.645187][ T7480] bond_slave_1: left allmulticast mode
[  112.661372][ T7480] bond0: left promiscuous mode
[  112.727957][ T7480] bond_slave_0: left promiscuous mode
[  112.733499][ T7480] bond_slave_1: left promiscuous mode
[  112.863798][ T7510] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.038810][ T7510] syzkaller0: entered promiscuous mode
[  113.044628][ T7510] syzkaller0: entered allmulticast mode
[  113.098266][ T7510] tipc: Resetting bearer <eth:syzkaller0>
[  113.120844][ T7509] tipc: Resetting bearer <eth:syzkaller0>
[  113.236609][ T7509] tipc: Disabling bearer <eth:syzkaller0>
[  113.567604][ T7546] netlink: 'syz.3.454': attribute type 11 has an invalid length.
[  113.936597][ T7562] sch_tbf: burst 88 is lower than device veth5 mtu (1514) !
[  114.166117][ T7573] netlink: 'syz.4.463': attribute type 1 has an invalid length.
[  114.233036][ T7581] netlink: 'syz.1.466': attribute type 1 has an invalid length.
[  114.270704][ T7581] netlink: 'syz.1.466': attribute type 2 has an invalid length.
[  114.892513][ T7616] __nla_validate_parse: 11 callbacks suppressed
[  114.892530][ T7616] netlink: 16 bytes leftover after parsing attributes in process `syz.4.480'.
[  114.979556][ T7618] tipc: Started in network mode
[  114.984691][ T7618] tipc: Node identity aaaaaaaaaa33, cluster identity 4711
[  114.994412][ T7618] tipc: Enabled bearer <eth:vlan1>, priority 12
[  115.044240][ T7624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.481'.
[  115.072113][ T7624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.481'.
[  115.084413][ T7624] netlink: 'syz.3.481': attribute type 12 has an invalid length.
[  115.093485][ T7624] netlink: 'syz.3.481': attribute type 11 has an invalid length.
[  115.296896][ T7640] sctp: [Deprecated]: syz.1.482 (pid 7640) Use of int in max_burst socket option.
[  115.296896][ T7640] Use struct sctp_assoc_value instead
[  115.521153][ T7645] netlink: 24 bytes leftover after parsing attributes in process `syz.2.485'.
[  115.655883][ T7650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.487'.
[  115.698560][ T7650] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  115.724644][ T7650] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1)
[  115.859774][ T7666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.490'.
[  115.982179][ T7670] netlink: 248 bytes leftover after parsing attributes in process `syz.4.491'.
[  116.041405][ T7670] netlink: 28 bytes leftover after parsing attributes in process `syz.4.491'.
[  116.109586][ T5943] tipc: Node number set to 10070698
[  116.307282][ T7685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.494'.
[  116.681135][ T7701] netlink: 16 bytes leftover after parsing attributes in process `syz.2.498'.
[  116.724452][ T7703] netlink: 'syz.1.499': attribute type 1 has an invalid length.
[  117.332290][ T7733] netlink: 'syz.1.508': attribute type 1 has an invalid length.
[  117.495649][ T7741] gretap1: entered promiscuous mode
[  117.524355][ T7736] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.563878][ T7736] syzkaller0: entered promiscuous mode
[  117.578478][ T7736] syzkaller0: entered allmulticast mode
[  117.628908][ T7751] netlink: 'syz.0.514': attribute type 2 has an invalid length.
[  117.706128][ T7755] veth0: entered promiscuous mode
[  117.741793][ T7755] veth0: left promiscuous mode
[  117.762010][ T7746] tipc: Resetting bearer <eth:syzkaller0>
[  117.833701][ T7734] tipc: Resetting bearer <eth:syzkaller0>
[  117.947144][ T7734] tipc: Disabling bearer <eth:syzkaller0>
[  118.114352][ T7775] netlink: 'syz.2.523': attribute type 2 has an invalid length.
[  118.185114][ T7768] team0 (unregistering): Port device team_slave_0 removed
[  118.204723][ T7768] team0 (unregistering): Port device team_slave_1 removed
[  118.406148][ T7792] netlink: 'syz.3.526': attribute type 3 has an invalid length.
[  118.599506][ T7804] IPVS: length: 157 != 24
[  118.639732][ T7806] IPVS: length: 157 != 24
[  119.034490][ T7828] sit0: entered promiscuous mode
[  119.911332][ T7878] __nla_validate_parse: 18 callbacks suppressed
[  119.911350][ T7878] netlink: 84 bytes leftover after parsing attributes in process `syz.1.552'.
[  119.936031][ T7879] netlink: 48 bytes leftover after parsing attributes in process `syz.3.551'.
[  120.000183][ T7884] syz_tun: entered allmulticast mode
[  120.057543][ T7884] syz_tun: left allmulticast mode
[  120.102564][ T7889] netlink: 64 bytes leftover after parsing attributes in process `syz.2.555'.
[  120.337432][ T7896] validate_nla: 1 callbacks suppressed
[  120.337451][ T7896] netlink: 'syz.0.557': attribute type 1 has an invalid length.
[  120.374132][ T7896] nbd: error processing sock list
[  120.384053][ T7896] block nbd0: shutting down sockets
[  120.634267][ T7919] netlink: 'syz.0.564': attribute type 1 has an invalid length.
[  120.784871][ T7928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.567'.
[  120.807124][ T7928] netlink: 12 bytes leftover after parsing attributes in process `syz.4.567'.
[  120.831824][ T7919] bond1 (unregistering): Released all slaves
[  120.936799][ T7930] netlink: 92 bytes leftover after parsing attributes in process `syz.2.566'.
[  120.959343][ T7935] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.568'.
[  121.054280][ T5893] IPVS: starting estimator thread 0...
[  121.165792][ T7938] IPVS: using max 32 ests per chain, 76800 per kthread
[  121.239870][ T7946] net veth1_virt_wifi .: renamed from virt_wifi0
[  121.364893][ T7955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.575'.
[  121.448437][ T7955] syzkaller1: entered promiscuous mode
[  121.477653][ T7955] syzkaller1: entered allmulticast mode
[  121.501292][ T7960] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.577'.
[  122.058566][ T7988] netlink: 'syz.1.586': attribute type 12 has an invalid length.
[  122.131716][ T7990] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  122.311578][ T7993] netlink: 'syz.3.589': attribute type 1 has an invalid length.
[  122.333069][ T8005] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.345566][ T8005] syzkaller0: entered promiscuous mode
[  122.351371][ T8005] syzkaller0: entered allmulticast mode
[  122.447585][ T8013] tipc: Resetting bearer <eth:syzkaller0>
[  122.540386][ T8005] tipc: Resetting bearer <eth:syzkaller0>
[  122.635149][ T8005] tipc: Disabling bearer <eth:syzkaller0>
[  123.380744][ T8058] netlink: 'syz.4.606': attribute type 8 has an invalid length.
[  123.525116][ T8063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.607'.
[  123.850203][ T8077] netlink: 'syz.2.613': attribute type 23 has an invalid length.
[  123.879517][ T8079] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.898127][ T8075] hsr_slave_0 (unregistering): left promiscuous mode
[  124.201273][ T8090] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  124.227157][ T8090] openvswitch: netlink: Multiple metadata blocks provided
[  124.660551][ T8117] team0: Device ip6gre2 is of different type
[  125.320112][ T8160] veth0: entered promiscuous mode
[  125.450739][ T8160] veth0: left promiscuous mode
[  125.582977][ T8177] tc_dump_action: action bad kind
[  125.695352][ T8182] __nla_validate_parse: 4 callbacks suppressed
[  125.695372][ T8182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.636'.
[  125.734396][ T8182] chnl_net:caif_netlink_parms(): no params data found
[  126.331003][ T8210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.644'.
[  126.590014][ T8217] netlink: 16 bytes leftover after parsing attributes in process `syz.2.646'.
[  126.606841][   T51] Bluetooth: hci4: link tx timeout
[  126.612676][   T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  126.621936][ T5865] Bluetooth: hci4: link tx timeout
[  126.630048][ T5865] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  126.872050][ T8229] netlink: 16 bytes leftover after parsing attributes in process `syz.3.648'.
[  126.937171][ T8235] netlink: 'syz.2.651': attribute type 5 has an invalid length.
[  127.003528][ T8240] netlink: 'syz.2.651': attribute type 4 has an invalid length.
[  127.092546][ T8239] netlink: 'syz.1.650': attribute type 12 has an invalid length.
[  127.394623][ T8255] syzkaller1: entered promiscuous mode
[  127.417284][ T8255] syzkaller1: entered allmulticast mode
[  127.436830][ T8255] netlink: 44 bytes leftover after parsing attributes in process `syz.4.655'.
[  127.483885][ T8255] netlink: 44 bytes leftover after parsing attributes in process `syz.4.655'.
[  127.530757][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.655'.
[  127.552876][ T8264] netlink: 20 bytes leftover after parsing attributes in process `syz.3.657'.
[  128.241465][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.668'.
[  128.380306][ T8307] netlink: 48 bytes leftover after parsing attributes in process `syz.1.671'.
[  128.597560][ T8313] (unnamed net_device) (uninitialized): (slave ip_vti0): Device is not bonding slave
[  128.639500][ T8313] (unnamed net_device) (uninitialized): option active_slave: invalid value (ip_vti0)
[  128.675351][ T5865] Bluetooth: hci4: command 0x0406 tx timeout
[  128.952884][ T8333] netlink: 'syz.2.679': attribute type 21 has an invalid length.
[  128.986470][ T8333] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3)
[  129.639600][ T8367] bridge1: entered promiscuous mode
[  129.663852][ T8367] bridge1: entered allmulticast mode
[  129.743755][  T149] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  129.790022][ T5974] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  129.790149][  T149] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  129.845970][   T43] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  130.069574][ T8396] netlink: 'syz.1.698': attribute type 21 has an invalid length.
[  130.346617][ T5974] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  130.496994][ T8421] netlink: 'syz.1.707': attribute type 21 has an invalid length.
[  130.524358][ T8421] netlink: 'syz.1.707': attribute type 12 has an invalid length.
[  130.592826][ T8428] netlink: 'syz.1.707': attribute type 12 has an invalid length.
[  130.797180][ T8437] netlink: 'syz.1.710': attribute type 1 has an invalid length.
[  130.805176][ T8437] netlink: 'syz.1.710': attribute type 3 has an invalid length.
[  130.870617][ T8437] __nla_validate_parse: 14 callbacks suppressed
[  130.870635][ T8437] netlink: 224 bytes leftover after parsing attributes in process `syz.1.710'.
[  130.910244][ T8441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.711'.
[  130.939732][ T8437] NCSI netlink: No device for ifindex 131080
[  130.978951][ T8444] netlink: 156 bytes leftover after parsing attributes in process `syz.2.712'.
[  131.027943][ T8446] netlink: 156 bytes leftover after parsing attributes in process `syz.2.712'.
[  131.109785][ T8444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.712'.
[  131.417511][ T8466] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3)
[  131.673393][ T8477] netlink: 12 bytes leftover after parsing attributes in process `syz.3.724'.
[  131.832772][ T8477] syzkaller1: entered promiscuous mode
[  131.838708][ T8477] syzkaller1: entered allmulticast mode
[  132.155937][ T8500] Bluetooth: MGMT ver 1.23
[  132.173262][ T8500] netlink: 16 bytes leftover after parsing attributes in process `syz.0.729'.
[  132.241693][ T8500] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0
[  132.260515][ T8502] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  132.477874][ T8511] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  132.519235][ T8511] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  132.535357][ T8516] netlink: 40 bytes leftover after parsing attributes in process `syz.3.732'.
[  132.590330][ T8520] netlink: 16 bytes leftover after parsing attributes in process `syz.0.735'.
[  132.626141][ T8522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.737'.
[  132.702959][ T8522] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  132.725229][ T8522] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  132.733646][ T8522] gretap1: entered promiscuous mode
[  132.739702][ T8522] gretap1: entered allmulticast mode
[  132.880490][ T8540] validate_nla: 4 callbacks suppressed
[  132.880508][ T8540] netlink: 'syz.2.743': attribute type 1 has an invalid length.
[  132.921069][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  132.943476][ T8543] caif0: entered allmulticast mode
[  133.022699][ T8546] IPv6: sit1: Disabled Multicast RS
[  133.030955][ T8546] sit1: entered allmulticast mode
[  133.102874][ T8552] netlink: 'syz.2.746': attribute type 1 has an invalid length.
[  133.222295][ T8556] netlink: 'syz.4.748': attribute type 1 has an invalid length.
[  133.255803][ T8556] netlink: 'syz.4.748': attribute type 1 has an invalid length.
[  133.263537][ T8556] netlink: 'syz.4.748': attribute type 2 has an invalid length.
[  133.502781][ T8569] netlink: 'syz.0.752': attribute type 1 has an invalid length.
[  133.512358][ T8569] netlink: 'syz.0.752': attribute type 2 has an invalid length.
[  133.712740][ T8582] netlink: 'syz.0.758': attribute type 1 has an invalid length.
[  133.729973][ T8582] netlink: 'syz.0.758': attribute type 3 has an invalid length.
[  133.737906][ T8582] NCSI netlink: No device for ifindex 813332851
[  133.976933][ T8598] team_slave_0: entered promiscuous mode
[  133.982880][ T8598] team_slave_1: entered promiscuous mode
[  133.990751][ T8598] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  134.003947][ T8598] team0: Device macvtap1 is already an upper device of the team interface
[  134.026179][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  134.077261][ T8598] team_slave_0: left promiscuous mode
[  134.082801][ T8598] team_slave_1: left promiscuous mode
[  134.392093][   T30] audit: type=1800 audit(1758616203.783:3): pid=8620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.769" name="memory.events" dev="tmpfs" ino=888 res=0 errno=0
[  134.512515][ T8624] IPVS: set_ctl: invalid protocol: 47 172.30.0.2:20003
[  135.541380][ T8663] tipc: Resetting bearer <eth:vlan1>
[  135.583732][ T8668] netlink: 'syz.4.788': attribute type 83 has an invalid length.
[  135.808228][ T8663] tipc: Disabling bearer <eth:vlan1>
[  136.426002][ T8710] __nla_validate_parse: 12 callbacks suppressed
[  136.426020][ T8710] netlink: 32 bytes leftover after parsing attributes in process `syz.2.797'.
[  136.442938][ T8714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  136.458491][ T8714] netlink: 24 bytes leftover after parsing attributes in process `syz.3.798'.
[  136.474017][ T8708] syzkaller0: entered promiscuous mode
[  136.480653][ T8708] syzkaller0: entered allmulticast mode
[  136.499146][ T8711] delete_channel: no stack
[  136.723689][ T8733] netlink: 152 bytes leftover after parsing attributes in process `syz.1.803'.
[  137.039899][ T8752] netlink: 24 bytes leftover after parsing attributes in process `syz.1.807'.
[  137.127970][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.809'.
[  137.186084][ T8764] netlink: 224 bytes leftover after parsing attributes in process `syz.2.809'.
[  137.207470][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.809'.
[  137.426139][ T8773] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.457475][ T8773] syzkaller0: entered promiscuous mode
[  137.478162][ T8773] syzkaller0: entered allmulticast mode
[  137.568147][ T8786] netlink: 40 bytes leftover after parsing attributes in process `syz.1.817'.
[  137.745553][ T8792] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.780546][ T8793] tipc: Resetting bearer <eth:syzkaller0>
[  137.807389][ T8786] syzkaller0: entered promiscuous mode
[  137.820207][ T8786] syzkaller0: entered allmulticast mode
[  137.829073][ T8803] batadv0: entered allmulticast mode
[  137.851191][ T8786] tipc: Resetting bearer <eth:syzkaller0>
[  137.874928][ T8785] tipc: Resetting bearer <eth:syzkaller0>
[  137.956394][ T8808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.822'.
[  137.982906][ T8785] tipc: Disabling bearer <eth:syzkaller0>
[  138.163305][ T8817] sctp: [Deprecated]: syz.4.825 (pid 8817) Use of struct sctp_assoc_value in delayed_ack socket option.
[  138.163305][ T8817] Use struct sctp_sack_info instead
[  138.228230][ T8826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.827'.
[  138.338752][ T8827] validate_nla: 5 callbacks suppressed
[  138.338768][ T8827] netlink: 'syz.3.828': attribute type 1 has an invalid length.
[  138.354564][ T8771] tipc: Resetting bearer <eth:syzkaller0>
[  138.377877][ T8771] tipc: Disabling bearer <eth:syzkaller0>
[  138.688982][ T8845] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  139.295592][ T8876] netlink: 'syz.2.846': attribute type 4 has an invalid length.
[  139.321562][ T8834] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  139.472319][ T8885] netlink: 'syz.1.848': attribute type 4 has an invalid length.
[  139.498401][ T8884] netlink: 'syz.1.848': attribute type 4 has an invalid length.
[  139.569642][ T8887] can: request_module (can-proto-0) failed.
[  139.790768][ T8907] pimreg3: entered allmulticast mode
[  139.849625][ T8904] syz.2.853 (8904) used greatest stack depth: 15464 bytes left
[  139.942896][ T8913] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  139.972614][ T8910] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  139.983296][ T5975] IPVS: starting estimator thread 0...
[  140.085765][ T8931] IPVS: using max 27 ests per chain, 64800 per kthread
[  141.061864][ T8989] tipc: MTU too low for tipc bearer
[  141.330240][ T9001] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  141.351246][ T9004] lo: entered promiscuous mode
[  141.368073][ T5865] block nbd0: Receive control failed (result -32)
[  141.381036][ T9004] tunl0: entered promiscuous mode
[  141.414394][ T9004] gre0: entered promiscuous mode
[  141.457153][ T9004] gretap0: entered promiscuous mode
[  141.536883][ T9004] erspan0: entered promiscuous mode
[  141.579385][ T9004] ip_vti0: entered promiscuous mode
[  141.787233][ T9015] __nla_validate_parse: 10 callbacks suppressed
[  141.787250][ T9015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.885'.
[  141.865887][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  141.951511][ T9028] netlink: 60 bytes leftover after parsing attributes in process `syz.2.890'.
[  141.961244][ T9031] netlink: 60 bytes leftover after parsing attributes in process `syz.2.890'.
[  141.973711][ T9028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.890'.
[  142.004169][ T9028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.890'.
[  142.065341][ T9028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.890'.
[  142.110852][ T9028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.890'.
[  142.165977][ T9028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.890'.
[  142.202785][ T9043] netlink: 'syz.0.893': attribute type 10 has an invalid length.
[  142.213258][ T9028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.890'.
[  142.254168][ T9043] bond0: (slave geneve1): Enslaving as an active interface with an up link
[  142.268334][ T9028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.890'.
[  142.294015][ T9046] netlink: 'syz.1.894': attribute type 1 has an invalid length.
[  142.694310][ T9065] netlink: 'syz.0.900': attribute type 1 has an invalid length.
[  142.806731][ T9073] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  142.839852][ T9064] bond2 (unregistering): Released all slaves
[  142.955875][ T9080] ieee802154 phy0 wpan0: encryption failed: -90
[  143.009049][ T9085] netlink: 'syz.4.905': attribute type 83 has an invalid length.
[  143.136328][ T9088] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.212742][ T9089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  143.481516][ T9107] syzkaller1: entered promiscuous mode
[  143.504221][ T9107] syzkaller1: entered allmulticast mode
[  143.668734][ T9116] netlink: 'syz.2.915': attribute type 1 has an invalid length.
[  143.839640][ T9124] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  143.864377][ T9124] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  144.090986][ T9133] vlan2: entered allmulticast mode
[  144.115722][ T9133] bridge0: entered allmulticast mode
[  144.132186][ T9133] bridge0: entered promiscuous mode
[  144.153123][ T9133] bridge0: left promiscuous mode
[  144.164714][ T9133] bond3: (slave vlan2): making interface the new active one
[  144.183027][ T9133] bridge0: entered promiscuous mode
[  144.191291][ T9133] bond3: (slave vlan2): Enslaving as an active interface with an up link
[  144.314024][ T9143] vlan0: entered promiscuous mode
[  144.330350][ T9143] bridge0: entered promiscuous mode
[  144.729859][ T9157] IPVS: set_ctl: invalid protocol: 43 172.30.0.5:20000
[  144.774491][ T9157] ip_vti0: entered promiscuous mode
[  144.780814][ T9157] ip_vti0: entered allmulticast mode
[  145.510490][ T9209] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.885292][ T9231] netlink: 'syz.2.948': attribute type 1 has an invalid length.
[  145.993634][ T9241] bond4: (slave gretap1): making interface the new active one
[  146.007149][ T9241] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  146.038474][ T9245] netlink: 'syz.4.952': attribute type 1 has an invalid length.
[  146.381712][ T9263] netem: incorrect gi model size
[  146.405391][ T9263] netem: change failed
[  146.506512][ T9271] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  147.207012][ T9308] __nla_validate_parse: 75 callbacks suppressed
[  147.207031][ T9308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.968'.
[  147.270072][ T9308] netlink: 20 bytes leftover after parsing attributes in process `syz.1.968'.
[  147.315042][ T9308] geneve2: entered promiscuous mode
[  147.328609][ T9308] geneve2: entered allmulticast mode
[  147.761391][ T9301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.966'.
[  147.923032][ T9343] syzkaller1: entered promiscuous mode
[  147.934756][ T9345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.981'.
[  147.962427][ T9343] syzkaller1: entered allmulticast mode
[  147.982853][ T9345] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  147.988449][ T9355] netlink: 24 bytes leftover after parsing attributes in process `syz.3.982'.
[  148.004323][ T9345] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  148.014058][ T9345] gretap1: entered promiscuous mode
[  148.020189][ T9345] gretap1: entered allmulticast mode
[  148.097039][ T9352] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  148.114072][ T9355] netlink: 244 bytes leftover after parsing attributes in process `syz.3.982'.
[  148.145249][ T9359] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  148.486619][ T9382] syzkaller0: entered promiscuous mode
[  148.501326][ T9382] syzkaller0: entered allmulticast mode
[  148.684351][ T9390] netlink: 'syz.2.992': attribute type 1 has an invalid length.
[  149.128246][ T9415] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  149.163998][ T9415] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  149.190758][ T9433] netlink: 'syz.0.1002': attribute type 21 has an invalid length.
[  149.201113][ T9433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1002'.
[  149.378188][ T9415] tipc: Disabling bearer <eth:syzkaller0>
[  149.528705][ T9455] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.1007'.
[  149.607691][ T9463] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1010'.
[  149.991749][ T9475] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  150.190521][ T9488] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1016'.
[  150.538521][ T9515] sch_fq: defrate 0 ignored.
[  150.857110][ T9530] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.255145][ T9553] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96
[  151.428818][ T9561] netlink: 'syz.3.1044': attribute type 10 has an invalid length.
[  151.482074][ T9561] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  152.133542][ T9594] netlink: 'syz.2.1056': attribute type 4 has an invalid length.
[  152.204956][ T9597] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  152.329016][ T9604] syzkaller1: entered promiscuous mode
[  152.334684][ T9604] syzkaller1: entered allmulticast mode
[  152.355217][ T9604] __nla_validate_parse: 7 callbacks suppressed
[  152.355235][ T9604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1059'.
[  152.368133][ T9606] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1061'.
[  152.392471][ T9604] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1059'.
[  152.418428][ T9604] geneve2: entered promiscuous mode
[  152.423768][ T9604] geneve2: entered allmulticast mode
[  152.523436][ T9613] raw_sendmsg: syz.0.1063 forgot to set AF_INET. Fix it!
[  152.820738][ T9633] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1069'.
[  153.019259][ T9638] C: renamed from team_slave_0 (while UP)
[  153.051545][ T9638] netlink: 'syz.1.1068': attribute type 1 has an invalid length.
[  153.090174][ T9638] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  153.114765][ T9649] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  153.417281][ T9664] netdevsim netdevsim2: Direct firmware load for /.€ failed with error -2
[  153.466496][ T9664] netdevsim netdevsim2: Falling back to sysfs fallback for: /.€
[  153.527638][ T9676] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1078'.
[  153.564041][ T9676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1078'.
[  153.952966][ T9711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1083'.
[  154.142372][ T9718] netlink: 'syz.2.1085': attribute type 4 has an invalid length.
[  154.321164][ T9725] netlink: 'syz.4.1089': attribute type 1 has an invalid length.
[  154.339338][ T9725] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1089'.
[  154.881870][ T9756] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  155.278793][ T9787] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1102'.
[  155.342744][ T9787] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1102'.
[  155.655985][ T9814] syz_tun: entered allmulticast mode
[  155.688664][ T9813] syz_tun: left allmulticast mode
[  155.748903][ T9819] sctp: [Deprecated]: syz.1.1109 (pid 9819) Use of struct sctp_assoc_value in delayed_ack socket option.
[  155.748903][ T9819] Use struct sctp_sack_info instead
[  155.858290][ T9826] bond0: entered promiscuous mode
[  155.871962][ T9826] bond_slave_0: entered promiscuous mode
[  155.887096][ T9826] bond_slave_1: entered promiscuous mode
[  155.907361][ T9826] geneve1: entered promiscuous mode
[  155.933616][ T9826] bond0: entered allmulticast mode
[  155.950930][ T9826] bond_slave_0: entered allmulticast mode
[  155.963603][ T9826] bond_slave_1: entered allmulticast mode
[  155.977842][ T9826] geneve1: entered allmulticast mode
[  156.488665][ T9854] sctp: [Deprecated]: syz.1.1118 (pid 9854) Use of int in max_burst socket option.
[  156.488665][ T9854] Use struct sctp_assoc_value instead
[  156.737795][ T9864] netlink: 'syz.4.1120': attribute type 10 has an invalid length.
[  157.214948][ T9884] netlink: 'syz.2.1123': attribute type 2 has an invalid length.
[  157.274348][ T9889] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.504494][ T9896] __nla_validate_parse: 6 callbacks suppressed
[  157.504514][ T9896] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1131'.
[  157.758801][ T9906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1136'.
[  157.796346][ T9906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1136'.
[  157.867848][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  157.908353][ T9906] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  157.948382][ T9921] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1141'.
[  157.988966][ T9923] syz.4.1142 (9923) used obsolete PPPIOCDETACH ioctl
[  158.220307][ T9935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1146'.
[  158.252723][ T9935] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1146'.
[  158.723066][ T9962] netlink: 'syz.4.1156': attribute type 9 has an invalid length.
[  158.734920][ T9962] netlink: 212260 bytes leftover after parsing attributes in process `syz.4.1156'.
[  159.518147][T10009] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1167'.
[  159.925309][T10032] team0: Port device bridge1 added
[  159.958160][T10036] netlink: 'syz.3.1176': attribute type 3 has an invalid length.
[  160.023247][T10032] netlink: 'syz.3.1176': attribute type 23 has an invalid length.
[  160.321318][T10056] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1186'.
[  160.420271][T10056] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1186'.
[  160.505966][T10067] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) !
[  160.582580][T10077] netlink: 'syz.1.1189': attribute type 1 has an invalid length.
[  161.015347][T10099] netlink: 'syz.0.1197': attribute type 21 has an invalid length.
[  161.658210][T10122] IPVS: set_ctl: invalid protocol: 43 172.30.0.4:20000
[  161.720374][T10144] sctp: [Deprecated]: syz.1.1209 (pid 10144) Use of struct sctp_assoc_value in delayed_ack socket option.
[  161.720374][T10144] Use struct sctp_sack_info instead
[  161.744880][T10122] syz_tun: entered promiscuous mode
[  161.750368][T10122] syz_tun: entered allmulticast mode
[  161.780959][T10143] netlink: 'syz.2.1207': attribute type 3 has an invalid length.
[  162.213446][T10179] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  162.272938][T10179] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  162.282486][T10172] bond7: entered promiscuous mode
[  162.307394][T10172] bond7: entered allmulticast mode
[  162.313082][T10172] 8021q: adding VLAN 0 to HW filter on device bond7
[  162.350454][T10176] tipc: Enabling <eth:lo> not permitted
[  162.359653][T10176] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  162.405203][T10192] netlink: 'syz.1.1217': attribute type 33 has an invalid length.
[  162.966606][T10211] netlink: 'syz.2.1226': attribute type 1 has an invalid length.
[  162.976372][T10213] __nla_validate_parse: 16 callbacks suppressed
[  162.976390][T10213] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1227'.
[  163.282085][T10227] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1231'.
[  163.296376][T10227] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1231'.
[  163.751062][T10261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1237'.
[  163.803442][T10261] netlink: 'syz.3.1237': attribute type 30 has an invalid length.
[  163.859029][T10261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1237'.
[  163.868727][T10265] openvswitch: netlink: Flow actions attr not present in new flow.
[  163.869824][T10265] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1237'.
[  163.922190][T10269] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1239'.
[  163.959935][T10271] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1239'.
[  164.110655][T10281] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1240'.
[  164.258237][T10281] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1240'.
[  164.780707][ T6050] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  164.805752][ T6050] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  164.814701][ T6050] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  164.880459][ T6050] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  164.957457][T10318] netlink: 'syz.1.1249': attribute type 7 has an invalid length.
[  164.965229][T10318] netlink: 'syz.1.1249': attribute type 8 has an invalid length.
[  165.601133][T10346] bridge0: port 2(batadv1) entered blocking state
[  165.613636][T10346] bridge0: port 2(batadv1) entered disabled state
[  165.635966][T10346] batadv1: entered allmulticast mode
[  165.673477][T10346] batadv1: entered promiscuous mode
[  166.097221][ T6050] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  166.107077][ T6050] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  166.294850][T10391] netlink: 'syz.3.1271': attribute type 5 has an invalid length.
[  166.588857][T10408] syzkaller0: entered promiscuous mode
[  166.594465][T10408] syzkaller0: entered allmulticast mode
[  166.614415][T10408] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) !
[  167.731096][ T5893] IPVS: starting estimator thread 0...
[  167.865889][T10470] IPVS: using max 32 ests per chain, 76800 per kthread
[  167.985047][T10482] netlink: 'syz.2.1294': attribute type 1 has an invalid length.
[  168.033127][T10489] netlink: 'syz.3.1298': attribute type 11 has an invalid length.
[  168.047492][T10489] netlink: 'syz.3.1298': attribute type 4 has an invalid length.
[  168.050617][T10482] 8021q: adding VLAN 0 to HW filter on device bond9
[  168.055411][T10489] __nla_validate_parse: 13 callbacks suppressed
[  168.055425][T10489] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1298'.
[  168.077977][T10484] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1297'.
[  168.118987][T10486] syzkaller0: entered promiscuous mode
[  168.124527][T10486] syzkaller0: entered allmulticast mode
[  168.144412][T10486] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  168.303173][T10500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  168.357101][T10503] netlink: 'syz.1.1301': attribute type 10 has an invalid length.
[  168.378175][T10504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1302'.
[  168.438071][T10503] 8021q: adding VLAN 0 to HW filter on device batadv0
[  168.450134][T10503] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  168.477975][T10511] netlink: 'syz.1.1301': attribute type 10 has an invalid length.
[  168.496374][T10511] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1301'.
[  168.505368][T10511] batadv0: entered promiscuous mode
[  168.524646][T10511] batadv0: entered allmulticast mode
[  168.580715][T10511] bond0: (slave batadv0): Releasing backup interface
[  168.604774][T10511] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  168.729534][T10527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1307'.
[  168.775196][T10527] geneve2: entered promiscuous mode
[  169.417681][T10553] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1316'.
[  169.490650][T10561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1318'.
[  170.405533][T10588] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  170.740945][T10604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1330'.
[  170.770742][T10604] netlink: 'syz.2.1330': attribute type 22 has an invalid length.
[  170.790091][T10604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1330'.
[  170.838193][T10604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1330'.
[  170.850867][T10604] netlink: 'syz.2.1330': attribute type 22 has an invalid length.
[  170.924637][T10609] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  171.180376][T10618] netlink: 'syz.3.1336': attribute type 1 has an invalid length.
[  171.237879][T10619] bond1 (unregistering): Released all slaves
[  171.838179][T10643] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.925439][T10643] openvswitch: netlink: Missing key (keys=40, expected=80)
[  172.026769][ T5865] Bluetooth: hci4: command 0x0406 tx timeout
[  172.069739][T10660] netlink: 'syz.3.1347': attribute type 58 has an invalid length.
[  172.691139][T10689] ip6gre3: entered allmulticast mode
[  173.288850][T10680] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  173.316106][T10680] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  173.323838][T10711] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  173.355154][T10711] syzkaller0: entered promiscuous mode
[  173.364184][T10680] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  173.373590][T10711] syzkaller0: entered allmulticast mode
[  173.379581][T10680] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  173.420196][T10680] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  173.433113][T10680] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  173.466135][T10715] __nla_validate_parse: 5 callbacks suppressed
[  173.466152][T10715] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1366'.
[  173.487070][T10711] tipc: Resetting bearer <eth:syzkaller0>
[  173.522120][T10710] tipc: Resetting bearer <eth:syzkaller0>
[  173.540315][T10680] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  173.560755][T10680] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  173.681375][T10710] tipc: Disabling bearer <eth:syzkaller0>
[  174.667954][T10752] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1373'.
[  174.742058][T10756] netlink: 'syz.1.1373': attribute type 10 has an invalid length.
[  175.187759][T10766] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1374'.
[  175.211364][T10766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1374'.
[  175.294174][T10742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1371'.
[  175.315794][T10742] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1371'.
[  176.362804][T10742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1371'.
[  176.386687][T10742] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1371'.
[  176.515515][T10800] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1376'.
[  176.644653][T10803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  176.694715][T10810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1379'.
[  177.471223][T10810] 8021q: adding VLAN 0 to HW filter on device bond2
[  178.620584][T10891] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  178.655466][T10888] tipc: Disabling bearer <eth:syzkaller0>
[  178.772474][T10900] ªªªªªª_rmem: renamed from vlan0 (while UP)
[  178.953087][T10910] netlink: 'syz.4.1400': attribute type 4 has an invalid length.
[  179.561093][T10944] __nla_validate_parse: 3 callbacks suppressed
[  179.561111][T10944] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1409'.
[  179.605786][T10944] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1409'.
[  180.296679][T10985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1420'.
[  180.393527][T10989] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1421'.
[  180.411296][T10993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1423'.
[  180.672477][T11006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1428'.
[  180.701036][T11008] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1428'.
[  180.986214][T11023] syzkaller1: entered promiscuous mode
[  180.991895][T11023] syzkaller1: entered allmulticast mode
[  181.015122][T11025] netlink: 'syz.3.1432': attribute type 11 has an invalid length.
[  181.080053][T11025] netlink: 'syz.3.1432': attribute type 11 has an invalid length.
[  181.093760][T11025] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1432'.
[  181.184269][T11033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1433'.
[  181.230203][T11033] netlink: 'syz.1.1433': attribute type 2 has an invalid length.
[  181.969516][T11080] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  182.016492][T11083] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  182.016615][T11082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1444'.
[  182.068182][T11085] syzkaller0: entered promiscuous mode
[  182.095232][T11085] syzkaller0: entered allmulticast mode
[  182.234007][T11097] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  182.424633][T11083] tipc: Resetting bearer <eth:syzkaller0>
[  182.448299][T11079] tipc: Resetting bearer <eth:syzkaller0>
[  182.506420][T11079] tipc: Disabling bearer <eth:syzkaller0>
[  182.964533][T11139] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  183.088770][T11137] netlink: 'syz.4.1453': attribute type 1 has an invalid length.
[  183.277076][T11155] netlink: 'syz.1.1459': attribute type 24 has an invalid length.
[  183.306233][T11160] netlink: 'syz.4.1460': attribute type 1 has an invalid length.
[  183.576262][T11175] nbd: socks must be embedded in a SOCK_ITEM attr
[  184.111260][T11203] netlink: 'syz.1.1471': attribute type 16 has an invalid length.
[  184.143175][T11203] netlink: 'syz.1.1471': attribute type 17 has an invalid length.
[  184.194419][T11203] lo: entered promiscuous mode
[  184.215515][T11203] lo: entered allmulticast mode
[  184.283278][T11203] tunl0: entered promiscuous mode
[  184.303223][T11203] tunl0: entered allmulticast mode
[  184.317101][T11203] gre0: entered promiscuous mode
[  184.322196][T11203] gre0: entered allmulticast mode
[  184.332793][T11203] gretap0: entered promiscuous mode
[  184.340478][T11203] gretap0: entered allmulticast mode
[  184.347507][T11203] erspan0: entered promiscuous mode
[  184.352901][T11203] erspan0: entered allmulticast mode
[  184.364648][T11203] ip_vti0: entered allmulticast mode
[  184.385107][T11203] ip6_vti0: entered promiscuous mode
[  184.395272][T11203] ip6_vti0: entered allmulticast mode
[  184.402767][T11203] sit0: entered allmulticast mode
[  184.462312][T11203] ip6tnl0: entered promiscuous mode
[  184.472439][T11203] ip6tnl0: entered allmulticast mode
[  184.480789][T11203] ip6gre0: entered promiscuous mode
[  184.490686][T11203] ip6gre0: entered allmulticast mode
[  184.498316][T11203] syz_tun: entered promiscuous mode
[  184.503780][T11203] syz_tun: entered allmulticast mode
[  184.520059][T11203] ip6gretap0: entered promiscuous mode
[  184.527747][T11203] ip6gretap0: entered allmulticast mode
[  184.534625][T11203] bond0: entered promiscuous mode
[  184.543142][T11203] bond_slave_0: entered promiscuous mode
[  184.551452][T11203] bond_slave_1: entered promiscuous mode
[  184.563025][T11203] bond0: entered allmulticast mode
[  184.570153][T11203] bond_slave_0: entered allmulticast mode
[  184.579290][T11203] bond_slave_1: entered allmulticast mode
[  184.591778][T11203] team0: entered promiscuous mode
[  184.600149][T11203] C: entered promiscuous mode
[  184.605189][T11203] team_slave_1: entered promiscuous mode
[  184.613301][T11203] team0: entered allmulticast mode
[  184.622879][T11203] C: entered allmulticast mode
[  184.628689][T11203] team_slave_1: entered allmulticast mode
[  184.636378][T11203] dummy0: entered promiscuous mode
[  184.641929][T11203] dummy0: entered allmulticast mode
[  184.648921][T11203] nlmon0: entered promiscuous mode
[  184.654218][T11203] nlmon0: entered allmulticast mode
[  184.663554][T11203] 8021q: adding VLAN 0 to HW filter on device batadv0
[  184.675135][T11203] veth0: entered promiscuous mode
[  184.680667][T11203] veth0: entered allmulticast mode
[  184.687437][T11203] veth1: entered promiscuous mode
[  184.692826][T11203] veth1: entered allmulticast mode
[  184.699547][T11203] wg0: entered promiscuous mode
[  184.704623][T11203] wg0: entered allmulticast mode
[  184.712097][T11203] wg1: entered promiscuous mode
[  184.717827][T11203] wg1: entered allmulticast mode
[  184.724458][T11203] wg2: entered promiscuous mode
[  184.731201][T11203] wg2: entered allmulticast mode
[  184.738755][T11203] veth0_to_bridge: entered promiscuous mode
[  184.744904][T11203] veth0_to_bridge: entered allmulticast mode
[  184.753327][T11203] bridge_slave_0: entered allmulticast mode
[  184.760993][T11203] veth0_to_bond: entered promiscuous mode
[  184.767447][T11203] veth0_to_bond: entered allmulticast mode
[  184.775119][T11203] veth1_to_bond: entered promiscuous mode
[  184.781561][T11203] veth1_to_bond: entered allmulticast mode
[  184.789889][T11203] veth0_to_team: entered promiscuous mode
[  184.798537][T11203] veth0_to_team: entered allmulticast mode
[  184.809376][T11203] veth1_to_team: entered promiscuous mode
[  184.819516][T11203] veth1_to_team: entered allmulticast mode
[  184.828419][T11203] veth0_to_batadv: entered promiscuous mode
[  184.834463][T11203] veth0_to_batadv: entered allmulticast mode
[  184.851594][T11203] batadv_slave_0: entered promiscuous mode
[  184.858467][T11203] batadv_slave_0: entered allmulticast mode
[  184.865272][T11203] veth1_to_batadv: entered promiscuous mode
[  184.871903][T11203] veth1_to_batadv: entered allmulticast mode
[  184.881686][T11203] batadv_slave_1: entered promiscuous mode
[  184.888139][T11203] batadv_slave_1: entered allmulticast mode
[  184.894923][T11203] xfrm0: entered promiscuous mode
[  184.900430][T11203] xfrm0: entered allmulticast mode
[  184.907604][T11203] veth0_to_hsr: entered promiscuous mode
[  184.913385][T11203] veth0_to_hsr: entered allmulticast mode
[  184.922014][T11203] veth1_to_hsr: entered promiscuous mode
[  184.928076][T11203] veth1_to_hsr: entered allmulticast mode
[  184.935427][T11203] hsr0: entered promiscuous mode
[  184.945213][T11203] veth1_virt_wifi: entered promiscuous mode
[  184.953145][T11203] veth1_virt_wifi: entered allmulticast mode
[  184.963628][T11203] veth0_virt_wifi: entered promiscuous mode
[  184.973470][T11203] veth0_virt_wifi: entered allmulticast mode
[  184.982100][T11203] net veth1_virt_wifi .: entered promiscuous mode
[  184.992543][T11203] net veth1_virt_wifi .: entered allmulticast mode
[  185.000843][T11203] A link change request failed with some changes committed already. Interface . may have been left with an inconsistent configuration, please check.
[  185.349619][T11247] __nla_validate_parse: 14 callbacks suppressed
[  185.349639][T11247] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1480'.
[  185.513696][T11257] syzkaller1: entered promiscuous mode
[  185.575418][T11257] syzkaller1: entered allmulticast mode
[  186.166279][T11301] ==================================================================
[  186.174392][T11301] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  186.182330][T11301] Read of size 1 at addr ffff888047e40770 by task syz.2.1492/11301
[  186.190218][T11301] 
[  186.192644][T11301] CPU: 1 UID: 0 PID: 11301 Comm: syz.2.1492 Not tainted syzkaller #0 PREEMPT(full) 
[  186.192662][T11301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  186.192678][T11301] Call Trace:
[  186.192685][T11301]  <TASK>
[  186.192692][T11301]  dump_stack_lvl+0x189/0x250
[  186.192714][T11301]  ? __kasan_check_byte+0x12/0x40
[  186.192732][T11301]  ? __pfx_dump_stack_lvl+0x10/0x10
[  186.192747][T11301]  ? lock_release+0x4b/0x3e0
[  186.192767][T11301]  ? __virt_addr_valid+0x4a5/0x5c0
[  186.192785][T11301]  print_report+0xca/0x240
[  186.192798][T11301]  ? xfrm_state_find+0x2cf2/0x5400
[  186.192812][T11301]  kasan_report+0x118/0x150
[  186.192830][T11301]  ? xfrm_state_find+0x2cf2/0x5400
[  186.192846][T11301]  xfrm_state_find+0x2cf2/0x5400
[  186.192868][T11301]  ? xfrm_state_find+0x1da/0x5400
[  186.192886][T11301]  ? __pfx_xfrm_state_find+0x10/0x10
[  186.192906][T11301]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  186.192934][T11301]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  186.192951][T11301]  ? __lock_acquire+0xab9/0xd20
[  186.192974][T11301]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  186.192995][T11301]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  186.193012][T11301]  ? xfrm_expand_policies+0x41f/0x6a0
[  186.193030][T11301]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  186.193050][T11301]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  186.193067][T11301]  ? rcuref_put+0x1b7/0x210
[  186.193083][T11301]  ? __pfx_rcuref_put+0x10/0x10
[  186.193098][T11301]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  186.193118][T11301]  xfrm_lookup_route+0x3c/0x1c0
[  186.193136][T11301]  __ip4_datagram_connect+0x9a5/0x1270
[  186.193159][T11301]  __ip6_datagram_connect+0x9f0/0x1150
[  186.193175][T11301]  ? __pfx___ip6_datagram_connect+0x10/0x10
[  186.193187][T11301]  ? __local_bh_enable_ip+0x12d/0x1c0
[  186.193199][T11301]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  186.193215][T11301]  ip6_datagram_connect_v6_only+0x63/0xa0
[  186.193228][T11301]  __sys_connect+0x313/0x440
[  186.193243][T11301]  ? __pfx___sys_connect+0x10/0x10
[  186.193260][T11301]  ? rcu_is_watching+0x15/0xb0
[  186.193276][T11301]  __x64_sys_connect+0x7a/0x90
[  186.193291][T11301]  do_syscall_64+0xfa/0x3b0
[  186.193304][T11301]  ? lockdep_hardirqs_on+0x9c/0x150
[  186.193317][T11301]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.193330][T11301]  ? clear_bhb_loop+0x60/0xb0
[  186.193344][T11301]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.193357][T11301] RIP: 0033:0x7f88b9f8eec9
[  186.193378][T11301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  186.193390][T11301] RSP: 002b:00007f88b81f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  186.193409][T11301] RAX: ffffffffffffffda RBX: 00007f88ba1e6090 RCX: 00007f88b9f8eec9
[  186.193420][T11301] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000006
[  186.193429][T11301] RBP: 00007f88ba011f91 R08: 0000000000000000 R09: 0000000000000000
[  186.193438][T11301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  186.193446][T11301] R13: 00007f88ba1e6128 R14: 00007f88ba1e6090 R15: 00007ffc411eed78
[  186.193467][T11301]  </TASK>
[  186.193472][T11301] 
[  186.498884][T11301] Allocated by task 9740:
[  186.503194][T11301]  kasan_save_track+0x3e/0x80
[  186.507875][T11301]  __kasan_slab_alloc+0x6c/0x80
[  186.512720][T11301]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  186.518232][T11301]  xfrm_state_alloc+0x24/0x2f0
[  186.522985][T11301]  xfrm_state_find+0x37d4/0x5400
[  186.527907][T11301]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  186.534053][T11301]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  186.539418][T11301]  xfrm_lookup_route+0x3c/0x1c0
[  186.544273][T11301]  udp_sendmsg+0x142e/0x2170
[  186.548938][T11301]  __sock_sendmsg+0x19c/0x270
[  186.554012][T11301]  ____sys_sendmsg+0x52d/0x830
[  186.558788][T11301]  ___sys_sendmsg+0x21f/0x2a0
[  186.563458][T11301]  __sys_sendmmsg+0x227/0x430
[  186.568121][T11301]  __x64_sys_sendmmsg+0xa0/0xc0
[  186.572980][T11301]  do_syscall_64+0xfa/0x3b0
[  186.577474][T11301]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.583358][T11301] 
[  186.585674][T11301] Freed by task 43:
[  186.589463][T11301]  kasan_save_track+0x3e/0x80
[  186.594128][T11301]  kasan_save_free_info+0x46/0x50
[  186.599266][T11301]  __kasan_slab_free+0x5b/0x80
[  186.604034][T11301]  kmem_cache_free+0x18f/0x400
[  186.608886][T11301]  xfrm_state_gc_task+0x52d/0x6b0
[  186.613907][T11301]  process_scheduled_works+0xae1/0x17b0
[  186.619447][T11301]  worker_thread+0x8a0/0xda0
[  186.624047][T11301]  kthread+0x70e/0x8a0
[  186.628101][T11301]  ret_from_fork+0x439/0x7d0
[  186.632675][T11301]  ret_from_fork_asm+0x1a/0x30
[  186.637439][T11301] 
[  186.639748][T11301] The buggy address belongs to the object at ffff888047e40440
[  186.639748][T11301]  which belongs to the cache xfrm_state of size 928
[  186.653699][T11301] The buggy address is located 816 bytes inside of
[  186.653699][T11301]  freed 928-byte region [ffff888047e40440, ffff888047e407e0)
[  186.667483][T11301] 
[  186.669799][T11301] The buggy address belongs to the physical page:
[  186.676213][T11301] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x47e40
[  186.685062][T11301] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  186.693551][T11301] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  186.701524][T11301] page_type: f5(slab)
[  186.705510][T11301] raw: 00fff00000000040 ffff8880206be8c0 0000000000000000 0000000000000001
[  186.714090][T11301] raw: 0000000000000000 00000000800f000f 00000000f5000000 0000000000000000
[  186.722681][T11301] head: 00fff00000000040 ffff8880206be8c0 0000000000000000 0000000000000001
[  186.731405][T11301] head: 0000000000000000 00000000800f000f 00000000f5000000 0000000000000000
[  186.740063][T11301] head: 00fff00000000002 ffffea00011f9001 00000000ffffffff 00000000ffffffff
[  186.748730][T11301] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  186.757380][T11301] page dumped because: kasan: bad access detected
[  186.763789][T11301] page_owner tracks the page as allocated
[  186.769484][T11301] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6311, tgid 6303 (syz.3.99), ts 89227697700, free_ts 89048752179
[  186.788418][T11301]  post_alloc_hook+0x240/0x2a0
[  186.793188][T11301]  get_page_from_freelist+0x21e4/0x22c0
[  186.798722][T11301]  __alloc_frozen_pages_noprof+0x181/0x370
[  186.804511][T11301]  alloc_pages_mpol+0x232/0x4a0
[  186.809349][T11301]  allocate_slab+0x8a/0x370
[  186.813835][T11301]  ___slab_alloc+0xbeb/0x1420
[  186.818496][T11301]  kmem_cache_alloc_noprof+0x283/0x3c0
[  186.823943][T11301]  xfrm_state_alloc+0x24/0x2f0
[  186.828690][T11301]  xfrm_add_sa+0x17d1/0x4070
[  186.833268][T11301]  xfrm_user_rcv_msg+0x7a3/0xab0
[  186.838195][T11301]  netlink_rcv_skb+0x205/0x470
[  186.842939][T11301]  xfrm_netlink_rcv+0x79/0x90
[  186.847600][T11301]  netlink_unicast+0x82f/0x9e0
[  186.852354][T11301]  netlink_sendmsg+0x805/0xb30
[  186.857102][T11301]  __sock_sendmsg+0x219/0x270
[  186.861799][T11301]  ____sys_sendmsg+0x505/0x830
[  186.866548][T11301] page last free pid 6303 tgid 6303 stack trace:
[  186.872852][T11301]  __free_frozen_pages+0xbc4/0xd30
[  186.877953][T11301]  __slab_free+0x303/0x3c0
[  186.882351][T11301]  qlist_free_all+0x97/0x140
[  186.886924][T11301]  kasan_quarantine_reduce+0x148/0x160
[  186.892369][T11301]  __kasan_slab_alloc+0x22/0x80
[  186.897216][T11301]  __kmalloc_noprof+0x224/0x4f0
[  186.902064][T11301]  tomoyo_encode+0x28b/0x550
[  186.906655][T11301]  tomoyo_path_perm+0x2b3/0x4b0
[  186.911495][T11301]  tomoyo_path_symlink+0xa3/0xe0
[  186.916417][T11301]  security_path_symlink+0x177/0x380
[  186.921689][T11301]  do_symlinkat+0x107/0x3f0
[  186.926180][T11301]  __x64_sys_symlinkat+0x95/0xb0
[  186.931107][T11301]  do_syscall_64+0xfa/0x3b0
[  186.935602][T11301]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.941487][T11301] 
[  186.943794][T11301] Memory state around the buggy address:
[  186.949408][T11301]  ffff888047e40600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  186.957453][T11301]  ffff888047e40680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  186.965505][T11301] >ffff888047e40700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  186.973548][T11301]                                                              ^
[  186.981247][T11301]  ffff888047e40780: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[  186.989301][T11301]  ffff888047e40800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  186.997365][T11301] ==================================================================
[  187.110183][T11301] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  187.117432][T11301] CPU: 0 UID: 0 PID: 11301 Comm: syz.2.1492 Not tainted syzkaller #0 PREEMPT(full) 
[  187.126794][T11301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  187.137074][T11301] Call Trace:
[  187.140353][T11301]  <TASK>
[  187.143275][T11301]  dump_stack_lvl+0x99/0x250
[  187.147859][T11301]  ? __asan_memcpy+0x40/0x70
[  187.152441][T11301]  ? __pfx_dump_stack_lvl+0x10/0x10
[  187.157627][T11301]  ? __pfx__printk+0x10/0x10
[  187.162211][T11301]  vpanic+0x281/0x750
[  187.166206][T11301]  ? preempt_schedule+0xae/0xc0
[  187.171071][T11301]  ? __pfx_vpanic+0x10/0x10
[  187.175575][T11301]  ? preempt_schedule_common+0x83/0xd0
[  187.181023][T11301]  ? preempt_schedule+0xae/0xc0
[  187.185867][T11301]  ? __pfx_preempt_schedule+0x10/0x10
[  187.191240][T11301]  panic+0xb9/0xc0
[  187.194951][T11301]  ? __pfx_panic+0x10/0x10
[  187.199365][T11301]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  187.205249][T11301]  ? xfrm_state_find+0x2cf2/0x5400
[  187.210350][T11301]  check_panic_on_warn+0x89/0xb0
[  187.215286][T11301]  ? xfrm_state_find+0x2cf2/0x5400
[  187.220427][T11301]  end_report+0x78/0x160
[  187.224659][T11301]  kasan_report+0x129/0x150
[  187.229162][T11301]  ? xfrm_state_find+0x2cf2/0x5400
[  187.234312][T11301]  xfrm_state_find+0x2cf2/0x5400
[  187.239267][T11301]  ? xfrm_state_find+0x1da/0x5400
[  187.244302][T11301]  ? __pfx_xfrm_state_find+0x10/0x10
[  187.249613][T11301]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  187.255776][T11301]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  187.262359][T11301]  ? __lock_acquire+0xab9/0xd20
[  187.267211][T11301]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  187.272580][T11301]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  187.277943][T11301]  ? xfrm_expand_policies+0x41f/0x6a0
[  187.283306][T11301]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  187.288682][T11301]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  187.294481][T11301]  ? rcuref_put+0x1b7/0x210
[  187.298975][T11301]  ? __pfx_rcuref_put+0x10/0x10
[  187.303816][T11301]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  187.309181][T11301]  xfrm_lookup_route+0x3c/0x1c0
[  187.314056][T11301]  __ip4_datagram_connect+0x9a5/0x1270
[  187.319549][T11301]  __ip6_datagram_connect+0x9f0/0x1150
[  187.325007][T11301]  ? __pfx___ip6_datagram_connect+0x10/0x10
[  187.330882][T11301]  ? __local_bh_enable_ip+0x12d/0x1c0
[  187.336242][T11301]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  187.341948][T11301]  ip6_datagram_connect_v6_only+0x63/0xa0
[  187.347654][T11301]  __sys_connect+0x313/0x440
[  187.352240][T11301]  ? __pfx___sys_connect+0x10/0x10
[  187.357344][T11301]  ? rcu_is_watching+0x15/0xb0
[  187.362096][T11301]  __x64_sys_connect+0x7a/0x90
[  187.366846][T11301]  do_syscall_64+0xfa/0x3b0
[  187.371345][T11301]  ? lockdep_hardirqs_on+0x9c/0x150
[  187.376533][T11301]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.382587][T11301]  ? clear_bhb_loop+0x60/0xb0
[  187.387253][T11301]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.393129][T11301] RIP: 0033:0x7f88b9f8eec9
[  187.397531][T11301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  187.417472][T11301] RSP: 002b:00007f88b81f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  187.425949][T11301] RAX: ffffffffffffffda RBX: 00007f88ba1e6090 RCX: 00007f88b9f8eec9
[  187.433910][T11301] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000006
[  187.441869][T11301] RBP: 00007f88ba011f91 R08: 0000000000000000 R09: 0000000000000000
[  187.449828][T11301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  187.457786][T11301] R13: 00007f88ba1e6128 R14: 00007f88ba1e6090 R15: 00007ffc411eed78
[  187.465751][T11301]  </TASK>
[  187.469020][T11301] Kernel Offset: disabled
[  187.473363][T11301] Rebooting in 86400 seconds..