last executing test programs:

4.230620086s ago: executing program 4 (id=1416):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x10001, 0x4, 0xa, 0x1600, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x7, 0x0, 0xfffffffc}, 0x50)
close(0x3) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 32)
sendto$inet(r1, &(0x7f0000000d40)="3ce2de", 0x3, 0x4000800, 0x0, 0x0) (async, rerun: 32)
recvmmsg(r1, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000080)=""/43, 0x2b}], 0x1}, 0x2}], 0x1, 0x22, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000026000000080000000b"], 0x48)
socket$isdn_base(0x22, 0x3, 0x0) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async, rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1e, 0x1fffffffffffffcd, &(0x7f0000000040)=ANY=[@ANYRESHEX=r2], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000057e9a279551a6f8db0fb7249f8ffffffb703000008000000b704000067fb7249d1ef451201"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x2}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) (async)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async)
bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0) (async)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) (async)
close(0x3)
syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2})

4.146270946s ago: executing program 4 (id=1419):
socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
unshare(0x6a040000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a300000000014000000020a0300000000000000000002000003140000001100010000000000000000000000000a187b639904240561e0b40fc7cf272a8c0d2c243cb41c4c5756d5a706f03839db5356ed1f7c498ef773120872b92cda58384e329ca65b12cf45072d05fb4b984251c3c7"], 0x68}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000feff030000000000", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000400000000000000000000000ca5fd7e0000000000000000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000000035090100000000009500000000000000bf9800000000000056080000000000008500000007000000b700000000000000950000000000000032224fe8f63a7969f662cebb579e40799c59065d7b4376eb930400000000000000caec85b6d4d9b2246ac241f8f29438966a38aad1d4a4038d68841ea3bbfdea87ae7168f29a9e87159b31aae07f1c8bad2513b45e018163649bf36200"/182], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xf2e8a000)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="cc", 0x1}, {&(0x7f00000000c0)="8eabd4c0c48034d70c6006aaf0e953151d41e3aa438ad0f818f3ca6e230aa5b077a897a5165d32bd5407444338d4e74dc23e09008a2002a672aaa2b99549da614d74314e1666d923815da827281bee2de6eda534b2496123977149b4e7a4868d036ec6dc798458742e9c158e0c7d81a62785b97a0cc5", 0x76}], 0x2}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}], 0x1}}], 0x2, 0x4048894)
socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8)
bind$vsock_stream(r4, &(0x7f0000000940), 0x10)
clock_gettime(0xfffffffffffffff1, &(0x7f0000000040))
close(0x3)
listen(r4, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)

4.11442916s ago: executing program 2 (id=1420):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
socket$l2tp6(0xa, 0x2, 0x73) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000}, 0x1, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

4.061421795s ago: executing program 2 (id=1421):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r0=>0xffffffffffffffff, 0x100000000, 0x7, 0x6f})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x44094}, 0x4000)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_int(r3, 0x1, 0x34, &(0x7f0000000040), 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@enum64={0x3, 0x1, 0x0, 0x13, 0x0, 0x8, [{0x3, 0x8, 0x5}]}]}, {0x0, [0x61, 0x61, 0x2e, 0x61, 0x61, 0x2e, 0x5f]}}, 0x0, 0x39, 0x0, 0x1, 0x9b2987a6}, 0x28)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x41da}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xae}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000380)=0x800, 0x4)

3.550456915s ago: executing program 0 (id=1426):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c)
listen(r0, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0)
syz_extract_tcp_res(0x0, 0x4, 0xffffffff)
syz_emit_ethernet(0x3c, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x40, 0x0, 0x0, 0x1000}, {"83c28bcb1ad8"}}}}}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10)

3.38004474s ago: executing program 0 (id=1428):
r0 = socket(0x40000000015, 0x5, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={@remote, @local, 0x1d, 0x19}})
r1 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040), 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x4, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4015}, 0x40000c0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001000)={0x0, 0x0, 0x0, &(0x7f0000001340), 0xede8, r2}, 0x38)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c)
setsockopt$packet_int(r4, 0x107, 0xc, &(0x7f0000000000), 0x4)
listen(r1, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000240)="998e24c95c402375b5281f895bdebb9304000000af000000000000000000000000bc814c62585c1f72644789ee247d7ef4d1ff7c84d693dc06ce5d1e412ca7ce03e78fc10da2", 0x46}], 0x1, 0x9001, 0x7f)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mptcp_buf(r5, 0x11c, 0x3, &(0x7f0000000280)=""/209, &(0x7f0000000080)=0xd1)
r6 = accept4$unix(r1, 0x0, 0x0, 0x0)
recvfrom$unix(r6, &(0x7f0000000740)=""/263, 0xfffffffffffffe47, 0x40000022, 0x0, 0x0)
ioctl$EXT4_IOC_SETFSUUID(r6, 0x4008662c, &(0x7f0000000000)={0x10, 0x0, "f0ac4f1aa37cfbf7b0e8cab0a07d0f54"})
syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x21, 0x0, @empty, @mcast1, [], "8029335287b7a081"}}}}}}}, 0x0)

2.464756947s ago: executing program 0 (id=1437):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x3b)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=@newlink={0x128, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x108, 0x1a, 0x0, 0x1, [@AF_INET={0x40, 0x2, 0x0, 0x1, {0x3c, 0x1, 0x0, 0x1, [{0x8, 0x21}, {0x8, 0x18}, {0x8, 0x3}, {0x8, 0x9}, {0x8, 0xc}, {0x8, 0x12}, {0x8, 0x1f}]}}, @AF_INET6={0x60, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_INET6={0x2c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private0}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}]}]}, 0x128}}, 0x0)
r3 = epoll_create(0xff)
epoll_wait(r3, &(0x7f0000000000)=[{}, {}], 0x2, 0xd67)

2.437582236s ago: executing program 2 (id=1438):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c)
listen(r0, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0)
syz_extract_tcp_res(0x0, 0x4, 0xffffffff)
syz_emit_ethernet(0x3c, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x40, 0x0, 0x0, 0x1000}, {"83c28bcb1ad8"}}}}}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10)

2.348227444s ago: executing program 1 (id=1439):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000)=0x80000000, 0x4)
bind$l2tp(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}, 0x1002}, 0x10)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x0)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180005ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

2.27172099s ago: executing program 2 (id=1441):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x100}]}}}]}, 0x4c}}, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xf, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket(0x15, 0x80005, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', <r7=>0x0})
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r7}, 0x90)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r6, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r8], 0x34}}, 0x4008000)
getsockopt(r2, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5a8, 0x2e8, 0x0, 0x2e8, 0x0, 0x2e8, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, &(0x7f0000000180), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xffffffff, 0xff000000, 0xff], [0xffffffff, 0xffffffff, 0xff000000, 0xff000000], '\x00', 'tunl0\x00', {0xff}, {0xff}, 0x36, 0x4, 0xf, 0x8}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x26}}}, {{@ipv6={@local, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0x0, 0xffffffff, 0xff000000], [0xff, 0x91ea20fa44f294db, 0x0, 0xff000000], 'syzkaller1\x00', 'vlan0\x00', {}, {0xff}, 0x1, 0xc, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private1, @mcast2, [0xff, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffffff, 0x0, 0xff000000, 0xffffff], 'ip6gre0\x00', 'vxcan1\x00', {}, {}, 0x1d, 0x8, 0x7}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x2}}}, {{@ipv6={@private0, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'pim6reg1\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x6c, 0x2, 0xe772453f5b41c059, 0x2}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x12}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x608)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_newroute={0x3c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1}}}}]}, 0x3c}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0112000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="300008006971ab9f7add4ac1337581036a5497db60f2d933291d8ef6e798917de6a438800887f0fa068c8d04955b6aa569679a08a2c4f903cfb87b753f02def8c811978503a95cab6b19053639e301a74972069f50637769dd0e10413fa24d4fd1066025dc12eed42904332cb0ef7162a79168f595ef159c3c7eb0be419b243c32027ab7b45e3636798810f4f69cdf170217f16bb0920aa711f5d0df76d59b415eb26afa9bd7c3de80a575940fb95b", @ANYRES16=r10, @ANYBLOB="000a2abd7000fbdbdf2501000000050005000000000005000600050000000c0010000400000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x48041}, 0x804)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xe, 0x0, &(0x7f0000000040)="25e200ea3f5b3179d7b52eb343fc", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

2.176066655s ago: executing program 4 (id=1442):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)=<r2=>0x0)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000180)={{r0}, r2, 0x10, @inherit={0x68, &(0x7f0000000100)={0x1, 0x4, 0x6, 0x40, {0x20, 0x7fffffff, 0x4, 0x10000, 0x401}, [0x7, 0xe, 0x7, 0x7]}}, @subvolid=0x10001})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c)
sendto$inet6(r3, &(0x7f0000000240)='\x00', 0x1, 0x4008002, &(0x7f0000000140)={0xa, 0x4e23, 0x3, @loopback, 0x7}, 0x1c)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000000)=0x81, 0x4)
recvmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/115, 0x73}, 0x4}], 0x1, 0x140, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001180)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000011c0)=0x14)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x6, 0x0, 0x0, 0x41000}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4)
sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=@delneigh={0x38, 0x1d, 0x400, 0x70bd25, 0x25dfdbfb, {0xa, 0x0, 0x0, r4, 0x80, 0x50, 0x2}, [@NDA_FLAGS_EXT={0x8}, @NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, @NDA_FLAGS_EXT={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)

2.069924325s ago: executing program 1 (id=1443):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0)
getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, 0x2b, 0x1, 0x0, 0x0, {0x8}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x24}}, 0x40)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@map, 0xffffffffffffffff, 0x4, 0x2008}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r4=>0x0})
socket$inet6(0xa, 0x80000, 0x4)
bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {}, 0xfd}, 0x18)
connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0xff, 0x2}, 0xfe}, 0x18)
sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x1, {0x2, 0xff}}, 0x18)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newlink={0x28, 0x10, 0x801, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa032}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20009010}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848370000005e140602000000000e000a00100000000b8000001294", 0x2e}], 0x1}, 0x8000)
socket$kcm(0x10, 0x2, 0x0) (async)
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
getsockopt$X25_QBITINCL(r1, 0x106, 0x1, 0x0, 0x0) (async)
getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, 0x2b, 0x1, 0x0, 0x0, {0x8}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x24}}, 0x40) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@map, 0xffffffffffffffff, 0x4, 0x2008}, 0x20) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) (async)
socket$inet6(0xa, 0x80000, 0x4) (async)
bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {}, 0xfd}, 0x18) (async)
connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0xff, 0x2}, 0xfe}, 0x18) (async)
sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x1, {0x2, 0xff}}, 0x18) (async)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newlink={0x28, 0x10, 0x801, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa032}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20009010}, 0x0) (async)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848370000005e140602000000000e000a00100000000b8000001294", 0x2e}], 0x1}, 0x8000) (async)

1.991558865s ago: executing program 2 (id=1444):
r0 = socket$kcm(0x10, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)
r2 = socket(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x4, 0x4)
setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000080)=0x2, 0x4)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x13, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYRESOCT], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="97eb010018000000000000020c000006a2934900020000000000005362d2"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r3, r5, 0x5, 0x0, @void}, 0x10)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r7, 0x1)
bind$inet6(r7, &(0x7f0000000a00)={0xa, 0x4e20, 0x16e, @empty, 0x5}, 0x1c)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff1, @empty, 0x2}, 0x1c)
r8 = socket(0x200000000000011, 0x2, 0xd)
bind$packet(r8, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'erspan0\x00', <r9=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x5537, 0xbc, &(0x7f00000008c0)=""/188, 0x41100, 0x4, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x0, 0x8004003}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000200)=[{0x5, 0x3, 0x7, 0x7}, {0x1, 0x2, 0xc, 0x8}, {0x2, 0x4, 0x0, 0x1}, {0x3, 0x2, 0x9, 0xb}], 0x10, 0x9}, 0x94)
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @empty, 0x9f}, 0x1c)
bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r6, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r6, r3, 0x4, r3}, 0x6)
sendmsg$kcm(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0)
readv(r10, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/117, 0x75}], 0x1)

1.921852843s ago: executing program 3 (id=1445):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x9af6d05e95cc6c60}}]}, &(0x7f0000000500)='GPL\x00', 0x10, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0xe, 0x0, &(0x7f0000000200)="c8bb4e7dbde79f73008865000800", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.811963625s ago: executing program 3 (id=1446):
unshare(0x4020400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
listen(r1, 0x5)
r2 = accept4$unix(r1, 0x0, 0x0, 0x0)
recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0xffffff78}], 0x1}, 0x10000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r5 = epoll_create1(0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
close(r6)
r7 = socket(0x23, 0x80805, 0x0)
listen(r7, 0x0)
setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0x8002a000})
ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000000)={{r3}, 0x2a, 0x80000007ff, 0x2})
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000002c0)={r2})
r8 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r9=>0x0})
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x8, 0xffffffffffffffff, 0x0, '\x00', r9}, 0x50)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x3, 0x4, 0xcf9, 0x65, 0x2, r4, 0xf8c0, '\x00', r9, r3, 0x2, 0x2, 0x5}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r10}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
r11 = socket$kcm(0xa, 0x2, 0x0)
r12 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r12, 0x80049367, &(0x7f00000000c0))
sendmsg$inet(r11, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0)

1.545778601s ago: executing program 0 (id=1447):
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0xcc15, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c)
socket$xdp(0x2c, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xa}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x850}, 0x4048080)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r4)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="20002fbd7000fbdbdf2502000000080069000600000005003d0004000000080040000002000008006216b27c6c5cd26a71001400020000000000de00"/70], 0x4c}, 0x1, 0x0, 0x0, 0x894}, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000680)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010057731ace893a0f5c0021000000004cc483f685699dfa0300f6749cc9b2ccb24b4050590b57894b969721784866072fee354e59595452814c20d7dceee3653d07e8f9dcb3315cbbddd54f30e6ba5b829ed31d2184047740731416d2e49b8a52af6484b4bd3236a2f16b319f82a56296bea713c7c8fa024a8584fad712cdea629f7b73fbdfa90000", @ANYRES32=r9, @ANYBLOB], 0x28}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e000100fdffffff000000000200000001000007000000000c"], 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x87)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r11, &(0x7f0000000200)=0x10001, 0x12)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.237704746s ago: executing program 4 (id=1448):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0)
sendmsg$tipc(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="b8d3d8e48974aae5039847936746be1d81a34f9b68100dbf05177b2436f9d642df271fd6b9aa6701365ffc723899ad120c5a54b1f6fcf2fbb053e277a04d3f44e3f9bafec64080f64f103ee1de769e5e9dd8cbb68869a662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f906", 0x8f}, {&(0x7f0000000040)="8d03cab9cb86bcdcffec", 0xa}], 0x2, 0x0, 0x0, 0x400c800}, 0x4000000)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001160000000000000000000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x32}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
r2 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0)
bind$llc(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1)
r4 = socket(0x1, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000600), &(0x7f0000001380)=@udp=r4}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0})
recvmsg(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0)
sendmmsg$unix(r4, &(0x7f0000001040)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0)
sendto$rxrpc(r3, &(0x7f0000000080)="4ce393374049268e772ab7fe09c38209", 0x10, 0x20004001, &(0x7f00000000c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000500)={0x4, &(0x7f00000004c0)=[{0xfa, 0x7, 0x1, 0x4}, {0xfffe, 0x8, 0x1}, {0x7ff, 0x2, 0x8, 0x5}, {0xce, 0x7f, 0x3, 0x8}]}, 0x10)

1.003961365s ago: executing program 2 (id=1449):
r0 = socket$kcm(0x10, 0x2, 0x0)
connect(r0, &(0x7f00000015c0)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x80)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r3}, 0x10)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
accept4$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @multicast1}, &(0x7f0000000400)=0x10, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x5, 0x7ff, 0xf83, 0x3}, 0x1c)
ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f00000005c0)={{r5}, "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"})
close(0x3)
r6 = socket(0x10, 0x803, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f00000005c0)={'tunl0\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x8, 0x700, 0x4cb, 0xf, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x1065, 0x0, 0x24, 0x2f, 0x0, @multicast1, @multicast2}}}})
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0015000600142603600e120800060000000401a8000800a400000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000700000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bf9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6", 0x38, 0x0, 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = socket$kcm(0x2, 0xa, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="070000000400000000030000feffffff00000000", @ANYRES32, @ANYBLOB="000000000000000000000000008000000000000039de45f70d0aa4f26e7b5d14c92d0afd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000400"/28], 0x50)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
write$tun(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec970007b83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc)
gettid()

874.388905ms ago: executing program 1 (id=1450):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)={0x30, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x802}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$inet6_udplite(0xa, 0x2, 0x88)
socketpair(0x1a, 0x1, 0x1, &(0x7f0000000540)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x100000d, 0x810, r10, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000002100)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000002140)={0x60, r8, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xc, 0xbd, [0x9, 0xfe01, 0x8, 0x9]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, "ced2"}]}, 0x60}, 0x1, 0x0, 0x0, 0x84}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, r8, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048095)
r12 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100020a000000000000000000000002000500000000000200"], 0x50}}, 0x0)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x124, r13, 0x400, 0x70bd27, 0x2, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x100}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xf0, 0x3, 0x0, 0x1, [{0xe0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xd9, 0x1, "eb8c056ac11269fd032c9d5b174e7225e0a200296d08041b47689db56d5fa94bb3e2ed4a031878d9e4a976c467f343d6299a588685e6a6005e627b235b627c0f4dad8645c3569f91c0fa4369b20fc55371cbc04d025adf456ce14d5683bd5a73dd412fb6cd5f5d2a1857bbecbc7333abdeea9a91dc125fcd50d7cfe7c71e9a917a4ffca6a5ebe00c7690422a5dc38823e9e2effe5af576cc7851f03a9fa246db7824bce65cf12a6ec40995de4a2c755a951126c85348273c197ffded97d99abd1921d493122f9122bf3ac9cd16f4f857af085be0e4"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8000}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x100}]}, 0x124}, 0x1, 0x0, 0x0, 0xb4aebffdc7b75a01}, 0xc811)
r14 = socket(0x1, 0x803, 0x0)
r15 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), r14)
sendmsg$L2TP_CMD_SESSION_MODIFY(r14, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r15, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xe4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000)
getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="8d2206000000ff002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r16, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r16], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0)

720.143436ms ago: executing program 3 (id=1451):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c)
listen(r0, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0)
syz_extract_tcp_res(0x0, 0x4, 0xffffffff)
syz_emit_ethernet(0x3c, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x40, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x40, 0x0, 0x0, 0x1000}, {"83c28bcb1ad8"}}}}}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10)

631.604831ms ago: executing program 3 (id=1452):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000002200)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000002c0)="9a", 0x1}], 0x1}}], 0x1, 0x4000000)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={r2, 0x5}, 0x8)
syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1=0xac1414aa}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0x6}, 0x4)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x104282, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000040)={'nicvf0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffd, 0x400000}, 0xc)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r6)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="17090010000000000000010000000500070000000000080009000000000008000a0000080000060002000000000014001f0000000000000000000000000000000000140020"], 0x6c}}, 0x0)

477.648753ms ago: executing program 0 (id=1453):
socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x21}, @in6=@private1, 0x4e20, 0xfffd, 0x4e22, 0x0, 0xa}, {0xff, 0xfffffffffffffffe, 0x0, 0x800000, 0x0, 0x5853, 0x0, 0x24}, {0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x800, 0x33}, 0xa, @in=@empty, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x9}}, 0xe8)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
listen(r0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
syz_genetlink_get_family_id$nfc(&(0x7f0000000540), 0xffffffffffffffff)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
socket(0x2a, 0x2, 0xffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.swap.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

432.159678ms ago: executing program 1 (id=1454):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000004000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x1b, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000080000000000000000600200018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000062a300011000000018110000", @ANYRES32=r0, @ANYBLOB="0000000080000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000180000000000000003000000bf91000000000000b702000002000000850000008400004900b70000000000000095000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x400002, 0xcc, &(0x7f0000000080)=""/204, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

404.558988ms ago: executing program 3 (id=1455):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="8a450200000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32=r2], 0x44}}, 0x40)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x9f, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x3e, 0x8, 0x8, &(0x7f0000000280)}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'gretap0\x00', <r4=>0x0, 0x10, 0x40, 0x5, 0x3, {{0x6, 0x4, 0x2, 0xd, 0x18, 0x66, 0x0, 0x4, 0x2f, 0x0, @loopback, @loopback, {[@ra={0x94, 0x4, 0x1}]}}}}})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r7=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a00)={'ip6gre0\x00', &(0x7f0000000980)={'ip6tnl0\x00', r2, 0x2f, 0xf9, 0x7, 0x7, 0x0, @loopback, @private1, 0x20, 0x1, 0x6, 0x5}})
sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x80)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000940)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000900)={&(0x7f0000000480)={0x3dc, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x310, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xa2, 0x4, "d669415c238c881c43c89f74fc021b7cd6f9ddd3c28fac183f1595d63b3ae31192098adc6c0b0998be0f0a4c868b4e9220743ec417f530d7c5d364a60c11a088eee692dcd1138ad9e014cd28638aae363f634b3d52177cf9afc2af78c008c4280c6fae2432034559640d9e7a01613e6c60db00b72898dbf80d3de29dee93f2582ec0d4c95342fc75da2e1b100f654911bf3bd4136fdef0f59f8c41fa9390"}, @ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x306}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x350}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':\xcd\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\'%-\'&$\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6a41a136}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xaf, 0x4, "6e74d4fe38f980bcca839ceca45e4b35ad420fe10ec9452d8c6ebe7a67d27be082206665cfb0f58eefa0a844b8adbcef310ecd361d4b514c34006a4df0add14224ac9ed6b120a34cf03de2720a3d554bdd01d2fc12a3a00bd186f31d8ac0b373bfd041026860746587461b8e89a85e03e62db69ed0a83c9efaad810e89a976951e9030847a3f2dff5036eaccadb2fa167b08b576759cf3a339f28ccfed9571831932c5e2303ad8766f9e72"}, @ETHTOOL_A_BITSET_VALUE={0x7c, 0x4, "8e704399cfcb40c4d05c4663184aac183bab7fe5aff90172d967a3953687c40359e12f0df07431671f971f6704f92def1ea26955326e24d3a3c5164ef233f024b32b9d292f5dc1c52f629a403fd9172076d9144311ba11efc0ef4cd93fdc4c20ad39ebf368d046902f2aa9fe44e6391c3f1ee0f599a22541"}, @ETHTOOL_A_BITSET_VALUE={0xd, 0x4, "bb43ce5eb97c4ca9a4"}, @ETHTOOL_A_BITSET_BITS={0x38, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x45, 0x5, "ae1ee38b6ff0df06c12955ff570a416a7d318de19604f4c6098a047635e04753f0959376fb824cabde263351eeba91945d6f06ca42e3bd2ea9e45e3aa9c78ba344"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x4}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x6c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x5c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '}+\\%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x323a}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x8004}, 0x8804)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000010000b0026bd70200040000003000000080002000700339d060001"], 0x24}}, 0x4040080)

314.220622ms ago: executing program 1 (id=1456):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20a0}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x40488c0}, 0x8000)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x230, r2, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x425}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9cf}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}}}}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4b19db51}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2ab}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "a5a4b1e53abfb11d11a2b644e418b9a0d4dfcde0ae2c28"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x7c, r2, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x70}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0xc4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000680)={<r5=>0x0, @dev}, &(0x7f00000006c0)=0xc)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000a80)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000700)={0x330, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x24, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1e, 0x4, "5830667ecffe1d57fc40432dca6db51e70dfb7874caa1571e219"}]}, @ETHTOOL_A_FEATURES_WANTED={0xb0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xa8, 0x5, "2b3f098763c660d0542e01bb0ce27ae0f4493711d530b981397c1911fa3d44b42acf313944721bb75cece3a7d9d53bde735c103298d4d3907f0383cea00284a6ee0233f2cbeaf888fc7f74f0233f780ff77bbb9ed9ae9142ee0aba93d9c4cbd3ce983610dddfc347578be5be597e393500865cf974bbc81921806a594ac5ba232ed5d93937f480f37803a6572fae55731083f345f7f1985bc0ceebade5ce7da4fe32a4c3"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x214, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffffe1}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x41, 0x4, "2ed60f38861c3a309a9c75117104dc5fb3af44298897903ddeb5c386be97c7939824ebab24fa1011fbc81fac9d9c29df339c80c188bd167935931e2861"}, @ETHTOOL_A_BITSET_BITS={0x5c, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/\xa7\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x114, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'gcm(aes)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'gcm(aes)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '/)@.!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x60d}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x978}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '@[[^/-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'udp\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '@#%[#${\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1e214b9f}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '%--\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x330}, 0x1, 0x0, 0x0, 0x20000040}, 0x80)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000ac0), r3)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000b00), 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b80), r0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0xb8, r7, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40001}, 0x40800)
r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000d40), r3)
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x3c, r8, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x11}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x247}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x1ff, 0x1, 0x5]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc801}, 0x4000801)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000e40)={@private1, 0x9, r5})
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000e80), 0x40000, 0x0)
ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000ec0)=0x1)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r3)
sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x54, r10, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x50}, 0x40)
r11 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000001080))
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r6)
sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x44, r12, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000081}, 0x80c0)
r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001280), r0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x40, r13, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfffe}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040085)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000001380)={'batadv0\x00', @broadcast})
socket$kcm(0x29, 0x0, 0x0)

267.904895ms ago: executing program 4 (id=1457):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r1, &(0x7f0000000080)={0x11, 0x2, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000f7ffffff00000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100))
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "3d8b00", "d4cc4a4423daabeb8e7ba12fe6e1c742a683fa6e58757db76aae864d57fbaf37", "c3650f3f", "5e963dfa951f9b3d"}, 0x38)
close(r4)
r7 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r7, 0xfffffffd)
r8 = accept4(r7, 0x0, 0x0, 0x0)
recvmmsg(r8, &(0x7f0000001000), 0x581, 0x40000000, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000240)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x2, 0x8, 0x8, 0x0, 0x3, 0x20}, 0xe)
r9 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f0000000340)={0xffffffffffffffff, 0x1, 0x0, 0x0, 0x3ff}, 0xc)
sendto$inet6(r5, 0x0, 0x0, 0x80c0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000a00)={'gre0\x00', &(0x7f0000000900)={'erspan0\x00', 0x0, 0x700, 0x1, 0x3, 0x81, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x64, 0x0, 0x8, 0x2f, 0x0, @remote, @broadcast}}}})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r10=>0x0})
syz_genetlink_get_family_id$ethtool(0x0, r2)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r10, @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

267.068603ms ago: executing program 0 (id=1458):
r0 = socket(0x10, 0x803, 0x0)
write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r3, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x58, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x58}}, 0x0)
getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r2)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000240)=[@mss, @window={0x3, 0x0, 0x1}, @mss={0x2, 0x1}, @mss={0x2, 0x1}, @window, @timestamp, @window={0x3, 0xfff5, 0x8}, @timestamp], 0x8)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='cubic', 0x9)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)
shutdown(r1, 0x1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r8)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r7, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054)
sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4)
socket$igmp(0x2, 0x3, 0x2)

167.327132ms ago: executing program 3 (id=1459):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000001540)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x173b2a7e, @local, 0x4}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x28048005)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="67d8901bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d3abc8a75ac1f30e53a0eff506f6e6b369ba6c5306e91acaa94e89d3bff4e52cd151235f3defff171c60b91c0c5aeb29736830a09b262dbe4c7ed149885a054de1d7ff5bcecd7a50061814ceefb", 0x9d}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df895d9907e4afb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b907e0974f1073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf4dee8512f3bac440f5d5e4bed6b897608b01eae26a54433e5f5c74a2ee3c2fc50067be05a677ff52a7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fedb679328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e27252804059094a318c4cdeeddd5793a427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9", 0x3e4}], 0x2}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
recvmmsg(r1, &(0x7f0000005d40)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40000000, 0x0)
writev(r0, &(0x7f0000000240)=[{&(0x7f00000036c0)="7d09dbe640bf9169", 0x8}, {&(0x7f00000002c0)="7794aa6fde076f17baebfa46123089f865ef3bb07dfb50afbd9267b1954a9ca90be5b079e13fe10a25256b8e5ada738172399dcfd5157ada26a10314f3dc7fbb570fc1471d8a6d885f70b055abd40ade42d87be1abcae749139f1834b139d1f565a4c412f5b68471ede406d4dcc46e7059c7a88c491cc851ef509b81699d73d64ef0178d20bee18f8334f7218b458a11fe195c8a77be928e3295f874761fd42bec042564e485d332e5e458415d92c9d84dd552f3a23be3f0d11d471a", 0xbc}, {&(0x7f0000002680)="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", 0x4fd}], 0x3)

164.112004ms ago: executing program 1 (id=1460):
r0 = socket$key(0xf, 0x3, 0x2)
socket$key(0xf, 0x3, 0x2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000004)
sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x27)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8)
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x1)
getsockopt$ax25_int(r2, 0x101, 0xa, &(0x7f0000001080), &(0x7f00000010c0)=0x4)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)

0s ago: executing program 4 (id=1461):
r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
socket$inet6(0xa, 0x3, 0xff)
r1 = socket$unix(0x1, 0x1, 0x0)
close(r1)
socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e1f, @empty}}, 0x0, 0x2000}, 0x90)
sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000140)="a5", 0x1}], 0x1}}], 0x1, 0x20048040)
r3 = epoll_create(0xff)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0x80000000})
r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8)
r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r4}, 0x8)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYRES8=r5, @ANYRES16=r5, @ANYRES8=0x0, @ANYRES16, @ANYRESHEX=r5, @ANYBLOB="5166c05afd47d45d18e41ad064057c54aa6d4679645ec566a61bf0b8cdbeddeb20ee32bf033da1e207b4f1269620085b6951d0229e0bd382045c7072288567523391d06a0c1fded5fbec6d4cb8c883f5c53c91517f51aa1c27cadffdb47dfa150be257f456912c89d21decaf650ce9f04cff2c65d888f800bc520ebea62d3e2a15dbc16b495b90e5577ffaa2e642ba77cf105b9965ac7c0ca7af62fc7de2c59a9f73abc721bbb50f75e16963759b631fb21003f28d11c900008377074be43ebd39a0537a09822b1abcdc7e13325fd14d419b933d"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x10000, @value=r5}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18300000010000000000000003000000950000000000000005bae62d7f030275abda7a3a1a5c124ad6bc7c330cf1ad9131d2531c74c9004d0efa3ab5bab3dc387c3c6b200621fe020ba21c4718d24cd16d6a36536e083cca1f51ba8d8fd6e7407cdb4feac2b90c66b5f439c0a3ae9d9c16e99d19994504cb6960b7772e3daa97b297816e108bd4fddcc6eb1dd3b61f7cb6571ddcee2bfe9cb745072834a6eb95409117cacf6906c73906"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94)
socket$nl_audit(0x10, 0x3, 0x9)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r6, 0x80089419, &(0x7f0000000000))

kernel console output (not intermixed with test programs):

o params data found
[   77.111537][ T5875] chnl_net:caif_netlink_parms(): no params data found
[   77.132521][ T5861] chnl_net:caif_netlink_parms(): no params data found
[   77.185074][ T5871] chnl_net:caif_netlink_parms(): no params data found
[   77.267368][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.274614][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.282190][ T5863] bridge_slave_0: entered allmulticast mode
[   77.289395][ T5863] bridge_slave_0: entered promiscuous mode
[   77.340067][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.347648][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.354835][ T5863] bridge_slave_1: entered allmulticast mode
[   77.363187][ T5863] bridge_slave_1: entered promiscuous mode
[   77.454667][ T5876] chnl_net:caif_netlink_parms(): no params data found
[   77.470058][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.490285][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.498039][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.505175][ T5861] bridge_slave_0: entered allmulticast mode
[   77.512390][ T5861] bridge_slave_0: entered promiscuous mode
[   77.527464][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.560673][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.568035][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.575282][ T5861] bridge_slave_1: entered allmulticast mode
[   77.582575][ T5861] bridge_slave_1: entered promiscuous mode
[   77.664148][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.671745][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.679021][ T5875] bridge_slave_0: entered allmulticast mode
[   77.686597][ T5875] bridge_slave_0: entered promiscuous mode
[   77.694020][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.701294][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.709159][ T5871] bridge_slave_0: entered allmulticast mode
[   77.716591][ T5871] bridge_slave_0: entered promiscuous mode
[   77.741251][ T5863] team0: Port device team_slave_0 added
[   77.747731][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.754872][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.762240][ T5875] bridge_slave_1: entered allmulticast mode
[   77.769806][ T5875] bridge_slave_1: entered promiscuous mode
[   77.776823][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.783941][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.791264][ T5871] bridge_slave_1: entered allmulticast mode
[   77.798291][ T5871] bridge_slave_1: entered promiscuous mode
[   77.807401][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.823904][ T5863] team0: Port device team_slave_1 added
[   77.866274][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.921154][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.962348][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.970010][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.996151][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.010826][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.022578][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.042558][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.050113][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.057356][ T5876] bridge_slave_0: entered allmulticast mode
[   78.064342][ T5876] bridge_slave_0: entered promiscuous mode
[   78.072238][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.079229][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.105672][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.119472][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.141650][ T5861] team0: Port device team_slave_0 added
[   78.148151][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.155318][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.162610][ T5876] bridge_slave_1: entered allmulticast mode
[   78.171724][ T5876] bridge_slave_1: entered promiscuous mode
[   78.213253][ T5861] team0: Port device team_slave_1 added
[   78.246837][ T5867] Bluetooth: hci1: command tx timeout
[   78.246846][ T5865] Bluetooth: hci0: command tx timeout
[   78.273384][ T5871] team0: Port device team_slave_0 added
[   78.305035][ T5876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.317097][ T5875] team0: Port device team_slave_0 added
[   78.324713][ T5871] team0: Port device team_slave_1 added
[   78.346081][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.353075][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.379920][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.405584][ T5876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.416152][ T5867] Bluetooth: hci2: command tx timeout
[   78.418294][ T5875] team0: Port device team_slave_1 added
[   78.440523][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.447675][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.473947][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.486032][ T5867] Bluetooth: hci3: command tx timeout
[   78.486134][ T5865] Bluetooth: hci4: command tx timeout
[   78.497615][ T5863] hsr_slave_0: entered promiscuous mode
[   78.504309][ T5863] hsr_slave_1: entered promiscuous mode
[   78.537611][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.544580][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.570989][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.629885][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.636986][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.663552][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.692176][ T5876] team0: Port device team_slave_0 added
[   78.699496][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.706549][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.733366][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.772502][ T5876] team0: Port device team_slave_1 added
[   78.779138][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.786380][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.813121][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.829174][ T5861] hsr_slave_0: entered promiscuous mode
[   78.835464][ T5861] hsr_slave_1: entered promiscuous mode
[   78.841980][ T5861] debugfs: 'hsr0' already exists in 'hsr'
[   78.847843][ T5861] Cannot create hsr debugfs directory
[   78.894143][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.901368][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.927604][ T5876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.971938][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.978954][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.005105][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.105355][ T5871] hsr_slave_0: entered promiscuous mode
[   79.111845][ T5871] hsr_slave_1: entered promiscuous mode
[   79.118206][ T5871] debugfs: 'hsr0' already exists in 'hsr'
[   79.123942][ T5871] Cannot create hsr debugfs directory
[   79.171532][ T5875] hsr_slave_0: entered promiscuous mode
[   79.177853][ T5875] hsr_slave_1: entered promiscuous mode
[   79.183839][ T5875] debugfs: 'hsr0' already exists in 'hsr'
[   79.189710][ T5875] Cannot create hsr debugfs directory
[   79.313383][ T5876] hsr_slave_0: entered promiscuous mode
[   79.321490][ T5876] hsr_slave_1: entered promiscuous mode
[   79.328988][ T5876] debugfs: 'hsr0' already exists in 'hsr'
[   79.334840][ T5876] Cannot create hsr debugfs directory
[   79.613483][ T5863] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   79.649478][ T5863] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   79.660497][ T5863] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   79.703901][ T5863] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   79.788107][ T5861] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   79.805367][ T5861] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   79.817308][ T5861] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   79.843115][ T5861] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   79.925191][ T5871] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   79.955490][ T5871] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   79.969758][ T5871] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   79.990746][ T5871] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   80.077939][ T5876] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   80.098734][ T5876] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   80.109666][ T5876] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   80.123761][ T5876] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   80.193202][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.243426][ T5863] 8021q: adding VLAN 0 to HW filter on device team0
[   80.268223][ T5875] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   80.278378][ T5875] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   80.296401][ T5875] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   80.318056][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.325989][ T5865] Bluetooth: hci1: command tx timeout
[   80.326021][ T5867] Bluetooth: hci0: command tx timeout
[   80.342924][ T5875] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   80.364558][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.371878][ T4320] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.394979][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.402170][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.462338][ T5861] 8021q: adding VLAN 0 to HW filter on device team0
[   80.483345][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.491236][ T5867] Bluetooth: hci2: command tx timeout
[   80.508810][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.515991][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.525745][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.532990][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.566206][ T5865] Bluetooth: hci3: command tx timeout
[   80.573168][ T5867] Bluetooth: hci4: command tx timeout
[   80.622667][ T5871] 8021q: adding VLAN 0 to HW filter on device team0
[   80.670694][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.688348][ T4320] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.695433][ T4320] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.739525][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.746704][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.770953][ T5876] 8021q: adding VLAN 0 to HW filter on device team0
[   80.804808][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.812009][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.862086][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.869319][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.974616][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.038421][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.068825][ T5875] 8021q: adding VLAN 0 to HW filter on device team0
[   81.133729][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.140930][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.230253][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.237866][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.328226][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.449601][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.597010][ T5861] veth0_vlan: entered promiscuous mode
[   81.661266][ T5861] veth1_vlan: entered promiscuous mode
[   81.698034][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.905753][ T5861] veth0_macvtap: entered promiscuous mode
[   81.918567][ T5863] veth0_vlan: entered promiscuous mode
[   81.947675][ T5871] veth0_vlan: entered promiscuous mode
[   81.985334][ T5863] veth1_vlan: entered promiscuous mode
[   82.000590][ T5861] veth1_macvtap: entered promiscuous mode
[   82.017689][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.024892][ T5876] veth0_vlan: entered promiscuous mode
[   82.036446][ T5871] veth1_vlan: entered promiscuous mode
[   82.097044][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.110281][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.139693][ T5876] veth1_vlan: entered promiscuous mode
[   82.158050][   T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.168175][   T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.190887][   T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.199830][   T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.211067][ T5863] veth0_macvtap: entered promiscuous mode
[   82.230773][ T5871] veth0_macvtap: entered promiscuous mode
[   82.258278][ T5871] veth1_macvtap: entered promiscuous mode
[   82.267672][ T5863] veth1_macvtap: entered promiscuous mode
[   82.313490][ T5876] veth0_macvtap: entered promiscuous mode
[   82.338145][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.347512][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.361282][ T5875] veth0_vlan: entered promiscuous mode
[   82.377026][ T5876] veth1_macvtap: entered promiscuous mode
[   82.398127][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.407377][ T5867] Bluetooth: hci1: command tx timeout
[   82.407531][ T5865] Bluetooth: hci0: command tx timeout
[   82.416000][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.442399][ T5875] veth1_vlan: entered promiscuous mode
[   82.471092][ T1004] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.480700][ T1004] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.509068][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.516525][ T1004] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.538994][ T1004] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.548543][ T1004] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.560367][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.568512][ T5865] Bluetooth: hci2: command tx timeout
[   82.586953][ T1004] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.596157][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.598543][ T1004] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.604459][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.618640][ T1004] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.647405][ T5867] Bluetooth: hci3: command tx timeout
[   82.652848][ T5865] Bluetooth: hci4: command tx timeout
[   82.658864][   T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.673170][   T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.709991][   T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.719034][   T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.754572][ T5875] veth0_macvtap: entered promiscuous mode
[   82.772057][ T4320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.780421][ T4320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.827209][ T5875] veth1_macvtap: entered promiscuous mode
[   82.863506][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.872340][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.891251][ T5861] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   82.939842][ T4320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.947435][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.962095][ T4320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.993483][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.022691][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.032056][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.044689][ T5979] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   83.069261][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.083121][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.103705][   T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.112819][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.134259][ T4320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.166655][ T4320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.248496][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.265461][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.315694][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.357685][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.631589][ T4582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.646657][ T5995] netlink: 'syz.1.6': attribute type 13 has an invalid length.
[   83.659148][ T4582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.671640][ T5995] netlink: 'syz.1.6': attribute type 17 has an invalid length.
[   83.833668][ T5995] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   83.868714][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.888930][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.958233][ T6003] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   84.091335][ T6006] tipc: Started in network mode
[   84.113482][ T6006] tipc: Node identity , cluster identity 4711
[   84.140477][ T6006] tipc: Failed to set node id, please configure manually
[   84.174176][ T6006] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   84.189183][ T6011] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96
[   84.193671][ T6012] netlink: 'syz.2.9': attribute type 16 has an invalid length.
[   84.209050][ T6012] netlink: 'syz.2.9': attribute type 17 has an invalid length.
[   84.342937][ T6020] netlink: 'syz.3.4': attribute type 10 has an invalid length.
[   84.368152][ T6012] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.376691][ T6012] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.469391][ T6012] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.481566][ T6012] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.489947][ T5865] Bluetooth: hci0: command tx timeout
[   84.489991][ T5865] Bluetooth: hci1: command tx timeout
[   84.647588][ T5867] Bluetooth: hci2: command tx timeout
[   84.692174][ T6017] gretap1: entered promiscuous mode
[   84.698356][ T6025] syz.2.11 uses obsolete (PF_INET,SOCK_PACKET)
[   84.717713][ T6020] veth1_vlan: entered allmulticast mode
[   84.726538][ T5867] Bluetooth: hci4: command tx timeout
[   84.731758][ T6020] team0: Device veth1_vlan failed to register rx_handler
[   84.732279][ T5865] Bluetooth: hci3: command tx timeout
[   84.744659][ T6022] ÿ: renamed from bond_slave_0 (while UP)
[   84.791341][ T4320] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.825037][ T4320] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.916130][ T4320] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.941103][ T4320] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.992711][ T6035] netlink: 388 bytes leftover after parsing attributes in process `syz.0.14'.
[   85.668449][ T6050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17'.
[   85.914739][ T6056] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   86.009623][ T6062] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   86.130224][ T6064] pimreg3: entered allmulticast mode
[   86.228474][ T6068] tipc: Started in network mode
[   86.253102][ T6068] tipc: Node identity 2a1bb960aa12, cluster identity 4711
[   86.280996][ T6068] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.317761][ T6070] syzkaller0: entered promiscuous mode
[   86.327571][ T6070] syzkaller0: entered allmulticast mode
[   86.539774][ T6076] netlink: 16 bytes leftover after parsing attributes in process `syz.2.25'.
[   86.563444][ T5977] IPVS: starting estimator thread 0...
[   86.575495][ T6076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25'.
[   86.576971][ T6070] tipc: Resetting bearer <eth:syzkaller0>
[   86.626099][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25'.
[   86.639293][ T6076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25'.
[   86.649645][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25'.
[   86.665634][ T6076] netlink: 5 bytes leftover after parsing attributes in process `syz.2.25'.
[   86.676677][ T6076] netlink: 5 bytes leftover after parsing attributes in process `syz.2.25'.
[   86.694431][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25'.
[   86.697769][ T6070] tipc: Disabling bearer <eth:syzkaller0>
[   86.703512][ T6080] IPVS: using max 31 ests per chain, 74400 per kthread
[   86.730515][ T1209] cfg80211: failed to load regulatory.db
[   86.770936][ T6085] Zero length message leads to an empty skb
[   86.864740][ T6085] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.058202][ T6085] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.414971][ T6085] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.641506][ T6085] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.140052][ T6124] netlink: 'syz.4.36': attribute type 10 has an invalid length.
[   88.164484][   T68] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.221198][ T6124] 8021q: adding VLAN 0 to HW filter on device team0
[   88.278178][ T6124] bond0: (slave team0): Enslaving as an active interface with an up link
[   88.530767][ T4320] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.545992][   T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.671862][   T68] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.818963][ T6140] netlink: 'syz.4.40': attribute type 1 has an invalid length.
[   88.860384][ T6139] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.881262][ T6137] syzkaller0: entered promiscuous mode
[   88.900555][ T6137] syzkaller0: entered allmulticast mode
[   88.916511][ T6139] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   88.954620][ T6139] tipc: Resetting bearer <eth:syzkaller0>
[   89.016124][ T6136] tipc: Resetting bearer <eth:syzkaller0>
[   89.064170][ T6136] tipc: Disabling bearer <eth:syzkaller0>
[   89.101557][ T6146] netlink: 'syz.4.43': attribute type 8 has an invalid length.
[   89.879428][ T6180] vlan2: entered promiscuous mode
[   89.895888][ T6180] bond0: entered promiscuous mode
[   89.896174][ T6164] infiniband syz0: set active
[   89.905772][ T6164] infiniband syz0: added macvtap0
[   89.914848][ T6180] bond_slave_0: entered promiscuous mode
[   89.933391][ T6180] bond_slave_1: entered promiscuous mode
[   89.967997][ T6164] RDS/IB: syz0: added
[   90.306610][ T6197] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[   90.394793][ T6197] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[   91.371297][ T6237] __nla_validate_parse: 15 callbacks suppressed
[   91.371315][ T6237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.62'.
[   91.865756][ T6267] bond1: entered promiscuous mode
[   91.925672][ T6271] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[   91.945679][ T6271] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[   92.757269][ T6309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.79'.
[   92.810543][ T6311] netlink: 16 bytes leftover after parsing attributes in process `syz.4.79'.
[   92.971838][ T6305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   93.034283][ T6320] netlink: 284 bytes leftover after parsing attributes in process `syz.3.80'.
[   93.125315][ T6330] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[   93.139770][ T6330] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[   93.240619][ T6331] syzkaller1: entered promiscuous mode
[   93.248510][ T6331] syzkaller1: entered allmulticast mode
[   93.671667][ T6356] netlink: 'syz.0.91': attribute type 4 has an invalid length.
[   93.944482][ T6355] Bluetooth: MGMT ver 1.23
[   94.428948][ T6377] netlink: 'syz.0.96': attribute type 1 has an invalid length.
[   94.470680][ T6377] netlink: 224 bytes leftover after parsing attributes in process `syz.0.96'.
[   94.510014][ T6377] netlink: 48 bytes leftover after parsing attributes in process `syz.0.96'.
[   94.575179][ T6382] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[   94.615307][ T6382] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[   94.703466][ T6387] netlink: 20 bytes leftover after parsing attributes in process `syz.0.99'.
[   95.086323][ T6407] pim6reg1: entered promiscuous mode
[   95.097219][ T6407] pim6reg1: entered allmulticast mode
[   96.073012][ T6441] netlink: 16 bytes leftover after parsing attributes in process `syz.0.106'.
[   96.490626][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.108'.
[   96.542023][ T6450] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[   96.549926][ T6450] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   96.737434][ T6458] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[   97.004081][ T6460] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[   97.741944][ T6502] netlink: 'syz.0.117': attribute type 1 has an invalid length.
[   97.772864][ T6504] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20002
[   97.858431][ T6508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.120'.
[   97.922708][ T6508] vxcan3: entered allmulticast mode
[   98.592963][ T6557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.128'.
[   98.906306][ T6562] netlink: 'syz.2.129': attribute type 4 has an invalid length.
[   98.994514][ T6567] veth0: entered promiscuous mode
[   99.186327][ T6583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.132'.
[   99.218493][ T6574] tipc: Started in network mode
[   99.223391][ T6574] tipc: Node identity , cluster identity 4711
[   99.253472][ T6574] tipc: Failed to obtain node identity
[   99.264871][ T6574] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   99.363282][ T6574] syzkaller0: entered promiscuous mode
[   99.375938][ T6574] syzkaller0: entered allmulticast mode
[  100.881982][ T6567] veth0: left promiscuous mode
[  101.025631][ T6596] netlink: 'syz.2.136': attribute type 3 has an invalid length.
[  101.034996][ T6596] netlink: 'syz.2.136': attribute type 3 has an invalid length.
[  101.046468][ T6596] netlink: 'syz.2.136': attribute type 3 has an invalid length.
[  101.054249][ T6596] netlink: 'syz.2.136': attribute type 3 has an invalid length.
[  101.063048][ T6596] netlink: 'syz.2.136': attribute type 3 has an invalid length.
[  101.071329][ T6596] netlink: 'syz.2.136': attribute type 3 has an invalid length.
[  101.096107][ T6596] netlink: 'syz.2.136': attribute type 3 has an invalid length.
[  101.116055][ T6596] netlink: 'syz.2.136': attribute type 3 has an invalid length.
[  101.123831][ T6596] netlink: 'syz.2.136': attribute type 3 has an invalid length.
[  101.145667][ T6596] netlink: 'syz.2.136': attribute type 3 has an invalid length.
[  101.401646][ T6614] netlink: 36 bytes leftover after parsing attributes in process `syz.3.140'.
[  101.777416][ T6627] netlink: 40 bytes leftover after parsing attributes in process `syz.2.142'.
[  101.900897][ T6627] bridge0: port 3(erspan0) entered blocking state
[  101.914162][ T6627] bridge0: port 3(erspan0) entered disabled state
[  101.967031][ T6627] erspan0: entered allmulticast mode
[  102.033129][ T6627] erspan0: entered promiscuous mode
[  102.104228][ T6634] netlink: 164 bytes leftover after parsing attributes in process `syz.4.145'.
[  102.115225][ T6637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'.
[  102.137398][ T6634] netlink: 164 bytes leftover after parsing attributes in process `syz.4.145'.
[  102.146571][ T6634] netlink: 60 bytes leftover after parsing attributes in process `syz.4.145'.
[  102.194666][ T6631] erspan0: left allmulticast mode
[  102.205924][ T6631] erspan0: left promiscuous mode
[  102.222505][ T6631] bridge0: port 3(erspan0) entered disabled state
[  102.284762][ T6637] bridge0: entered promiscuous mode
[  102.298637][ T6637] macvtap1: entered promiscuous mode
[  102.315603][ T6637] macvtap1: entered allmulticast mode
[  102.327807][ T6640] netlink: 28 bytes leftover after parsing attributes in process `syz.0.147'.
[  102.346088][ T6637] bridge0: entered allmulticast mode
[  102.386959][ T6638] bridge0: left allmulticast mode
[  102.395843][ T6638] bridge0: left promiscuous mode
[  102.429326][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.147'.
[  102.505052][ T6647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.147'.
[  102.794494][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.153'.
[  103.064013][ T6672] netlink: 64 bytes leftover after parsing attributes in process `syz.2.154'.
[  103.265717][ T6680] 8021q: adding VLAN 0 to HW filter on device bond1
[  104.130718][ T6730] 8021q: adding VLAN 0 to HW filter on device bond2
[  104.183676][ T6730] veth3: entered promiscuous mode
[  105.113799][ T6767] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.123147][ T6767] 8021q: adding VLAN 0 to HW filter on device team0
[  105.141647][ T6767] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  105.695352][ T6804] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  105.725138][ T6804] netdevsim netdevsim0 netdevsim0: refused to change device tx_queue_len
[  106.051915][ T6823] syzkaller1: entered promiscuous mode
[  106.057632][ T6823] syzkaller1: entered allmulticast mode
[  106.410393][ T6834] validate_nla: 60 callbacks suppressed
[  106.410411][ T6834] netlink: 'syz.0.193': attribute type 2 has an invalid length.
[  106.424878][ T6834] netlink: 'syz.0.193': attribute type 1 has an invalid length.
[  106.658149][ T6857] netlink: 'syz.3.198': attribute type 13 has an invalid length.
[  106.679833][ T6857] netlink: 'syz.3.198': attribute type 17 has an invalid length.
[  106.901489][ T6872] netlink: 'syz.3.198': attribute type 1 has an invalid length.
[  106.934356][ T6857] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  106.979187][ T6862] xfrm0: entered promiscuous mode
[  107.007886][ T6862] xfrm0: entered allmulticast mode
[  107.094362][ T6863] __nla_validate_parse: 16 callbacks suppressed
[  107.094379][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.200'.
[  107.598123][ T6897] netlink: 28 bytes leftover after parsing attributes in process `syz.0.204'.
[  107.608857][ T6897] netlink: 'syz.0.204': attribute type 7 has an invalid length.
[  107.616735][ T6897] netlink: 'syz.0.204': attribute type 8 has an invalid length.
[  107.636171][ T6897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.204'.
[  107.654872][ T6899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.204'.
[  107.740381][ T6907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.205'.
[  107.999963][ T6919] netlink: 'syz.0.209': attribute type 83 has an invalid length.
[  108.026680][ T6921] netlink: 28 bytes leftover after parsing attributes in process `syz.3.210'.
[  108.175653][ T6927] ip6tnl1: entered promiscuous mode
[  108.254620][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.214'.
[  108.266674][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.214'.
[  108.290321][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.214'.
[  108.479628][ T6947] ip6tnl1: entered promiscuous mode
[  108.488092][ T6947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.216'.
[  108.651577][ T6953] bridge1: port 1(veth5) entered blocking state
[  108.676607][ T6953] bridge1: port 1(veth5) entered disabled state
[  108.687194][ T6953] veth5: entered allmulticast mode
[  108.709080][ T6953] veth5: entered promiscuous mode
[  108.748686][ T6959] bridge1: port 2(veth0_to_bond) entered blocking state
[  108.757365][ T6959] bridge1: port 2(veth0_to_bond) entered disabled state
[  108.788070][ T6959] veth0_to_bond: entered allmulticast mode
[  108.817989][ T6959] veth0_to_bond: entered promiscuous mode
[  109.186083][ T6979] block nbd0: server does not support multiple connections per device.
[  109.227262][ T6979] block nbd0: shutting down sockets
[  109.475642][ T6991] netlink: 'syz.1.225': attribute type 30 has an invalid length.
[  109.564604][ T4582] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  109.581943][ T4582] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  109.699984][ T4582] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  109.709383][ T4582] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  110.333045][ T7023] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  110.380584][ T7023] IPVS: length: 66 != 24
[  111.033250][ T7041] sctp: [Deprecated]: syz.1.238 (pid 7041) Use of int in max_burst socket option.
[  111.033250][ T7041] Use struct sctp_assoc_value instead
[  111.887553][ T7060] tipc: Started in network mode
[  111.899871][ T7060] tipc: Node identity 52c76046d5ce, cluster identity 4711
[  111.908658][ T7060] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.916564][ T7060] syzkaller0: entered promiscuous mode
[  111.922158][ T7060] syzkaller0: entered allmulticast mode
[  111.960906][ T7060] tipc: Resetting bearer <eth:syzkaller0>
[  112.130508][ T7058] tipc: Resetting bearer <eth:syzkaller0>
[  112.151033][ T7058] tipc: Disabling bearer <eth:syzkaller0>
[  112.348746][ T7083] rdma_rxe: rxe_newlink: failed to add lo
[  112.729560][ T7092] __nla_validate_parse: 9 callbacks suppressed
[  112.729578][ T7092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.253'.
[  112.768384][ T7096] netlink: 24 bytes leftover after parsing attributes in process `syz.3.255'.
[  112.896273][ T7096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.255'.
[  112.956191][   T30] audit: type=1800 audit(1758740221.328:2): pid=7099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.256" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  112.983134][ T7099] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12
[  113.001811][ T7099] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12
[  113.033956][ T7099] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  113.251802][ T7099] syz.2.256 (7099) used greatest stack depth: 18008 bytes left
[  113.915605][ T7148] pim6reg: entered allmulticast mode
[  113.981672][ T7147] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  114.015036][ T7150] tipc: Started in network mode
[  114.020588][ T7150] tipc: Node identity , cluster identity 4711
[  114.030661][ T7150] tipc: Failed to obtain node identity
[  114.043687][ T7150] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  114.055787][ T7150] syzkaller0: entered promiscuous mode
[  114.067410][ T7150] syzkaller0: entered allmulticast mode
[  114.255584][ T7158] trusted_key: syz.2.269 sent an empty control message without MSG_MORE.
[  114.400741][ T7164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.271'.
[  114.441282][ T7164] bridge0: entered promiscuous mode
[  114.447546][ T7164] macvtap1: entered promiscuous mode
[  114.454982][ T7164] macvtap1: entered allmulticast mode
[  114.462196][ T7164] bridge0: entered allmulticast mode
[  114.470345][ T7166] bridge0: left allmulticast mode
[  114.477117][ T7166] bridge0: left promiscuous mode
[  114.597367][ T7169] netlink: 'syz.4.274': attribute type 1 has an invalid length.
[  114.762179][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.277'.
[  114.818026][ T7169] 8021q: adding VLAN 0 to HW filter on device bond1
[  114.851193][ T7176] 8021q: adding VLAN 0 to HW filter on device bond1
[  114.861229][ T7176] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address
[  114.873926][ T7176] bond1: (slave vxcan1): Error -95 calling set_mac_address
[  114.909786][ T7181] netlink: 96 bytes leftover after parsing attributes in process `syz.2.277'.
[  114.940619][ T7189] veth0_to_bridge: entered promiscuous mode
[  114.971081][ T7182] veth0_to_bridge: left promiscuous mode
[  115.157183][ T7196] netlink: 32 bytes leftover after parsing attributes in process `syz.2.281'.
[  115.280866][ T7201] netlink: 32 bytes leftover after parsing attributes in process `syz.1.284'.
[  115.358662][ T7196] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  115.366353][ T7196] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  115.373875][ T7196] bond1: left promiscuous mode
[  115.392855][ T7196] veth3: left promiscuous mode
[  115.412245][ T7196] macvtap1: left promiscuous mode
[  115.419888][ T7196] macvtap1: left allmulticast mode
[  115.440996][ T7210] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (255)
[  115.517820][ T7221] netlink: 'syz.1.289': attribute type 1 has an invalid length.
[  115.546599][ T7221] netlink: 28 bytes leftover after parsing attributes in process `syz.1.289'.
[  115.721432][ T7234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.292'.
[  115.742105][ T7234] bridge_slave_1: left allmulticast mode
[  115.749265][ T7234] bridge_slave_1: left promiscuous mode
[  115.755265][ T7234] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.792666][ T7234] bridge_slave_0: left allmulticast mode
[  115.798888][ T7234] bridge_slave_0: left promiscuous mode
[  115.804817][ T7234] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.131801][ T7251] netlink: 'syz.3.298': attribute type 13 has an invalid length.
[  116.144082][ T7251] netlink: 'syz.3.298': attribute type 17 has an invalid length.
[  116.171423][ T7251] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  116.563408][ T7265] Bluetooth: MGMT ver 1.23
[  116.567981][ T5867] Bluetooth: hci4: command 0x0405 tx timeout
[  117.192565][ T7300] bridge_slave_0: left allmulticast mode
[  117.204963][ T7300] bridge_slave_0: left promiscuous mode
[  117.214261][ T7300] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.236223][ T7300] bridge_slave_1: left allmulticast mode
[  117.243433][ T7300] bridge_slave_1: left promiscuous mode
[  117.250489][ T7300] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.266293][ T7300] bond0: (slave bond_slave_0): Releasing backup interface
[  117.275232][ T7300] bond_slave_0: left promiscuous mode
[  117.284030][ T7300] bond0: (slave bond_slave_1): Releasing backup interface
[  117.296951][ T7308] netlink: 'syz.1.312': attribute type 10 has an invalid length.
[  117.305397][ T7300] bond_slave_1: left promiscuous mode
[  117.317235][ T7300] team0: Port device team_slave_0 removed
[  117.328483][ T7300] team0: Port device team_slave_1 removed
[  117.335157][ T7300] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  117.343399][ T7300] batman_adv: batadv0: Removing interface: batadv_slave_0
[  117.353770][ T7300] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  117.361550][ T7300] batman_adv: batadv0: Removing interface: batadv_slave_1
[  117.371784][ T7300] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  117.473667][ T7308] bond0: (slave wlan1): refused to change device type
[  117.544529][ T7310] syz.1.312 (7310) used greatest stack depth: 17864 bytes left
[  117.875335][ T7331] __nla_validate_parse: 4 callbacks suppressed
[  117.875354][ T7331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.321'.
[  117.893699][ T7334] netlink: 'syz.3.323': attribute type 1 has an invalid length.
[  117.904241][ T7334] netlink: 224 bytes leftover after parsing attributes in process `syz.3.323'.
[  118.004187][ T7342] netlink: 232 bytes leftover after parsing attributes in process `syz.1.325'.
[  118.045676][ T7342] macsec1: entered promiscuous mode
[  118.051054][ T7342] macsec1: entered allmulticast mode
[  118.061178][ T7342] netlink: 232 bytes leftover after parsing attributes in process `syz.1.325'.
[  118.146217][ T7353] netlink: 'syz.4.326': attribute type 58 has an invalid length.
[  118.154976][ T7353] netlink: 20 bytes leftover after parsing attributes in process `syz.4.326'.
[  118.268973][ T7357] netlink: 12 bytes leftover after parsing attributes in process `syz.4.328'.
[  132.808901][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  156.939449][ T7377] netlink: 16 bytes leftover after parsing attributes in process `syz.3.334'.
[  157.027824][ T7380] netlink: 51 bytes leftover after parsing attributes in process `syz.1.332'.
[  158.104500][ T7405] netlink: 36 bytes leftover after parsing attributes in process `syz.0.341'.
[  158.131749][ T7405] netlink: 16 bytes leftover after parsing attributes in process `syz.0.341'.
[  158.168559][ T7405] netlink: 36 bytes leftover after parsing attributes in process `syz.0.341'.
[  158.196473][ T7405] netlink: 36 bytes leftover after parsing attributes in process `syz.0.341'.
[  158.282971][ T7415] netlink: 'syz.3.345': attribute type 10 has an invalid length.
[  158.343857][ T7415] veth0_vlan: left promiscuous mode
[  158.357324][ T7415] veth0_vlan: entered promiscuous mode
[  158.388435][ T7415] team0: Device veth0_vlan failed to register rx_handler
[  158.469388][ T7419] tipc: Started in network mode
[  158.475507][ T7419] tipc: Node identity 080211, cluster identity 4711
[  158.516220][ T7419] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.536465][ T7425] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  158.543892][ T7425] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  158.594339][ T7419] tipc: Resetting bearer <eth:syzkaller0>
[  158.602768][ T7429] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.674728][ T7429] syzkaller0: entered promiscuous mode
[  158.682092][ T7429] syzkaller0: entered allmulticast mode
[  158.689595][ T7431] netlink: 16 bytes leftover after parsing attributes in process `syz.2.349'.
[  159.592956][ T1209] tipc: Node number set to 134353152
[  159.735979][ T1209] tipc: Node number set to 2265538630
[  160.029096][ T7437] tipc: Resetting bearer <eth:syzkaller0>
[  160.078805][ T7428] tipc: Resetting bearer <eth:syzkaller0>
[  160.145641][ T7428] tipc: Disabling bearer <eth:syzkaller0>
[  160.309855][ T7474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.358'.
[  160.569667][ T7495] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  160.598571][ T7485] ip6tnl1: entered promiscuous mode
[  160.610910][ T7485] ip6tnl1: entered allmulticast mode
[  160.628580][ T7485] team0: Device ip6tnl1 is of different type
[  161.139316][ T7515] netlink: 7906 bytes leftover after parsing attributes in process `syz.4.368'.
[  161.384209][ T7529] netlink: 52 bytes leftover after parsing attributes in process `syz.4.373'.
[  161.478148][ T7534] netlink: 'syz.2.376': attribute type 101 has an invalid length.
[  161.486970][ T7537] netlink: 'syz.2.376': attribute type 101 has an invalid length.
[  161.495271][ T7534] netlink: 'syz.2.376': attribute type 7 has an invalid length.
[  161.518504][ T7537] netlink: 'syz.2.376': attribute type 7 has an invalid length.
[  161.970344][ T7560] netlink: 'syz.2.382': attribute type 1 has an invalid length.
[  162.108694][ T7562] bond3: entered promiscuous mode
[  162.113774][ T7562] bond3: entered allmulticast mode
[  162.124370][ T7562] 8021q: adding VLAN 0 to HW filter on device bond3
[  162.194926][ T7560] 8021q: adding VLAN 0 to HW filter on device bond4
[  162.203438][ T7560] bond4: entered promiscuous mode
[  162.209925][ T7560] bond4: entered allmulticast mode
[  162.219033][ T7560] bond3: (slave bond4): Enslaving as a backup interface with a down link
[  162.408979][ T7579] netlink: 'syz.2.388': attribute type 3 has an invalid length.
[  162.448774][ T7579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.388'.
[  162.893214][ T7607] netlink: 20 bytes leftover after parsing attributes in process `syz.3.394'.
[  163.595763][ T7626] netlink: 20 bytes leftover after parsing attributes in process `syz.2.398'.
[  163.718717][ T7633] FAULT_INJECTION: forcing a failure.
[  163.718717][ T7633] name failslab, interval 1, probability 0, space 0, times 1
[  163.761095][ T7631] batadv_slave_1: entered promiscuous mode
[  163.763228][ T7633] CPU: 0 UID: 0 PID: 7633 Comm: syz.1.397 Not tainted syzkaller #0 PREEMPT(full) 
[  163.763251][ T7633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  163.763265][ T7633] Call Trace:
[  163.763276][ T7633]  <TASK>
[  163.763283][ T7633]  dump_stack_lvl+0x189/0x250
[  163.763314][ T7633]  ? __pfx____ratelimit+0x10/0x10
[  163.763338][ T7633]  ? __pfx_dump_stack_lvl+0x10/0x10
[  163.763355][ T7633]  ? __pfx__printk+0x10/0x10
[  163.763381][ T7633]  ? __pfx___might_resched+0x10/0x10
[  163.763401][ T7633]  ? fs_reclaim_acquire+0x7d/0x100
[  163.763427][ T7633]  should_fail_ex+0x414/0x560
[  163.763454][ T7633]  should_failslab+0xa8/0x100
[  163.763474][ T7633]  kmem_cache_alloc_noprof+0x73/0x3c0
[  163.763488][ T7633]  ? security_inode_alloc+0x39/0x330
[  163.763505][ T7633]  security_inode_alloc+0x39/0x330
[  163.763522][ T7633]  inode_init_always_gfp+0x9ed/0xdc0
[  163.763553][ T7633]  ? __pfx_sock_alloc_inode+0x10/0x10
[  163.763575][ T7633]  alloc_inode+0x82/0x1b0
[  163.763597][ T7633]  __sock_create+0x12d/0x9f0
[  163.763622][ T7633]  __sys_socket+0xd7/0x1b0
[  163.763637][ T7633]  __x64_sys_socket+0x7a/0x90
[  163.763647][ T7633]  do_syscall_64+0xfa/0x3b0
[  163.763660][ T7633]  ? lockdep_hardirqs_on+0x9c/0x150
[  163.763681][ T7633]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.763698][ T7633]  ? clear_bhb_loop+0x60/0xb0
[  163.763717][ T7633]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.763733][ T7633] RIP: 0033:0x7f781178eec9
[  163.763754][ T7633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  163.763767][ T7633] RSP: 002b:00007f78125e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  163.763789][ T7633] RAX: ffffffffffffffda RBX: 00007f78119e6180 RCX: 00007f781178eec9
[  163.763800][ T7633] RDX: 0000000000000004 RSI: 0000000000000002 RDI: 0000000000000014
[  163.763810][ T7633] RBP: 00007f78125e4090 R08: 0000000000000000 R09: 0000000000000000
[  163.763820][ T7633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  163.763829][ T7633] R13: 00007f78119e6218 R14: 00007f78119e6180 R15: 00007ffc923bef28
[  163.763856][ T7633]  </TASK>
[  163.763887][ T7633] socket: no more sockets
[  163.814021][ T7631] batman_adv: batadv0: Adding interface: macsec1
[  164.046612][ T7631] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  164.095991][ T7631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.126999][ T7631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.266427][ T7631] batman_adv: batadv0: Interface activated: macsec1
[  164.693019][ T7652] netlink: 92 bytes leftover after parsing attributes in process `syz.1.406'.
[  164.742729][ T7652] netlink: 24 bytes leftover after parsing attributes in process `syz.1.406'.
[  164.783183][ T7652] netlink: 24 bytes leftover after parsing attributes in process `syz.1.406'.
[  164.896268][ T7661] netlink: 24 bytes leftover after parsing attributes in process `syz.0.404'.
[  164.918759][ T7661] netlink: 48 bytes leftover after parsing attributes in process `syz.0.404'.
[  165.007911][ T7668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.404'.
[  165.121983][ T7672] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  165.140291][ T7671] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  165.151232][ T7672] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  165.195439][ T7674] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  165.207033][ T7674] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  165.311009][ T7681] netlink: 52 bytes leftover after parsing attributes in process `syz.1.412'.
[  165.863736][ T7698] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  166.199744][ T7714] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  166.226021][ T7714] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  166.599301][ T7729] netlink: 'syz.2.426': attribute type 4 has an invalid length.
[  166.630214][ T7729] netlink: 'syz.2.426': attribute type 4 has an invalid length.
[  167.842459][ T7775] __nla_validate_parse: 5 callbacks suppressed
[  167.842477][ T7775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.432'.
[  168.049972][ T7790] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  168.086054][ T7790] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  168.136421][   T30] audit: type=1107 audit(1758740276.508:3): pid=7795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='û	ó- ô�?Î"“R�”š_-dã;]Ô3RA'5Ð]õ�`ÝŸ6ÂÙT\™QÙžŠL'ãƒÍãäKm”î`Çìƒ3&TS}$ŒG ,D«i
$\ìÈ£÷å(=ƒ÷»à[Ÿœ}ÛGL×9ÌA({pï»{`4Zä®�£{'
[  168.319486][ T7805] netlink: 68 bytes leftover after parsing attributes in process `syz.4.440'.
[  168.411785][ T7813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.443'.
[  168.420838][ T7813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.443'.
[  168.504794][ T7817] xt_HMARK: spi-set and port-set can't be combined
[  168.594829][ T7825] netlink: 'syz.3.448': attribute type 10 has an invalid length.
[  168.649520][ T7832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.448'.
[  168.696699][ T7832] bridge_slave_1: left allmulticast mode
[  168.726474][ T7832] bridge_slave_1: left promiscuous mode
[  168.736306][ T7832] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.788578][ T7832] bridge_slave_0: left allmulticast mode
[  168.804465][ T7832] bridge_slave_0: left promiscuous mode
[  168.835020][ T7832] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.143677][ T7836] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[  169.170972][ T7836] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[  169.185761][ T7836] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  169.201108][ T7836] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  169.289710][ T5864] syz0: Port: 1 Link DOWN
[  169.295257][ T1004] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  169.305246][ T1004] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  169.328497][ T1004] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  169.345912][ T1004] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  169.527145][ T7845] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  169.544739][ T7845] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  169.547660][ T7849] netlink: 'syz.3.455': attribute type 1 has an invalid length.
[  169.587358][ T7849] bond2: entered promiscuous mode
[  169.592893][ T7849] 8021q: adding VLAN 0 to HW filter on device bond2
[  169.683529][ T7849] bond2: (slave bridge0): making interface the new active one
[  169.728731][ T7849] bridge0: entered promiscuous mode
[  169.753453][ T7849] bond2: (slave bridge0): Enslaving as an active interface with an up link
[  169.897324][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.458'.
[  169.908666][ T7862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.458'.
[  170.418845][ T7886] netlink: 132 bytes leftover after parsing attributes in process `syz.4.465'.
[  170.477984][ T7888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.466'.
[  170.489914][ T7890] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  170.507107][ T7888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.466'.
[  170.528403][ T7890] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  170.907634][ T7900] IPv6: addrconf: prefix option has invalid lifetime
[  171.097400][ T7909] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  171.108008][ T7909] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  171.135746][ T7909] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  171.154586][ T7903] delete_channel: no stack
[  171.161574][ T7909] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  171.180341][ T7909] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  171.189016][ T7909] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  171.213407][ T7909] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  171.244150][ T7909] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  171.279758][ T7909] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  171.301318][ T7909] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  171.448772][ T7929] netlink: 'syz.4.475': attribute type 20 has an invalid length.
[  171.625990][ T7932] lo: entered allmulticast mode
[  171.674351][ T7932] dvmrp8: entered allmulticast mode
[  172.537569][ T7943] netlink: 'syz.2.479': attribute type 3 has an invalid length.
[  172.546074][ T7943] netlink: 'syz.2.479': attribute type 1 has an invalid length.
[  172.889095][ T7955] __nla_validate_parse: 7 callbacks suppressed
[  172.889112][ T7955] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.484'.
[  173.491922][ T7973] netlink: 16 bytes leftover after parsing attributes in process `syz.3.488'.
[  173.521600][ T7978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.490'.
[  173.586730][ T7976] ip6erspan0: entered promiscuous mode
[  174.166203][ T7997] netlink: 'syz.0.493': attribute type 1 has an invalid length.
[  174.205955][ T7997] netlink: 224 bytes leftover after parsing attributes in process `syz.0.493'.
[  174.642570][ T8013] siw: device registration error -23
[  174.918387][ T8037] netlink: 'syz.1.506': attribute type 8 has an invalid length.
[  175.075735][ T8043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.509'.
[  175.169268][ T8043] 8021q: adding VLAN 0 to HW filter on device bond1
[  175.227451][ T8040] netlink: 96 bytes leftover after parsing attributes in process `syz.2.507'.
[  175.258018][ T8043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.509'.
[  175.280338][ T8051] pim6reg: entered allmulticast mode
[  175.316165][ T8053] pim6reg: left allmulticast mode
[  175.399188][ T8056] netlink: 'syz.1.509': attribute type 10 has an invalid length.
[  175.407186][ T8056] netlink: 2 bytes leftover after parsing attributes in process `syz.1.509'.
[  175.557524][ T8063] netlink: 'syz.4.511': attribute type 1 has an invalid length.
[  175.622280][ T8063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.511'.
[  175.641685][ T8043] macsec2: entered promiscuous mode
[  175.647268][ T8043] bond1: entered promiscuous mode
[  175.652580][ T8043] macsec2: entered allmulticast mode
[  175.675284][ T8043] bond1: entered allmulticast mode
[  175.689323][ T8043] bond1: left allmulticast mode
[  175.700287][ T8043] bond1: left promiscuous mode
[  175.740440][ T8064] netlink: 36 bytes leftover after parsing attributes in process `syz.4.511'.
[  175.753904][ T8056] team0: entered promiscuous mode
[  175.760224][ T8056] bridge0: port 1(team0) entered blocking state
[  175.771304][ T8056] bridge0: port 1(team0) entered disabled state
[  175.788048][ T8056] team0: entered allmulticast mode
[  176.194069][ T8080] dummy0: entered allmulticast mode
[  176.221046][ T8077] dummy0: left allmulticast mode
[  176.990079][ T8121] netlink: 'syz.4.526': attribute type 1 has an invalid length.
[  177.040662][ T8117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.048285][ T8117] IPv6: NLM_F_CREATE should be set when creating new route
[  177.055552][ T8117] IPv6: NLM_F_CREATE should be set when creating new route
[  177.120331][ T8121] bond3: entered promiscuous mode
[  177.127211][ T8117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.143143][ T8121] 8021q: adding VLAN 0 to HW filter on device bond3
[  177.155765][ T8117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.169478][ T8117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.177752][ T8117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.185236][ T8117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.196241][ T8117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.203765][ T8117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.213416][ T8117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.221303][ T8117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.229679][ T8117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.237544][ T8116] 8021q: adding VLAN 0 to HW filter on device bond3
[  177.240556][ T8117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.259862][ T8116] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address
[  177.271447][ T8116] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  177.289005][ T8117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.300996][ T8116] bond3: (slave wireguard0): making interface the new active one
[  177.309597][ T8117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.316992][ T8116] wireguard0: entered promiscuous mode
[  177.323078][ T8117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.335391][ T8116] bond3: (slave wireguard0): Enslaving as an active interface with an up link
[  177.345109][ T8117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.354058][ T8117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.381992][ T8117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.408416][ T8117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.436383][ T8117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.489682][ T8117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.497639][ T8117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.506832][ T8117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.522499][ T8117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.530941][ T8117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.539869][ T8117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.547831][ T8117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.562245][ T8147] IPVS: Scheduler module ip_vs_sip not found
[  177.563953][ T8117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.579526][ T8117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.586577][ T8137] IPVS: length: 24 != 73752
[  177.613373][ T8117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.621325][ T8117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.629705][ T8117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.638893][ T8117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.647487][ T8117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.656924][ T8117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.677529][ T8117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.685158][ T8117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.732614][ T8117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.741413][ T8117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.818234][ T8117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  178.658680][ T8205] tun0: tun_chr_ioctl cmd 2147767521
[  179.639757][ T8224] __nla_validate_parse: 4 callbacks suppressed
[  179.639774][ T8224] netlink: 20 bytes leftover after parsing attributes in process `syz.3.554'.
[  179.879567][ T8224] nbd: socks must be embedded in a SOCK_ITEM attr
[  180.193548][ T8231] syzkaller0: entered promiscuous mode
[  180.207490][ T8231] syzkaller0: entered allmulticast mode
[  180.923112][ T8234] netlink: 'syz.0.557': attribute type 96 has an invalid length.
[  181.191139][ T8252] netlink: 24 bytes leftover after parsing attributes in process `syz.1.562'.
[  181.228237][ T8257] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  181.244267][ T8257] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  181.780733][ T8308] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  181.792306][ T8308] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  182.290975][ T8350] bridge_slave_0: left allmulticast mode
[  182.297677][ T8350] bridge_slave_0: left promiscuous mode
[  182.303585][ T8350] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.320466][ T8350] bridge_slave_1: left allmulticast mode
[  182.336622][ T8350] bridge_slave_1: left promiscuous mode
[  182.350252][ T8350] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.373591][ T8350] bond0: (slave 
7
7ÿ): Releasing backup interface
[  182.385218][ T8350] bond0: (slave bond_slave_1): Releasing backup interface
[  182.403826][ T8350] team0: Port device team_slave_0 removed
[  182.419047][ T8350] team0: Port device team_slave_1 removed
[  182.427297][ T8350] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  182.437232][ T8350] batman_adv: batadv0: Removing interface: batadv_slave_0
[  182.447531][ T8359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.595'.
[  182.448701][ T8350] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  182.466170][ T8359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.595'.
[  182.471566][ T8350] batman_adv: batadv0: Removing interface: batadv_slave_1
[  182.484882][ T8359] netlink: 'syz.3.595': attribute type 18 has an invalid length.
[  182.526935][ T8350] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  182.553752][ T8354] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  182.564035][ T8354] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  182.875516][ T8384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.602'.
[  182.911562][ T8374] netlink: 'syz.4.601': attribute type 5 has an invalid length.
[  182.974992][ T8392] netlink: 16 bytes leftover after parsing attributes in process `syz.3.605'.
[  182.988954][ T8390] netlink: 16 bytes leftover after parsing attributes in process `syz.3.605'.
[  183.434123][ T8388] netlink: 'syz.0.602': attribute type 11 has an invalid length.
[  183.639132][ T8409] Driver unsupported XDP return value 0 on prog  (id 328) dev N/A, expect packet loss!
[  183.784262][ T8427] netlink: 72 bytes leftover after parsing attributes in process `syz.3.616'.
[  183.800475][ T8427] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  183.939191][ T8439] batadv1: entered promiscuous mode
[  183.951281][ T8439] batadv1: entered allmulticast mode
[  183.971133][ T8444] netlink: 48 bytes leftover after parsing attributes in process `syz.3.621'.
[  183.992375][ T8443] ieee802154 phy1 wpan1: encryption failed: -22
[  184.011769][ T8443] bond0: option arp_validate: invalid value (18446744073491447809)
[  184.012671][ T7780] bond0: (slave bond_slave_0): interface is now down
[  184.041391][ T7780] bond0: (slave bond_slave_1): interface is now down
[  184.053530][ T7780] bond0: (slave team0): interface is now down
[  184.076578][ T7780] bond0: now running without any active interface!
[  184.217407][ T8453] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  184.299433][ T8456] netlink: 12 bytes leftover after parsing attributes in process `syz.4.625'.
[  184.365325][ T8458] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  184.687504][ T8471] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  184.706700][ T8471] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  184.812738][ T8475] __nla_validate_parse: 2 callbacks suppressed
[  184.812755][ T8475] netlink: 14 bytes leftover after parsing attributes in process `syz.4.628'.
[  184.850453][ T8475] hsr_slave_0: left promiscuous mode
[  184.858632][ T8475] hsr_slave_1: left promiscuous mode
[  184.912366][ T8478] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  184.965180][ T8479] syzkaller0: entered promiscuous mode
[  184.971011][ T8479] syzkaller0: entered allmulticast mode
[  187.160564][ T8520] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  187.180470][ T8520] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  187.345462][ T8537] netlink: 16 bytes leftover after parsing attributes in process `syz.3.645'.
[  187.367738][ T8537] netlink: 128 bytes leftover after parsing attributes in process `syz.3.645'.
[  187.390223][ T8538] netlink: 1 bytes leftover after parsing attributes in process `syz.4.643'.
[  187.542752][ T8541] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.725149][ T8566] netlink: 132 bytes leftover after parsing attributes in process `syz.2.652'.
[  187.741564][ T8541] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.772807][ T8569] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  187.797238][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.652'.
[  187.825772][ T8569] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  187.952256][ T8584] netlink: 504 bytes leftover after parsing attributes in process `syz.1.657'.
[  188.000362][ T8541] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.081731][ T8592] netlink: 'syz.4.659': attribute type 8 has an invalid length.
[  188.091494][ T8592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.659'.
[  188.141297][ T8541] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.201818][ T8601] netlink: 20 bytes leftover after parsing attributes in process `syz.4.659'.
[  188.274836][ T8592] bond0: entered promiscuous mode
[  188.283870][ T8592] bond_slave_0: entered promiscuous mode
[  188.296457][ T8592] bond_slave_1: entered promiscuous mode
[  188.302898][ T8592] team0: entered promiscuous mode
[  188.305127][ T8609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.664'.
[  188.320853][ T8592] team_slave_0: entered promiscuous mode
[  188.328146][ T8592] team_slave_1: entered promiscuous mode
[  188.337071][ T8592] bond0: left promiscuous mode
[  188.342086][ T8592] bond_slave_0: left promiscuous mode
[  188.348402][ T8592] bond_slave_1: left promiscuous mode
[  188.354003][ T8592] team0: left promiscuous mode
[  188.359781][ T8592] team_slave_0: left promiscuous mode
[  188.365347][ T8592] team_slave_1: left promiscuous mode
[  188.495627][ T7778] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.561445][ T4320] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.572091][ T4320] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.621187][ T7778] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.648672][ T8620] netlink: 'syz.2.669': attribute type 3 has an invalid length.
[  188.701114][ T8623] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  188.712505][ T8623] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  188.868273][ T8634] ieee802154 phy1 wpan1: encryption failed: -22
[  189.838178][ T8695] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  189.856397][ T8695] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  189.894131][ T8701] __nla_validate_parse: 3 callbacks suppressed
[  189.894148][ T8701] netlink: 60 bytes leftover after parsing attributes in process `syz.0.687'.
[  190.165162][ T8717] netlink: 76 bytes leftover after parsing attributes in process `syz.4.692'.
[  190.723614][ T8739] C: renamed from team_slave_0
[  190.747876][ T8739] netlink: 'syz.2.698': attribute type 4 has an invalid length.
[  190.768699][ T8739] netlink: 152 bytes leftover after parsing attributes in process `syz.2.698'.
[  190.792778][ T8739] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  190.986269][ T8752] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  190.996033][ T8752] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  191.683359][ T8771] kthread_run failed with err -4
[  192.231488][ T8803] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  192.289908][ T8808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.713'.
[  192.316333][ T8808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.713'.
[  192.385220][ T8807] raw_sendmsg: syz.1.709 forgot to set AF_INET. Fix it!
[  192.402236][ T8815] IPVS: set_ctl: invalid protocol: 4 100.1.1.2:20002
[  192.844438][ T8828] netlink: 11 bytes leftover after parsing attributes in process `syz.4.718'.
[  192.879964][ T8828] netlink: 11 bytes leftover after parsing attributes in process `syz.4.718'.
[  192.900542][ T8830] netlink: 11 bytes leftover after parsing attributes in process `syz.4.718'.
[  192.932347][ T8833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.720'.
[  192.940256][ T8830] netlink: 11 bytes leftover after parsing attributes in process `syz.4.718'.
[  192.958909][ T8828] netlink: 'syz.4.718': attribute type 39 has an invalid length.
[  193.300190][ T8852] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  193.462206][ T8862] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  193.752638][ T7780] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  193.770332][ T7780] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  193.792001][ T7780] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  193.802981][ T7780] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  194.252489][ T8920] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  194.253899][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  195.207100][ T8987] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  195.328695][ T8998] Bluetooth: MGMT ver 1.23
[  195.480203][ T9005] tipc: New replicast peer: 255.255.255.255
[  195.498477][ T9005] tipc: Enabled bearer <udp:syz2>, priority 10
[  195.549848][ T9008] __nla_validate_parse: 11 callbacks suppressed
[  195.549866][ T9008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.765'.
[  195.770378][ T9018] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  195.786289][ T9018] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.878696][ T9029] netlink: 100 bytes leftover after parsing attributes in process `syz.1.771'.
[  195.918408][ T9018] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  195.932099][ T9018] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.961170][ T9031] netlink: 'syz.2.772': attribute type 83 has an invalid length.
[  196.049851][ T9018] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  196.060160][ T9018] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.081188][ T9038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.776'.
[  196.144500][ T9018] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  196.154522][ T9018] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.204434][ T9044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.779'.
[  196.325857][   T49] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  196.328105][ T9049] netlink: 'syz.2.780': attribute type 4 has an invalid length.
[  196.334121][   T49] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  196.385051][ T9051] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  196.440350][   T49] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  196.448694][   T49] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  196.478670][   T49] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  196.494268][   T49] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  196.528778][   T49] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  196.554294][   T49] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  196.731946][ T9080] netlink: 96 bytes leftover after parsing attributes in process `syz.4.785'.
[  197.113140][ T9104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.792'.
[  197.130879][ T9109] netlink: 64 bytes leftover after parsing attributes in process `syz.1.795'.
[  197.253126][ T9117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.799'.
[  197.262851][ T9118] netlink: 'syz.1.798': attribute type 1 has an invalid length.
[  197.272548][ T9117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.799'.
[  197.299388][ T9117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.799'.
[  197.320600][ T9117] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  197.519044][ T9130] sctp: [Deprecated]: syz.1.801 (pid 9130) Use of struct sctp_assoc_value in delayed_ack socket option.
[  197.519044][ T9130] Use struct sctp_sack_info instead
[  197.797995][ T9144] Â: renamed from macvlan0 (while UP)
[  197.815145][ T9142] IPVS: Error connecting to the multicast addr
[  197.825329][ T9155] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  198.226494][ T9176] netlink: 'syz.1.811': attribute type 5 has an invalid length.
[  198.784711][ T9201] IPVS: Scheduler module ip_vs_sip not found
[  199.014243][   T10] IPVS: starting estimator thread 0...
[  199.118731][ T9225] IPVS: using max 25 ests per chain, 60000 per kthread
[  199.405745][ T9252] bond3: entered promiscuous mode
[  199.412823][ T9252] bond3: entered allmulticast mode
[  199.422417][ T9252] 8021q: adding VLAN 0 to HW filter on device bond3
[  199.472123][ T9252] netlink: 'syz.0.838': attribute type 3 has an invalid length.
[  199.693786][ T9269] IPv6: sit1: Disabled Multicast RS
[  200.364945][ T9297] netlink: 'syz.2.850': attribute type 24 has an invalid length.
[  200.754744][ T9320] IPVS: set_ctl: invalid protocol: 4 127.0.0.1:20004
[  201.170647][ T9331] __nla_validate_parse: 25 callbacks suppressed
[  201.170664][ T9331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.858'.
[  201.180462][ T9333] netlink: 128 bytes leftover after parsing attributes in process `syz.3.859'.
[  201.480285][ T9337] netlink: 'syz.3.860': attribute type 6 has an invalid length.
[  201.658391][ T9337] netlink: 'syz.3.860': attribute type 12 has an invalid length.
[  201.688552][ T9337] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.860'.
[  201.796114][ T9350] netlink: 32 bytes leftover after parsing attributes in process `syz.1.864'.
[  201.822811][ T9353] geneve2: entered promiscuous mode
[  202.323454][ T9373] netlink: 40 bytes leftover after parsing attributes in process `syz.4.871'.
[  202.526938][ T9380] syzkaller1: entered promiscuous mode
[  202.532546][ T9380] syzkaller1: entered allmulticast mode
[  203.007349][ T9405] netlink: 128 bytes leftover after parsing attributes in process `syz.1.878'.
[  203.086573][ T9408] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  203.097614][ T9408] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  203.557878][ T9425] Bluetooth: MGMT ver 1.23
[  203.592808][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.887'.
[  203.764587][ T9436] veth0: entered promiscuous mode
[  203.797081][ T9436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.891'.
[  204.178818][ T9448] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  204.189653][ T9448] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  204.228982][ T9457] netlink: 20 bytes leftover after parsing attributes in process `syz.0.895'.
[  204.397993][ T9457] nbd: socks must be embedded in a SOCK_ITEM attr
[  204.425254][ T9460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.895'.
[  204.849031][ T9480] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  204.954313][ T9481] syzkaller0: entered promiscuous mode
[  204.976125][ T9481] syzkaller0: entered allmulticast mode
[  206.793742][ T9481] tipc: Resetting bearer <eth:syzkaller0>
[  206.805020][ T9498] __nla_validate_parse: 2 callbacks suppressed
[  206.805032][ T9498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.905'.
[  206.837606][ T9479] tipc: Resetting bearer <eth:syzkaller0>
[  206.863797][ T9479] tipc: Disabling bearer <eth:syzkaller0>
[  206.892507][ T9507] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  206.906448][ T9507] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  206.922125][ T9513] netlink: 100 bytes leftover after parsing attributes in process `syz.0.909'.
[  207.085252][ T9527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.916'.
[  207.133091][ T9529] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  207.145376][ T9524] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20003
[  207.197728][ T9538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.917'.
[  207.310437][ T9545] lo: entered allmulticast mode
[  207.353591][ T9545] dvmrp8: entered allmulticast mode
[  207.452963][ T9553] netlink: 'syz.3.919': attribute type 23 has an invalid length.
[  207.677017][ T9561] netlink: 'syz.0.925': attribute type 6 has an invalid length.
[  207.691631][ T9562] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  207.706458][ T9562] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  207.718478][ T9561] netlink: 'syz.0.925': attribute type 1 has an invalid length.
[  207.819337][ T9561] bond4: entered promiscuous mode
[  207.824921][ T9561] 8021q: adding VLAN 0 to HW filter on device bond4
[  207.860062][ T9567] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  207.988942][ T9542] lo: left allmulticast mode
[  208.002852][ T9542] dvmrp8: left allmulticast mode
[  208.066718][ T5941] IPVS: starting estimator thread 0...
[  208.127146][ T9587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.932'.
[  208.166550][ T9579] IPVS: using max 32 ests per chain, 76800 per kthread
[  208.278924][ T9587] sit2: entered promiscuous mode
[  208.333777][ T9590] netlink: 'syz.0.929': attribute type 10 has an invalid length.
[  208.430950][ T9590] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  208.512381][ T9617] netlink: 'syz.3.935': attribute type 1 has an invalid length.
[  208.520538][ T9617] netlink: 224 bytes leftover after parsing attributes in process `syz.3.935'.
[  208.536294][ T9617] netlink: 28 bytes leftover after parsing attributes in process `syz.3.935'.
[  208.594120][ T9614] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  208.620404][ T9614] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  208.821230][ T9629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.941'.
[  208.904323][ T9631] netlink: 40 bytes leftover after parsing attributes in process `syz.2.945'.
[  208.944236][ T9631] netlink: 64 bytes leftover after parsing attributes in process `syz.2.945'.
[  209.199260][ T9653] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  209.226106][ T9653] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  210.132924][ T9709] netlink: 'syz.1.965': attribute type 3 has an invalid length.
[  211.011199][ T9727] netlink: 'syz.0.969': attribute type 1 has an invalid length.
[  211.148077][ T9727] 8021q: adding VLAN 0 to HW filter on device bond5
[  211.297167][ T9736] 8021q: adding VLAN 0 to HW filter on device bond5
[  211.322092][ T9736] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  211.336735][ T9736] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  211.357845][ T9732] veth0_to_bridge: entered promiscuous mode
[  211.401934][ T9738] veth3: entered promiscuous mode
[  211.452075][ T9732] veth0_to_bridge: left promiscuous mode
[  211.558490][ T9750] netlink: 'syz.2.975': attribute type 7 has an invalid length.
[  211.567556][ T9750] netlink: 'syz.2.975': attribute type 8 has an invalid length.
[  211.871723][ T9767] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  211.883035][ T9769] __nla_validate_parse: 5 callbacks suppressed
[  211.883050][ T9769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.979'.
[  211.952757][ T9769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.979'.
[  212.084442][ T9782] netlink: 28 bytes leftover after parsing attributes in process `syz.2.983'.
[  212.307580][ T9792] netlink: 'syz.0.988': attribute type 4 has an invalid length.
[  212.669492][ T9804] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma?
[  212.690306][ T9804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.990'.
[  212.813402][ T9808] netlink: 56 bytes leftover after parsing attributes in process `syz.3.991'.
[  212.839527][ T9808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.991'.
[  212.857552][ T9810] bond0: (slave dummy0): Releasing backup interface
[  212.878358][ T9812] netlink: 24 bytes leftover after parsing attributes in process `syz.3.991'.
[  212.896689][ T9808] netlink: 44 bytes leftover after parsing attributes in process `syz.3.991'.
[  212.922682][ T9810] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  213.016904][ T9810] netlink: 'syz.0.992': attribute type 10 has an invalid length.
[  213.074036][ T9810] 8021q: adding VLAN 0 to HW filter on device bond0
[  213.082670][ T9810] bond0: (slave wlan1): Opening slave failed
[  213.162972][ T9823] netlink: 28 bytes leftover after parsing attributes in process `syz.3.996'.
[  213.242543][ T9824] lo speed is unknown, defaulting to 1000
[  213.272482][ T9824] lo speed is unknown, defaulting to 1000
[  213.362526][ T9820] syzkaller1: entered promiscuous mode
[  213.368849][ T9820] syzkaller1: entered allmulticast mode
[  213.377191][ T9824] lo speed is unknown, defaulting to 1000
[  213.393750][ T9824] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  213.403006][ T9827] netlink: 27 bytes leftover after parsing attributes in process `syz.3.997'.
[  213.436787][ T9824] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  213.556300][ T9824] lo speed is unknown, defaulting to 1000
[  213.584605][ T9824] lo speed is unknown, defaulting to 1000
[  213.599386][ T9824] lo speed is unknown, defaulting to 1000
[  213.619344][ T9824] lo speed is unknown, defaulting to 1000
[  213.656151][ T9824] lo speed is unknown, defaulting to 1000
[  213.664550][ T9824] lo speed is unknown, defaulting to 1000
[  214.227203][ T9862] syzkaller1: entered promiscuous mode
[  214.233979][ T9862] syzkaller1: entered allmulticast mode
[  214.249916][ T9865] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  214.261461][ T9865] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  214.591674][ T9882] netlink: 'syz.3.1012': attribute type 9 has an invalid length.
[  214.862523][ T9901] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  214.932508][ T9901] bond0: entered allmulticast mode
[  214.943243][ T9901] bond_slave_0: entered allmulticast mode
[  214.951276][ T9901] bond_slave_1: entered allmulticast mode
[  214.959208][ T9901] team0: entered allmulticast mode
[  214.964499][ T9901] team_slave_0: entered allmulticast mode
[  214.975646][ T9901] team_slave_1: entered allmulticast mode
[  214.987451][ T9907] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  215.000293][ T9907] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  215.129477][ T9922] tipc: Started in network mode
[  215.147838][ T9922] tipc: Node identity , cluster identity 4711
[  215.171480][ T9922] tipc: Failed to obtain node identity
[  215.181071][ T9922] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  215.229207][ T9925] syzkaller0: entered promiscuous mode
[  215.243134][ T9925] syzkaller0: entered allmulticast mode
[  215.301599][ T9930] ieee802154 phy1 wpan1: encryption failed: -22
[  215.320818][ T9930] ieee802154 phy1 wpan1: encryption failed: -22
[  215.329624][ T9930] ieee802154 phy1 wpan1: encryption failed: -22
[  215.343742][ T9933] netlink: 'syz.1.1030': attribute type 1 has an invalid length.
[  215.355622][ T9930] ieee802154 phy1 wpan1: encryption failed: -22
[  215.389517][ T9930] ieee802154 phy1 wpan1: encryption failed: -22
[  215.396619][ T9930] ieee802154 phy1 wpan1: encryption failed: -22
[  215.403307][ T9930] ieee802154 phy1 wpan1: encryption failed: -22
[  215.410301][ T9930] ieee802154 phy1 wpan1: encryption failed: -22
[  215.418623][ T9930] ieee802154 phy1 wpan1: encryption failed: -22
[  215.425157][ T9930] ieee802154 phy1 wpan1: encryption failed: -22
[  215.431652][ T9930] ieee802154 phy1 wpan1: encryption failed: -22
[  215.446348][ T9930] ieee802154 phy1 wpan1: encryption failed: -22
[  215.497888][ T9930] ieee802154 phy1 wpan1: encryption failed: -22
[  215.505714][ T9930] ieee802154 phy1 wpan1: encryption failed: -22
[  215.522235][ T9930] ieee802154 phy1 wpan1: encryption failed: -22
[  215.551648][ T9930] ieee802154 phy1 wpan1: encryption failed: -22
[  215.560784][ T9930] ieee802154 phy1 wpan1: encryption failed: -22
[  215.576743][ T9933] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  215.585318][ T9938] gretap1: entered promiscuous mode
[  215.607829][ T9930] ieee802154 phy1 wpan1: encryption failed: -22
[  215.617962][ T9930] ieee802154 phy1 wpan1: encryption failed: -22
[  215.634556][ T9930] ieee802154 phy1 wpan1: encryption failed: -22
[  215.651686][ T9930] ieee802154 phy1 wpan1: encryption failed: -22
[  215.668961][ T9930] ieee802154 phy1 wpan1: encryption failed: -22
[  215.704602][ T9930] ieee802154 phy1 wpan1: encryption failed: -22
[  215.753622][ T9930] ieee802154 phy1 wpan1: encryption failed: -22
[  215.760281][ T9930] ieee802154 phy1 wpan1: encryption failed: -22
[  215.767400][ T9930] ieee802154 phy1 wpan1: encryption failed: -22
[  215.773914][ T9930] ieee802154 phy1 wpan1: encryption failed: -22
[  215.782068][ T9930] ieee802154 phy1 wpan1: encryption failed: -22
[  215.789943][ T9930] ieee802154 phy1 wpan1: encryption failed: -22
[  215.799412][ T9930] ieee802154 phy1 wpan1: encryption failed: -22
[  215.806681][ T9930] ieee802154 phy1 wpan1: encryption failed: -22
[  215.811206][ T9912] lo speed is unknown, defaulting to 1000
[  215.822110][ T9930] ieee802154 phy1 wpan1: encryption failed: -22
[  215.830307][ T9930] ieee802154 phy1 wpan1: encryption failed: -22
[  216.218423][ T9970] syzkaller0: entered promiscuous mode
[  216.225431][ T9970] syzkaller0: entered allmulticast mode
[  216.282236][ T9959] lo speed is unknown, defaulting to 1000
[  216.413395][ T9975] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  216.424000][ T9975] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  216.509185][ T9977] team0: Refused to change device type
[  216.732681][   T10] IPVS: starting estimator thread 0...
[  216.826236][ T9998] IPVS: using max 27 ests per chain, 64800 per kthread
[  216.888656][T10009] __nla_validate_parse: 8 callbacks suppressed
[  216.888674][T10009] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1049'.
[  217.050333][T10016] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1050'.
[  217.112210][T10021] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1050'.
[  217.394529][T10020] lo speed is unknown, defaulting to 1000
[  217.481032][T10029] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  217.492358][T10029] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  217.851059][T10037] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1056'.
[  217.915641][T10037] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1056'.
[  217.945542][T10037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1056'.
[  218.004073][T10044] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  218.032163][T10046] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1059'.
[  218.153861][T10053] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1062'.
[  218.162664][T10055] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1063'.
[  218.190600][T10053] netem: incorrect ge model size
[  218.195794][T10053] netem: change failed
[  219.025474][T10084] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1074'.
[  219.584407][T10107] tipc: Started in network mode
[  219.598993][T10107] tipc: Node identity , cluster identity 4711
[  219.617419][T10107] tipc: Failed to obtain node identity
[  219.627695][T10107] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  219.650443][T10079] lo speed is unknown, defaulting to 1000
[  219.668531][T10113] netlink: 'syz.4.1083': attribute type 1 has an invalid length.
[  219.722906][T10114] syzkaller0: entered promiscuous mode
[  219.733518][T10114] syzkaller0: entered allmulticast mode
[  221.430969][T10147] sctp: [Deprecated]: syz.3.1096 (pid 10147) Use of struct sctp_assoc_value in delayed_ack socket option.
[  221.430969][T10147] Use struct sctp_sack_info instead
[  221.563551][T10152] netlink: 'syz.1.1097': attribute type 10 has an invalid length.
[  221.606263][T10152] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  221.769864][T10166] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  221.813584][T10169] netlink: 'syz.2.1104': attribute type 15 has an invalid length.
[  222.004537][T10183] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  222.016338][T10183] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  222.171391][T10163] lo speed is unknown, defaulting to 1000
[  222.178148][T10178] siw: device registration error -23
[  222.215544][T10191] __nla_validate_parse: 9 callbacks suppressed
[  222.215562][T10191] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1110'.
[  222.446701][T10204] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  222.791923][T10213] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  222.844623][T10213] syzkaller0: entered promiscuous mode
[  222.863299][T10213] syzkaller0: entered allmulticast mode
[  223.909132][ T5916] tipc: Node number set to 2148120928
[  224.193959][T10219] tipc: Resetting bearer <eth:syzkaller0>
[  224.214425][T10212] tipc: Resetting bearer <eth:syzkaller0>
[  224.234285][T10212] tipc: Disabling bearer <eth:syzkaller0>
[  224.336493][T10237] netlink: 'syz.4.1124': attribute type 1 has an invalid length.
[  224.363192][T10243] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1125'.
[  224.384998][T10237] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  224.555149][T10254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1129'.
[  224.585344][T10254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1129'.
[  224.587375][T10257] lo speed is unknown, defaulting to 1000
[  224.605084][T10254] netlink: 'syz.0.1129': attribute type 14 has an invalid length.
[  224.613850][T10258] syzkaller1: entered promiscuous mode
[  224.620623][T10258] syzkaller1: entered allmulticast mode
[  224.649377][T10257] lo speed is unknown, defaulting to 1000
[  224.661827][T10257] lo speed is unknown, defaulting to 1000
[  224.744640][T10257] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  224.845716][T10257] lo speed is unknown, defaulting to 1000
[  224.884849][T10257] lo speed is unknown, defaulting to 1000
[  224.893786][T10257] lo speed is unknown, defaulting to 1000
[  224.903010][T10257] lo speed is unknown, defaulting to 1000
[  224.913636][T10257] lo speed is unknown, defaulting to 1000
[  224.925739][T10257] lo speed is unknown, defaulting to 1000
[  225.215086][T10258] lo speed is unknown, defaulting to 1000
[  225.278837][T10283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1137'.
[  225.364490][T10283] team0: left allmulticast mode
[  225.371767][T10283] bridge0: port 1(team0) entered disabled state
[  225.505079][T10300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1146'.
[  225.523768][T10300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1146'.
[  225.533834][T10300] netlink: 'syz.4.1146': attribute type 13 has an invalid length.
[  225.573735][T10302] ksmbd: Unknown IPC event: 3, ignore.
[  225.584522][T10304] ksmbd: Unknown IPC event: 3, ignore.
[  225.593073][T10302] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1146'.
[  225.893402][T10323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1154'.
[  225.980302][T10321] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1150'.
[  226.129135][T10333] netlink: 'syz.0.1155': attribute type 303 has an invalid length.
[  226.213545][T10335] macvtap2: entered promiscuous mode
[  226.236461][T10335] bridge0: entered promiscuous mode
[  226.246693][T10335] macvtap2: entered allmulticast mode
[  226.252403][T10335] bridge0: entered allmulticast mode
[  226.647263][T10358] netlink: 'syz.3.1162': attribute type 4 has an invalid length.
[  226.829608][T10367] netlink: 'syz.4.1165': attribute type 23 has an invalid length.
[  227.006686][T10367] batadv_slave_0: entered promiscuous mode
[  227.143736][T10389] netlink: 'syz.0.1172': attribute type 14 has an invalid length.
[  227.156527][T10389] netlink: 'syz.0.1172': attribute type 14 has an invalid length.
[  227.210580][T10366] batadv_slave_0: left promiscuous mode
[  227.351849][T10401] netlink: 'syz.3.1175': attribute type 5 has an invalid length.
[  227.375532][T10404] __nla_validate_parse: 10 callbacks suppressed
[  227.375549][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1174'.
[  227.624082][T10420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1183'.
[  227.816632][T10439] team0: left promiscuous mode
[  227.825569][T10439] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  227.852209][T10444] netlink: 'syz.3.1189': attribute type 10 has an invalid length.
[  227.863267][T10436] dvmrp1: tun_chr_ioctl cmd 1074025677
[  227.868591][T10440] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1188'.
[  227.869923][T10436] dvmrp1: linktype set to 768
[  227.891811][T10444] veth1_vlan: left promiscuous mode
[  227.899007][T10444] team0: Device veth1_vlan failed to register rx_handler
[  227.908815][ T1209] lo speed is unknown, defaulting to 1000
[  227.915646][ T1209] syz1: Port: 1 Link ACTIVE
[  227.953628][T10447] tipc: Started in network mode
[  227.963245][T10447] tipc: Node identity ae0a0ac9ef08, cluster identity 4711
[  227.989337][T10447] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  228.009001][T10447] syzkaller0: entered promiscuous mode
[  228.024764][T10447] syzkaller0: entered allmulticast mode
[  228.057647][T10454] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1193'.
[  228.084341][T10447] tipc: Resetting bearer <eth:syzkaller0>
[  228.102681][T10454] nbd: socks must be embedded in a SOCK_ITEM attr
[  228.110789][T10446] tipc: Resetting bearer <eth:syzkaller0>
[  228.157927][T10446] tipc: Disabling bearer <eth:syzkaller0>
[  228.328691][T10462] netlink: 'syz.2.1195': attribute type 10 has an invalid length.
[  228.362950][T10462] team0: Port device dummy0 added
[  228.543468][T10455] lo speed is unknown, defaulting to 1000
[  228.551178][T10455] lo speed is unknown, defaulting to 1000
[  228.763884][   T30] audit: type=1800 audit(1758740337.138:4): pid=10479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1198" name="memory.events" dev="tmpfs" ino=1305 res=0 errno=0
[  228.803843][T10482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1199'.
[  228.840171][   T30] audit: type=1804 audit(1758740337.138:5): pid=10479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1198" name="memory.events" dev="tmpfs" ino=1305 res=1 errno=0
[  228.871138][T10488] netlink: 'syz.2.1198': attribute type 1 has an invalid length.
[  228.881832][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1196'.
[  229.643619][T10517] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1802723700)
[  229.711028][T10517] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  229.854186][T10473] lo speed is unknown, defaulting to 1000
[  229.916020][T10473] lo speed is unknown, defaulting to 1000
[  230.308375][T10532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1209'.
[  230.427998][T10539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1211'.
[  230.530199][T10539] macvtap3: entered promiscuous mode
[  230.536703][T10539] macvtap3: entered allmulticast mode
[  230.864880][T10552] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1215'.
[  230.882568][T10551] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1214'.
[  231.060307][T10556] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  231.363017][T10523] lo speed is unknown, defaulting to 1000
[  231.468387][T10523] lo speed is unknown, defaulting to 1000
[  231.530308][T10571] netlink: 'syz.2.1219': attribute type 19 has an invalid length.
[  232.028787][T10588] TCP: TCP_TX_DELAY enabled
[  232.081490][T10591] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20001
[  232.115493][T10595] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20001
[  232.231565][T10600] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  232.324034][T10600] syzkaller0: entered promiscuous mode
[  232.330640][T10600] syzkaller0: entered allmulticast mode
[  232.425516][T10612] __nla_validate_parse: 5 callbacks suppressed
[  232.425533][T10612] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1234'.
[  232.613254][T10616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1235'.
[  233.842102][T10606] tipc: Resetting bearer <eth:syzkaller0>
[  233.864962][T10597] tipc: Resetting bearer <eth:syzkaller0>
[  233.881732][T10597] tipc: Disabling bearer <eth:syzkaller0>
[  234.148768][T10632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1236'.
[  234.168759][T10634] netlink: 'syz.1.1239': attribute type 1 has an invalid length.
[  234.222375][T10632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1236'.
[  234.270017][T10634] 8021q: adding VLAN 0 to HW filter on device bond2
[  234.283804][T10639] openvswitch: netlink: Key 6 has unexpected len 8 expected 2
[  234.322443][T10634] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1239'.
[  234.390481][T10637] 8021q: adding VLAN 0 to HW filter on device bond2
[  234.417992][T10637] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  234.438271][T10637] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  234.583293][T10610] lo speed is unknown, defaulting to 1000
[  234.597438][T10610] lo speed is unknown, defaulting to 1000
[  234.937066][T10655] syzkaller1: entered promiscuous mode
[  234.952822][T10655] syzkaller1: entered allmulticast mode
[  235.118267][T10660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1246'.
[  235.145194][T10625] lo speed is unknown, defaulting to 1000
[  235.153374][T10625] lo speed is unknown, defaulting to 1000
[  235.169963][T10662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1246'.
[  235.215201][T10660] macvtap4: entered promiscuous mode
[  235.221541][T10660] macvtap4: entered allmulticast mode
[  235.401297][T10668] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  235.568240][T10677] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1247'.
[  235.733516][T10686] netlink: 'syz.4.1251': attribute type 1 has an invalid length.
[  235.910738][T10686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1251'.
[  235.935278][T10690] bond5: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  235.949540][T10690] bond5: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  235.966400][T10690] bond5: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode
[  236.383886][T10721] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  236.456442][T10721] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  236.631429][T10732] netlink: 'syz.0.1261': attribute type 1 has an invalid length.
[  236.656711][T10732] netlink: 'syz.0.1261': attribute type 4 has an invalid length.
[  236.686577][T10732] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1261'.
[  237.740326][T10781] __nla_validate_parse: 2 callbacks suppressed
[  237.740345][T10781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1273'.
[  237.810110][T10789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1273'.
[  237.820044][T10781] macvtap5: entered promiscuous mode
[  237.861108][T10781] macvtap5: entered allmulticast mode
[  237.869215][T10786] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  237.917253][T10786] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  237.944165][T10759] syz.0.1268: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  238.004897][T10759] CPU: 0 UID: 0 PID: 10759 Comm: syz.0.1268 Not tainted syzkaller #0 PREEMPT(full) 
[  238.004922][T10759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  238.004931][T10759] Call Trace:
[  238.004938][T10759]  <TASK>
[  238.004944][T10759]  dump_stack_lvl+0x189/0x250
[  238.004973][T10759]  ? __pfx_dump_stack_lvl+0x10/0x10
[  238.004992][T10759]  ? __pfx__printk+0x10/0x10
[  238.005013][T10759]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  238.005032][T10759]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  238.005056][T10759]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  238.005076][T10759]  warn_alloc+0x214/0x310
[  238.005105][T10759]  ? __pfx_warn_alloc+0x10/0x10
[  238.005137][T10759]  ? __get_vm_area_node+0x28f/0x300
[  238.005159][T10759]  ? xskq_create+0xbf/0x170
[  238.005191][T10759]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  238.005244][T10759]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  238.005271][T10759]  ? __kasan_kmalloc+0x93/0xb0
[  238.005295][T10759]  vmalloc_user_noprof+0xad/0xf0
[  238.005317][T10759]  ? xskq_create+0xbf/0x170
[  238.005339][T10759]  xskq_create+0xbf/0x170
[  238.005363][T10759]  xsk_init_queue+0xb0/0x110
[  238.005388][T10759]  xsk_setsockopt+0x57b/0x8d0
[  238.005411][T10759]  ? __pfx_xsk_setsockopt+0x10/0x10
[  238.005431][T10759]  ? __pfx_aa_sk_perm+0x10/0x10
[  238.005456][T10759]  ? __fget_files+0x2a/0x420
[  238.005475][T10759]  ? aa_sock_opt_perm+0xff/0x1b0
[  238.005495][T10759]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  238.005511][T10759]  ? __pfx_xsk_setsockopt+0x10/0x10
[  238.005533][T10759]  do_sock_setsockopt+0x179/0x1b0
[  238.005558][T10759]  __x64_sys_setsockopt+0x13f/0x1b0
[  238.005583][T10759]  do_syscall_64+0xfa/0x3b0
[  238.005598][T10759]  ? lockdep_hardirqs_on+0x9c/0x150
[  238.005620][T10759]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.005637][T10759]  ? clear_bhb_loop+0x60/0xb0
[  238.005657][T10759]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.005673][T10759] RIP: 0033:0x7fd2a058eec9
[  238.005689][T10759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  238.005703][T10759] RSP: 002b:00007fd2a1391038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  238.005721][T10759] RAX: ffffffffffffffda RBX: 00007fd2a07e6090 RCX: 00007fd2a058eec9
[  238.005733][T10759] RDX: 0000000000000003 RSI: 000000000000011b RDI: 000000000000000d
[  238.005743][T10759] RBP: 00007fd2a0611f91 R08: 0000000000000004 R09: 0000000000000000
[  238.005754][T10759] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  238.005763][T10759] R13: 00007fd2a07e6128 R14: 00007fd2a07e6090 R15: 00007ffd479cc2c8
[  238.005792][T10759]  </TASK>
[  238.306434][T10759] Mem-Info:
[  238.309589][T10759] active_anon:8122 inactive_anon:0 isolated_anon:0
[  238.309589][T10759]  active_file:3350 inactive_file:39938 isolated_file:0
[  238.309589][T10759]  unevictable:3933 dirty:377 writeback:0
[  238.309589][T10759]  slab_reclaimable:11763 slab_unreclaimable:120958
[  238.309589][T10759]  mapped:35523 shmem:4805 pagetables:1164
[  238.309589][T10759]  sec_pagetables:0 bounce:0
[  238.309589][T10759]  kernel_misc_reclaimable:0
[  238.309589][T10759]  free:1289171 free_pcp:19068 free_cma:0
[  238.441844][T10759] Node 0 active_anon:32188kB inactive_anon:0kB active_file:13400kB inactive_file:159548kB unevictable:14196kB isolated(anon):0kB isolated(file):0kB mapped:142392kB dirty:1504kB writeback:0kB shmem:17684kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12952kB pagetables:4784kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  238.531123][T10803] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1277'.
[  238.569317][T10759] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  238.652345][T10759] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  238.751760][T10759] lowmem_reserve[]: 0 2499 2501 2501 2501
[  238.757467][T10812] dummy0: entered promiscuous mode
[  238.763045][T10812] vlan3: entered promiscuous mode
[  238.768197][T10759] Node 0 DMA32 free:1256696kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30740kB inactive_anon:0kB active_file:13400kB inactive_file:157732kB unevictable:13896kB writepending:1504kB present:3129332kB managed:2559912kB mlocked:12456kB bounce:0kB free_pcp:51440kB local_pcp:27836kB free_cma:0kB
[  238.768321][T10759] lowmem_reserve[]: 0 0 1 1 1
[  238.768363][T10759] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1816kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  238.768509][T10759] lowmem_reserve[]: 0 0 0 0 0
[  238.768547][T10759] Node 1 Normal free:3886600kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20032kB local_pcp:13920kB free_cma:0kB
[  238.768597][T10759] lowmem_reserve[]: 0 0 0 0 0
[  238.768636][T10759] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  238.768770][T10759] Node 0 DMA32: 1798*4kB (UM) 691*8kB (U) 5*16kB (UM) 517*32kB (UME) 156*64kB (UME) 55*128kB (UME) 26*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 4*2048kB (UME) 291*4096kB (UM) = 1256736kB
[  238.768948][T10759] Node 0 Normal: 1*4kB (M) 
[  238.917412][T10823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1281'.
[  238.933708][T10759] 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB
[  238.944839][T10759] Node 1 Normal: 198*4kB (UME) 56*8kB (UME) 45*16kB (UME) 123*32kB (UME) 34*64kB (UME) 7*128kB (UME) 3*256kB (UM) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 945*4096kB (M) = 3886600kB
[  238.963652][T10759] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  238.974605][T10759] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  239.028929][T10759] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  239.040512][T10759] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  239.051464][T10759] 47723 total pagecache pages
[  239.058678][T10759] 0 pages in swap cache
[  239.062847][T10759] Free swap  = 124996kB
[  239.068865][T10759] Total swap = 124996kB
[  239.073034][T10759] 2097051 pages RAM
[  239.077268][T10759] 0 pages HighMem/MovableOnly
[  239.081940][T10759] 424983 pages reserved
[  239.086538][T10759] 0 pages cma reserved
[  239.178121][T10833] netlink: 'syz.2.1284': attribute type 2 has an invalid length.
[  239.220873][T10833] netlink: 'syz.2.1284': attribute type 5 has an invalid length.
[  239.389445][T10844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1286'.
[  239.503878][T10849] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  239.559354][T10849] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  239.611086][T10853] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1289'.
[  239.631686][T10853] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1289'.
[  239.953257][T10867] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1291'.
[  240.027443][T10879] IPVS: Unknown mcast interface: bond_slave_0
[  240.230460][T10892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1296'.
[  240.356922][T10897] sctp: [Deprecated]: syz.1.1299 (pid 10897) Use of struct sctp_assoc_value in delayed_ack socket option.
[  240.356922][T10897] Use struct sctp_sack_info instead
[  240.356946][T10900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1300'.
[  240.550106][T10912] netlink: 'syz.3.1302': attribute type 9 has an invalid length.
[  241.560016][T10980] tipc: Can't bind to reserved service type 1
[  241.778301][T10997] netlink: 'syz.0.1321': attribute type 3 has an invalid length.
[  241.806382][T10997] netlink: 'syz.0.1321': attribute type 1 has an invalid length.
[  241.883639][T11003] netlink: 'syz.4.1324': attribute type 20 has an invalid length.
[  241.906539][T11003] netlink: 'syz.4.1324': attribute type 20 has an invalid length.
[  242.137356][T11015] netlink: 'syz.4.1326': attribute type 66 has an invalid length.
[  242.385798][T11013] lo speed is unknown, defaulting to 1000
[  242.402012][T11013] lo speed is unknown, defaulting to 1000
[  242.647682][T11034] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  242.868920][T11046] tipc: Resetting bearer <eth:syzkaller0>
[  242.921461][T11045] !
: renamed from dummy0 (while UP)
[  242.962768][T11032] tipc: Disabling bearer <eth:syzkaller0>
[  242.998759][T11054] siw: device registration error -23
[  243.317279][   T30] audit: type=1800 audit(1758740351.688:6): pid=11050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1333" name="memory.events" dev="tmpfs" ino=1458 res=0 errno=0
[  243.580827][T11074] __nla_validate_parse: 14 callbacks suppressed
[  243.580846][T11074] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1341'.
[  243.617106][T11075] netlink: 'syz.4.1342': attribute type 1 has an invalid length.
[  243.684312][T11084] netlink: 'syz.0.1341': attribute type 10 has an invalid length.
[  243.735207][T11083] netlink: 2164 bytes leftover after parsing attributes in process `syz.4.1342'.
[  243.871909][T11089] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1344'.
[  244.004220][T11094] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  244.043509][T11094] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1346'.
[  245.080474][T11131] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1357'.
[  245.104494][T11133] veth0: entered promiscuous mode
[  245.129780][T11133] netlink: 'syz.4.1358': attribute type 3 has an invalid length.
[  245.182551][T11098] lo speed is unknown, defaulting to 1000
[  245.195126][T11098] lo speed is unknown, defaulting to 1000
[  245.279681][T11132] veth0: left promiscuous mode
[  246.304578][T11168] netlink: 'syz.4.1367': attribute type 13 has an invalid length.
[  246.456922][T11177] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1371'.
[  246.489502][T11174] netlink: 'syz.4.1367': attribute type 12 has an invalid length.
[  246.852756][T11195] syzkaller0: entered promiscuous mode
[  246.860129][T11195] syzkaller0: entered allmulticast mode
[  246.889902][T11204] netlink: 428 bytes leftover after parsing attributes in process `syz.2.1375'.
[  246.956959][T11204] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1375'.
[  247.090980][T11210] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1377'.
[  247.277561][T11198] lo speed is unknown, defaulting to 1000
[  247.287642][T11198] lo speed is unknown, defaulting to 1000
[  247.633719][ T7782] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0
[  247.667507][ T7782] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0
[  247.716462][ T7782] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0
[  247.737939][ T7782] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0
[  248.023262][T11242] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig
[  248.089252][T11242] syzkaller1: entered promiscuous mode
[  248.095262][T11242] syzkaller1: entered allmulticast mode
[  248.263709][T11247] netlink: 'syz.3.1385': attribute type 1 has an invalid length.
[  248.287879][T11247] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1385'.
[  248.677311][T11261] netlink: 'syz.0.1391': attribute type 13 has an invalid length.
[  248.682244][T11262] __nla_validate_parse: 1 callbacks suppressed
[  248.682262][T11262] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1392'.
[  248.757685][T11264] netlink: 'syz.0.1391': attribute type 12 has an invalid length.
[  248.933376][T11276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1397'.
[  249.023378][T11279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1398'.
[  249.046559][T11279] Unsupported xt match
[  249.046576][T11279] unable to load match
[  249.117796][T11286] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  249.131369][T11286] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  249.271762][T11293] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1402'.
[  249.301631][T11295] ieee802154 phy1 wpan1: encryption failed: -22
[  249.319792][T11300] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1404'.
[  249.329752][T11296] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1404'.
[  249.425787][T11305] syz.4.1406 (11305) used obsolete PPPIOCDETACH ioctl
[  249.440730][T11306] vlan3: entered promiscuous mode
[  249.446524][T11306] geneve1: entered promiscuous mode
[  249.451929][T11306] vlan3: entered allmulticast mode
[  249.460383][T11306] geneve1: entered allmulticast mode
[  249.502559][T11312] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1407'.
[  249.534724][T11310] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  249.560415][T11310] syzkaller0: entered promiscuous mode
[  249.576109][T11310] syzkaller0: entered allmulticast mode
[  249.621028][T11310] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1408'.
[  249.647471][T11310] tipc: Resetting bearer <eth:syzkaller0>
[  249.661993][T11309] tipc: Resetting bearer <eth:syzkaller0>
[  249.691419][T11309] tipc: Disabling bearer <eth:syzkaller0>
[  249.889037][T11330] netlink: 'syz.1.1409': attribute type 1 has an invalid length.
[  249.897542][T11330] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1409'.
[  249.980823][T11334] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  250.001448][T11334] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  250.182940][T11344] xt_time: unknown flags 0xf4
[  250.705478][T11375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1425'.
[  251.154062][T11352] lo speed is unknown, defaulting to 1000
[  251.171711][T11352] lo speed is unknown, defaulting to 1000
[  252.206813][T11424] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  252.226340][T11424] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  252.285672][T11426] netdevsim netdevsim2 netdevsim3: entered promiscuous mode
[  252.352463][T11434] netlink: 'syz.1.1443': attribute type 1 has an invalid length.
[  253.225330][T11434] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  253.308625][T11434] vlan2: left promiscuous mode
[  253.313469][T11434] bond0: left promiscuous mode
[  253.329649][T11434] ip6tnl1: left promiscuous mode
[  253.360179][T11434] macsec1: left promiscuous mode
[  253.365161][T11434] macsec1: left allmulticast mode
[  253.394921][T11434] gretap1: left promiscuous mode
[  253.406923][ T5864] lo speed is unknown, defaulting to 1000
[  253.415327][ T5864] syz1: Port: 1 Link DOWN
[  253.427700][T11466] syzkaller0: entered promiscuous mode
[  253.436443][T11466] syzkaller0: entered allmulticast mode
[  253.460296][ T7778] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  253.470273][ T7778] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  253.482309][ T7778] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  253.493242][ T7778] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  253.617154][   T30] audit: type=1800 audit(1758740361.988:7): pid=11482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1448" name="cgroup.controllers" dev="tmpfs" ino=1636 res=0 errno=0
[  253.760539][ T7778] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  253.782950][ T7778] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  253.800449][ T7778] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  253.810375][ T7778] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  253.890700][T11496] __nla_validate_parse: 5 callbacks suppressed
[  253.890719][T11496] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1452'.
[  253.981310][T11503] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  253.993065][T11503] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  254.137845][T11484] netlink: 'syz.2.1449': attribute type 21 has an invalid length.
[  254.374435][T11523] ==================================================================
[  254.382532][T11523] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  254.390443][T11523] Read of size 1 at addr ffff88804f8b5430 by task syz.1.1460/11523
[  254.398348][T11523] 
[  254.400682][T11523] CPU: 1 UID: 0 PID: 11523 Comm: syz.1.1460 Not tainted syzkaller #0 PREEMPT(full) 
[  254.400706][T11523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  254.400718][T11523] Call Trace:
[  254.400725][T11523]  <TASK>
[  254.400733][T11523]  dump_stack_lvl+0x189/0x250
[  254.400756][T11523]  ? __kasan_check_byte+0x12/0x40
[  254.400781][T11523]  ? __pfx_dump_stack_lvl+0x10/0x10
[  254.400799][T11523]  ? lock_release+0x4b/0x3e0
[  254.400824][T11523]  ? __virt_addr_valid+0x4a5/0x5c0
[  254.400845][T11523]  print_report+0xca/0x240
[  254.400868][T11523]  ? xfrm_state_find+0x2cf2/0x5400
[  254.400888][T11523]  kasan_report+0x118/0x150
[  254.400910][T11523]  ? xfrm_state_find+0x2cf2/0x5400
[  254.400936][T11523]  xfrm_state_find+0x2cf2/0x5400
[  254.400957][T11523]  ? __lock_acquire+0xab9/0xd20
[  254.400988][T11523]  ? xfrm_state_find+0x1da/0x5400
[  254.401011][T11523]  ? __pfx_xfrm_state_find+0x10/0x10
[  254.401036][T11523]  ? __lock_acquire+0xab9/0xd20
[  254.401059][T11523]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  254.401096][T11523]  ? stack_depot_save_flags+0x40/0x860
[  254.401120][T11523]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  254.401144][T11523]  ? __lock_acquire+0xab9/0xd20
[  254.401174][T11523]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  254.401199][T11523]  ? rt_set_nexthop+0x693/0xa80
[  254.401224][T11523]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  254.401250][T11523]  ? xfrm_expand_policies+0x41f/0x6a0
[  254.401275][T11523]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  254.401303][T11523]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  254.401332][T11523]  xfrm_lookup_route+0x3c/0x1c0
[  254.401356][T11523]  udp_sendmsg+0x142e/0x2170
[  254.401379][T11523]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  254.401402][T11523]  ? __pfx_udp_sendmsg+0x10/0x10
[  254.401422][T11523]  ? count_memcg_event_mm+0x21/0x260
[  254.401445][T11523]  ? count_memcg_event_mm+0x21/0x260
[  254.401469][T11523]  ? __pfx_aa_sk_perm+0x10/0x10
[  254.401491][T11523]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  254.401510][T11523]  ? sock_rps_record_flow+0x19/0x410
[  254.401528][T11523]  ? inet_sendmsg+0x29c/0x370
[  254.401543][T11523]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  254.401562][T11523]  __sock_sendmsg+0x19c/0x270
[  254.401587][T11523]  ____sys_sendmsg+0x52d/0x830
[  254.401610][T11523]  ? __pfx_____sys_sendmsg+0x10/0x10
[  254.401641][T11523]  ? import_iovec+0x74/0xa0
[  254.401664][T11523]  ___sys_sendmsg+0x21f/0x2a0
[  254.401685][T11523]  ? __pfx____sys_sendmsg+0x10/0x10
[  254.401722][T11523]  ? __fget_files+0x2a/0x420
[  254.401744][T11523]  ? __fget_files+0x3a0/0x420
[  254.401770][T11523]  __sys_sendmmsg+0x227/0x430
[  254.401790][T11523]  ? __pfx___sys_sendmmsg+0x10/0x10
[  254.401813][T11523]  ? bpf_trace_run2+0x322/0x4b0
[  254.401841][T11523]  ? rcu_is_watching+0x15/0xb0
[  254.401859][T11523]  __x64_sys_sendmmsg+0xa0/0xc0
[  254.401880][T11523]  do_syscall_64+0xfa/0x3b0
[  254.401896][T11523]  ? lockdep_hardirqs_on+0x9c/0x150
[  254.401919][T11523]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.401936][T11523]  ? clear_bhb_loop+0x60/0xb0
[  254.401954][T11523]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.401971][T11523] RIP: 0033:0x7f781178eec9
[  254.401987][T11523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  254.402002][T11523] RSP: 002b:00007f7812605038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  254.402022][T11523] RAX: ffffffffffffffda RBX: 00007f78119e6090 RCX: 00007f781178eec9
[  254.402035][T11523] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000005
[  254.402048][T11523] RBP: 00007f7811811f91 R08: 0000000000000000 R09: 0000000000000000
[  254.402059][T11523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  254.402070][T11523] R13: 00007f78119e6128 R14: 00007f78119e6090 R15: 00007ffc923bef28
[  254.402091][T11523]  </TASK>
[  254.402097][T11523] 
[  254.774358][T11523] Allocated by task 10202:
[  254.778762][T11523]  kasan_save_track+0x3e/0x80
[  254.783441][T11523]  __kasan_slab_alloc+0x6c/0x80
[  254.788301][T11523]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  254.793753][T11523]  xfrm_state_alloc+0x24/0x2f0
[  254.798505][T11523]  __find_acq_core+0x8a7/0x1c00
[  254.803345][T11523]  xfrm_find_acq+0x78/0xa0
[  254.807748][T11523]  xfrm_alloc_userspi+0x6b3/0xc90
[  254.812758][T11523]  xfrm_user_rcv_msg+0x7a0/0xab0
[  254.817689][T11523]  netlink_rcv_skb+0x208/0x470
[  254.822438][T11523]  xfrm_netlink_rcv+0x79/0x90
[  254.827105][T11523]  netlink_unicast+0x82f/0x9e0
[  254.831850][T11523]  netlink_sendmsg+0x805/0xb30
[  254.836598][T11523]  __sock_sendmsg+0x21c/0x270
[  254.841277][T11523]  ____sys_sendmsg+0x505/0x830
[  254.846034][T11523]  ___sys_sendmsg+0x21f/0x2a0
[  254.850715][T11523]  __x64_sys_sendmsg+0x19b/0x260
[  254.855737][T11523]  do_syscall_64+0xfa/0x3b0
[  254.860228][T11523]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.866113][T11523] 
[  254.868427][T11523] Freed by task 5864:
[  254.872391][T11523]  kasan_save_track+0x3e/0x80
[  254.877059][T11523]  kasan_save_free_info+0x46/0x50
[  254.882068][T11523]  __kasan_slab_free+0x5b/0x80
[  254.886823][T11523]  kmem_cache_free+0x18f/0x400
[  254.891576][T11523]  xfrm_state_gc_task+0x52d/0x6b0
[  254.896583][T11523]  process_scheduled_works+0xae1/0x17b0
[  254.902115][T11523]  worker_thread+0x8a0/0xda0
[  254.906688][T11523]  kthread+0x70e/0x8a0
[  254.910744][T11523]  ret_from_fork+0x439/0x7d0
[  254.915334][T11523]  ret_from_fork_asm+0x1a/0x30
[  254.920084][T11523] 
[  254.922394][T11523] The buggy address belongs to the object at ffff88804f8b5100
[  254.922394][T11523]  which belongs to the cache xfrm_state of size 928
[  254.936341][T11523] The buggy address is located 816 bytes inside of
[  254.936341][T11523]  freed 928-byte region [ffff88804f8b5100, ffff88804f8b54a0)
[  254.950121][T11523] 
[  254.952439][T11523] The buggy address belongs to the physical page:
[  254.958828][T11523] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804f8b5540 pfn:0x4f8b4
[  254.968876][T11523] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  254.977365][T11523] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  254.984891][T11523] page_type: f5(slab)
[  254.988946][T11523] raw: 00fff00000000040 ffff88801ab4c500 dead000000000122 0000000000000000
[  254.997519][T11523] raw: ffff88804f8b5540 00000000800f000a 00000000f5000000 0000000000000000
[  255.006347][T11523] head: 00fff00000000040 ffff88801ab4c500 dead000000000122 0000000000000000
[  255.015000][T11523] head: ffff88804f8b5540 00000000800f000a 00000000f5000000 0000000000000000
[  255.023659][T11523] head: 00fff00000000002 ffffea00013e2d01 00000000ffffffff 00000000ffffffff
[  255.032315][T11523] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  255.041231][T11523] page dumped because: kasan: bad access detected
[  255.047633][T11523] page_owner tracks the page as allocated
[  255.053414][T11523] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6851, tgid 6838 (syz.2.195), ts 107078122158, free_ts 99170215607
[  255.072502][T11523]  post_alloc_hook+0x240/0x2a0
[  255.077264][T11523]  get_page_from_freelist+0x21e4/0x22c0
[  255.082801][T11523]  __alloc_frozen_pages_noprof+0x181/0x370
[  255.088592][T11523]  alloc_pages_mpol+0x232/0x4a0
[  255.093429][T11523]  allocate_slab+0x8a/0x370
[  255.097910][T11523]  ___slab_alloc+0xbeb/0x1420
[  255.102746][T11523]  kmem_cache_alloc_noprof+0x283/0x3c0
[  255.108186][T11523]  xfrm_state_alloc+0x24/0x2f0
[  255.112948][T11523]  xfrm_state_find+0x37d4/0x5400
[  255.117884][T11523]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  255.124038][T11523]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  255.129406][T11523]  xfrm_lookup_route+0x3c/0x1c0
[  255.134246][T11523]  udp_sendmsg+0x142e/0x2170
[  255.138831][T11523]  __sock_sendmsg+0x19c/0x270
[  255.143497][T11523]  ____sys_sendmsg+0x52d/0x830
[  255.148248][T11523]  ___sys_sendmsg+0x21f/0x2a0
[  255.152911][T11523] page last free pid 6507 tgid 6507 stack trace:
[  255.159216][T11523]  __free_frozen_pages+0xbc4/0xd30
[  255.164316][T11523]  vfree+0x25a/0x400
[  255.168194][T11523]  xskq_destroy+0x40/0x60
[  255.172520][T11523]  xsk_release+0x4ec/0x700
[  255.176918][T11523]  sock_close+0xc3/0x240
[  255.181206][T11523]  __fput+0x44c/0xa70
[  255.185181][T11523]  task_work_run+0x1d1/0x260
[  255.189753][T11523]  exit_to_user_mode_loop+0xec/0x110
[  255.195196][T11523]  do_syscall_64+0x2bd/0x3b0
[  255.199769][T11523]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.205647][T11523] 
[  255.207952][T11523] Memory state around the buggy address:
[  255.213579][T11523]  ffff88804f8b5300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  255.221626][T11523]  ffff88804f8b5380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  255.229668][T11523] >ffff88804f8b5400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  255.237704][T11523]                                      ^
[  255.243314][T11523]  ffff88804f8b5480: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  255.251357][T11523]  ffff88804f8b5500: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[  255.259406][T11523] ==================================================================
[  255.296647][T11523] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  255.303883][T11523] CPU: 0 UID: 0 PID: 11523 Comm: syz.1.1460 Not tainted syzkaller #0 PREEMPT(full) 
[  255.313259][T11523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  255.323325][T11523] Call Trace:
[  255.326607][T11523]  <TASK>
[  255.329543][T11523]  dump_stack_lvl+0x99/0x250
[  255.334140][T11523]  ? __asan_memcpy+0x40/0x70
[  255.338732][T11523]  ? __pfx_dump_stack_lvl+0x10/0x10
[  255.343925][T11523]  ? __pfx__printk+0x10/0x10
[  255.348506][T11523]  vpanic+0x281/0x750
[  255.352482][T11523]  ? preempt_schedule+0xae/0xc0
[  255.357324][T11523]  ? __pfx_vpanic+0x10/0x10
[  255.361817][T11523]  ? preempt_schedule_common+0x83/0xd0
[  255.367263][T11523]  ? preempt_schedule+0xae/0xc0
[  255.372125][T11523]  ? __pfx_preempt_schedule+0x10/0x10
[  255.377492][T11523]  panic+0xb9/0xc0
[  255.381201][T11523]  ? __pfx_panic+0x10/0x10
[  255.385603][T11523]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  255.391486][T11523]  ? xfrm_state_find+0x2cf2/0x5400
[  255.396591][T11523]  check_panic_on_warn+0x89/0xb0
[  255.401517][T11523]  ? xfrm_state_find+0x2cf2/0x5400
[  255.406620][T11523]  end_report+0x78/0x160
[  255.410851][T11523]  kasan_report+0x129/0x150
[  255.415345][T11523]  ? xfrm_state_find+0x2cf2/0x5400
[  255.420449][T11523]  xfrm_state_find+0x2cf2/0x5400
[  255.425373][T11523]  ? __lock_acquire+0xab9/0xd20
[  255.430224][T11523]  ? xfrm_state_find+0x1da/0x5400
[  255.435239][T11523]  ? __pfx_xfrm_state_find+0x10/0x10
[  255.440513][T11523]  ? __lock_acquire+0xab9/0xd20
[  255.445364][T11523]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  255.451524][T11523]  ? stack_depot_save_flags+0x40/0x860
[  255.456979][T11523]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  255.463555][T11523]  ? __lock_acquire+0xab9/0xd20
[  255.468398][T11523]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  255.473759][T11523]  ? rt_set_nexthop+0x693/0xa80
[  255.478600][T11523]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  255.483972][T11523]  ? xfrm_expand_policies+0x41f/0x6a0
[  255.489332][T11523]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  255.494695][T11523]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  255.500498][T11523]  xfrm_lookup_route+0x3c/0x1c0
[  255.505347][T11523]  udp_sendmsg+0x142e/0x2170
[  255.509925][T11523]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  255.515474][T11523]  ? __pfx_udp_sendmsg+0x10/0x10
[  255.520435][T11523]  ? count_memcg_event_mm+0x21/0x260
[  255.525724][T11523]  ? count_memcg_event_mm+0x21/0x260
[  255.531006][T11523]  ? __pfx_aa_sk_perm+0x10/0x10
[  255.535857][T11523]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  255.542267][T11523]  ? sock_rps_record_flow+0x19/0x410
[  255.547545][T11523]  ? inet_sendmsg+0x29c/0x370
[  255.552213][T11523]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  255.557487][T11523]  __sock_sendmsg+0x19c/0x270
[  255.562159][T11523]  ____sys_sendmsg+0x52d/0x830
[  255.566912][T11523]  ? __pfx_____sys_sendmsg+0x10/0x10
[  255.572189][T11523]  ? import_iovec+0x74/0xa0
[  255.576678][T11523]  ___sys_sendmsg+0x21f/0x2a0
[  255.581345][T11523]  ? __pfx____sys_sendmsg+0x10/0x10
[  255.586541][T11523]  ? __fget_files+0x2a/0x420
[  255.591118][T11523]  ? __fget_files+0x3a0/0x420
[  255.595797][T11523]  __sys_sendmmsg+0x227/0x430
[  255.600489][T11523]  ? __pfx___sys_sendmmsg+0x10/0x10
[  255.605684][T11523]  ? bpf_trace_run2+0x322/0x4b0
[  255.610537][T11523]  ? rcu_is_watching+0x15/0xb0
[  255.615292][T11523]  __x64_sys_sendmmsg+0xa0/0xc0
[  255.620135][T11523]  do_syscall_64+0xfa/0x3b0
[  255.624624][T11523]  ? lockdep_hardirqs_on+0x9c/0x150
[  255.629816][T11523]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.635869][T11523]  ? clear_bhb_loop+0x60/0xb0
[  255.640531][T11523]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.646408][T11523] RIP: 0033:0x7f781178eec9
[  255.650815][T11523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  255.670412][T11523] RSP: 002b:00007f7812605038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  255.678832][T11523] RAX: ffffffffffffffda RBX: 00007f78119e6090 RCX: 00007f781178eec9
[  255.686800][T11523] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000005
[  255.694755][T11523] RBP: 00007f7811811f91 R08: 0000000000000000 R09: 0000000000000000
[  255.702709][T11523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  255.710665][T11523] R13: 00007f78119e6128 R14: 00007f78119e6090 R15: 00007ffc923bef28
[  255.718630][T11523]  </TASK>
[  255.721929][T11523] Kernel Offset: disabled
[  255.726234][T11523] Rebooting in 86400 seconds..