last executing test programs:

4.971976785s ago: executing program 0 (id=3067):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x8c}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x144, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xfff3}, {0x4, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x110, 0x2, [@TCA_BPF_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}]}, @TCA_BPF_ACT={0xfc, 0x1, [@m_bpf={0xf8, 0x7, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x7, 0x1, 0x6}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x2, 0x8, 0x50, 0xff}, {0x400, 0xa, 0x9}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x80, 0x4, 0xf4, 0x9b}}]}, {0x71, 0x6, "f3ef5037a6528e33d770d04ac21b212ade2038dcc7272de194ce01dc3a7d2d828f018c45a15167f02711ac66b0a2d10700000000000000e81a6f5c8318a249a88d8b7a626d4541a9311eb98e9a813da52a585e4ad6b2162804dc337b0f9488bc066e55b0e385dbd85d3737291f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x22bf533d53fd5981}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x1d8}]}, 0x144}, 0x1, 0x0, 0x0, 0x884}, 0x20000080)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

4.751930084s ago: executing program 0 (id=3072):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071103500000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80)
syz_emit_ethernet(0x46, &(0x7f00000005c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local}, "a815a23da43974ff"}}}}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r0], 0x7c}}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "24747942338921a1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "5615d9f5", "7c5cec21291a43fe"}, 0x38)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0)

4.550016178s ago: executing program 0 (id=3076):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'vxcan1\x00', {0x2, 0x4e22, @empty}})
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)={[0xfffffffffffffffc]}, 0x8)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x35, 0x1003, 0x62}, 0x2c)

4.113601555s ago: executing program 0 (id=3082):
r0 = socket$igmp(0x2, 0x3, 0x2) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x34, r2, 0x431, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0xfe}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x1, 0x3, 0x154, @vifc_lcl_addr=@rand_addr=0x64010102, @private=0xa010102}, 0x10) (async, rerun: 32)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4)

4.001934064s ago: executing program 4 (id=3083):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = accept4(r0, &(0x7f0000000000)=@l2, &(0x7f0000000100)=0x80, 0x80800)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r3, &(0x7f0000003580)=[{{&(0x7f0000006b00)={0xa, 0x4e22, 0x8001, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000000440)={0xa, 0x4e20, 0xb, @remote, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000001dc0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x5}}], 0x18}}], 0x2, 0x900)
bind$l2tp6(r2, &(0x7f0000000140)={0xa, 0x0, 0x283, @mcast2, 0x3, 0x2}, 0x20)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000440)={0x0, 0x4}, &(0x7f0000000480)=0x8)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={0x0}}, 0x0)
recvmmsg(r5, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/63, 0x3f}], 0x1}, 0x3}], 0x1, 0x120, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="11da3c544a6149f44b1a8c3d8a39cc3d630e8ef9170ccf07ef1800322de53ae3b1", 0x21)
sendmmsg$alg(r2, &(0x7f0000001680)=[{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000001c0)="27e0c6c43d710e", 0x7}, {&(0x7f0000000200)="07c229f02a33e82de86732c88aa16bf2e8599a78eb5b956e5c605845fa510e40f01f266102ff896bfd66d8f8fadbc891b776278acd51be742d0aa336b2d2d99ba8c8a6f99111d63af90507d01dcadf21fef8925e607cba9137b3c7bb0ac151d9adc8577ff034ee932f77e58f141d6f9f5a4f977bb879ecf470f45a8d2ef35fcf496683b5393f6d63b82d1d7b80c12445546ee4", 0x93}, {&(0x7f00000002c0)="b70ec951e7c63ddd636f9cb701ab31b2af31512a32bbf8adf9f74afbf759ad954bac3232c8835a6831368e8b813622b889de33c8cf1e4bf4bbd441f5c43b0c9c02e9215c04375769d1171440912d961684ddfa2fb8ee4ca76594d7e37e868cb91cc00603bdc543f6a4dd8f74ef278ca81f64c62fed8d276ace226c27953274346ee86a9ab8bf202bfd2ba5d1b86a9d8c39f4eaf9d31035c8c1b956a46201cbbacbb1c248d803693f2387ebb604c924f9ed55c2d4d6c03a13eccae83b180c2a95bf6ba47a19ba88cb87b9fff1ab03", 0xce}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="12fada031afd250ef3f2b2eb0a9947d7c9b0bca678c561e6487affc027b6dad6e5d37de677cda56975501d26697c48aa45fe568d9cab2e2f26860fb56f4183323d11c6c051d438984c1e9e8b37f53e50d5b08e63ce9c7c290302ff667cd18e2b91a92dc2ad66b9f9b204710d35529f6a82fdbc2dd9d1b6bd3f8683e985e09cf288aaabcc9f8a", 0x86}, {&(0x7f00000003c0)="f17ab936b2d6898dd1fd6cb89e20c5a486c5b1202564a03f49ad546af2b5f836b8d9d1402de9da9a88ef614b0354f0153974fdf43b80039ab8647b38a253c16e174073868f1202464a536ea406c4ec58155b2f8890a8062e1912ca6b89", 0x5d}, {&(0x7f0000001580)="e72c98c46a029e908b0c062e8e203a55f2c23e2cf8ba8742bc0cc844ce932abbcbd035f7e39c3dbcb78d78c86efe81ebf8be9f76259247621b1ed7b7528410", 0x3f}], 0x7, &(0x7f0000001640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000010}], 0x1, 0x91)

3.730652149s ago: executing program 0 (id=3086):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r1, 0x400448dd, &(0x7f0000000240)={0x0, 0x0, "101000", 0x7f})
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)={0x34, r2, 0x7, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}]}, 0x34}}, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x88, 0x1403, 0x1, 0x70bd28, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'hsr0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8001}, 0x44014)
recvmsg(r3, &(0x7f0000000500)={&(0x7f00000000c0)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000140)=""/21, 0x15}, {&(0x7f0000000300)=""/87, 0x57}, {&(0x7f0000000380)=""/89, 0x59}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000000180)=""/49, 0x31}, {&(0x7f0000000400)=""/92, 0x5c}], 0x6, &(0x7f0000000200)=""/9, 0x9}, 0x40002100)
socket$inet_icmp(0x2, 0x2, 0x1)

3.652762575s ago: executing program 4 (id=3087):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r3)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x1, 0xd}, {0xa}, {0x10, 0xfff1}}}, 0x24}}, 0x40004)
recvmmsg(r6, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r9, 0x6, 0x15, &(0x7f00000000c0), 0x4)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xffff, 0xb}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x1}, "01"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0xe72, 0x10, 0x0, &(0x7f0000000200)="63eced8e46dc3fad77b7b3f7b986edf7", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c000280060001000016"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0)

3.503723537s ago: executing program 1 (id=3089):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000131401010000000000000000080001"], 0x20}}, 0x24004010)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x9a}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x2e58d4b13e6fccb4)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000040)={0x6, {0x11, 0x4, 0x6, 0x1, 0xffff}})
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.numa_stat\x00', 0x0, 0x0)
write$tun(r2, &(0x7f00000001c0)={@void, @void, @llc={@llc={0x8e, 0x4e, "d5"}}}, 0x3)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000080)={{0x32, @dev={0xac, 0x14, 0x14, 0x3f}, 0x4e22, 0x1, 'fo\x00', 0x23, 0x0, 0x6f}, {@broadcast, 0x4e22, 0x2000, 0x100, 0x8, 0x1}}, 0x44)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000131401010000000000000000080001"], 0x20}}, 0x24004010) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x9a}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x2e58d4b13e6fccb4) (async)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000040)={0x6, {0x11, 0x4, 0x6, 0x1, 0xffff}}) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.numa_stat\x00', 0x0, 0x0) (async)
write$tun(r2, &(0x7f00000001c0)={@void, @void, @llc={@llc={0x8e, 0x4e, "d5"}}}, 0x3) (async)
socket$igmp(0x2, 0x3, 0x2) (async)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000080)={{0x32, @dev={0xac, 0x14, 0x14, 0x3f}, 0x4e22, 0x1, 'fo\x00', 0x23, 0x0, 0x6f}, {@broadcast, 0x4e22, 0x2000, 0x100, 0x8, 0x1}}, 0x44) (async)

3.391640825s ago: executing program 3 (id=3090):
r0 = socket$netlink(0x10, 0x3, 0x5)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1d, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x14)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000000080))
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r3, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0xc}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000841}, 0x800)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000240)={'veth1_to_bond\x00'})
r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r1}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf1, 0xf1, 0x5, [@decl_tag={0x9, 0x0, 0x0, 0x11, 0x4, 0xffffffffffffffff}, @enum={0x3, 0x4, 0x0, 0x6, 0x4, [{0x1, 0x7fff}, {0x4, 0xfff}, {0x7, 0x8e}, {0x9, 0x1}]}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x5f, 0x0, 0x19, 0xfc283844191c6754}, @ptr={0x3, 0x0, 0x0, 0x2, 0x2}, @datasec={0x1, 0x2, 0x0, 0xf, 0x1, [{0x5, 0xfff}, {0x3, 0x4, 0x1}], 'k'}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xa, 0x4}, {0x0, 0x5}, {0xa, 0x1}]}, @decl_tag={0xf, 0x0, 0x0, 0x11, 0x5, 0x3}, @var={0x2, 0x0, 0x0, 0xe, 0x4, 0x1}, @union={0x5, 0x3, 0x0, 0x5, 0x0, 0x9, [{0x2, 0x5, 0x7ff}, {0xe, 0x2}, {0xa, 0x4, 0x8}]}]}, {0x0, [0x61, 0x30, 0x61]}}, &(0x7f00000003c0)=""/45, 0x111, 0x2d, 0x0, 0x7ff, 0x10000, @value=r4}, 0x28)
r5 = epoll_create(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000480)={0x60000008})
r6 = socket(0x21, 0x3, 0xfffffffb)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000004c0)={<r7=>0x0, 0x8, 0x8000}, &(0x7f0000000500)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000540)={r7, 0x0, 0x10}, &(0x7f0000000580)=0xc)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f00000005c0))
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xa8, r8, 0x6adc576e2e0da67, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2, 0x3f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x39d}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x40}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9f}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xfb}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb}]]}, 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x48085)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r5, 0x8010661b, &(0x7f0000000800))
r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000880)={0xffffffffffffffff}, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000840)='f2fs_lookup_extent_tree_start\x00', r10, 0x0, 0x7fffffffffffffff}, 0x18)
r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_msfilter(r11, 0x0, 0x29, &(0x7f0000000900)={@multicast1, @private=0xa010101, 0x1, 0x8, [@private=0xa010102, @remote, @empty, @empty, @loopback, @local, @local, @multicast1]}, 0x30)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000940)=<r12=>0x0)
bind$nfc_llcp(r6, &(0x7f0000000980)={0x27, r12, 0x0, 0x4, 0x9, 0x48, "19f567cb7e75f8583c7432b88a9203a38d23c01546f16e3576b7369721b38fa1694f41d228d1968358c5cb59e6c3bc5bbc782d402d5755ec44e652989f6bd8", 0x38}, 0x60)
r13 = socket$igmp6(0xa, 0x3, 0x2)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r13, &(0x7f0000000a00)={0x40000000})
close(r13)
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000ac0)=0x6, 0x4)

3.383651551s ago: executing program 1 (id=3091):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x2000000000000021, 0x2, 0x10000000000002)
sendmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[{0x10}, {0x10, 0x110, 0xa}], 0x20, 0xe000}, 0x5}], 0x1, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r2, &(0x7f0000002300)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000000940)='z', 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r2, 0x1)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x90, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x50, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @void, @val={0x6, 0x2, 0x6}, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x8000, 0x1, 0x6, 0x0, {0x7, 0x5, 0x0, 0x7, 0x0, 0x1}, 0x1, 0x1, 0x9}}, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_PBSS={0x4}]}, 0x90}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x4c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x60e}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4305}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4004)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bond0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x7d}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xffed}, {0x4, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8021}, 0x4000000)

1.495598165s ago: executing program 1 (id=3092):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000001a800c002d8005000800010000"], 0x38}}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b4000000f1ffffffdd0a00000000000073019e00000000009500000000000000ece69e0aa39b23ac2d61fb9a6d88764c97479609f8e38c78da7cad0d3338a5363ddec5ec60e0e279fe452b80d7fbcecb2e65082679"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x3}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc004)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32)
sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0600000004"], 0x48)
vmsplice(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x35f}], 0x1, 0x9)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, 0x0, 0x1, 0xff1f, 0x8000000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000700)=@req3={0x6, 0x0, 0x7, 0x8, 0x2, 0x1, 0x1}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[], 0x1c}}, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000680)={@dev={0xfe, 0x80, '\x00', 0x43}, 0x800, 0x0, 0x1, 0x1, 0x7}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000100)={@private0, 0x800, 0x0, 0xff}, 0x20)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00'})

1.494845538s ago: executing program 3 (id=3093):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x8, &(0x7f00000001c0), &(0x7f0000006680)=0x4)

1.304246704s ago: executing program 3 (id=3094):
r0 = socket$inet6(0xa, 0x3, 0x3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x1)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a2f000006"], 0x1c}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0xffffffff, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x120, 0x87}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0xe7}, 0x0, 0x0, 0x1, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x4000090)
r4 = socket$inet(0xa, 0x801, 0x84)
ioctl$sock_SIOCBRADDBR(r4, 0x89a0, &(0x7f00000002c0)='veth0_macvtap\x00')
listen(r4, 0x8)
readv(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xf3}], 0x1)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0)
connect$inet(r1, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf254c0001000c00a7000000000000c05100000101007063690000000200303030303a30303a31302e3000000038"], 0x2c}, 0x1, 0x0, 0x0, 0x8011}, 0x4044)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x5c}, 0x1, 0x0, 0x0, 0x840}, 0x0)
close(r6)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}}, 0x1c)

1.298108635s ago: executing program 4 (id=3095):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0)
sendmsg$inet(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9028c8380edf3f7dd4772d25d68eacbc07c2c9cdec8d5433c09473ed20f24bcfcd1843371a7cc97e19ff95d071dc9b9a75dd3b291e13d7e57bd1c5db8dae766ce0e58f3969da74221f8bf7af068db191dc9c3604baa8a7940adabd56c49f39d998bcb2da4951215219e19e320890866dfb322d9bb5c0a1e515fbd771c5606d39b2e657afb7aa7c59eddb57eecb3781a8965fbc738a497532a19c", 0x9a}, {&(0x7f0000000980)="159cc5830a4a40545f75eb2f5956263657180b82fb65ff7cd35b40fa9bc4aa43b68ff18d86758e4d479cdfd50bc30367bfa7d6de108db69ddbfd14626a0a18bab04e6b2234b8f7e0db5e836c82eae5522601efad5d9d608c06ebf831b2b6f200a3a9b14ce521c0658f6d765379d50708a6001e5a2f600df7667a7a24b69889578129fdc6523c50b6abe91c9614a60ac3fc46b1316759447d5f9dda2685e1a51fb3773baee8", 0xa5}], 0x2, &(0x7f0000000800)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x18}, 0x4000844)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
socket$alg(0x26, 0x5, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x44, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6775}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffd0c}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xa459}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xc}]}]}, 0x7c}}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000580)={<r3=>r2, 0xff, 0x4, 0x400})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1, <r4=>0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={r0, <r5=>0xffffffffffffffff}, 0x4)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x11, 0x22, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000b000000000000000500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018350000030000000000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x2}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd5, &(0x7f0000000200)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000002c0), &(0x7f0000000340), 0x8, 0x69, 0x8, 0x8, &(0x7f0000000380)}}, 0x10)

1.278405903s ago: executing program 1 (id=3096):
r0 = gettid()
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0)
close(r2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r0}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0)
gettid() (async)
socket(0x10, 0x803, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) (async)
close(r2) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r0}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) (async)

1.156252214s ago: executing program 0 (id=3097):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={0x1, <r2=>0xffffffffffffffff}, 0x4)
ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000740))
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r3, &(0x7f0000000580), 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1, <r6=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20)
pipe(&(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
splice(r7, 0x0, r8, &(0x7f00000002c0), 0x6, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', <r10=>0x0})
setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000100)={r10, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10)
setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000280)={r10, 0x2, 0x6, @local}, 0x10)
r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0), 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="180000008100000000000000850a000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018330000020000000000000000000000b58bc0ff1000000018180000", @ANYRES32=r5, @ANYBLOB="0000000000000000954a0000010000001834000004000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000400000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000950000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf910000feff0000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0xfffffff8, 0xaf, &(0x7f0000000500)=""/175, 0x41000, 0x60, '\x00', r10, 0x25, r11, 0x8, &(0x7f0000000600)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r12=>0xffffffffffffffff]}}], 0x18}, 0x2000)
ioctl$sock_inet_tcp_SIOCINQ(r12, 0x541b, 0x0)

1.153869869s ago: executing program 3 (id=3098):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close(r0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000140)={0x1, 0x2, 0x1000, 0x4e, &(0x7f0000000040)="9552d51a37125faaec62681777869a70c06e699e8b08f193a8c2b6279eeb4d9032e19c7883d72bdea1c0f5aa3c33532e59d4733a9d30fd36aa243e978670009b380bbe57baa61e8b39fbc8d273f4", 0x5f, 0x0, &(0x7f00000000c0)="d3cf7f4f0a660acad992628cf2aef8f83c71d8b6398d9bc48155208de51897ef33c170ead7a23148f9421b88c3aa7178d026b907ef49fa4bff2476e85b51823e64467555e624d9e6146e336706f134fb3dddbd7e44c15e008bb7d10e9bf464"})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={<r1=>r0, 0xfff, 0x101, 0x2})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0)
sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040001}, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
getsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000340), &(0x7f0000000380)=0x4)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r5, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240488c5}, 0x40000)
syz_genetlink_get_family_id$devlink(&(0x7f0000000540), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000540), 0xffffffffffffffff)
close(0xffffffffffffffff)
bind$rose(r1, &(0x7f0000000580)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x40)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80020280}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r2, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@pci={{0x8}, {0x11}}]}, 0x30}}, 0x8003) (async)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80020280}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r2, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@pci={{0x8}, {0x11}}]}, 0x30}}, 0x8003)
ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000700)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e21, @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000006c0)='veth1_vlan\x00', 0xff, 0x6})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0)
recvmmsg$unix(r1, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f00000007c0)=""/101, 0x65}, {&(0x7f0000000840)=""/130, 0x82}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/190, 0xbe}, {&(0x7f00000019c0)=""/236, 0xec}, {&(0x7f0000001ac0)=""/112, 0x70}, {&(0x7f0000001b40)=""/107, 0x6b}, {&(0x7f0000001bc0)=""/190, 0xbe}, {&(0x7f0000001c80)=""/37, 0x25}, {&(0x7f0000001cc0)=""/158, 0x9e}], 0xa, &(0x7f0000001e40)}}, {{0x0, 0x0, &(0x7f0000004380)=[{&(0x7f0000001e80)=""/228, 0xe4}, {&(0x7f0000001f80)=""/123, 0x7b}, {&(0x7f0000002000)=""/145, 0x91}, {&(0x7f00000020c0)=""/31, 0x1f}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/151, 0x97}, {&(0x7f00000031c0)=""/130, 0x82}, {&(0x7f0000003280)=""/4096, 0x1000}, {&(0x7f0000004280)=""/58, 0x3a}, {&(0x7f00000042c0)=""/144, 0x90}], 0xa, &(0x7f0000004440)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000004500), 0x6e, &(0x7f00000045c0)=[{&(0x7f0000004580)=""/10, 0xa}], 0x1, &(0x7f0000004600)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}}], 0x3, 0x100, &(0x7f00000047c0)) (async)
recvmmsg$unix(r1, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f00000007c0)=""/101, 0x65}, {&(0x7f0000000840)=""/130, 0x82}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/190, 0xbe}, {&(0x7f00000019c0)=""/236, 0xec}, {&(0x7f0000001ac0)=""/112, 0x70}, {&(0x7f0000001b40)=""/107, 0x6b}, {&(0x7f0000001bc0)=""/190, 0xbe}, {&(0x7f0000001c80)=""/37, 0x25}, {&(0x7f0000001cc0)=""/158, 0x9e}], 0xa, &(0x7f0000001e40)}}, {{0x0, 0x0, &(0x7f0000004380)=[{&(0x7f0000001e80)=""/228, 0xe4}, {&(0x7f0000001f80)=""/123, 0x7b}, {&(0x7f0000002000)=""/145, 0x91}, {&(0x7f00000020c0)=""/31, 0x1f}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/151, 0x97}, {&(0x7f00000031c0)=""/130, 0x82}, {&(0x7f0000003280)=""/4096, 0x1000}, {&(0x7f0000004280)=""/58, 0x3a}, {&(0x7f00000042c0)=""/144, 0x90}], 0xa, &(0x7f0000004440)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, <r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff, <r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [<r11=>0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [<r13=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r14=>0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000004500), 0x6e, &(0x7f00000045c0)=[{&(0x7f0000004580)=""/10, 0xa}], 0x1, &(0x7f0000004600)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}}], 0x3, 0x100, &(0x7f00000047c0))
recvfrom(r12, &(0x7f0000004800)=""/251, 0xfb, 0x20, &(0x7f0000004900)=@sco={0x1f, @none}, 0x80) (async)
recvfrom(r12, &(0x7f0000004800)=""/251, 0xfb, 0x20, &(0x7f0000004900)=@sco={0x1f, @none}, 0x80)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f0000004980)) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f0000004980)={0x0, ""/256, 0x0, 0x0, <r15=>0x0})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r10, 0x5000943f, &(0x7f0000004c00)={{r14}, r15, 0x0, @inherit={0x50, &(0x7f0000004b80)={0x0, 0x1, 0xfffffffffffffffb, 0x0, {0x35, 0x9, 0x30ce, 0x1, 0x7}, [0xf]}}, @name="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"})
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x10, r7, 0x3a86c000)
syz_genetlink_get_family_id$tipc2(&(0x7f0000005c40), r11) (async)
r16 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005c40), r11)
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000005f00)={&(0x7f0000005c00)={0x10, 0x0, 0x0, 0x1cbd956329ad04b5}, 0xc, &(0x7f0000005ec0)={&(0x7f0000005c80)={0x234, r16, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x108, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff21}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7a67f556}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}, @TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "fb8bad15880360559ab5edbf9c440cd6ded8c415"}}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "0f35c8ae2cf897901a011dd32613e383eecf6d3e3f5e0b62294292a88a8ac87203"}}]}]}, 0x234}}, 0x20000810)
ioctl$FS_IOC_GETVERSION(r9, 0x80087601, &(0x7f0000005f40)) (async)
ioctl$FS_IOC_GETVERSION(r9, 0x80087601, &(0x7f0000005f40))
sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f0000006080)={&(0x7f0000005f80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000006040)={&(0x7f0000005fc0)={0x60, r4, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x24}, @NL80211_ATTR_REG_RULES={0x40, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6b}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffff8000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xa}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x60}}, 0x4000081)
r17 = syz_genetlink_get_family_id$mptcp(&(0x7f0000006100), r8)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r13, &(0x7f0000006240)={&(0x7f00000060c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000006200)={&(0x7f0000006140)={0xa0, r17, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7ff}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000810}, 0x44000) (async)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r13, &(0x7f0000006240)={&(0x7f00000060c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000006200)={&(0x7f0000006140)={0xa0, r17, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7ff}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000810}, 0x44000)

980.582712ms ago: executing program 3 (id=3100):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x401, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6, 0x3, {0x81}}]}, 0x1c}}, 0x0)

976.358988ms ago: executing program 4 (id=3101):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0xf0400000, 0x0, 0x0, 0xfffffffe, 0x2007}, 0x14) (async)
r3 = socket(0x400000000010, 0x3, 0x0) (async)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
recvmsg$kcm(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) (async)
sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xe}, {&(0x7f0000000300)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b656a3ce904f6e6b788ba283f1cae74f53bc49b63326f6842f6458ea5c6592316c9237b2bb3c1209001e002076464a8e1a09d8d40ae817d5eb783eaa347bd8a1d1ff9166afda05c2ccaacb22a8e354be48090088d3fd57c0777800"/170, 0xaa}], 0x2}, 0x0)

965.414ms ago: executing program 1 (id=3102):
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x4, 0x0, 0x0, 0x1}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c7000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)

856.231003ms ago: executing program 2 (id=3103):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x40000, @private0, 0x9}, 0x1c)
syz_emit_ethernet(0xc0, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @dccp={{0x18, 0x4, 0x2, 0x9, 0xb2, 0x66, 0x0, 0xd, 0x21, 0x0, @local, @rand_addr=0x64010100, {[@cipso={0x86, 0x4a, 0x3, [{0x0, 0x2}, {0x6, 0x10, "d9139ac4f7bf0122a4a6288c059e"}, {0x6, 0x12, "8564218e773a6250d01a502558d21358"}, {0x7, 0xb, "e8b117df20c37a904c"}, {0x6, 0xc, "f1082c1d6bf13e07a8c0"}, {0x2, 0x6, "c0385fdf"}, {0x6, 0x3, '}'}]}]}}, {{0x4e21, 0x4e24, 0x4, 0x1, 0x7, 0x0, 0x0, 0x7, 0x0, "22992e", 0x0, "b25fa9"}, "aeecb564a302d193fb0340a0f034b7d7e2a55f87b003e58eed50bb0828764fc093994f28988b7d13dbf76b8e33df6af5412567e4e8497c1494e2f29890c789016b3a"}}}}}, &(0x7f0000000000)={0x0, 0x3, [0xd16, 0xf16, 0xd8e, 0x6c9]})
listen(r1, 0x3)
syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x40, 0x10, 0x401, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc}]}}}]}, 0x40}}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000180)=[@timestamp, @timestamp, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x0, 0x2}, @sack_perm], 0x6)
socket$inet_udp(0x2, 0x2, 0x0) (async)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) (async)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x40000, @private0, 0x9}, 0x1c) (async)
syz_emit_ethernet(0xc0, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @dccp={{0x18, 0x4, 0x2, 0x9, 0xb2, 0x66, 0x0, 0xd, 0x21, 0x0, @local, @rand_addr=0x64010100, {[@cipso={0x86, 0x4a, 0x3, [{0x0, 0x2}, {0x6, 0x10, "d9139ac4f7bf0122a4a6288c059e"}, {0x6, 0x12, "8564218e773a6250d01a502558d21358"}, {0x7, 0xb, "e8b117df20c37a904c"}, {0x6, 0xc, "f1082c1d6bf13e07a8c0"}, {0x2, 0x6, "c0385fdf"}, {0x6, 0x3, '}'}]}]}}, {{0x4e21, 0x4e24, 0x4, 0x1, 0x7, 0x0, 0x0, 0x7, 0x0, "22992e", 0x0, "b25fa9"}, "aeecb564a302d193fb0340a0f034b7d7e2a55f87b003e58eed50bb0828764fc093994f28988b7d13dbf76b8e33df6af5412567e4e8497c1494e2f29890c789016b3a"}}}}}, &(0x7f0000000000)={0x0, 0x3, [0xd16, 0xf16, 0xd8e, 0x6c9]}) (async)
listen(r1, 0x3) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x40, 0x10, 0x401, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc}]}}}]}, 0x40}}, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000180)=[@timestamp, @timestamp, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x0, 0x2}, @sack_perm], 0x6) (async)

760.79482ms ago: executing program 1 (id=3104):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=@updpolicy={0x124, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x8, 0x40800000000000, 0x800000000000002}}, [@sec_ctx={0x6c, 0x8, {0x68, 0x8, 0x0, 0x9, 0x60, "fccb8f60f4670cf5f92af28dedbdb4373c20e48d6617c8828f5dda9499b9196ec26390e2c54b3f39a1e89f6d40c2d8906cc63946915c8b18d5072e0c3dddf3ad3f3db7690d1ac4fd251343911f6963b8940244ae1dd13c8c427f65562fdc04d0"}}]}, 0x124}}, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_int(r1, 0x0, 0x1, &(0x7f00000009c0)=0x1234, 0x4)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = gettid()
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000006c0)={{{@in=@private, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f00000007c0)=0xe8)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0, <r5=>0x0}, &(0x7f0000000840)=0xc)
sendmsg$unix(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000180)="85c66986be199ea4717554cea47def604695fef1c882509054e85464c2e82af23fdeaeecdc4a88557f52b3c3", 0x2c}, {&(0x7f00000001c0)="e8169d4b4d4a1ed8867221c16c5a4078dc1f47c7d05ad68f89a01577e41b36c61484ac5f5910f33b16314f87ce758d3d8bac95550cdd78c43418dffcad5a486e", 0x40}, {&(0x7f0000000200)="7a805ede00628b69e09e21953932bcd6877a07b868d8950bc8473ad61b05e5a9c3d311195116a329685b3fe21c48e99ac0b0011f33c8af9ea6199264135356b8a0c984a49cc5fb792dab7eebee26ca561c29b14cace1f228dc11132ba0e8398a1b711cdebfb03aed4b64e417424e75095478f393a54539b9d59149627dd0aa6e5f203703f363fe1db5", 0x89}, {&(0x7f00000002c0)="e8700fa6ee81a545fc69e5e62a5637cd6f2189baddb3edda24d38fccedddba7772003df4e066bde5d163ef3d7a023e06348928506787e03d2c3c188b149246b73d54e9e6613ab279980376b38347425e6fc67ed58b2149", 0x57}, {&(0x7f00000003c0)="6e691a5b1ab3420795ef737aa52efe615ee21b7a2abfdfc87a04546d711287", 0x1f}, {&(0x7f0000000400)="f86414dad904bea83024e70965688fa1ec88f907e644aee91fc71da665f20923ab75f85d6f762953e8c316c702f648958e7b605af25f152167c0c8e9ec4745c65d5c05c37f99af78c1bfce92e05b9373a3214d2953227aa807cddd2be829475224a7a1742007f42e844664aacc7c6572", 0x70}, {&(0x7f0000001f80)="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", 0x1000}, {&(0x7f00000004c0)="2600e18072b5e1b5518ff5537aac8a6c037f583ba9b115ef1f5a939ca8f0ebe538116e340088840c0170e62c957aeae7976ca8456d34673f6bf74b4792b8f1b31451adcfdd204cd9791b2512d43b78f3fbe876381483e555d918bd903c83fb941673b4c91b80007586402fcadfcce8fa65789025ce8de640e9dded6cac48fa00d9af08b36214fa49dd8bfcebc2ecdf1d677360272436ca294f1ccc5bbc2ea4f841a172601041ed09407f51d1b3919fdcb147249d09a9d7e40fba3d1ff7b44f4b7ee0ebc45622f42202e5ea6b6539604074a016458dd3ea8d3f415843621dad682ae4cc3425ac99cad067ac77fdf656f738ede4e4674d83", 0xf7}, {&(0x7f00000005c0)="034c652d343d70885ee136055726d6ae2b76f307099e3994c301e1529a8f99acac6b0e4d984142ddfbda8927c373f4c89d1a11eb32dd4f70", 0x38}], 0x9, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}], 0x20, 0x50}, 0x40801)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@broadcast, @in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

746.879626ms ago: executing program 3 (id=3105):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x0, 0x11}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r2 = socket(0xf, 0x6, 0x6)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x70, r3, 0x300, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x84}, 0x40000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000340)=0x6, 0x4)
socket$inet6(0xa, 0x80003, 0x6)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x101}, 0x1c)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="3de6", 0x2}], 0x1}}], 0x1, 0x48819)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet6(r4, &(0x7f0000000400)="25eed0aee8c79f49b53c108367401019c41e56367aa3f23916ddf42df6a5ca47adc0f14939ee362a401f6425b5933ed45ac2e4089f33e87ea4fa53cb6f37fa25746f5805cefb6f78a3d525962f72cff39e3fd9074e3260c84fdfced1c00ba3c8cfcd6220a22b568b9ea6d0e366394ae3490b19d046c22e484b0aa11954836b45d4047ab5007b7b758a16f51f05661f02e1cc365db0bf3b54c3c468a8b5462008bc5ffb9db10bed599639774620b78184ada2301d9d494c2c7622d859213c2d7cc96412661b8f8afb818669f98776b43d6f8c598c00e43ade1e0808a35608882523edf4820dc6b1de1a71cb3dcec7265acaaeab264a1082660423eaf763e3d5e6756b9d2e4115906f4284e5e11388dae00c59c49d5bdc02592fbd96f69a586c8e6f36af50d6de76993809225f4a7dfbd1e7feee4438420c40ee1587ef9279cba9847f32d185f2405d680fd8776df5edc7c149279dc808c693dab77ec90071fff6b0b63f5eaadf5e2118dbeebbeb235b90b8b1b871af2ebc579d404578310950526b7be662a9d89be66d6a02522e7352357c02c3a56f8ff816331bd070041ba511613602956381e6d78b645d02dbc77a188168b6312a0998fe17cfd2940c8e5d39e5a95c50f8b0cee4a9c145b23997f830c08fe2e8af162363f4e14d78fd1275af0192483de50d521d85ed5dd21e51e9fba69d7c208ae998c914f5a2393f0594abb1228eb6df78d022707d2e705854e20338e898482ced2d8b853d8cd972bf7d2df97c7fbc2fffb60e9ec9335bf4e98c6d53244dabe2d1d038c75476b620b9263bda96ec2c61f3306dfcfb9f023c3c9678e0ef245b8c3de356f4c4dfe2d791e213b592f8106467517bd0eb3be609108ac41507edb9029c1975fe0c08e461b66b0850a9faf160e658fd770266fa0c70deab155084869592563fe0c136728a2999c6a5d40891a0de089cec58b1ffe2d40e44513b3d51c8c34935b75a351d0d7f9049e6e488585c819437a4e7b338cd5772a744fe79a21327f919ef4bdb9936a5dccd353a45e2642b8cad7aea0152de1d15577c37eff9fc206115e1ed9612183f5aa55ba23b2e2b77432f038b3cc3f0c189414de1402b002ba4464448d74fac86d1ab674a4eb3d8b6e8af11ee37145026fdedb952097fa069ddd516a76c8a647c0faf5a47a75a7294b0eba99291457e4614f0e985bd363de3593590e6f303e511220ce37e1e66711dac26dadaa5f26ab172ef6c7a2f53ed66c0813867e1d53e769efafac557c3977836517f216c53625d8752073fed32346d274613fef1f874d71a632a48220978d6efbf4fb938a46777f05b10cc71d1996772e2536a22b171e2cabffb9099e73026e56210a6162140681048fa9e55388619d83278ea60e5421eaade222b61237aae0d6684f19e090d88da58d0f8e0b4725c41bfc94a5a066d842f768d7ecc527ae2f8ed793ef072da9258db0d11d36637c4765afed52049524efb6feaaa3239dcce104e0889fb10e6a4b7923b4932fecafb1add915f673426c5d6fe7f0290ee8df38763c3737a8bdb4e78b64dd66831440a5dc4e14ccbd14a13f1c513773b9daf0e06cab2bf564b57c8145af47cc64a539fa8326467b318b2e8df6b6cec365f53a3745f4a6cc3d5bfcbe3f11f48713a9568b0fda6f5d88c0d889862e9f36c4f2664da2341b2002d340a4ffb524fa4ae475c2de3842e9c10354a8aa5ee08dcd538ebe243cd8f502cc2fca6dfc7e84a9c844a9be36e198b78d7ab7161f2f590b61fdf175035dee46c5620c9c02ea6b2f7b5d1edee27ba642832a64f7f2dd88a80937bf92d187a4a3dda7cc981b1cbd09416c418af48af5cfef16adb3ebf966a2fe7cbfb1a42b20eeea1c5f5406e644c4561d6e7009ae32331b5c372eccd802c962a56a994c793b145523b1c52356ffc8d0eef096851598692ca35f3d458890493a9883a61501d0fbc92d4543fa753a33bc954544a128a0e02d229737ca4432f9e013b4eba209b7b043eafd698bd756bd6c931798b07b7f62852ce7b3e38c6a3e3ce45535a8f383b57d3217881e7a62aa933809a6b0934b5e63f5617337971b515ccf38208be292107c1a83af71f1d5cc93cf96c1baaae648fa360f7a1a51eace114ba9b1a05db6dedd55ffe78a0e028c42346252a4e27d659447083f30850b02acda5903ca7605fcc9f22015f4c9ea924e7055d4d983a2cbb20a53cc4124bb300bbfb2628565fd09c6702b2d6dd15cff149c0fe7404a297500c4ca3186ccf88c7f46e3d6bf138ec31ba901c42e5ad349ff36c1572df21", 0x65a, 0x4000, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/158, 0x9e, 0x1, 0x0}, &(0x7f0000000180)=0x40)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f00000002c0)={0x32, 0xc, 0x1, 0x2e, 0x0, [@mcast1, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @remote, @loopback]}, 0x68)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000003c0)={0x3b, @dev={0xac, 0x14, 0x14, 0x28}, 0x4e21, 0x0, 'ovf\x00', 0x8, 0x401, 0x3d}, 0x2c)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10)

552.412371ms ago: executing program 2 (id=3106):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8], &(0x7f0000003ff6)='GPL\x00', 0x12, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2d}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000001c0)={r2})
sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x20, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={<r4=>0xffffffffffffffff, 0x8001, 0x1eb, 0x4})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xe88, '\x00', r1, r4, 0x1, 0x3}, 0x50)

550.024484ms ago: executing program 4 (id=3107):
close(0xffffffffffffffff)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x310)
r0 = socket(0x2c, 0x80000, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x280040, 0x0)
sendmsg$AUDIT_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3e8, 0x100, 0x70bd2d, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000044)
accept(r0, &(0x7f0000000140)=@nl=@proc, &(0x7f00000001c0)=0x80)
socket$netlink(0x10, 0x3, 0xc)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2)
recvmmsg(r2, &(0x7f0000007600)=[{{&(0x7f0000000280)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)=""/76, 0x4c}], 0x1, &(0x7f00000003c0)=""/251, 0xfb}, 0xdd3d}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000540)=""/71, 0x47}, {&(0x7f00000005c0)=""/73, 0x49}, {&(0x7f0000000640)=""/165, 0xa5}, {&(0x7f0000000700)=""/165, 0xa5}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/231, 0xe7}, {&(0x7f00000018c0)=""/224, 0xe0}, {&(0x7f00000019c0)=""/235, 0xeb}, {&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)}], 0xa}, 0x3}, {{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000001cc0)=""/174, 0xae}, {&(0x7f0000001d80)=""/40, 0x28}, {&(0x7f0000001dc0)=""/84, 0x54}, {&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x5, &(0x7f0000003ec0)=""/226, 0xe2}, 0x8a1b}, {{&(0x7f0000003fc0)=@phonet, 0x80, &(0x7f0000005500)=[{&(0x7f0000004040)=""/130, 0x82}, {&(0x7f0000004100)=""/124, 0x7c}, {&(0x7f0000004180)=""/148, 0x94}, {&(0x7f0000004240)=""/112, 0x70}, {&(0x7f00000042c0)=""/79, 0x4f}, {&(0x7f0000004340)=""/189, 0xbd}, {&(0x7f0000004400)=""/4096, 0x1000}, {&(0x7f0000005400)=""/88, 0x58}, {&(0x7f0000005480)=""/108, 0x6c}], 0x9, &(0x7f00000055c0)=""/169, 0xa9}, 0x5}, {{&(0x7f0000005680)=@pppol2tpv3={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000006dc0)=[{&(0x7f0000005700)=""/223, 0xdf}, {&(0x7f0000005800)=""/212, 0xd4}, {&(0x7f0000005900)=""/206, 0xce}, {&(0x7f0000005a00)=""/145, 0x91}, {&(0x7f0000005ac0)=""/15, 0xf}, {&(0x7f0000005b00)=""/146, 0x92}, {&(0x7f0000005bc0)=""/4096, 0x1000}, {&(0x7f0000006bc0)=""/247, 0xf7}, {&(0x7f0000006cc0)=""/60, 0x3c}, {&(0x7f0000006d00)=""/160, 0xa0}], 0xa, &(0x7f0000006e80)=""/139, 0x8b}, 0x1}, {{&(0x7f0000006f40)=@isdn, 0x80, &(0x7f0000007240)=[{&(0x7f0000006fc0)=""/49, 0x31}, {&(0x7f0000007000)=""/150, 0x96}, {&(0x7f00000070c0)=""/159, 0x9f}, {&(0x7f0000007180)=""/125, 0x7d}, {&(0x7f0000007200)=""/10, 0xa}], 0x5, &(0x7f00000072c0)=""/119, 0x77}, 0x4b8}, {{&(0x7f0000007340)=@hci, 0x80, &(0x7f0000007500)=[{&(0x7f00000073c0)=""/248, 0xf8}, {&(0x7f00000074c0)=""/20, 0x14}], 0x2, &(0x7f0000007540)=""/158, 0x9e}, 0x7}], 0x7, 0x40000040, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
getpeername$packet(r0, &(0x7f0000007800)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000007840)=0x14)
sendmsg$nl_route(r2, &(0x7f0000007900)={&(0x7f00000077c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000078c0)={&(0x7f0000007880)=@ipv6_getnetconf={0x3c, 0x52, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x200}, @NETCONFA_IFINDEX={0x8, 0x1, r5}, @NETCONFA_FORWARDING={0x8, 0x2, 0xdb}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x4}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000005}, 0xc014)
setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000007940)={{0xa, 0x4e22, 0x60, @mcast1, 0x9}, {0xa, 0x4e22, 0x10, @mcast2, 0x6}, 0x1, {[0xfffffffe, 0x8, 0xa2, 0x7fffffff, 0x8, 0x6, 0xc09c, 0x7]}}, 0x5c)
write$cgroup_devices(r2, &(0x7f00000079c0)={'a', ' *:* ', 'rw\x00'}, 0x9)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000007a00)={0x6b2a01b1156c1afb})
r7 = socket$packet(0x11, 0x2, 0x300)
r8 = accept$inet6(r0, &(0x7f0000007a40)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}, &(0x7f0000007a80)=0x1c)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r8, 0x84, 0xc, &(0x7f0000007ac0)=0x6, 0x4)
ioctl$FS_IOC_GETFSLABEL(r7, 0x81009431, &(0x7f0000007b00))
setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000007c00)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x1, "4bf4f3739db49c76b95979d95b95a328c4673d1fb80100ebf2698bc38fb10636", 0x6, 0x0, 0x200, 0xffffffff}, 0x3c)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000007c40)={0x4})
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000007e40)={&(0x7f0000007c80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000007e00)={&(0x7f0000007cc0)={0x110, r3, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x19}, @void, @val={0xc, 0x99, {0x401, 0x6c}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7fffffff}, @NL80211_ATTR_VENDOR_DATA={0xd6, 0xc5, "25c9effa43d1c614f0f888d6b5a989f704810d4beb59da2a975a177834d4b2f829b6020a97386d2f1d5f23845ddb82a0eeee90ed946c7236d072af354191a7737566640ae80dcde0378adec2fda754345d3dc009637bb3324fcd9f10f8641cb146e964da475d2a3e7338d9c7135dc7853894f4f60cbb7a49a0d714afd2d5f4645cf4d1dafcdf246c197354e5d877859c9c58d1ddc891f2868aead221d85419ee22d11298f0319fd3c56a50f944d775c3ffbdd74d9c2369409f0f10a63a57750016726e406fb791cf4a101a46964c1c219e41"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}]}, 0x110}}, 0x10)
getsockname$netlink(r0, &(0x7f0000007e80), &(0x7f0000007ec0)=0xc)
write$cgroup_devices(r2, &(0x7f0000007f00)={'a', ' *:* ', 'w\x00'}, 0x8)
socket$kcm(0x29, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000007f80)=@generic={&(0x7f0000007f40)='./file0\x00', 0x0, 0x18}, 0x18)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000007fc0)={'dvmrp1\x00', @broadcast})

416.164402ms ago: executing program 2 (id=3108):
r0 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$sock_timeval(r1, 0x1, 0xd, &(0x7f0000abaff9)={0x0, 0xea60}, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x4, 0x6, @remote}, 0x14)
sendmmsg$sock(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004874)
syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @broadcast=0xe0000001}, {0x4e21, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x1, 0x0, @void}}}}}}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000100)={&(0x7f0000000040)=""/166, 0xa6, 0xfffffffb, 0x7})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@getchain={0x44, 0x66, 0x100, 0x70bd28, 0x25dfdbfa, {0x0, 0x0, 0x0, r2, {0xfff2, 0x1}, {0x2, 0xd}, {0x0, 0xfff1}}, [{0x8, 0xb, 0x6}, {0x8, 0xb, 0xe1}, {0x8, 0xb, 0x5910}, {0x8, 0xb, 0x3}]}, 0x44}}, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0xc0189436, &(0x7f0000000000))

394.123632ms ago: executing program 4 (id=3109):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2181804a}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_PEER_ADDR6={0x14, 0xb, @private2}, @GTPA_MS_ADDR6={0x14, 0xc, @private0}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000815}, 0x80)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa0, r3, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x2, 0x4}, {0x0, 0x2}, {0x1, 0x3}, {0x7, 0x2}, {0x5, 0x5c}, {0x5, 0x5}, {0x9a, 0x3}], "7231c44f9ca2d3aa"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x3, 0x7}, {0x2e, 0x7}, {0x81, 0x6}, {0x8, 0x7}, {0xf0, 0x4}, {0x4, 0x1}, {0x2, 0x3}, {0x3, 0x5}, {0xa9, 0x7}, {0x9, 0x3}], "9cabd291e6993cd0"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x80, 0x1}, {0x2, 0x1}, {0x2, 0x2}, {0x10, 0x3}, {0xfa}, {}, {0x0, 0x2}, {0x4, 0x3}, {0x2, 0x1}, {0x9, 0x3}], "e0189327a7182ebe"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0xfe, 0x7}, {0x25}], "1a68876484f3411c"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x6, 0x5}, {0x4, 0x5}, {0x7}, {0x7a}, {0x6, 0x6}, {0x6, 0x2}, {0x2, 0x6}, {0xe7, 0x2}, {0x9}], "dc39b255034b937e"}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20040851}, 0x8001)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f00000007c0)={&(0x7f00000003c0)={0x3f8, r3, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x10, 0xcd, [0x2, 0x5, 0x328, 0x200, 0xf655, 0x81]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x102}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x18, 0xcd, [0x8, 0x4, 0xffff, 0x7f, 0x9, 0x1, 0x1, 0xef15, 0x8, 0x8]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1102}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x182}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x385, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x6}, @device_a, @device_b, @from_mac=@device_b, {0x8, 0xc33}, @value=@ver_80211n={0x0, 0x4, 0x1, 0x3, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0x7, @random=0xfffc, 0x0, @void, @void, @val={0x3, 0x1, 0x28}, @void, @val={0x6, 0x2, 0x8001}, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x1, 0x1, 0x10, 0x29}}, [{0xdd, 0xf8, "4fbf71b7c4bc8e61bb3aa4ca1ad1ab54c2ec5f4ce00adda25b6d824746dccbdd7b3e5fa6c0b437f7497e988251b50dd38441d945da410c9cb3e7e1b8bc495708ab8f4ff362f7cfe149584a598dc6ba44c2f1a24299c0e8faf0a6f2f43833345cad8d939a66744eaa94774bb05ba552f5149eaebed23a6ccdc9c8fcc4cc06342be0e9e1a853300bb614f92318b6a29e89be992208fffb4ae9b01613e1b5be233b3abe3accf569a0f62247d659bacf27a6552fafeee6c58e0a759e1d44d4836644552ccf00412d353105bf66c26f3b641dad7c1678713d9ebaef2597c9e10aded0b8a37b6008aca5689961a10bc8578d3ad384da4bf3af9a43"}, {0xdd, 0xe, "e2aaf7ca626871fe3c485f171a7c"}, {0xdd, 0xc7, "6872d12eca3aeb81c5553409693f3332bc60c13dfe14100342cd62bb3c3ae2b52be5cbbb6305567bb6c4f608ad4a1144c2efe8aeae009d2cfbe80c6d9b7f055ff2271291f8540386d38ae787f9335988dd3b7078e5e6a4a34ecd1f90ac7a8da37fa4217ab77a2c19119408b933df18c6d4f9a1621c705663f73532529519fde097e270a72802b75bf0e1dfff66be844352b719b98ffd5f6c8baae78b2f47ea9e5e51e58003a67726e903c6cd1e0d17514579cafa1756f38bd9de46ac3727d2a84883ab37a3d27c"}, {0xdd, 0x23, "fb25548fc6548563bbf4442535b21bad8460abf09d1952ea09a4728a3fd97d5bbf832e"}, {0xdd, 0x57, "cd5b1ed36a88f0251a45365984c8411044a3b878f6083c6f3ec343418599410563fa53663c850a1d2c5af213b3e135f3b4658c41abadb7698c8426ad93db9252d92d7196c407c7b9de6b375dcf1494d3657cbda415f33e"}, {0xdd, 0x3b, "9e838f34bae8f3e37362506a0bc74261eca3c29dfd7359888f3265443285ad2c707bfe2ec2d47f4a819cb91721eccd498c5138cb61697be1cd25a3"}, {0xdd, 0xb9, "a504d2e63977d2b92aeeeb1c3778f51953bfc22957b01712090dfcdcab3140f92d73a5d831223b22d193ad920d9741de9b37ad5a446abd73f7986edf98c615c6c545ac0f7433eb9faf7daf8b20857ad00769ec101e77a87cf623ed7a8d672e34ad66963477bfd252d876254463ac5735421d52e1ca04eaff3ef50174031977d6eaa850abf7a10d1694aae80da4c6097d9d74f54800eb5cb141c71700e253fe7b5bca14e2394baa17fe933544e4260ec01631edc00f35e65baa"}]}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x40080}, 0xc000)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000840)={0x2, 0xb2, "19b2716d653fd6c4e13d7fe3703affc8a43b47bb5cb039f44d7a86e2c250d48fc64c045153bfc5bbc7f20e650c39b15372a3f1e0395c30916c98fb8a4fef2a0dfbf8974229711482811f25d88dd7e16bb1e76952cea3bbfb340fdd7c78edd4b9df95f2c67c615d31a3bdf629ebdbd3403808eb70eee256307809ef19cbf6a550b5315588d2ca49559a3fe28be0209d67b2989949d7c63fe114fdbb5c2517051a29df2bc0d3d665fd010737a7cf24ff8b1bd5"})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000940)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfff2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffa}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000a40)=0x9, 0x4)
recvmsg(r0, &(0x7f0000002040)={&(0x7f0000000a80)=@hci, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000b00)=""/46, 0x2e}, {&(0x7f0000000b40)=""/156, 0x9c}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/198, 0xc6}, {&(0x7f0000001d00)=""/58, 0x3a}, {&(0x7f0000001d40)=""/128, 0x80}, {&(0x7f0000001dc0)=""/207, 0xcf}], 0x7, &(0x7f0000001f40)=""/209, 0xd1}, 0x40000100)
ioctl$sock_netdev_private(r2, 0x89fe, &(0x7f0000002080)="e7012d856d24e8b8842fc4514f04c12cb96e78e5622fdbac564dc9e6e887dfe0bd6a966240c9bbbe69f8d349cb02115bf1a5d19ea9b8c17f433605027749c4534cb281c014a37fa5283d74264c9b54265941a96db780213b53e4a9b83c3deb44e2ae16514bcad4cbd656e6cb904c9d38d021e24042adb311d8c72a34ae0ea1c222b4e33ff1c36ae22ee61854a541984abff505e739cdb06fa4dd258371fc69402533eaf2dda0d4456fe8a5803c1fb99fec4fe11cd41c80a2")
socketpair(0xf, 0x6, 0x8, &(0x7f0000002140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$NFT_BATCH(r7, &(0x7f0000002580)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002540)={&(0x7f00000021c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0x90, 0x12, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_DATA={0x7c, 0x4, 0x0, 0x1, [@NFTA_SECMARK_CTX={0x2f, 0x1, 'system_u:object_r:setrans_initrc_exec_t:s0\x00'}, @NFTA_SECMARK_CTX={0x24, 0x1, 'system_u:object_r:apt_lock_t:s0\x00'}, @NFTA_SECMARK_CTX={0x23, 0x1, 'system_u:object_r:lastlog_t:s0\x00'}]}}, @NFT_MSG_NEWFLOWTABLE={0x3c, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x54, 0x2, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x3c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5b1938e82e3b6701, 0x0, 0xa}}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x100, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xd0, 0x6, "97df77acc4b952b8c435b3d620b1e8f2fb2bfa203595dcfe16f4b961cb68cc5ee0702163354b99b729f9ef3d2f552772595e0ca8b3806ac20d54573aeb519bbfd87f49823a24c77539cc14e39d4183eadcc4781d87fa6637ed681efc9af4a3425ef0778c3a979b1cce2f95e1c9aa18061a37b821071f0007cec889fd4e4ef1b438474adc1ccddb69f548a2ea6d415bc0d56a3c9c06e4ce327bd6e0723962c435c7faaec6d5047ea8bee923f459ccd976b84c0c0d0f7cb3dd8c809d4be1dda70cd896a6c99319bcdac48285c4"}]}, @NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x350}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c040)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f0000002680)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x40, 0x4, 0x8, 0xa03, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6003}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa00}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000026c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x50)
getpeername$packet(r7, &(0x7f00000028c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002900)=0x14)
r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002940), 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002a00)={0x4, <r11=>0x0}, 0x8)
r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002a40)={0x0, 0x8, 0x10}, 0xc)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002a80)={0xffffffffffffffff, <r13=>0xffffffffffffffff}, 0x4)
r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002ac0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50)
r15 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002bc0)=@bpf_lsm={0x1d, 0x11, &(0x7f0000002740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6c}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002800)='GPL\x00', 0x82, 0x6c, &(0x7f0000002840)=""/108, 0x40f00, 0x20, '\x00', r9, 0x1b, r10, 0x8, &(0x7f0000002980)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000029c0)={0x3, 0x1, 0x101, 0xfffffff9}, 0x10, r11, 0x0, 0x1, &(0x7f0000002b40)=[r12, r13, r14], &(0x7f0000002b80)=[{0x2, 0x3, 0x7, 0x1}], 0x10, 0x7}, 0x94)
r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002c80)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x5, '\x00', r9, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002d80)={{r16}, &(0x7f0000002d00), &(0x7f0000002d40)=r15}, 0x20)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000002ec0)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e00)={0x54, r3, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9000}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88a2}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xf}, @device_a, @device_b}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x40000)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002f00)={0x3, 0x4, 0x4, 0xa, 0x0, r13, 0xfffffffb, '\x00', r9, r10, 0x0, 0x1, 0x2}, 0x50)
syz_genetlink_get_family_id$tipc(&(0x7f0000002f80), r6)

240.068344ms ago: executing program 2 (id=3110):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001100050003d8000000dbdf2507000000", @ANYRES32=r2, @ANYBLOB="0002000002200100"], 0x20}}, 0x880)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) (async)
setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) (async)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56551, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x6, 0x1002, 0x0, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE={0x14, 0x6, {0xad1, 0x1, 0x8}}]}}}]}, 0x6c}}, 0x20000000)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendfile(r6, r4, &(0x7f0000000080)=0xcbe7, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) (async)
sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)=ANY=[@ANYBLOB="180000002400010300000000f9c408ef323c94c4b7d86e"], 0x18}, 0x1, 0x0, 0x0, 0x240088c1}, 0x4001)
pipe(&(0x7f0000000000)) (async)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000a40)=ANY=[@ANYBLOB="030000018000000000000021e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000760000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014c5da4de4d92"], 0x90) (async)
setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000a40)=ANY=[@ANYBLOB="030000018000000000000021e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000760000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014c5da4de4d92"], 0x90)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
sendfile(r7, r9, 0x0, 0x7feff000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x2, 0x3, &(0x7f0000001380)=ANY=[], &(0x7f0000001280)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x2) (async)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x2, 0x3, &(0x7f0000001380)=ANY=[], &(0x7f0000001280)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x2)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000000)={r10, 0x1}, 0xc)
r11 = socket$inet6(0xa, 0x1, 0x8010000000000084)
sendmmsg$inet6(r11, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x9}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x15, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40)
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r12, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) (async)
bind$netlink(r12, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
socket$inet6(0xa, 0x3, 0x4) (async)
r13 = socket$inet6(0xa, 0x3, 0x4)
setsockopt$inet6_IPV6_XFRM_POLICY(r13, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x5}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}}, 0xe8) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r13, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x5}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}}, 0xe8)

59.961244ms ago: executing program 2 (id=3111):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000040)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/100, 0x64}, {&(0x7f0000000100)=""/33, 0x21}], 0x2, 0x6, 0x8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)={0x14, 0x40, 0x107, 0x0, 0x25dfdbfd, {0x4, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x8004)

0s ago: executing program 2 (id=3112):
r0 = socket(0x10, 0x80003, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000040), 0x10)
listen(r2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0xd, &(0x7f0000000700)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe95b}}], &(0x7f0000000800)='syzkaller\x00', 0xfffffffb, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x90)
accept4(r2, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffde7, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0)

kernel console output (not intermixed with test programs):

 `syz.1.610'.
[  151.372751][ T8289] netlink: 20 bytes leftover after parsing attributes in process `syz.1.620'.
[  151.526862][ T8297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.623'.
[  151.735261][ T8306] netlink: 165 bytes leftover after parsing attributes in process `syz.1.627'.
[  151.995511][ T8322] netlink: 'syz.1.633': attribute type 5 has an invalid length.
[  152.015115][ T8322] syzkaller0: entered promiscuous mode
[  152.020679][ T8322] syzkaller0: entered allmulticast mode
[  152.188439][ T8330] netlink: 'syz.0.636': attribute type 1 has an invalid length.
[  152.254251][ T8330] bond1: (slave bridge3): making interface the new active one
[  152.262924][ T8330] bond1: (slave bridge3): Enslaving as an active interface with an up link
[  152.390640][ T8342] Bluetooth: MGMT ver 1.23
[  152.530282][ T8352] netlink: 332 bytes leftover after parsing attributes in process `syz.0.641'.
[  152.846420][ T8377] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  152.868583][ T8377] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  153.218494][ T8409] netlink: 'syz.3.657': attribute type 2 has an invalid length.
[  153.266114][ T8409] syz.3.657 uses old SIOCAX25GETINFO
[  153.280603][ T8410] netlink: 84 bytes leftover after parsing attributes in process `syz.1.655'.
[  153.298106][ T8409] netlink: 'syz.3.657': attribute type 16 has an invalid length.
[  153.306035][ T8409] netlink: 20 bytes leftover after parsing attributes in process `syz.3.657'.
[  153.330787][   T30] audit: type=1107 audit(1757277476.096:2): pid=8411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹�5ž÷Œ•%èÍUýAÊ�ÃËÙ ë0ä�™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›'
[  153.360184][   T30] audit: type=1107 audit(1757277476.106:3): pid=8411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹�5ž÷Œ•%èÍUýAÊ�ÃËÙ ë0ä�™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›'
[  153.458313][ T8421] netlink: 20 bytes leftover after parsing attributes in process `syz.2.660'.
[  153.504969][ T8424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.661'.
[  153.653915][ T8422] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.740634][ T8434] netlink: 'syz.4.662': attribute type 3 has an invalid length.
[  153.764616][ T8434] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  153.772178][ T8422] syzkaller0: entered promiscuous mode
[  153.779073][ T8422] syzkaller0: entered allmulticast mode
[  153.794175][ T8422] tipc: Resetting bearer <eth:syzkaller0>
[  153.829701][ T8420] tipc: Resetting bearer <eth:syzkaller0>
[  153.887067][ T8440] netlink: 16 bytes leftover after parsing attributes in process `syz.3.666'.
[  154.673918][ T5950] tipc: Node number set to 2059274185
[  154.688766][ T8462] ieee802154 phy0 wpan0: encryption failed: -22
[  154.813277][ T8467] netlink: 'syz.0.671': attribute type 10 has an invalid length.
[  154.871386][ T8468] netlink: 'syz.0.671': attribute type 10 has an invalid length.
[  155.758787][ T8420] tipc: Disabling bearer <eth:syzkaller0>
[  155.775409][ T8437] ipvlan0: entered promiscuous mode
[  155.806320][ T8469] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  156.172999][ T8510] netlink: 'syz.1.679': attribute type 1 has an invalid length.
[  156.230892][ T8510] netlink: 'syz.1.679': attribute type 1 has an invalid length.
[  156.258211][ T8512] netlink: 24 bytes leftover after parsing attributes in process `syz.3.681'.
[  156.269465][ T8506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.680'.
[  156.445532][ T8541] netlink: 132 bytes leftover after parsing attributes in process `syz.3.683'.
[  156.706183][ T8548] netlink: 16 bytes leftover after parsing attributes in process `syz.3.686'.
[  156.725388][ T8548] netlink: 'syz.3.686': attribute type 4 has an invalid length.
[  156.899766][ T8556] team0: Mode changed to "broadcast"
[  156.942211][ T8558] netdevsim netdevsim0: Direct firmware load for 	 failed with error -2
[  156.980153][ T8558] netdevsim netdevsim0: Falling back to sysfs fallback for: 	
[  157.028266][ T8561] !€ÿ: renamed from bond_slave_0 (while UP)
[  157.136695][ T8571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.695'.
[  157.379892][ T8578] netlink: 260 bytes leftover after parsing attributes in process `syz.4.698'.
[  157.478365][ T8587] team0: Device gtp0 is of different type
[  157.808172][ T8603] netlink: 'syz.4.704': attribute type 83 has an invalid length.
[  157.833292][ T8605] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  157.864059][ T8605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.706'.
[  157.898238][ T8605] tc_dump_action: action bad kind
[  157.934730][ T8611] netlink: 36 bytes leftover after parsing attributes in process `syz.3.705'.
[  158.215155][ T8622] netlink: 24 bytes leftover after parsing attributes in process `syz.0.711'.
[  158.279545][ T8626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  158.361243][ T8642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  158.468911][ T8648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.716'.
[  158.620633][ T8653] netlink: 'syz.0.719': attribute type 1 has an invalid length.
[  159.140843][ T8694] bridge: RTM_NEWNEIGH with invalid state 0x38
[  159.338143][ T8704] netlink: 'syz.4.734': attribute type 30 has an invalid length.
[  159.364146][ T8704] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  159.388767][ T8704] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  159.445343][ T8712] 8021q: adding VLAN 0 to HW filter on device bond3
[  159.455391][ T8704] 
: renamed from veth0_vlan (while UP)
[  159.610295][ T8714] 8021q: adding VLAN 0 to HW filter on device bond3
[  159.620019][ T8714] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  159.633297][ T8714] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  160.513382][ T8765] netlink: 'syz.4.748': attribute type 1 has an invalid length.
[  160.561239][ T8765] netlink: 'syz.4.748': attribute type 1 has an invalid length.
[  161.266571][ T8798] __nla_validate_parse: 14 callbacks suppressed
[  161.266591][ T8798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.755'.
[  161.386620][ T8802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.757'.
[  161.412976][ T8802] erspan0: entered promiscuous mode
[  161.535835][ T8809] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  161.750874][ T8823] netlink: 'syz.3.765': attribute type 10 has an invalid length.
[  161.776240][ T8823] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  161.818782][ T8828] netlink: 52 bytes leftover after parsing attributes in process `syz.4.767'.
[  161.869785][ T8831] netlink: 'syz.1.768': attribute type 1 has an invalid length.
[  161.988672][ T8825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.766'.
[  162.009168][ T8838] bond4: (slave bridge3): making interface the new active one
[  162.018531][ T8838] bond4: (slave bridge3): Enslaving as an active interface with an up link
[  162.085936][ T8843] netlink: 72 bytes leftover after parsing attributes in process `syz.3.770'.
[  162.129741][ T8843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.770'.
[  162.459267][ T8864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.773'.
[  163.005867][ T8889] netlink: 132 bytes leftover after parsing attributes in process `syz.1.779'.
[  163.155641][ T8894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.782'.
[  163.178822][ T8899] netlink: 'syz.0.780': attribute type 1 has an invalid length.
[  163.223031][ T8899] netlink: 'syz.0.780': attribute type 1 has an invalid length.
[  163.231317][ T8899] netlink: 216 bytes leftover after parsing attributes in process `syz.0.780'.
[  163.683152][ T8936] tipc: Started in network mode
[  163.688470][ T8936] tipc: Node identity 080211000001, cluster identity 4711
[  163.700183][ T8936] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.964253][ T8955] bridge4: entered promiscuous mode
[  163.970064][ T8955] bridge4: entered allmulticast mode
[  164.192999][ T8973] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.203713][ T8973] tipc: Resetting bearer <eth:syzkaller0>
[  164.216744][ T8971] tipc: Disabling bearer <eth:syzkaller0>
[  164.359541][ T8981] netlink: 'syz.0.809': attribute type 12 has an invalid length.
[  164.375385][ T8981] netlink: 'syz.0.809': attribute type 29 has an invalid length.
[  164.384155][ T8981] netlink: 'syz.0.809': attribute type 2 has an invalid length.
[  164.396491][ T8981] netlink: 'syz.0.809': attribute type 3 has an invalid length.
[  164.408736][ T8981] netlink: 'syz.0.809': attribute type 1 has an invalid length.
[  164.611234][ T8991] netlink: 'syz.1.814': attribute type 10 has an invalid length.
[  164.632950][ T8991] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.641020][ T8991] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.658237][ T8991] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.665532][ T8991] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.673181][ T8991] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.680470][ T8991] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.702833][ T5910] tipc: Node number set to 134418688
[  164.709023][ T8991] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  164.739471][ T8999] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  166.205593][ T9085] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  166.213212][ T9085] IPv6: NLM_F_CREATE should be set when creating new route
[  166.221339][ T9085] IPv6: NLM_F_CREATE should be set when creating new route
[  166.228657][ T9085] IPv6: NLM_F_CREATE should be set when creating new route
[  166.259256][ T9085] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  166.319366][ T9089] __nla_validate_parse: 10 callbacks suppressed
[  166.319385][ T9089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.844'.
[  166.330442][ T9091] netlink: 192 bytes leftover after parsing attributes in process `syz.2.845'.
[  166.435480][ T9094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.846'.
[  166.483437][ T9095] netlink: 12 bytes leftover after parsing attributes in process `syz.0.846'.
[  166.486062][ T9100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.846'.
[  166.514783][ T9099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.848'.
[  166.525213][ T9099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.848'.
[  166.575350][ T6798] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  166.584563][ T6798] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  166.605445][ T9094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.846'.
[  166.614968][ T6798] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  166.622175][ T9095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.846'.
[  166.631973][ T6798] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  166.763234][ T9105] netlink: 68 bytes leftover after parsing attributes in process `syz.1.849'.
[  167.182269][ T9134] validate_nla: 4 callbacks suppressed
[  167.182288][ T9134] netlink: 'syz.3.860': attribute type 1 has an invalid length.
[  167.683093][ T9171] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  167.745628][ T9174] nbd: must specify at least one socket
[  168.734397][ T9230] bond1: entered promiscuous mode
[  168.739645][ T9230] bond1: entered allmulticast mode
[  168.745475][ T9230] 8021q: adding VLAN 0 to HW filter on device bond1
[  168.837902][ T9230] bond1 (unregistering): Released all slaves
[  169.009883][ T9247] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  169.284744][ T9267] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  169.320020][ T9271] netlink: 'syz.0.896': attribute type 1 has an invalid length.
[  194.446611][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  222.118373][ T9304] team0: Device gtp1 is up. Set it down before adding it as a team port
[  222.218547][ T9300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  222.297502][ T9300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  222.386666][ T9300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  222.776559][ T9356] __nla_validate_parse: 15 callbacks suppressed
[  222.776581][ T9356] netlink: 36 bytes leftover after parsing attributes in process `syz.4.920'.
[  222.821760][ T9355] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  222.835130][ T9358] netlink: 52 bytes leftover after parsing attributes in process `syz.4.920'.
[  223.409758][ T9380] block nbd1: not configured, cannot reconfigure
[  223.428632][ T9380] netlink: 56 bytes leftover after parsing attributes in process `syz.1.927'.
[  223.651605][ T9397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.932'.
[  224.104322][ T9422] netlink: 11 bytes leftover after parsing attributes in process `syz.2.941'.
[  224.131136][ T9422] netlink: 11 bytes leftover after parsing attributes in process `syz.2.941'.
[  224.315555][ T9436] netlink: 'syz.1.947': attribute type 11 has an invalid length.
[  224.351178][ T9436] netlink: 224 bytes leftover after parsing attributes in process `syz.1.947'.
[  224.415317][ T9439] netlink: 72 bytes leftover after parsing attributes in process `syz.2.948'.
[  224.551584][ T9446] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  224.583761][ T9450] mac80211_hwsim hwsim3 ÿ
: renamed from wlan1
[  224.607110][ T9454] netlink: 24 bytes leftover after parsing attributes in process `syz.2.953'.
[  224.806228][ T9461] IPVS: set_ctl: invalid protocol: 108 224.0.0.1:20003
[  224.953219][ T9470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.959'.
[  225.273743][ T9491] openvswitch: netlink: IPv6 tunnel dst address is zero
[  225.499133][ T9506] tipc: Enabling <eth:lo> not permitted
[  225.518683][ T9506] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  225.579085][ T9509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  225.727827][ T9509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  225.770335][ T9525] netlink: 'syz.3.979': attribute type 1 has an invalid length.
[  225.868398][ T9525] 8021q: adding VLAN 0 to HW filter on device bond1
[  225.881037][ T9530] netlink: 'syz.3.979': attribute type 1 has an invalid length.
[  226.906367][ T9573] netlink: 'syz.0.993': attribute type 19 has an invalid length.
[  227.095853][ T9553] netlink: 'syz.3.985': attribute type 2 has an invalid length.
[  227.412062][ T9604] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20001
[  227.867497][ T9628] __nla_validate_parse: 5 callbacks suppressed
[  227.867516][ T9628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1007'.
[  228.374658][ T9651] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1016'.
[  228.402379][ T9651] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5)
[  228.445629][ T9657] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1016'.
[  228.469498][ T9657] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1016'.
[  228.492290][ T9657] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1016'.
[  228.509701][ T9657] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1016'.
[  228.531259][ T9657] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1016'.
[  228.545062][ T9657] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1016'.
[  228.554584][ T9657] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1016'.
[  228.564026][ T9657] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1016'.
[  228.777533][ T9678] syzkaller1: entered promiscuous mode
[  228.785108][ T9678] syzkaller1: entered allmulticast mode
[  228.804832][ T9678] netlink: 'syz.0.1025': attribute type 21 has an invalid length.
[  228.816750][ T9678] IPv6: NLM_F_CREATE should be specified when creating new route
[  228.827688][ T9678] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  228.835039][ T9678] IPv6: NLM_F_CREATE should be set when creating new route
[  228.842398][ T9678] IPv6: NLM_F_CREATE should be set when creating new route
[  228.849653][ T9678] IPv6: NLM_F_CREATE should be set when creating new route
[  229.270548][ T9694] netlink: 'syz.4.1030': attribute type 12 has an invalid length.
[  229.420698][ T9710] sit2: entered promiscuous mode
[  229.431657][ T9710] sit2: entered allmulticast mode
[  229.805566][ T9730] rdma_op ffff88807c3749f0 conn xmit_rdma 0000000000000000
[  229.838319][ T9732] netlink: 'syz.1.1042': attribute type 2 has an invalid length.
[  229.848893][ T9732] netlink: 'syz.1.1042': attribute type 1 has an invalid length.
[  229.925382][ T9738] netlink: 'syz.1.1042': attribute type 142 has an invalid length.
[  230.054241][ T9742] tc_dump_action: action bad kind
[  230.154026][ T5186] block nbd0: Receive control failed (result -32)
[  230.471278][ T9771] netlink: 'syz.2.1053': attribute type 10 has an invalid length.
[  230.802900][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  230.817990][ T9788] block nbd1: Unsupported socket: shutdown callout must be supported.
[  230.978376][ T9793] syzkaller0: entered promiscuous mode
[  230.999667][ T9793] syzkaller0: entered allmulticast mode
[  231.024815][ T9793] netlink: 'syz.2.1060': attribute type 21 has an invalid length.
[  231.054496][ T9793] erspan0: entered allmulticast mode
[  231.214657][ T9806] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1
[  231.643417][ T5860] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.887464][ T9841] netlink: 'syz.0.1076': attribute type 12 has an invalid length.
[  232.014436][ T9849] syzkaller0: entered promiscuous mode
[  232.032302][ T9849] syzkaller0: entered allmulticast mode
[  232.217744][ T9859] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  232.308622][ T9864] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  233.138451][ T9909] __nla_validate_parse: 37 callbacks suppressed
[  233.138471][ T9909] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1100'.
[  233.220234][ T9914] team_slave_0: mtu greater than device maximum
[  233.357881][ T9923] netlink: 'syz.1.1104': attribute type 1 has an invalid length.
[  233.454429][ T9927] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1104'.
[  233.459123][ T9923] 8021q: adding VLAN 0 to HW filter on device bond5
[  233.500864][ T9923] bond5: (slave wlan0): Opening slave failed
[  233.539660][ T9923] vlan2: entered allmulticast mode
[  233.550957][ T9923] veth1: entered allmulticast mode
[  234.333589][ T9976] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1120'.
[  234.359436][ T9976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1120'.
[  234.369455][ T9976] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1120'.
[  234.411982][ T9976] netlink: 'syz.2.1120': attribute type 3 has an invalid length.
[  234.440533][ T9976] netlink: 'syz.2.1120': attribute type 2 has an invalid length.
[  234.467920][ T9976] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1120'.
[  234.719844][ T9997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1127'.
[  234.789069][T10001] Bluetooth: MGMT ver 1.23
[  234.814325][T10000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1129'.
[  234.957529][T10005] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1131'.
[  235.000089][T10007] FAULT_INJECTION: forcing a failure.
[  235.000089][T10007] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  235.019331][T10010] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  235.041968][T10007] CPU: 0 UID: 0 PID: 10007 Comm: syz.1.1133 Not tainted syzkaller #0 PREEMPT(full) 
[  235.041997][T10007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  235.042017][T10007] Call Trace:
[  235.042026][T10007]  <TASK>
[  235.042035][T10007]  dump_stack_lvl+0x189/0x250
[  235.042066][T10007]  ? __pfx____ratelimit+0x10/0x10
[  235.042097][T10007]  ? __pfx_dump_stack_lvl+0x10/0x10
[  235.042121][T10007]  ? __pfx__printk+0x10/0x10
[  235.042165][T10007]  should_fail_ex+0x414/0x560
[  235.042199][T10007]  _copy_to_user+0x31/0xb0
[  235.042226][T10007]  sctp_getsockopt_reconfig_supported+0x3de/0x520
[  235.042253][T10007]  ? __pfx_sctp_getsockopt_reconfig_supported+0x10/0x10
[  235.042287][T10007]  sctp_getsockopt+0x58b/0xb60
[  235.042307][T10007]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  235.042340][T10007]  do_sock_getsockopt+0x36f/0x450
[  235.042366][T10007]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  235.042395][T10007]  ? write_ibpb+0x30/0x40
[  235.042413][T10007]  ? __fget_files+0x3a0/0x420
[  235.042431][T10007]  ? __fget_files+0x2a/0x420
[  235.042457][T10007]  __x64_sys_getsockopt+0x1a5/0x250
[  235.042478][T10007]  ? write_ibpb+0x30/0x40
[  235.042498][T10007]  ? write_ibpb+0x30/0x40
[  235.042521][T10007]  do_syscall_64+0xfa/0x3b0
[  235.042538][T10007]  ? lockdep_hardirqs_on+0x9c/0x150
[  235.042567][T10007]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.042588][T10007]  ? clear_bhb_loop+0x60/0xb0
[  235.042613][T10007]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.042633][T10007] RIP: 0033:0x7f86a138ebe9
[  235.042656][T10007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  235.042672][T10007] RSP: 002b:00007f86a21b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  235.042698][T10007] RAX: ffffffffffffffda RBX: 00007f86a15c5fa0 RCX: 00007f86a138ebe9
[  235.042725][T10007] RDX: 0000000000000075 RSI: 0000000000000084 RDI: 0000000000000003
[  235.042736][T10007] RBP: 00007f86a21b1090 R08: 0000200000000080 R09: 0000000000000000
[  235.042748][T10007] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[  235.042760][T10007] R13: 00007f86a15c6038 R14: 00007f86a15c5fa0 R15: 00007ffdad5a9768
[  235.042793][T10007]  </TASK>
[  235.310544][T10015] netlink: 'syz.0.1136': attribute type 11 has an invalid length.
[  235.447650][T10027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1141'.
[  235.471378][T10027] netlink: 'syz.2.1141': attribute type 1 has an invalid length.
[  235.489476][T10022] pim6reg1: entered promiscuous mode
[  235.495979][T10022] pim6reg1: entered allmulticast mode
[  235.857520][T10058] nbd: nbd0 already in use
[  235.943174][T10065] IPVS: length: 147 != 4480
[  237.164957][T10140] vlan2: entered promiscuous mode
[  237.591136][T10179] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16
[  237.758256][T10192] (unnamed net_device) (uninitialized): (slave gre0): Device is not bonding slave
[  237.779427][T10192] (unnamed net_device) (uninitialized): option active_slave: invalid value (gre0)
[  237.833128][T10194] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  237.941698][T10202] netlink: 'syz.2.1194': attribute type 13 has an invalid length.
[  238.160340][T10211] __nla_validate_parse: 13 callbacks suppressed
[  238.160360][T10211] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1196'.
[  238.256864][T10218] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1196'.
[  238.289074][T10211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1196'.
[  238.338282][T10227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1196'.
[  238.358948][T10218] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1196'.
[  238.558305][T10231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1204'.
[  238.833379][T10254] netlink: 'syz.0.1210': attribute type 1 has an invalid length.
[  239.012875][T10263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1210'.
[  239.259132][T10250] netlink: 'syz.2.1206': attribute type 33 has an invalid length.
[  239.359283][T10254] 8021q: adding VLAN 0 to HW filter on device bond2
[  239.517116][T10260] 8021q: adding VLAN 0 to HW filter on device bond2
[  239.532417][T10260] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address
[  239.546663][T10260] bond2: (slave vxcan1): Error -95 calling set_mac_address
[  239.596287][T10272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1215'.
[  239.619122][T10263] 8021q: adding VLAN 0 to HW filter on device bond2
[  239.701093][T10276] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1216'.
[  239.741659][T10276] pim6reg1: entered promiscuous mode
[  239.779507][T10276] pim6reg1: entered allmulticast mode
[  239.834609][T10287] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1218'.
[  240.406593][T10318] netlink: 'syz.4.1228': attribute type 2 has an invalid length.
[  240.681522][T10333] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  240.698218][T10333] syzkaller0: entered promiscuous mode
[  240.704883][T10333] syzkaller0: entered allmulticast mode
[  240.729522][T10332] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  240.777791][T10333] tipc: Resetting bearer <eth:syzkaller0>
[  240.809840][T10331] tipc: Resetting bearer <eth:syzkaller0>
[  240.882574][T10331] tipc: Disabling bearer <eth:syzkaller0>
[  241.136414][T10360] syzkaller0: entered promiscuous mode
[  241.142571][T10365] openvswitch: netlink: Key 9 has unexpected len 0 expected 4
[  241.145304][T10360] syzkaller0: entered allmulticast mode
[  241.177865][T10369] netlink: 'syz.4.1245': attribute type 29 has an invalid length.
[  241.235995][T10372] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  241.323541][T10375] batadv_slave_0: entered promiscuous mode
[  241.735322][T10401] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  241.816010][T10401] tipc: Disabling bearer <eth:syzkaller0>
[  242.002933][T10420] netlink: 'syz.2.1265': attribute type 23 has an invalid length.
[  242.070905][T10375] batadv_slave_0: left promiscuous mode
[  242.118298][T10423] syzkaller0: entered promiscuous mode
[  242.132758][T10423] syzkaller0: entered allmulticast mode
[  242.258184][T10432] sctp: [Deprecated]: syz.2.1269 (pid 10432) Use of int in maxseg socket option.
[  242.258184][T10432] Use struct sctp_assoc_value instead
[  242.275076][T10423] bond0: (slave bridge0): Releasing backup interface
[  242.303666][T10423] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.311106][T10423] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.332986][T10423] bridge_slave_0: left allmulticast mode
[  242.348542][T10423] bridge_slave_0: left promiscuous mode
[  242.363445][T10423] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.398032][T10423] bridge_slave_1: left allmulticast mode
[  242.407068][T10423] bridge_slave_1: left promiscuous mode
[  242.417425][T10423] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.465204][T10423] bond0: (slave bond_slave_0): Releasing backup interface
[  242.486918][T10423] bond0: (slave bond_slave_1): Releasing backup interface
[  242.528980][T10423] team0: Port device team_slave_0 removed
[  242.555858][T10423] team0: Port device team_slave_1 removed
[  242.569781][T10423] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  242.588881][T10423] batman_adv: batadv0: Removing interface: batadv_slave_0
[  242.614544][T10423] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  242.623485][T10423] batman_adv: batadv0: Removing interface: batadv_slave_1
[  242.645794][T10423] bond1: (slave veth3): Releasing active interface
[  242.657891][T10423] bond2: (slave gretap1): Releasing active interface
[  242.679215][T10423] bond4: (slave bridge3): Releasing active interface
[  242.829120][T10434] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  242.942917][T10463] macsec1: entered promiscuous mode
[  242.948310][T10463] macsec1: entered allmulticast mode
[  243.148672][T10475] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  243.168636][T10480] __nla_validate_parse: 15 callbacks suppressed
[  243.168655][T10480] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1279'.
[  243.179063][T10475] syzkaller0: entered promiscuous mode
[  243.194492][T10475] syzkaller0: entered allmulticast mode
[  243.209937][T10480] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1279'.
[  243.246435][T10479] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  243.319175][T10486] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  243.355630][T10493] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002
[  243.417550][T10475] tipc: Resetting bearer <eth:syzkaller0>
[  243.465923][T10475] tipc: Disabling bearer <eth:syzkaller0>
[  243.497315][T10496] pimreg: entered allmulticast mode
[  244.285351][T10543] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1299'.
[  244.526234][T10552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1301'.
[  244.554071][T10559] netlink: 364 bytes leftover after parsing attributes in process `syz.0.1305'.
[  244.557748][T10560] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1303'.
[  245.065042][T10590] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1314'.
[  245.188926][T10592] bond2: entered promiscuous mode
[  245.213792][T10592] bond2: entered allmulticast mode
[  245.219561][T10592] 8021q: adding VLAN 0 to HW filter on device bond2
[  245.311243][T10604] netlink: 'syz.1.1317': attribute type 1 has an invalid length.
[  245.402663][T10604] 8021q: adding VLAN 0 to HW filter on device bond6
[  245.849354][T10631] netlink: 'syz.3.1324': attribute type 1 has an invalid length.
[  245.894371][T10634] x_tables: ip6_tables: NETMAP target: only valid in nat table, not syz1
[  246.323189][T10647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1327'.
[  246.380921][T10654] netlink: 'syz.4.1330': attribute type 11 has an invalid length.
[  246.513321][T10654] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1330'.
[  246.630895][T10669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1333'.
[  246.765316][T10673] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  247.031155][T10690] netlink: 'syz.0.1341': attribute type 11 has an invalid length.
[  247.053583][ T8524] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  247.075179][ T8524] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  247.099522][ T8524] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  247.103380][T10692] netlink: 'syz.3.1342': attribute type 1 has an invalid length.
[  247.120874][ T8524] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  247.648894][T10727] openvswitch: netlink: IPv4 tun info is not correct
[  247.767428][T10727] syzkaller1: entered promiscuous mode
[  247.777956][T10727] syzkaller1: entered allmulticast mode
[  248.225582][T10754] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  248.281304][T10754] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  248.516006][ T5910] syz2: Port: 1 Link DOWN
[  248.633061][T10777] __nla_validate_parse: 3 callbacks suppressed
[  248.633080][T10777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1366'.
[  248.692115][T10781] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1369'.
[  248.721416][T10781] unsupported nlmsg_type 40
[  248.857071][T10792] netlink: 'syz.4.1371': attribute type 1 has an invalid length.
[  248.895642][T10792] netlink: 'syz.4.1371': attribute type 1 has an invalid length.
[  249.180463][T10813] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1378'.
[  249.181607][T10814] netlink: 'syz.2.1379': attribute type 1 has an invalid length.
[  249.195766][T10813] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1378'.
[  249.200896][T10809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1377'.
[  249.460749][T10825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1384'.
[  249.662951][T10834] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1385'.
[  249.690859][T10834] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1385'.
[  249.709866][T10834] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1385'.
[  249.905680][T10842] can: request_module (can-proto-0) failed.
[  249.914599][T10848] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1392'.
[  250.126483][T10860] nbd: device at index 1 is going down
[  250.150155][T10859] netlink: 'syz.0.1396': attribute type 10 has an invalid length.
[  250.244451][T10859] team0: Port device dummy0 added
[  250.336178][T10868] syzkaller1: entered promiscuous mode
[  250.341714][T10868] syzkaller1: entered allmulticast mode
[  250.500017][T10879] netlink: 'syz.0.1403': attribute type 4 has an invalid length.
[  250.570318][T10879] netlink: 'syz.0.1403': attribute type 6 has an invalid length.
[  250.929242][ T5978] IPVS: starting estimator thread 0...
[  250.955154][T10900] gtp1: entered promiscuous mode
[  250.967075][T10900] gtp1: entered allmulticast mode
[  250.995994][T10900] IPVS: dh: SCTP 172.20.20.187:0 - no destination available
[  251.022337][T10901] IPVS: using max 25 ests per chain, 60000 per kthread
[  251.268094][T10903] netlink: 'syz.0.1411': attribute type 1 has an invalid length.
[  252.003667][T10941] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  252.102906][T10943] netlink: 'syz.2.1426': attribute type 10 has an invalid length.
[  252.163390][T10943] team0: Device veth1_macvtap failed to register rx_handler
[  252.188549][T10952] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  252.245079][T10952] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  252.361567][T10960] netlink: 'syz.3.1431': attribute type 1 has an invalid length.
[  253.295716][T10998] netlink: 'syz.3.1443': attribute type 2 has an invalid length.
[  254.128211][T11027] Driver unsupported XDP return value 0 on prog  (id 348) dev N/A, expect packet loss!
[  254.279244][T11038] __nla_validate_parse: 8 callbacks suppressed
[  254.279265][T11038] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1454'.
[  254.605451][T11058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1458'.
[  254.688595][T11065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1459'.
[  255.209407][T11094] syzkaller1: entered promiscuous mode
[  255.225307][T11094] syzkaller1: entered allmulticast mode
[  255.253905][T11101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1471'.
[  255.340763][T11106] netlink: 'syz.0.1473': attribute type 1 has an invalid length.
[  255.482176][T11106] 8021q: adding VLAN 0 to HW filter on device bond3
[  255.492049][T11110] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) !
[  255.559812][T11123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1478'.
[  255.693861][T11128] netlink: 788 bytes leftover after parsing attributes in process `syz.1.1480'.
[  255.749723][T11132] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  255.894331][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  256.630070][T11175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1493'.
[  256.741354][T11179] netlink: 'syz.2.1494': attribute type 1 has an invalid length.
[  256.749669][T11179] netlink: 'syz.2.1494': attribute type 1 has an invalid length.
[  256.867921][T11186] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1496'.
[  256.895199][T11186] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1496'.
[  256.937658][T11186] erspan0: entered promiscuous mode
[  256.962350][T11193] netlink: 'syz.3.1496': attribute type 11 has an invalid length.
[  256.981261][T11186] batadv_slave_1: entered promiscuous mode
[  256.984661][T11195] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1498'.
[  256.990684][T11186] debugfs: 'hsr1' already exists in 'hsr'
[  257.033921][T11186] Cannot create hsr debugfs directory
[  257.057945][T11186] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[  257.448168][T11222] netlink: 'syz.1.1508': attribute type 10 has an invalid length.
[  257.558116][T11223] vti1: entered allmulticast mode
[  257.643753][T11231] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20004
[  257.851421][T11243] 8021q: VLANs not supported on wg0
[  257.990920][T11252] netlink: 'syz.0.1515': attribute type 1 has an invalid length.
[  258.058930][T11258] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  258.648039][T11292] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  258.812265][T11292] syzkaller0: entered promiscuous mode
[  258.818369][T11292] syzkaller0: entered allmulticast mode
[  258.832760][T11292] tipc: Resetting bearer <eth:syzkaller0>
[  258.906046][T11289] tipc: Resetting bearer <eth:syzkaller0>
[  259.369520][T11324] netlink: 'syz.3.1541': attribute type 7 has an invalid length.
[  259.765395][ T5973] tipc: Node number set to 117440512
[  260.481729][T11289] tipc: Disabling bearer <eth:syzkaller0>
[  260.797629][T11349] netlink: 'syz.2.1549': attribute type 1 has an invalid length.
[  260.880167][T11349] 8021q: adding VLAN 0 to HW filter on device bond5
[  260.927685][T11361] __nla_validate_parse: 1 callbacks suppressed
[  260.927711][T11361] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1552'.
[  260.957875][T11349] IPv6: sit1: Disabled Multicast RS
[  260.999494][T11349] sit1: entered allmulticast mode
[  261.119131][T11375] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1557'.
[  261.309367][T11383] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1558'.
[  261.353417][T11387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1559'.
[  261.453130][T11389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1561'.
[  261.591519][T11399] ip6gre0: Master is either lo or non-ether device
[  261.888649][T11415] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1569'.
[  262.099093][T11430] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1574'.
[  262.285225][T11437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1576'.
[  262.314017][T11437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1576'.
[  262.341996][T11437] netlink: 'syz.4.1576': attribute type 14 has an invalid length.
[  262.350019][T11437] netlink: 'syz.4.1576': attribute type 13 has an invalid length.
[  262.383353][T11444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1579'.
[  263.261515][T11494] netlink: 'syz.1.1592': attribute type 5 has an invalid length.
[  263.788782][ T5973] syz2: Port: 1 Link ACTIVE
[  263.872473][ T5978] syz2: Port: 1 Link DOWN
[  263.988907][T11534] syzkaller0: entered allmulticast mode
[  264.064276][T11538] netlink: 'syz.0.1605': attribute type 4 has an invalid length.
[  264.090068][T11538] x_tables: ip_tables: udp match: only valid for protocol 17
[  264.279950][T11550] netdevsim netdevsim3: Direct firmware load for /.€ failed with error -2
[  264.282387][T11553] netlink: 'syz.0.1611': attribute type 10 has an invalid length.
[  264.301739][T11550] netdevsim netdevsim3: Falling back to sysfs fallback for: /.€
[  264.312380][T11553] bridge0: port 2(bridge_slave_1) entered disabled state
[  264.320063][T11553] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.661288][T11580] netlink: 'syz.1.1620': attribute type 6 has an invalid length.
[  264.690327][T11580] netlink: 'syz.1.1620': attribute type 1 has an invalid length.
[  265.328743][T11613] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  265.341913][T11615] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  265.351331][T11615] tipc: Resetting bearer <eth:syzkaller0>
[  265.737901][T11628] netlink: 'syz.3.1633': attribute type 6 has an invalid length.
[  266.173628][T11656] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  266.203837][T11656] __nla_validate_parse: 19 callbacks suppressed
[  266.203857][T11656] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1640'.
[  266.236987][   T30] audit: type=1800 audit(1757277589.016:4): pid=11662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1641" name="memory.events" dev="tmpfs" ino=1663 res=0 errno=0
[  266.258939][T11662] netlink: 'syz.2.1641': attribute type 1 has an invalid length.
[  266.280902][   T30] audit: type=1804 audit(1757277589.026:5): pid=11666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1641" name="/newroot/323/memory.events" dev="tmpfs" ino=1663 res=1 errno=0
[  266.358857][T11664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1643'.
[  266.410768][T11662] 8021q: adding VLAN 0 to HW filter on device bond6
[  266.461321][T11664] batadv_slave_1 (unregistering): left promiscuous mode
[  266.624692][T11681] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1648'.
[  266.631563][    C0] vcan0: j1939_tp_rxtimer: 0xffff888056be8800: rx timeout, send abort
[  266.654263][T11681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1648'.
[  266.670795][T11681] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  266.679490][T11681] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  266.859759][T11698] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1654'.
[  266.999273][T11707] Bluetooth: hci0: Opcode 0x080f failed: -22
[  267.006641][T11707] netlink: 'syz.4.1657': attribute type 10 has an invalid length.
[  267.020511][T11707] team0: Device hsr_slave_0 failed to register rx_handler
[  267.143562][    C0] vcan0: j1939_tp_rxtimer: 0xffff888056be8800: abort rx timeout. Force session deactivation
[  267.220739][T11718] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  267.412459][T11731] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  267.680361][T11741] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20000
[  268.031269][T11762] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  268.038819][T11763] syzkaller0: entered promiscuous mode
[  268.047074][T11763] syzkaller0: entered allmulticast mode
[  268.085487][T11769] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  268.106654][T11762] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  268.193945][T11771] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  268.217736][T11771] syzkaller0: entered promiscuous mode
[  268.236142][T11771] syzkaller0: entered allmulticast mode
[  268.259599][T11762] tipc: Resetting bearer <eth:syzkaller0>
[  268.278562][T11762] tipc: Disabling bearer <eth:syzkaller0>
[  268.308385][T11770] tipc: Resetting bearer <eth:syzkaller0>
[  268.350923][T11770] tipc: Disabling bearer <eth:syzkaller0>
[  268.490385][T11793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1684'.
[  268.500929][T11793] netlink: 'syz.1.1684': attribute type 3 has an invalid length.
[  268.576663][T11796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1685'.
[  268.586160][T11796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1685'.
[  268.807726][T11806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1690'.
[  268.827326][T11806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1690'.
[  269.002188][ T5186] Bluetooth: hci0: command tx timeout
[  269.297471][T11834] netlink: del zone limit has 4 unknown bytes
[  269.378849][T11841] syzkaller1: entered promiscuous mode
[  269.391384][T11841] syzkaller1: entered allmulticast mode
[  269.681351][   T30] audit: type=1800 audit(1757277592.456:6): pid=11849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1700" name="memory.events" dev="tmpfs" ino=1730 res=0 errno=0
[  269.954640][T11871] netlink: 'syz.0.1708': attribute type 1 has an invalid length.
[  270.166581][T11875] bond4 (unregistering): Released all slaves
[  270.518524][T11908] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  270.547317][T11916] netlink: 'syz.3.1721': attribute type 6 has an invalid length.
[  271.239379][T11968] __nla_validate_parse: 6 callbacks suppressed
[  271.239400][T11968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1732'.
[  271.639730][T11995] openvswitch: netlink: VXLAN extension 173 out of range max 1
[  271.664016][T11994] netlink: 'syz.2.1742': attribute type 11 has an invalid length.
[  271.754657][T11999] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  272.006253][T12014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1747'.
[  272.094467][T12020] netlink: 212296 bytes leftover after parsing attributes in process `syz.2.1750'.
[  272.127629][T12024] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1747'.
[  272.450385][T12036] netlink: 'syz.2.1752': attribute type 32 has an invalid length.
[  272.467069][T12036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1752'.
[  272.540411][T12036] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  272.706223][T12050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1758'.
[  272.715548][T12050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1758'.
[  272.722891][T12048] netlink: 'syz.4.1756': attribute type 1 has an invalid length.
[  272.775367][T12048] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  272.812140][T12060] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  272.838616][T12062] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1759'.
[  272.864900][T12050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1758'.
[  272.943335][T12069] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  273.114340][T12080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1762'.
[  273.331165][T12089] sit1: entered promiscuous mode
[  273.345292][T12089] sit1: entered allmulticast mode
[  273.529488][T12100] netlink: 'syz.4.1767': attribute type 1 has an invalid length.
[  273.849185][T12120] gre1: entered promiscuous mode
[  273.861894][T12120] gre1: entered allmulticast mode
[  317.327216][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  330.418198][T12142] sctp: [Deprecated]: syz.1.1773 (pid 12142) Use of int in max_burst socket option deprecated.
[  330.418198][T12142] Use struct sctp_assoc_value instead
[  330.781525][T12160] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  330.833482][T12160] tipc: Resetting bearer <eth:syzkaller0>
[  330.951055][T12172] __nla_validate_parse: 3 callbacks suppressed
[  330.951075][T12172] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1783'.
[  330.988218][T12172] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1783'.
[  331.098457][T12176] sctp: [Deprecated]: syz.4.1785 (pid 12176) Use of int in maxseg socket option.
[  331.098457][T12176] Use struct sctp_assoc_value instead
[  331.137189][T12178] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1786'.
[  331.233305][T12181] sock: sock_set_timeout: `syz.1.1788' (pid 12181) tries to set negative timeout
[  331.245293][T12182] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1787'.
[  331.273633][T12182] netlink: 'syz.4.1787': attribute type 1 has an invalid length.
[  332.208424][T12236] openvswitch: netlink: VXLAN extension message has 11 unknown bytes.
[  332.445905][T12248] netlink: 'syz.0.1805': attribute type 13 has an invalid length.
[  332.457280][T12248] macvtap0: entered allmulticast mode
[  332.475625][T12248] macvtap0: refused to change device tx_queue_len
[  332.478403][T12253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1808'.
[  332.500174][T12256] netlink: 'syz.4.1807': attribute type 4 has an invalid length.
[  332.670822][T12262] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  332.702795][T12263] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1810'.
[  332.901426][T12276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1814'.
[  332.946359][T12276] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1814'.
[  332.965931][T12278] netlink: 'syz.3.1815': attribute type 1 has an invalid length.
[  332.980867][T12276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1814'.
[  332.981378][T12278] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1815'.
[  333.921059][T12332] 8021q: adding VLAN 0 to HW filter on device bond3
[  333.931008][T12332] team0: Failed to send port change of device bond3 via netlink (err -105)
[  333.941350][T12332] team0: Failed to send options change via netlink (err -105)
[  333.950655][T12332] team0: Port device bond3 added
[  334.396062][T12371] sctp: [Deprecated]: syz.3.1842 (pid 12371) Use of int in max_burst socket option.
[  334.396062][T12371] Use struct sctp_assoc_value instead
[  336.569502][T12516] bridge0: port 2(bridge_slave_1) entered blocking state
[  336.576845][T12516] bridge0: port 2(bridge_slave_1) entered forwarding state
[  336.584481][T12516] bridge0: port 1(bridge_slave_0) entered blocking state
[  336.591675][T12516] bridge0: port 1(bridge_slave_0) entered forwarding state
[  336.645193][T12516] 8021q: adding VLAN 0 to HW filter on device team0
[  336.732304][T12516] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  336.753666][T12511] __nla_validate_parse: 81 callbacks suppressed
[  336.753687][T12511] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1879'.
[  336.933841][T12534] netlink: 'syz.3.1888': attribute type 1 has an invalid length.
[  336.977436][T12534] gretap1: entered promiscuous mode
[  336.999398][T12534] bond4: (slave gretap1): making interface the new active one
[  337.009977][T12534] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  337.091052][T12538] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.111239][T12538] bridge0: port 2(bridge_slave_1) entered disabled state
[  337.200975][T12546] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  337.255916][T12546] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1893'.
[  337.273247][T12546] nbd: illegal input index -8454144
[  337.480351][T12565] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1898'.
[  337.543673][T12569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1900'.
[  337.704570][T12578] netlink: 'syz.4.1902': attribute type 6 has an invalid length.
[  337.718234][T12582] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1900'.
[  337.732888][T12585] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1905'.
[  337.735366][T12581] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  337.762871][T12588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1903'.
[  337.773948][T12581] syzkaller0: entered promiscuous mode
[  337.800620][T12581] syzkaller0: entered allmulticast mode
[  337.802342][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.867597][T12581] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  337.939786][T12581] tipc: Resetting bearer <eth:syzkaller0>
[  337.961389][T12579] tipc: Resetting bearer <eth:syzkaller0>
[  338.008376][T12579] tipc: Disabling bearer <eth:syzkaller0>
[  338.046368][T12599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1908'.
[  338.389502][T12620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1914'.
[  338.510696][T12621] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  338.557792][T12631] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1917'.
[  338.590055][T12623] netem: change failed
[  338.665194][T12633] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  338.711964][T12637] netlink: 'syz.2.1918': attribute type 7 has an invalid length.
[  338.724929][T12637] netlink: 'syz.2.1918': attribute type 8 has an invalid length.
[  339.526763][T12673] sctp: [Deprecated]: syz.2.1929 (pid 12673) Use of int in max_burst socket option.
[  339.526763][T12673] Use struct sctp_assoc_value instead
[  339.658032][T12680] netlink: 'syz.1.1931': attribute type 1 has an invalid length.
[  339.830326][T12684] bond7: (slave gretap2): making interface the new active one
[  339.838978][T12684] bond7: (slave gretap2): Enslaving as an active interface with an up link
[  341.856908][T12721] __nla_validate_parse: 5 callbacks suppressed
[  341.856940][T12721] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1943'.
[  342.080387][T12738] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1948'.
[  342.251400][T12749] netlink: 'syz.0.1952': attribute type 1 has an invalid length.
[  342.370051][T12749] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  342.516838][T12763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1957'.
[  342.540766][T12763] netlink: 'syz.1.1957': attribute type 3 has an invalid length.
[  342.635770][T12771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1959'.
[  342.657923][T12770] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1960'.
[  342.888393][T12781] veth1_to_bond: entered allmulticast mode
[  342.964552][T12785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1966'.
[  343.328651][T12802] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1970'.
[  343.405113][T12806] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1973'.
[  343.451447][T12807] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1973'.
[  343.470948][T12808] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1972'.
[  343.787110][T12828] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  343.849392][T12828] tipc: Resetting bearer <eth:syzkaller0>
[  344.032801][T12835] tipc: Resetting bearer <eth:vlan1>
[  344.070396][T12843] netlink: 'syz.0.1982': attribute type 21 has an invalid length.
[  344.099284][T12846] netlink: 'syz.2.1975': attribute type 19 has an invalid length.
[  344.242982][T12835] tipc: Disabling bearer <eth:vlan1>
[  344.266805][T12842] syzkaller1: entered promiscuous mode
[  344.272759][T12842] syzkaller1: entered allmulticast mode
[  344.280236][T12843] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3)
[  344.438332][T12861] netlink: 'syz.1.1989': attribute type 1 has an invalid length.
[  344.446733][T12861] nbd: couldn't find device at index 1048576
[  345.020109][T12897] netlink: 'syz.2.1999': attribute type 21 has an invalid length.
[  345.051593][T12897] syz_tun: entered allmulticast mode
[  345.414785][T12917] tipc: Resetting bearer <eth:syzkaller0>
[  345.422911][ T5860] syz2: Port: 1 Link ACTIVE
[  345.509399][T12916] tipc: Resetting bearer <eth:syzkaller0>
[  345.521424][ T5973] syz2: Port: 1 Link DOWN
[  345.633680][T12929] netlink: 'syz.2.2012': attribute type 39 has an invalid length.
[  345.687820][T12929] syz_tun (unregistering): left allmulticast mode
[  345.859746][ T8533] tipc: Resetting bearer <eth:syzkaller0>
[  345.884097][T12941] netlink: 'syz.0.2016': attribute type 12 has an invalid length.
[  345.897907][T12941] netlink: 'syz.0.2016': attribute type 29 has an invalid length.
[  345.908414][T12941] netlink: 'syz.0.2016': attribute type 2 has an invalid length.
[  346.136885][T12959] sctp: [Deprecated]: syz.0.2022 (pid 12959) Use of struct sctp_assoc_value in delayed_ack socket option.
[  346.136885][T12959] Use struct sctp_sack_info instead
[  346.849572][T12997] erspan0: left allmulticast mode
[  347.005835][T13010] __nla_validate_parse: 13 callbacks suppressed
[  347.005856][T13010] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2037'.
[  347.284054][T13028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2042'.
[  347.419316][T13037] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  347.440142][T13037] syzkaller0: entered promiscuous mode
[  347.449296][T13037] syzkaller0: entered allmulticast mode
[  347.487944][T13037] tipc: Resetting bearer <eth:syzkaller0>
[  347.499075][T13033] tipc: Resetting bearer <eth:syzkaller0>
[  347.515330][T13033] tipc: Disabling bearer <eth:syzkaller0>
[  347.527250][T13040] tipc: Resetting bearer <eth:syzkaller0>
[  347.534647][ T5973] syz2: Port: 1 Link ACTIVE
[  347.552446][T13041] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  347.560199][T13041] syzkaller0: entered promiscuous mode
[  347.565932][T13041] syzkaller0: entered allmulticast mode
[  347.600766][T13041] tipc: Resetting bearer <eth:syzkaller0>
[  347.632163][T13039] tipc: Resetting bearer <eth:syzkaller0>
[  347.674506][T13039] tipc: Disabling bearer <eth:syzkaller0>
[  347.738342][T13038] tipc: Resetting bearer <eth:syzkaller0>
[  347.754360][   T24] syz2: Port: 1 Link DOWN
[  347.762249][T13051] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585)
[  347.795184][T13051] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  347.954572][ T8535] tipc: Resetting bearer <eth:syzkaller0>
[  348.310678][T13083] bridge7: entered promiscuous mode
[  348.317099][T13083] bridge7: entered allmulticast mode
[  348.537269][T13097] 8021q: VLANs not supported on ip_vti0
[  348.718309][T13109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2066'.
[  348.995624][T13119] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  349.055328][T13126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2071'.
[  349.272909][T13139] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2077'.
[  349.290431][T13144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  349.299279][T13144] batadv_slave_0: entered promiscuous mode
[  349.312396][T13139] tipc: Resetting bearer <eth:syzkaller0>
[  349.327596][T13139] validate_nla: 2 callbacks suppressed
[  349.327618][T13139] netlink: 'syz.2.2077': attribute type 12 has an invalid length.
[  349.351951][ T5951] syz2: Port: 1 Link ACTIVE
[  349.613559][T13161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2085'.
[  349.647181][T13164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2086'.
[  349.746492][T13164] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.2086'.
[  350.104978][T13179] syzkaller1: entered promiscuous mode
[  350.110610][T13179] syzkaller1: entered allmulticast mode
[  350.125293][T13137] tipc: Resetting bearer <eth:syzkaller0>
[  350.144261][T13179] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2090'.
[  350.180124][ T5951] syz2: Port: 1 Link DOWN
[  350.443848][T13195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2096'.
[  350.556232][T13199] netlink: 'syz.1.2098': attribute type 1 has an invalid length.
[  350.705681][T13209] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  350.732769][T13209] pimreg: entered allmulticast mode
[  350.741985][T13208] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  350.755454][T13208] syzkaller0: entered promiscuous mode
[  350.765542][T13208] syzkaller0: entered allmulticast mode
[  350.788278][T13208] tipc: Resetting bearer <eth:syzkaller0>
[  350.806672][T13206] tipc: Resetting bearer <eth:syzkaller0>
[  350.831917][T13206] tipc: Disabling bearer <eth:syzkaller0>
[  350.859465][ T8533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  350.869776][ T8533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  350.976822][ T8524] tipc: Resetting bearer <eth:syzkaller0>
[  351.027664][ T8524] nci: nci_rx_work: unknown MT 0x1
[  352.073864][T13259] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  352.196602][T13261] __nla_validate_parse: 34 callbacks suppressed
[  352.196624][T13261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2114'.
[  352.352205][T13266] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2116'.
[  352.571040][T13270] netlink: 'syz.3.2119': attribute type 15 has an invalid length.
[  352.592191][T13270] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2119'.
[  352.684860][T13276] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  352.686630][T13270] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  353.055987][T13300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2124'.
[  353.059046][T13301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2124'.
[  353.109035][T13300] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2124'.
[  353.153718][T13306] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2126'.
[  353.154862][T13305] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2124'.
[  353.210245][T13306] smc: net device erspan0 applied user defined pnetid SYZ0
[  353.444282][T13320] netlink: 'syz.4.2132': attribute type 10 has an invalid length.
[  353.454087][T13317] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2130'.
[  353.484315][T13320] veth1_macvtap: left promiscuous mode
[  353.506086][T13321] netlink: 'syz.0.2130': attribute type 21 has an invalid length.
[  353.547758][T13321] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2130'.
[  353.710329][T13338] netlink: 'syz.0.2138': attribute type 1 has an invalid length.
[  353.739341][T13341] netlink: 'syz.2.2136': attribute type 23 has an invalid length.
[  353.916699][T13348] IPVS: length: 232 != 24
[  354.289221][T13365] team0: Device gtp2 is of different type
[  355.210022][T13416] netlink: 'syz.4.2159': attribute type 5 has an invalid length.
[  355.259028][T13419] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  356.161620][T13482] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.198965][T13489] netlink: 'syz.0.2180': attribute type 1 has an invalid length.
[  356.216528][T13488] delete_channel: no stack
[  356.266760][T13482] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.347556][T13482] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.410360][T13482] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.502897][T13502] nbd3: detected capacity change from 0 to 127
[  356.553004][ T8533] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  356.588708][ T8535] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  356.625326][ T8535] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  356.658669][ T8533] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  357.189579][ T5186] block nbd3: Receive control failed (result -32)
[  357.337442][T13527] __nla_validate_parse: 13 callbacks suppressed
[  357.337463][T13527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2189'.
[  357.603811][T13538] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2193'.
[  357.773812][T13544] netlink: 'syz.2.2194': attribute type 64 has an invalid length.
[  357.788186][T13544] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2194'.
[  358.043771][T13556] netlink: 'syz.1.2198': attribute type 4 has an invalid length.
[  358.100972][T13567] netlink: 'syz.3.2201': attribute type 12 has an invalid length.
[  358.135676][T13565] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2200'.
[  358.887171][T13605] netlink: 'syz.1.2211': attribute type 29 has an invalid length.
[  358.940932][T13605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2211'.
[  359.052291][T13613] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2214'.
[  359.083284][T13614] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  359.099421][T13613] vlan0: entered promiscuous mode
[  359.145242][T13613] gretap0: entered promiscuous mode
[  359.191905][T13615] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  359.262606][T13620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2215'.
[  359.271613][T13620] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2215'.
[  359.419519][T13626] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2217'.
[  359.514033][T13629] netlink: 'syz.4.2219': attribute type 1 has an invalid length.
[  359.551573][T13634] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2220'.
[  359.603303][T13636] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  359.660350][T13642] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  359.694606][T13629] veth11: entered promiscuous mode
[  359.881494][T13653] netlink: 'syz.3.2227': attribute type 4 has an invalid length.
[  360.056327][T13667] netlink: 'syz.1.2229': attribute type 21 has an invalid length.
[  360.905670][T13716] macvtap1: entered allmulticast mode
[  360.931162][T13716] bridge0: entered allmulticast mode
[  360.950395][T13716] bridge0: port 1(macvtap1) entered blocking state
[  360.963977][T13716] bridge0: port 1(macvtap1) entered disabled state
[  361.009909][T13716] bridge0: left allmulticast mode
[  361.246051][T13740] netlink: 'syz.1.2251': attribute type 4 has an invalid length.
[  361.748824][T13779] netlink: 'syz.0.2263': attribute type 1 has an invalid length.
[  361.795800][T13779] 8021q: adding VLAN 0 to HW filter on device bond5
[  361.833153][T13779] veth7: entered promiscuous mode
[  361.842973][T13779] bond5: (slave veth7): Enslaving as an active interface with an up link
[  361.920517][T13781] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  361.964820][T13781] syzkaller0: entered promiscuous mode
[  361.970352][T13781] syzkaller0: entered allmulticast mode
[  362.069109][T13781] tipc: Resetting bearer <eth:syzkaller0>
[  362.113559][T13780] tipc: Resetting bearer <eth:syzkaller0>
[  362.187818][T13780] tipc: Disabling bearer <eth:syzkaller0>
[  362.234847][T13802] macsec0: entered promiscuous mode
[  362.253813][T13802] macsec0: entered allmulticast mode
[  362.357515][T13802] veth1_macvtap: entered allmulticast mode
[  362.370340][T13802] macsec0: left promiscuous mode
[  362.395868][T13802] macsec0: left allmulticast mode
[  362.406157][T13802] veth1_macvtap: left allmulticast mode
[  362.507320][T13817] ip6gre0: Master is either lo or non-ether device
[  362.594423][T13820] __nla_validate_parse: 6 callbacks suppressed
[  362.594444][T13820] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2277'.
[  362.632510][T13820] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2277'.
[  362.889512][T13835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2281'.
[  363.026605][T13841] netlink: 'syz.1.2283': attribute type 1 has an invalid length.
[  363.123006][T13848] ªªªªªª: renamed from vlan0 (while UP)
[  363.123486][T13849] netlink: 'syz.2.2286': attribute type 10 has an invalid length.
[  363.320052][T13855] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2290'.
[  363.389192][T13860] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  363.492041][T13863] netlink: 'syz.2.2291': attribute type 16 has an invalid length.
[  363.499933][T13863] netlink: 'syz.2.2291': attribute type 17 has an invalid length.
[  363.599249][T13863] xfrm1: left promiscuous mode
[  363.604880][T13863] xfrm1: left allmulticast mode
[  363.614959][T13863] bond1: left promiscuous mode
[  363.624329][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  363.636492][T13863] veth3: left promiscuous mode
[  363.641329][T13876] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2295'.
[  363.643638][T13863] gretap1: left promiscuous mode
[  363.655473][T13863] gretap1: left allmulticast mode
[  363.662224][T13863] vlan2: left promiscuous mode
[  363.672179][T13863] bond3: left promiscuous mode
[  363.678610][T13863] vlan2: left allmulticast mode
[  363.683673][T13863] bond3: left allmulticast mode
[  363.689941][T13863] syzkaller0: left promiscuous mode
[  363.696503][T13863] syzkaller0: left allmulticast mode
[  363.703310][T13863] tipc: Resetting bearer <eth:syzkaller0>
[  363.712358][T13863] tipc: Resetting bearer <eth:syzkaller0>
[  363.751169][T13878] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2295'.
[  363.929336][T13886] smc: net device bond0 applied user defined pnetid SYZ2
[  363.957068][T13886] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2297'.
[  364.019040][T13880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  364.221682][T13886] smc: removing net device bond0 with user defined pnetid SYZ2
[  364.238285][T13886] bond0 (unregistering): (slave netdevsim0): Releasing backup interface
[  364.248541][T13886] bond0 (unregistering): Released all slaves
[  364.253814][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  364.412241][T13903] tipc: Resetting bearer <eth:syzkaller0>
[  364.419450][ T5950] syz2: Port: 1 Link ACTIVE
[  364.460497][T13903] netlink: 576 bytes leftover after parsing attributes in process `syz.2.2304'.
[  364.506969][T13902] tipc: Resetting bearer <eth:syzkaller0>
[  364.518787][ T5951] syz2: Port: 1 Link DOWN
[  364.781358][ T8524] tipc: Resetting bearer <eth:syzkaller0>
[  364.889488][T13929] vxlan1: entered promiscuous mode
[  364.895697][T13929] vxlan1: entered allmulticast mode
[  365.042855][T13944] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2316'.
[  365.344976][T13959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2320'.
[  365.391253][T13959] chnl_net:caif_netlink_parms(): no params data found
[  365.542932][T13969] 8021q: VLANs not supported on lo
[  365.697135][T13980] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  365.709330][T13975] syzkaller0: entered promiscuous mode
[  365.715190][T13975] syzkaller0: entered allmulticast mode
[  365.721287][T13975] tipc: Resetting bearer <eth:syzkaller0>
[  366.167276][T14001] netlink: 'syz.2.2332': attribute type 83 has an invalid length.
[  366.593663][T14018] netlink: 'syz.1.2340': attribute type 21 has an invalid length.
[  366.608332][T14018] netlink: 'syz.1.2340': attribute type 6 has an invalid length.
[  367.194343][T14049] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  367.237999][T14050] netlink: 'syz.1.2350': attribute type 1 has an invalid length.
[  367.321259][T14058] netlink: 'syz.4.2352': attribute type 12 has an invalid length.
[  367.330505][T14058] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255)
[  367.394890][T14056] netlink: 'syz.0.2351': attribute type 1 has an invalid length.
[  367.420885][T14060] netlink: 'syz.0.2351': attribute type 1 has an invalid length.
[  367.944646][T14092] __nla_validate_parse: 14 callbacks suppressed
[  367.944767][T14092] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2361'.
[  368.262085][T14106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2365'.
[  368.384029][T14115] netlink: 'syz.1.2368': attribute type 3 has an invalid length.
[  368.682156][T14121] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2370'.
[  368.904313][T14134] tipc: Resetting bearer <eth:syzkaller0>
[  368.911564][ T5951] syz2: Port: 1 Link ACTIVE
[  369.091647][T14133] tipc: Resetting bearer <eth:syzkaller0>
[  369.116877][ T5951] syz2: Port: 1 Link DOWN
[  369.228238][T14162] openvswitch: netlink: Key 9 has unexpected len 0 expected 4
[  369.435416][T14172] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2386'.
[  369.661605][T14185] IPVS: set_ctl: invalid protocol: 60 172.20.20.25:20004
[  369.783591][T14189] sit1: entered promiscuous mode
[  369.788691][T14189] sit1: entered allmulticast mode
[  369.891132][ T8535] tipc: Resetting bearer <eth:syzkaller0>
[  369.911247][T14199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2395'.
[  369.956738][T14201] bridge9: the hash_elasticity option has been deprecated and is always 16
[  369.970215][T14205] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2397'.
[  370.032338][T14208] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2398'.
[  370.181188][T14213] smc: adding net device bond0 with user defined pnetid SYZ2
[  370.192365][T14213] bond0: entered promiscuous mode
[  370.197524][T14213] bond0: entered allmulticast mode
[  370.204022][T14213] 8021q: adding VLAN 0 to HW filter on device bond0
[  370.413299][T14213] smc: removing net device bond0 with user defined pnetid SYZ2
[  370.423045][T14213] bond0 (unregistering): Released all slaves
[  370.448777][T14225] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  370.456123][T14225] IPv6: NLM_F_CREATE should be set when creating new route
[  370.471107][T14225] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  370.544619][T14232] xt_l2tp: wrong L2TP version: 0
[  370.803480][T14246] xt_time: invalid argument - start or stop time greater than 23:59:59
[  370.902925][T14252] syzkaller1: entered promiscuous mode
[  370.911055][T14252] syzkaller1: entered allmulticast mode
[  371.514820][T14288] netlink: 'syz.4.2422': attribute type 1 has an invalid length.
[  371.540714][T14288] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2422'.
[  371.564674][T14288] nbd: couldn't find a device at index 1
[  371.754180][T14268] veth3: left promiscuous mode
[  371.772391][T14268] gretap1: left promiscuous mode
[  371.798653][T14268] sit1: left promiscuous mode
[  371.891455][ T8533] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  371.941128][ T8533] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  372.012139][T14294] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2424'.
[  372.102412][ T8533] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  372.121144][ T8533] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  372.171392][T14315] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2429'.
[  372.626197][T14349] netlink: 'syz.1.2438': attribute type 1 has an invalid length.
[  372.646889][T14346] syzkaller1: entered promiscuous mode
[  372.669143][T14346] syzkaller1: entered allmulticast mode
[  373.689102][T14413] sctp: Trying to GSO but underlying device doesn't support it.
[  373.932482][T14429] __nla_validate_parse: 8 callbacks suppressed
[  373.932506][T14429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2463'.
[  373.938414][T14427] !€ÿ: renamed from bond_slave_0
[  374.044071][T14434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2465'.
[  374.087385][T14438] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2466'.
[  374.431146][T14453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2470'.
[  374.523907][T14466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2475'.
[  374.645974][T14456] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  374.664732][T14456] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.678080][T14456] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  374.710307][T14460] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2472'.
[  374.713994][T14472] netlink: 'syz.3.2476': attribute type 1 has an invalid length.
[  374.728001][T14472] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2476'.
[  374.816461][T14456] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  374.853546][T14456] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  374.882581][T14456] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  374.883496][T14477] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  375.004243][T14456] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  375.051560][T14456] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.063281][T14456] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  375.191286][T14456] netdevsim netdevsim4 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  375.220553][T14456] netdevsim netdevsim4 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.248490][T14456] netdevsim netdevsim4 ÿÿÿÿÿÿ (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  375.281862][T14501] veth0_virt_wifi: mtu less than device minimum
[  375.441421][   T36] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  375.451489][   T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  375.460553][   T36] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  375.506248][T14508] openvswitch: netlink: EtherType a is less than min 600
[  375.571502][   T36] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  375.584314][   T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  375.592936][   T36] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  375.681910][   T36] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  375.694841][   T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  375.703422][T14520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2490'.
[  375.704402][T14520] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2490'.
[  375.713248][   T36] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  375.766527][T14520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2490'.
[  375.783328][   T36] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  375.792052][   T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  375.800357][   T36] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  375.893307][T14520] netlink: 'syz.2.2490': attribute type 5 has an invalid length.
[  375.901107][T14520] netlink: 'syz.2.2490': attribute type 6 has an invalid length.
[  375.906504][T14525] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  376.102680][T14525] syzkaller0: entered promiscuous mode
[  376.108248][T14525] syzkaller0: entered allmulticast mode
[  376.117655][T14525] tipc: Resetting bearer <eth:syzkaller0>
[  376.146090][T14529] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5)
[  376.201237][T14525] tipc: Resetting bearer <eth:syzkaller0>
[  376.222937][T14522] tipc: Resetting bearer <eth:syzkaller0>
[  376.253277][T14542] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  376.945751][ T5978] tipc: Node number set to 2453499188
[  377.933792][T14522] tipc: Disabling bearer <eth:syzkaller0>
[  377.947133][T14556] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  378.126021][T14582] tipc: New replicast peer: 255.255.255.255
[  378.160741][T14582] tipc: Enabled bearer <udp:s>, priority 10
[  378.170796][T14594] netlink: 'syz.1.2509': attribute type 7 has an invalid length.
[  378.303320][T14585] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  378.337647][T14587] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  378.534179][T14615] netlink: 'syz.1.2516': attribute type 3 has an invalid length.
[  378.766970][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  378.792124][T14629] netlink: 'syz.2.2521': attribute type 1 has an invalid length.
[  378.897314][T14631] can: request_module (can-proto-0) failed.
[  378.975627][T14637] netlink: 'syz.4.2524': attribute type 10 has an invalid length.
[  379.020345][T14637] team0: Device ipvlan1 failed to register rx_handler
[  379.207332][T14652] netlink: 'syz.3.2528': attribute type 1 has an invalid length.
[  379.261711][T14659] __nla_validate_parse: 17 callbacks suppressed
[  379.308161][T14659] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2532'.
[  379.326730][T14662] x_tables: ip_tables: udp match: only valid for protocol 17
[  379.474684][T14672] netlink: 'syz.2.2535': attribute type 1 has an invalid length.
[  379.487474][T14671] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2537'.
[  379.506887][T14671] team0: No ports can be present during mode change
[  379.514066][T14672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2535'.
[  379.664168][T14684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2539'.
[  379.751255][T14688] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  379.903851][ T5186] block nbd4: Receive control failed (result -32)
[  381.278217][T14751] netlink: 'syz.1.2560': attribute type 1 has an invalid length.
[  381.295235][T14751] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2560'.
[  381.415369][T14766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2563'.
[  381.701015][T14786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2569'.
[  381.811112][T14790] delete_channel: no stack
[  382.104318][T14808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2574'.
[  382.521204][T14830] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  382.776965][T14840] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2581'.
[  382.793476][T14840] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2581'.
[  383.819941][T14914] netlink: 'syz.3.2604': attribute type 1 has an invalid length.
[  383.982556][T14918] veth0: entered promiscuous mode
[  384.004861][T14917] veth0: left promiscuous mode
[  440.205762][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  442.664772][T14966] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  442.717929][T14974] __nla_validate_parse: 6 callbacks suppressed
[  442.717951][T14974] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2628'.
[  442.856396][T14981] netlink: 'syz.0.2631': attribute type 12 has an invalid length.
[  442.887163][T14981] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2631'.
[  442.902885][T14985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2632'.
[  442.919680][ T8524] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  442.932222][ T8524] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  442.945211][ T5950] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  442.956304][T14981] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2631'.
[  443.017661][T14994] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2635'.
[  443.047643][T14988] macvlan2: entered promiscuous mode
[  443.053103][T14988] macvlan2: entered allmulticast mode
[  443.059741][T14988] bond8: entered promiscuous mode
[  443.061177][T14998] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2634'.
[  443.069183][T14988] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  443.084673][T14988] bond8: left promiscuous mode
[  443.091137][T14998] netlink: zone id is out of range
[  443.100364][T14998] netlink: get zone limit has 8 unknown bytes
[  443.151267][   T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  443.192036][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  443.199852][   T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  443.212319][ T5950] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  443.220059][T15000] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2636'.
[  443.230001][T15000] (unnamed net_device) (uninitialized): (slave ip6gre0): Device is not bonding slave
[  443.242315][T15000] (unnamed net_device) (uninitialized): option active_slave: invalid value (ip6gre0)
[  443.339271][T15006] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  443.399663][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  443.422756][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  443.651660][T15027] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2645'.
[  443.722298][T14299] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  443.740343][T15033] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2647'.
[  443.835147][T15041] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  443.918236][T15046] netlink: 'syz.4.2648': attribute type 3 has an invalid length.
[  443.926877][T15046] netlink: 666 bytes leftover after parsing attributes in process `syz.4.2648'.
[  443.931132][T15047] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  445.127264][T15106] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  445.149164][T15107] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  445.275422][T15114] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  445.480140][T15127] netlink: 'syz.1.2674': attribute type 3 has an invalid length.
[  445.900610][T15147] bond6: (slave vcan1): The slave device specified does not support setting the MAC address
[  445.914521][T15155] xt_time: unknown flags 0xf4
[  445.933199][T15147] bond6: (slave vcan1): Error -95 calling set_mac_address
[  445.949086][T15156] xt_time: unknown flags 0xf4
[  447.255866][T15247] lo: entered promiscuous mode
[  447.267881][T15247] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  447.287852][T15247] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  447.309239][T15247] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  447.819723][T15267] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  447.910702][T15278] net_ratelimit: 63 callbacks suppressed
[  447.910731][T15278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  447.947114][T15271] veth0: entered promiscuous mode
[  448.099214][T15270] veth0: left promiscuous mode
[  448.227098][T15292] 8021q: adding VLAN 0 to HW filter on device team0
[  448.279041][T15301] __nla_validate_parse: 9 callbacks suppressed
[  448.279063][T15301] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2714'.
[  448.334245][T15307] netlink: 'syz.1.2717': attribute type 1 has an invalid length.
[  448.368627][T15308] netlink: 'syz.2.2718': attribute type 30 has an invalid length.
[  448.383980][T15292] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  448.926295][T15335] ieee802154 phy0 wpan0: encryption failed: -22
[  449.003107][T15338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2721'.
[  449.119369][T15345] netlink: 'syz.1.2725': attribute type 15 has an invalid length.
[  449.373020][T15364] netlink: 'syz.3.2728': attribute type 1 has an invalid length.
[  449.415013][T15364] smc: adding net device bond0 with user defined pnetid SYZ2
[  449.426598][T15364] 8021q: adding VLAN 0 to HW filter on device bond0
[  449.459209][T15366] netlink: 'syz.2.2729': attribute type 1 has an invalid length.
[  449.490524][T15366] netlink: 'syz.2.2729': attribute type 3 has an invalid length.
[  449.512937][T15366] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2729'.
[  449.514315][T15375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2728'.
[  449.647114][T15384] netlink: 'syz.1.2735': attribute type 16 has an invalid length.
[  449.657191][T15384] netlink: 'syz.1.2735': attribute type 17 has an invalid length.
[  449.713257][T15386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2734'.
[  449.777323][T15384] 8021q: adding VLAN 0 to HW filter on device bond0
[  449.789057][T15384] 8021q: adding VLAN 0 to HW filter on device team0
[  449.806495][T15384] 8021q: adding VLAN 0 to HW filter on device batadv0
[  449.856498][T15384] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  449.866987][T15384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  449.892252][T15384] veth1_vlan: left promiscuous mode
[  449.898886][T15384] veth0_vlan: left promiscuous mode
[  449.905309][T15384] veth0_vlan: entered promiscuous mode
[  449.914605][T15384] veth1_vlan: entered promiscuous mode
[  449.925757][T15384] veth1_macvtap: left promiscuous mode
[  449.933739][T15384] veth0_macvtap: left promiscuous mode
[  449.940467][T15384] veth0_macvtap: entered promiscuous mode
[  449.947363][T15384] veth1_macvtap: entered promiscuous mode
[  449.960679][T15384] 8021q: adding VLAN 0 to HW filter on device bond1
[  449.980838][T15384] 8021q: adding VLAN 0 to HW filter on device bond2
[  449.996656][T15384] 8021q: adding VLAN 0 to HW filter on device bond3
[  450.007198][T15384] 8021q: adding VLAN 0 to HW filter on device bond4
[  450.018502][T15384] 8021q: adding VLAN 0 to HW filter on device bond5
[  450.029160][T15384] vlan2: left allmulticast mode
[  450.034196][T15384] veth1: left allmulticast mode
[  450.040598][T15384] 8021q: adding VLAN 0 to HW filter on device bond6
[  450.056765][T15384] sit1: left allmulticast mode
[  450.067538][T15384] 8021q: adding VLAN 0 to HW filter on device bond7
[  450.098136][T15384] 8021q: adding VLAN 0 to HW filter on device bond8
[  450.131922][ T8531] ip6_tnl_xmit_ctl: 2 callbacks suppressed
[  450.131942][ T8531] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  450.157658][ T5950] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  450.165863][ T8531] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  450.198093][T15396] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  450.209220][T15403] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2739'.
[  450.223741][T15403] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2739'.
[  450.242017][ T5950] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  450.336713][ T8525] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  450.348412][ T8525] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  450.458250][ T8525] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  450.471635][ T8525] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  450.506775][T15408] netlink: 51 bytes leftover after parsing attributes in process `syz.0.2740'.
[  450.525761][ T8525] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  450.566687][T15417] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2746'.
[  450.581278][T14299] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  450.590151][ T8525] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  450.627363][T14299] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  450.715344][T15423] nbd: must specify an index to disconnect
[  450.769005][T15426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2748'.
[  450.878346][T15426] team1: entered promiscuous mode
[  450.898470][T15426] team1: entered allmulticast mode
[  451.026308][T14299] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  451.318719][T15456] nbd: must specify at least one socket
[  451.482823][T14299] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  451.520444][T15469] netlink: 'syz.4.2760': attribute type 1 has an invalid length.
[  451.559620][T15469] netlink: 'syz.4.2760': attribute type 1 has an invalid length.
[  451.632730][T15477] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  451.896132][T15487] tipc: Enabled bearer <eth:ipvlan0>, priority 10
[  452.138918][T15515] tipc: Resetting bearer <eth:syzkaller0>
[  452.149358][ T5978] syz2: Port: 1 Link ACTIVE
[  452.237797][T15519] IPVS: length: 75 != 24
[  452.827688][T15509] tipc: Resetting bearer <eth:syzkaller0>
[  452.834039][   T10] syz2: Port: 1 Link DOWN
[  452.897704][T15557] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  453.040779][T15561] sctp: [Deprecated]: syz.1.2786 (pid 15561) Use of struct sctp_assoc_value in delayed_ack socket option.
[  453.040779][T15561] Use struct sctp_sack_info instead
[  453.568191][ T8535] tipc: Resetting bearer <eth:syzkaller0>
[  453.677127][T15598] validate_nla: 3 callbacks suppressed
[  453.677149][T15598] netlink: 'syz.0.2798': attribute type 1 has an invalid length.
[  453.750175][T15601] netlink: 'syz.1.2799': attribute type 33 has an invalid length.
[  453.758411][T15601] __nla_validate_parse: 11 callbacks suppressed
[  453.758430][T15601] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2799'.
[  453.809746][T15606] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2801'.
[  454.105082][T15621] netlink: 'syz.0.2807': attribute type 1 has an invalid length.
[  454.115655][T15621] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2807'.
[  454.448876][T15639] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2812'.
[  454.681203][T15651] netlink: 'syz.2.2815': attribute type 1 has an invalid length.
[  454.747532][T15657] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2815'.
[  454.775800][T15656] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2817'.
[  454.788672][T15656] netlink: 'syz.4.2817': attribute type 7 has an invalid length.
[  454.799925][T15656] netlink: 'syz.4.2817': attribute type 8 has an invalid length.
[  454.810569][T15656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2817'.
[  455.156107][T15677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2823'.
[  455.202418][T15677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2823'.
[  455.226526][T15682] netlink: 'syz.0.2824': attribute type 21 has an invalid length.
[  455.251874][T15682] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  455.259173][T15682] IPv6: NLM_F_CREATE should be set when creating new route
[  455.266622][T15682] IPv6: NLM_F_CREATE should be set when creating new route
[  455.273893][T15682] IPv6: NLM_F_CREATE should be set when creating new route
[  455.451529][T15698] netlink: 'syz.1.2830': attribute type 16 has an invalid length.
[  455.477758][T15698] netlink: 'syz.1.2830': attribute type 17 has an invalid length.
[  455.562994][    C1] ip6_tnl_xmit_ctl: 3 callbacks suppressed
[  455.563013][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  455.714710][T15698] team1: left promiscuous mode
[  455.726981][T15698] team1: left allmulticast mode
[  455.747238][T14299] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  455.763706][T15698] 8021q: adding VLAN 0 to HW filter on device team1
[  455.788090][   T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  455.847091][T15722] sctp: [Deprecated]: syz.2.2834 (pid 15722) Use of int in max_burst socket option.
[  455.847091][T15722] Use struct sctp_assoc_value instead
[  456.141446][T15728] tipc: Resetting bearer <eth:syzkaller0>
[  456.178031][ T5978] syz2: Port: 1 Link ACTIVE
[  456.214034][T15731] syzkaller0: refused to change device tx_queue_len
[  456.238322][T15728] tipc: Resetting bearer <eth:syzkaller0>
[  456.299480][ T5978] syz2: Port: 1 Link DOWN
[  456.313548][T15732] netlink: 'syz.4.2837': attribute type 1 has an invalid length.
[  456.346236][T15732] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2837'.
[  456.382440][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  456.543594][T15741] tipc: Resetting bearer <eth:syzkaller0>
[  456.617965][T15740] tipc: Resetting bearer <eth:syzkaller0>
[  456.836027][T15756] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  456.848062][ T5860] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  456.890034][ T8533] tipc: Resetting bearer <eth:syzkaller0>
[  456.964925][T15764] sctp: [Deprecated]: syz.3.2847 (pid 15764) Use of struct sctp_assoc_value in delayed_ack socket option.
[  456.964925][T15764] Use struct sctp_sack_info instead
[  457.107667][T15774] openvswitch: netlink: Unknown key attributes 2
[  457.543805][T15795] geneve2: entered promiscuous mode
[  457.549329][T15795] geneve2: entered allmulticast mode
[  457.564553][ T8524] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0
[  457.597202][ T8524] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[  457.625221][ T8524] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0
[  457.649459][ T8524] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0
[  457.790317][T15807] sch_tbf: burst 0 is lower than device lo mtu (1550) !
[  458.842517][ T5186] Bluetooth: hci0: command tx timeout
[  459.058388][T15875] __nla_validate_parse: 8 callbacks suppressed
[  459.058410][T15875] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2882'.
[  459.203398][T15877] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2883'.
[  459.286998][T15888] validate_nla: 5 callbacks suppressed
[  459.287021][T15888] netlink: 'syz.2.2886': attribute type 2 has an invalid length.
[  459.324437][T15888] netlink: 'syz.2.2886': attribute type 1 has an invalid length.
[  459.342757][T15888] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2886'.
[  459.608775][T15900] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2890'.
[  459.632840][T15895] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  459.634457][T15894] tipc: Resetting bearer <eth:syzkaller0>
[  459.672081][T15904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2892'.
[  459.683911][T15895] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  459.817456][T15905] team0: Port device dummy0 removed
[  459.866529][T15905] bridge_slave_0: left allmulticast mode
[  459.875274][T15905] bridge_slave_0: left promiscuous mode
[  459.881196][T15905] bridge0: port 1(bridge_slave_0) entered disabled state
[  459.927494][T15905] bridge_slave_1: left allmulticast mode
[  459.949212][T15905] bridge_slave_1: left promiscuous mode
[  459.969269][T15905] bridge0: port 2(bridge_slave_1) entered disabled state
[  460.061551][T15905] team0: Port device team_slave_0 removed
[  460.100746][T15905] team0: Port device team_slave_1 removed
[  460.117761][T15905] batman_adv: batadv0: Removing interface: batadv_slave_0
[  460.140850][T15905] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  460.155237][T15905] batman_adv: batadv0: Removing interface: batadv_slave_1
[  460.170794][T15905] bond0: (slave bridge1): Releasing active interface
[  460.178333][T15905] bridge1: left promiscuous mode
[  460.187667][T15905] bond1: (slave bridge3): Releasing active interface
[  460.213434][T15905] bond5: (slave veth7): Releasing backup interface
[  460.230928][ T5860] syz2: Port: 1 Link ACTIVE
[  460.241244][T15893] tipc: Resetting bearer <eth:syzkaller0>
[  460.257674][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  460.305270][ T8524] tipc: Resetting bearer <eth:syzkaller0>
[  460.368554][T15918] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2893'.
[  460.450787][ T5860] syz2: Port: 1 Link DOWN
[  460.472445][T15922] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2895'.
[  460.481560][T15922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2895'.
[  460.513287][T15930] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  460.521605][T15922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2895'.
[  460.526440][T15930] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  460.539508][T15930] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  460.548522][T15930] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  460.557034][T15930] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  460.617575][T15938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2898'.
[  460.683499][ T6798] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.707599][T15936] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  460.729175][T15941] syzkaller0: entered promiscuous mode
[  460.740791][T15941] syzkaller0: entered allmulticast mode
[  460.847379][ T6798] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.916974][T15923] tipc: Resetting bearer <eth:syzkaller0>
[  461.040866][ T6798] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.069120][T15920] tipc: Resetting bearer <eth:syzkaller0>
[  461.088066][T15920] tipc: Disabling bearer <eth:syzkaller0>
[  461.162336][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  461.185239][ T6798] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.554206][T15992] netlink: 'syz.3.2911': attribute type 1 has an invalid length.
[  461.695260][T15992] 8021q: adding VLAN 0 to HW filter on device bond5
[  461.745025][T15994] 8021q: adding VLAN 0 to HW filter on device bond5
[  461.755513][T15994] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  461.769524][T15994] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  461.909526][T15998] veth5: entered promiscuous mode
[  461.935155][T15998] bond5: (slave veth5): Enslaving as an active interface with a down link
[  461.980383][T16003] vlan1: entered allmulticast mode
[  461.990602][T16003] bond5: entered allmulticast mode
[  462.081619][T15928] chnl_net:caif_netlink_parms(): no params data found
[  462.607952][ T5186] Bluetooth: hci2: command tx timeout
[  462.709397][ T6798] bond7 (unregistering): (slave gretap2): Releasing active interface
[  463.350579][ T6798] bond0 (unregistering): Released all slaves
[  463.454867][ T6798] bond1 (unregistering): Released all slaves
[  463.563131][ T6798] bond2 (unregistering): Released all slaves
[  463.667503][ T6798] bond3 (unregistering): Released all slaves
[  463.777367][ T6798] bond4 (unregistering): Released all slaves
[  463.881988][ T6798] bond5 (unregistering): Released all slaves
[  463.988206][ T6798] bond6 (unregistering): Released all slaves
[  464.094385][ T6798] bond7 (unregistering): Released all slaves
[  464.199451][ T6798] bond8 (unregistering): Released all slaves
[  464.375365][T16035] netlink: 'syz.2.2919': attribute type 10 has an invalid length.
[  464.422925][T16031] __nla_validate_parse: 4 callbacks suppressed
[  464.422946][T16031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2921'.
[  464.444813][T16040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2919'.
[  464.482430][T16042] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2920'.
[  464.511343][T16040] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  464.536330][T16035] 8021q: adding VLAN 0 to HW filter on device team0
[  464.545030][T16046] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2922'.
[  464.595348][T16046] netlink: 'syz.0.2922': attribute type 7 has an invalid length.
[  464.610195][T16046] netlink: 'syz.0.2922': attribute type 8 has an invalid length.
[  464.621062][T16046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2922'.
[  464.653718][ T6798] tipc: Left network mode
[  464.688146][ T5186] Bluetooth: hci2: command tx timeout
[  464.709338][T16047] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms
[  464.754248][ T6798] IPVS: stopping master sync thread 6528 ...
[  464.948140][T15928] bridge0: port 1(bridge_slave_0) entered blocking state
[  464.963104][T15928] bridge0: port 1(bridge_slave_0) entered disabled state
[  464.970488][T15928] bridge_slave_0: entered allmulticast mode
[  465.005823][T15928] bridge_slave_0: entered promiscuous mode
[  465.024799][T15928] bridge0: port 2(bridge_slave_1) entered blocking state
[  465.057332][T15928] bridge0: port 2(bridge_slave_1) entered disabled state
[  465.073019][T15928] bridge_slave_1: entered allmulticast mode
[  465.091166][T15928] bridge_slave_1: entered promiscuous mode
[  465.215704][T16073] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2930'.
[  465.392592][T16083] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2931'.
[  465.448159][T15928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  465.534903][T15928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  465.546162][T16083] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2931'.
[  465.602942][T16092] tipc: Resetting bearer <eth:syzkaller0>
[  465.690402][T15928] team0: Port device team_slave_0 added
[  465.784045][T15928] team0: Port device team_slave_1 added
[  465.880912][T15928] batman_adv: batadv0: Adding interface: batadv_slave_0
[  465.905858][T15928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  465.939389][T15928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  465.971431][T15928] batman_adv: batadv0: Adding interface: batadv_slave_1
[  465.988449][T15928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  466.017254][T15928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  466.047693][ T6798] hsr_slave_0: left promiscuous mode
[  466.055612][ T6798] hsr_slave_1: left promiscuous mode
[  466.095954][ T6798] veth1_macvtap: left promiscuous mode
[  466.109341][ T6798] veth0_macvtap: left promiscuous mode
[  466.117778][ T6798] veth1_vlan: left promiscuous mode
[  466.123596][ T6798] veth0_vlan: left promiscuous mode
[  466.228757][T16122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2945'.
[  466.287669][T16123] netlink: 'syz.4.2945': attribute type 1 has an invalid length.
[  466.361231][T16127] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2945'.
[  466.537987][ T6798] pimreg (unregistering): left allmulticast mode
[  466.762462][ T5186] Bluetooth: hci2: command tx timeout
[  467.484519][T16123] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  467.785984][T15928] hsr_slave_0: entered promiscuous mode
[  467.800179][T15928] hsr_slave_1: entered promiscuous mode
[  467.816841][T15928] debugfs: 'hsr0' already exists in 'hsr'
[  467.823721][T15928] Cannot create hsr debugfs directory
[  468.305547][ T6798] IPVS: stop unused estimator thread 0...
[  468.449138][T16171] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  468.746730][ T5978] IPVS: starting estimator thread 0...
[  468.842304][ T5186] Bluetooth: hci2: command tx timeout
[  468.852648][T16195] IPVS: using max 27 ests per chain, 64800 per kthread
[  468.984933][T16204] tipc: New replicast peer: 255.255.255.255
[  468.991613][T16204] tipc: Enabled bearer <udp:syz2>, priority 10
[  469.004098][T15928] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  469.024030][T15928] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  469.044166][T15928] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  469.061535][T15928] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  469.236504][T15928] 8021q: adding VLAN 0 to HW filter on device bond0
[  469.264842][T16219] bridge_slave_0: default FDB implementation only supports local addresses
[  469.279515][T15928] 8021q: adding VLAN 0 to HW filter on device team0
[  469.287994][T16218] bridge_slave_0: default FDB implementation only supports local addresses
[  469.305832][ T8523] bridge0: port 1(bridge_slave_0) entered blocking state
[  469.313234][ T8523] bridge0: port 1(bridge_slave_0) entered forwarding state
[  469.339964][ T8523] bridge0: port 2(bridge_slave_1) entered blocking state
[  469.347362][ T8523] bridge0: port 2(bridge_slave_1) entered forwarding state
[  469.404230][T16223] netlink: 'syz.3.2972': attribute type 1 has an invalid length.
[  469.641878][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  470.056154][T15928] 8021q: adding VLAN 0 to HW filter on device batadv0
[  470.157155][T15928] veth0_vlan: entered promiscuous mode
[  470.207062][T15928] veth1_vlan: entered promiscuous mode
[  470.280352][T16264] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  470.395647][T16272] __nla_validate_parse: 8 callbacks suppressed
[  470.395667][T16272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2983'.
[  470.415694][T16264] tipc: Disabling bearer <eth:syzkaller0>
[  470.488477][T15928] veth0_macvtap: entered promiscuous mode
[  470.518126][T15928] veth1_macvtap: entered promiscuous mode
[  470.696093][T15928] batman_adv: batadv0: Interface activated: batadv_slave_0
[  470.887456][T15928] batman_adv: batadv0: Interface activated: batadv_slave_1
[  470.923984][ T5186] Bluetooth: hci2: command tx timeout
[  471.011806][ T8525] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  471.030917][ T8525] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  471.068650][ T8525] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  471.156571][ T8525] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  471.171614][T16302] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2992'.
[  471.181377][T16302] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2992'.
[  471.220357][T16300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2992'.
[  471.354105][T16304] netlink: 'syz.4.2993': attribute type 5 has an invalid length.
[  471.380174][ T8533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  471.426915][ T8533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  471.523710][ T6798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  471.540348][T16312] netlink: 'syz.4.2995': attribute type 1 has an invalid length.
[  471.541654][ T6798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  471.562298][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  471.719258][T16324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2995'.
[  471.774578][T16312] 8021q: adding VLAN 0 to HW filter on device bond7
[  471.776914][T16325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2997'.
[  471.798468][T16325] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  471.850330][T16328] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2995'.
[  471.850812][T16329] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2996'.
[  471.924945][T16312] gretap0: entered allmulticast mode
[  472.006597][T16333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2998'.
[  472.188815][T16338] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  472.222396][T16338] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  472.403747][T16345] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  472.414782][T16345] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  472.452430][T16345] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  472.595855][T16345] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  472.606141][T16345] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  472.644993][T16345] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  472.980184][T16363] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  472.990486][T16363] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  472.999326][T16363] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  473.008405][T16363] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  473.016951][T16363] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  473.054755][T16345] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  473.112133][T16345] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  473.166880][T16345] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  473.216396][T16366] bridge11: entered allmulticast mode
[  473.232634][T16366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3005'.
[  473.299544][T16345] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  473.321821][T16363] Bluetooth: hci2: command 0x0405 tx timeout
[  473.330152][T16345] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  473.369769][T16345] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  473.421427][T16377] netlink: 'syz.0.3010': attribute type 1 has an invalid length.
[  473.699017][ T8532] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  473.715740][ T8532] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  473.725611][ T8532] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  473.788266][ T8535] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  473.800998][ T8535] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  473.810347][ T8535] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  473.853132][ T8535] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  473.864792][ T8535] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  473.881862][ T8535] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  474.037367][ T8533] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  474.052116][ T8533] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  474.062444][ T8533] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  474.281182][T16362] chnl_net:caif_netlink_parms(): no params data found
[  474.370444][T16427] IPVS: Scheduler module ip_vs_sip not found
[  474.534746][T16362] bridge0: port 1(bridge_slave_0) entered blocking state
[  474.553490][T16362] bridge0: port 1(bridge_slave_0) entered disabled state
[  474.560787][T16362] bridge_slave_0: entered allmulticast mode
[  474.570353][T16362] bridge_slave_0: entered promiscuous mode
[  474.580459][T16362] bridge0: port 2(bridge_slave_1) entered blocking state
[  474.588504][T16362] bridge0: port 2(bridge_slave_1) entered disabled state
[  474.598623][T16362] bridge_slave_1: entered allmulticast mode
[  474.608453][T16362] bridge_slave_1: entered promiscuous mode
[  474.679590][T16362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  474.748554][T16362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  474.869460][T16362] team0: Port device team_slave_0 added
[  474.886223][T16362] team0: Port device team_slave_1 added
[  474.982507][T16462] netlink: zone id is out of range
[  474.988021][T16462] netlink: zone id is out of range
[  475.003202][T16462] netlink: zone id is out of range
[  475.009293][T16462] netlink: zone id is out of range
[  475.012158][T16362] batman_adv: batadv0: Adding interface: batadv_slave_0
[  475.027385][T16462] netlink: zone id is out of range
[  475.039309][T16362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  475.062041][T16462] netlink: zone id is out of range
[  475.068280][T16362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  475.081861][ T5186] Bluetooth: hci5: command tx timeout
[  475.089806][T16462] netlink: zone id is out of range
[  475.103584][T16462] netlink: zone id is out of range
[  475.112842][T16362] batman_adv: batadv0: Adding interface: batadv_slave_1
[  475.120777][T16362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  475.135467][T16462] netlink: zone id is out of range
[  475.149171][T16362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  475.331402][T16471] bridge0: port 2(bridge_slave_1) entered disabled state
[  475.340685][T16471] bridge0: port 1(bridge_slave_0) entered disabled state
[  475.400093][T16362] hsr_slave_0: entered promiscuous mode
[  475.423143][T16362] hsr_slave_1: entered promiscuous mode
[  475.443148][T16362] debugfs: 'hsr0' already exists in 'hsr'
[  475.449175][T16362] Cannot create hsr debugfs directory
[  475.525633][T16480] netlink: 'syz.0.3039': attribute type 11 has an invalid length.
[  475.953738][T16362] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  475.995179][T16362] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  476.138432][T16515] netlink: 'syz.0.3050': attribute type 21 has an invalid length.
[  476.183776][T16362] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  476.198958][T16362] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  476.229048][T16515] __nla_validate_parse: 3 callbacks suppressed
[  476.229069][T16515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3050'.
[  476.335751][T16362] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  476.346704][T16362] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  476.370252][T16527] netlink: 81 bytes leftover after parsing attributes in process `syz.4.3054'.
[  476.436294][T16362] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  476.458375][T16362] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  476.559993][T16533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3056'.
[  476.589843][T16533] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3056'.
[  476.603562][T16533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3056'.
[  476.626972][T16533] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3056'.
[  476.717781][T16362] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  476.749521][T16362] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  476.769377][T16362] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  476.789873][T16362] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  477.098928][T16549] sctp: [Deprecated]: syz.4.3060 (pid 16549) Use of struct sctp_assoc_value in delayed_ack socket option.
[  477.098928][T16549] Use struct sctp_sack_info instead
[  477.111516][T16362] 8021q: adding VLAN 0 to HW filter on device bond0
[  477.168405][ T5186] Bluetooth: hci5: command tx timeout
[  477.185951][T16362] 8021q: adding VLAN 0 to HW filter on device team0
[  477.200007][ T8524] bridge0: port 1(bridge_slave_0) entered blocking state
[  477.207209][ T8524] bridge0: port 1(bridge_slave_0) entered forwarding state
[  477.360641][T16554] bond1: entered promiscuous mode
[  477.371138][T16565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3066'.
[  477.380276][T16554] bond1: entered allmulticast mode
[  477.384590][T16566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3065'.
[  477.390084][T16554] 8021q: adding VLAN 0 to HW filter on device bond1
[  477.428596][ T8524] bridge0: port 2(bridge_slave_1) entered blocking state
[  477.435902][ T8524] bridge0: port 2(bridge_slave_1) entered forwarding state
[  477.696560][T16579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3071'.
[  478.025648][T16589] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  478.044926][T16589] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  478.076709][T16589] tipc: Resetting bearer <eth:syzkaller0>
[  478.078186][T16599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3075'.
[  478.104672][   T24] IPVS: starting estimator thread 0...
[  478.146571][T16362] 8021q: adding VLAN 0 to HW filter on device batadv0
[  478.213616][T16606] IPVS: using max 33 ests per chain, 79200 per kthread
[  478.312150][ T8533] tipc: Resetting bearer <eth:syzkaller0>
[  478.344653][T16362] veth0_vlan: entered promiscuous mode
[  478.410352][T16615] vlan2: entered promiscuous mode
[  478.444111][T16615] bridge0: entered promiscuous mode
[  478.507514][T16362] veth1_vlan: entered promiscuous mode
[  478.544468][T16618] dvmrp1: entered allmulticast mode
[  478.713372][T16362] veth0_macvtap: entered promiscuous mode
[  478.736922][T16362] veth1_macvtap: entered promiscuous mode
[  478.813094][T16362] batman_adv: batadv0: Interface activated: batadv_slave_0
[  478.841340][T16637] hsr0 speed is unknown, defaulting to 1000
[  478.858368][T16362] batman_adv: batadv0: Interface activated: batadv_slave_1
[  478.881829][T16637] hsr0 speed is unknown, defaulting to 1000
[  478.901380][ T8524] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  478.919461][ T8524] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  478.940931][T16637] hsr0 speed is unknown, defaulting to 1000
[  478.942161][T16643] IPVS: set_ctl: invalid protocol: 50 172.20.20.63:20002
[  478.966799][ T8524] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  479.009675][T16637] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  479.106829][T16642] syzkaller0: entered promiscuous mode
[  479.113881][T16642] syzkaller0: entered allmulticast mode
[  479.127531][ T8524] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  479.146438][T16637] hsr0 speed is unknown, defaulting to 1000
[  479.245956][ T5186] Bluetooth: hci5: command tx timeout
[  480.859990][T16637] hsr0 speed is unknown, defaulting to 1000
[  480.895432][T16637] hsr0 speed is unknown, defaulting to 1000
[  480.927442][ T8524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  480.946852][ T8524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  481.014556][T16637] hsr0 speed is unknown, defaulting to 1000
[  481.072647][T16637] hsr0 speed is unknown, defaulting to 1000
[  481.096003][ T6798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  481.108349][T16637] hsr0 speed is unknown, defaulting to 1000
[  481.126886][ T6798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  481.242463][T16669] __nla_validate_parse: 5 callbacks suppressed
[  481.242485][T16669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3095'.
[  481.323924][ T5186] Bluetooth: hci5: command tx timeout
[  481.677584][T16697] bridge1: entered promiscuous mode
[  481.724311][T16697] bridge1: entered allmulticast mode
[  481.975124][T16714] IPVS: set_ctl: invalid protocol: 59 172.20.20.40:20001
[  482.284726][T16363] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  482.294663][T16363] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  482.306508][T16363] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  482.316575][T16363] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  482.324877][T16363] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  482.409226][T16726] hsr0 speed is unknown, defaulting to 1000
[  482.442552][    C1] ==================================================================
[  482.450697][    C1] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400
[  482.458631][    C1] Read of size 1 at addr ffff8880557dc330 by task syz-executor/16362
[  482.466826][    C1] 
[  482.469286][    C1] CPU: 1 UID: 0 PID: 16362 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  482.469315][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  482.469338][    C1] Call Trace:
[  482.469347][    C1]  <IRQ>
[  482.469357][    C1]  dump_stack_lvl+0x189/0x250
[  482.469388][    C1]  ? __kasan_check_byte+0x12/0x40
[  482.469422][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  482.469446][    C1]  ? lock_release+0x4b/0x3e0
[  482.469480][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  482.469508][    C1]  print_report+0xca/0x240
[  482.469528][    C1]  ? xfrm_state_find+0x2cf2/0x5400
[  482.469548][    C1]  kasan_report+0x118/0x150
[  482.469579][    C1]  ? xfrm_state_find+0x2cf2/0x5400
[  482.469605][    C1]  xfrm_state_find+0x2cf2/0x5400
[  482.469626][    C1]  ? check_noncircular+0xe0/0x160
[  482.469653][    C1]  ? validate_chain+0x897/0x2140
[  482.469680][    C1]  ? xfrm_state_find+0x1da/0x5400
[  482.469704][    C1]  ? __pfx_xfrm_state_find+0x10/0x10
[  482.469737][    C1]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  482.469780][    C1]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  482.469812][    C1]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  482.469841][    C1]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  482.469873][    C1]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  482.469922][    C1]  ? xfrm_expand_policies+0x41f/0x6a0
[  482.469951][    C1]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  482.469984][    C1]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  482.470021][    C1]  ? dst_cache_get+0x10e/0x5b0
[  482.470050][    C1]  xfrm_lookup_route+0x3c/0x1c0
[  482.470078][    C1]  tipc_udp_xmit+0x1c3/0xaa0
[  482.470102][    C1]  ? tipc_udp_xmit+0xa4/0xaa0
[  482.470124][    C1]  ? __pfx_tipc_udp_xmit+0x10/0x10
[  482.470148][    C1]  ? __pskb_copy_fclone+0x9b5/0xfb0
[  482.470173][    C1]  ? __asan_memcpy+0x40/0x70
[  482.470195][    C1]  ? __pskb_copy_fclone+0x9b5/0xfb0
[  482.470229][    C1]  tipc_udp_send_msg+0x27f/0x3f0
[  482.470256][    C1]  tipc_bearer_xmit_skb+0x2b0/0x400
[  482.470289][    C1]  ? tipc_bearer_xmit_skb+0xa9/0x400
[  482.470320][    C1]  ? __pfx_tipc_bearer_xmit_skb+0x10/0x10
[  482.470360][    C1]  tipc_disc_timeout+0x580/0x6d0
[  482.470394][    C1]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  482.470434][    C1]  call_timer_fn+0x17e/0x5f0
[  482.470466][    C1]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  482.470496][    C1]  ? call_timer_fn+0xbe/0x5f0
[  482.470526][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  482.470562][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  482.470591][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  482.470621][    C1]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  482.470652][    C1]  __run_timer_base+0x61a/0x860
[  482.470680][    C1]  ? ktime_get+0x3e/0x1f0
[  482.470711][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  482.470737][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  482.470772][    C1]  run_timer_softirq+0xb7/0x180
[  482.470801][    C1]  handle_softirqs+0x283/0x870
[  482.470825][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  482.470848][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  482.470875][    C1]  __irq_exit_rcu+0xca/0x1f0
[  482.470895][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  482.470921][    C1]  irq_exit_rcu+0x9/0x30
[  482.470940][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  482.470970][    C1]  </IRQ>
[  482.470978][    C1]  <TASK>
[  482.470987][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  482.471024][    C1] RIP: 0010:unwind_next_frame+0xa5/0x2390
[  482.471049][    C1] Code: de 1b 00 00 41 8b 06 85 c0 0f 84 32 02 00 00 89 84 24 84 00 00 00 4c 89 bc 24 90 00 00 00 e8 f2 57 34 00 4c 8d 3d 00 00 00 00 <48> c7 c7 20 9f 13 8e 31 f6 31 d2 b9 02 00 00 00 45 31 c0 45 31 c9
[  482.471067][    C1] RSP: 0018:ffffc90004916ad8 EFLAGS: 00000283
[  482.471088][    C1] RAX: 0000000000000001 RBX: ffffffff820c0ab1 RCX: dffffc0000000000
[  482.471104][    C1] RDX: dffffc0000000000 RSI: ffffffff820c0ab1 RDI: ffffc90004916ba8
[  482.471121][    C1] RBP: dffffc0000000000 R08: ffffc90004916c70 R09: 0000000000000007
[  482.471135][    C1] R10: ffffc90004916bf8 R11: ffffffff81ac3ae0 R12: 1ffff92000922d75
[  482.471152][    C1] R13: ffffc90004916be0 R14: ffffc90004916ba8 R15: ffffffff8172c195
[  482.471169][    C1]  ? unwind_next_frame+0xa5/0x2390
[  482.471194][    C1]  ? copy_pmd_range+0x6a91/0x71d0
[  482.471222][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  482.471251][    C1]  ? copy_pmd_range+0x6a91/0x71d0
[  482.471283][    C1]  ? unwind_next_frame+0x9e/0x2390
[  482.471310][    C1]  ? unwind_next_frame+0xa5/0x2390
[  482.471333][    C1]  ? __pte_alloc+0x25/0x1a0
[  482.471355][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  482.471381][    C1]  arch_stack_walk+0x11c/0x150
[  482.471409][    C1]  ? copy_pmd_range+0x6a91/0x71d0
[  482.471441][    C1]  stack_trace_save+0x9c/0xe0
[  482.471466][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  482.471496][    C1]  save_stack+0xf5/0x1f0
[  482.471525][    C1]  ? __pfx_save_stack+0x10/0x10
[  482.471550][    C1]  ? post_alloc_hook+0x240/0x2a0
[  482.471579][    C1]  ? get_page_from_freelist+0x21e4/0x22c0
[  482.471599][    C1]  ? __alloc_frozen_pages_noprof+0x181/0x370
[  482.471619][    C1]  ? alloc_pages_mpol+0x232/0x4a0
[  482.471645][    C1]  ? alloc_pages_noprof+0xa9/0x190
[  482.471673][    C1]  ? pte_alloc_one+0x21/0x170
[  482.471694][    C1]  ? __pte_alloc+0x25/0x1a0
[  482.471711][    C1]  ? copy_pmd_range+0x6a91/0x71d0
[  482.471744][    C1]  ? seqcount_lockdep_reader_access+0x102/0x180
[  482.471777][    C1]  __set_page_owner+0x8d/0x4a0
[  482.471805][    C1]  ? __pfx___set_page_owner+0x10/0x10
[  482.471837][    C1]  post_alloc_hook+0x240/0x2a0
[  482.471869][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  482.471890][    C1]  ? finish_task_switch+0x18b/0x950
[  482.471941][    C1]  ? __pfx_get_page_from_freelist+0x10/0x10
[  482.471964][    C1]  ? prepare_alloc_pages+0x213/0x610
[  482.471988][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  482.472020][    C1]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  482.472049][    C1]  ? copy_pmd_range+0x6890/0x71d0
[  482.472081][    C1]  alloc_pages_mpol+0x232/0x4a0
[  482.472114][    C1]  alloc_pages_noprof+0xa9/0x190
[  482.472146][    C1]  pte_alloc_one+0x21/0x170
[  482.472170][    C1]  __pte_alloc+0x25/0x1a0
[  482.472192][    C1]  copy_pmd_range+0x6a91/0x71d0
[  482.472237][    C1]  ? stack_depot_save_flags+0x40/0x860
[  482.472272][    C1]  ? __pfx_copy_pmd_range+0x10/0x10
[  482.472317][    C1]  copy_page_range+0xc14/0x1270
[  482.472338][    C1]  ? __lock_acquire+0xab9/0xd20
[  482.472380][    C1]  ? __pfx_copy_page_range+0x10/0x10
[  482.472406][    C1]  ? up_write+0x1c4/0x420
[  482.472427][    C1]  ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10
[  482.472452][    C1]  dup_mmap+0xf57/0x1ac0
[  482.472493][    C1]  ? __pfx_dup_mmap+0x10/0x10
[  482.472528][    C1]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  482.472550][    C1]  ? mm_init+0xcc3/0xef0
[  482.472576][    C1]  copy_mm+0x13c/0x4b0
[  482.472600][    C1]  copy_process+0x1706/0x3c00
[  482.472632][    C1]  ? copy_process+0x97f/0x3c00
[  482.472659][    C1]  ? __pfx_copy_process+0x10/0x10
[  482.472688][    C1]  kernel_clone+0x21e/0x840
[  482.472713][    C1]  ? css_rstat_updated+0x23a/0x4f0
[  482.472736][    C1]  ? __pfx_kernel_clone+0x10/0x10
[  482.472771][    C1]  __x64_sys_clone+0x18b/0x1e0
[  482.472797][    C1]  ? count_memcg_event_mm+0x21/0x260
[  482.472823][    C1]  ? __pfx___x64_sys_clone+0x10/0x10
[  482.472858][    C1]  ? do_user_addr_fault+0xc8a/0x1390
[  482.472894][    C1]  ? do_syscall_64+0xbe/0x3b0
[  482.472916][    C1]  do_syscall_64+0xfa/0x3b0
[  482.472934][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  482.472965][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  482.472986][    C1]  ? clear_bhb_loop+0x60/0xb0
[  482.473016][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  482.473036][    C1] RIP: 0033:0x7f6de5385453
[  482.473056][    C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00
[  482.473074][    C1] RSP: 002b:00007ffd8e619388 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  482.473097][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6de5385453
[  482.473113][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  482.473126][    C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001
[  482.473138][    C1] R10: 0000555569f9d7d0 R11: 0000000000000246 R12: 0000000000000000
[  482.473151][    C1] R13: 00000000000927c0 R14: 0000000000075c54 R15: 00007ffd8e619520
[  482.473175][    C1]  </TASK>
[  482.473183][    C1] 
[  483.278538][    C1] Allocated by task 12859:
[  483.282952][    C1]  kasan_save_track+0x3e/0x80
[  483.287641][    C1]  __kasan_slab_alloc+0x6c/0x80
[  483.292499][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  483.297965][    C1]  xfrm_state_alloc+0x24/0x2f0
[  483.302741][    C1]  __find_acq_core+0x8a7/0x1c00
[  483.307595][    C1]  xfrm_find_acq+0x78/0xa0
[  483.312015][    C1]  xfrm_alloc_userspi+0x6b3/0xc90
[  483.317052][    C1]  xfrm_user_rcv_msg+0x7a0/0xab0
[  483.321995][    C1]  netlink_rcv_skb+0x205/0x470
[  483.326784][    C1]  xfrm_netlink_rcv+0x79/0x90
[  483.331467][    C1]  netlink_unicast+0x82c/0x9e0
[  483.336239][    C1]  netlink_sendmsg+0x805/0xb30
[  483.341010][    C1]  __sock_sendmsg+0x21c/0x270
[  483.345691][    C1]  ____sys_sendmsg+0x505/0x830
[  483.350485][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  483.355167][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  483.360107][    C1]  do_syscall_64+0xfa/0x3b0
[  483.364609][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.370502][    C1] 
[  483.372823][    C1] Freed by task 24:
[  483.376625][    C1]  kasan_save_track+0x3e/0x80
[  483.381307][    C1]  kasan_save_free_info+0x46/0x50
[  483.386332][    C1]  __kasan_slab_free+0x5b/0x80
[  483.391195][    C1]  kmem_cache_free+0x18f/0x400
[  483.396008][    C1]  xfrm_state_gc_task+0x52d/0x6b0
[  483.401047][    C1]  process_scheduled_works+0xae1/0x17b0
[  483.406594][    C1]  worker_thread+0x8a0/0xda0
[  483.411189][    C1]  kthread+0x70e/0x8a0
[  483.415315][    C1]  ret_from_fork+0x3fc/0x770
[  483.419910][    C1]  ret_from_fork_asm+0x1a/0x30
[  483.424680][    C1] 
[  483.427011][    C1] The buggy address belongs to the object at ffff8880557dc000
[  483.427011][    C1]  which belongs to the cache xfrm_state of size 928
[  483.440978][    C1] The buggy address is located 816 bytes inside of
[  483.440978][    C1]  freed 928-byte region [ffff8880557dc000, ffff8880557dc3a0)
[  483.454782][    C1] 
[  483.457112][    C1] The buggy address belongs to the physical page:
[  483.463537][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880557dddc0 pfn:0x557dc
[  483.473643][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  483.482172][    C1] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  483.490172][    C1] page_type: f5(slab)
[  483.494164][    C1] raw: 00fff00000000040 ffff88801af783c0 0000000000000000 0000000000000001
[  483.502779][    C1] raw: ffff8880557dddc0 00000000000f000c 00000000f5000000 0000000000000000
[  483.511384][    C1] head: 00fff00000000040 ffff88801af783c0 0000000000000000 0000000000000001
[  483.520054][    C1] head: ffff8880557dddc0 00000000000f000c 00000000f5000000 0000000000000000
[  483.528734][    C1] head: 00fff00000000002 ffffea000155f701 00000000ffffffff 00000000ffffffff
[  483.537508][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  483.546178][    C1] page dumped because: kasan: bad access detected
[  483.552618][    C1] page_owner tracks the page as allocated
[  483.558332][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6059, tgid 6057 (syz.4.24), ts 100734439876, free_ts 100726235723
[  483.577441][    C1]  post_alloc_hook+0x240/0x2a0
[  483.582220][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  483.587769][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  483.593664][    C1]  alloc_pages_mpol+0x232/0x4a0
[  483.598521][    C1]  allocate_slab+0x8a/0x370
[  483.603033][    C1]  ___slab_alloc+0xbeb/0x1420
[  483.607738][    C1]  kmem_cache_alloc_noprof+0x283/0x3c0
[  483.613204][    C1]  xfrm_state_alloc+0x24/0x2f0
[  483.617969][    C1]  pfkey_add+0x6e4/0x2e00
[  483.622301][    C1]  pfkey_sendmsg+0xbfe/0x1090
[  483.626981][    C1]  __sock_sendmsg+0x21c/0x270
[  483.631683][    C1]  ____sys_sendmsg+0x505/0x830
[  483.636467][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  483.641144][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  483.646107][    C1]  do_syscall_64+0xfa/0x3b0
[  483.650612][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  483.656504][    C1] page last free pid 6059 tgid 6057 stack trace:
[  483.662835][    C1]  __free_frozen_pages+0xbc4/0xd30
[  483.667970][    C1]  stack_depot_save_flags+0x436/0x860
[  483.673350][    C1]  kasan_save_track+0x4f/0x80
[  483.678043][    C1]  __kasan_slab_alloc+0x6c/0x80
[  483.682911][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  483.688396][    C1]  skb_clone+0x212/0x3a0
[  483.692653][    C1]  dev_queue_xmit_nit+0x416/0xcc0
[  483.697768][    C1]  dev_hard_start_xmit+0x1be/0x830
[  483.702986][    C1]  __dev_queue_xmit+0x1b8d/0x3b50
[  483.708105][    C1]  __netlink_deliver_tap+0x5ad/0x850
[  483.713401][    C1]  netlink_deliver_tap+0x19c/0x1b0
[  483.718611][    C1]  netlink_sendskb+0x68/0x140
[  483.723296][    C1]  netlink_unicast+0x397/0x9e0
[  483.728071][    C1]  netlink_rcv_skb+0x28c/0x470
[  483.732857][    C1]  netlink_unicast+0x82c/0x9e0
[  483.737658][    C1]  netlink_sendmsg+0x805/0xb30
[  483.742436][    C1] 
[  483.744764][    C1] Memory state around the buggy address:
[  483.750394][    C1]  ffff8880557dc200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  483.758456][    C1]  ffff8880557dc280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  483.766712][    C1] >ffff8880557dc300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  483.774780][    C1]                                      ^
[  483.780411][    C1]  ffff8880557dc380: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  483.788475][    C1]  ffff8880557dc400: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00
[  483.796556][    C1] ==================================================================
[  483.804811][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  483.812040][    C1] CPU: 1 UID: 0 PID: 16362 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  483.821643][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  483.831728][    C1] Call Trace:
[  483.835028][    C1]  <IRQ>
[  483.837893][    C1]  dump_stack_lvl+0x99/0x250
[  483.842521][    C1]  ? __asan_memcpy+0x40/0x70
[  483.847152][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  483.852391][    C1]  ? __pfx__printk+0x10/0x10
[  483.857124][    C1]  vpanic+0x281/0x750
[  483.861182][    C1]  ? __pfx_vpanic+0x10/0x10
[  483.865722][    C1]  ? irqentry_exit+0x74/0x90
[  483.870365][    C1]  panic+0xb9/0xc0
[  483.874116][    C1]  ? __pfx_panic+0x10/0x10
[  483.878568][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  483.884512][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  483.890483][    C1]  ? xfrm_state_find+0x2cf2/0x5400
[  483.895635][    C1]  check_panic_on_warn+0x89/0xb0
[  483.900629][    C1]  ? xfrm_state_find+0x2cf2/0x5400
[  483.905836][    C1]  end_report+0x78/0x160
[  483.910125][    C1]  kasan_report+0x129/0x150
[  483.914763][    C1]  ? xfrm_state_find+0x2cf2/0x5400
[  483.919916][    C1]  xfrm_state_find+0x2cf2/0x5400
[  483.924885][    C1]  ? check_noncircular+0xe0/0x160
[  483.929952][    C1]  ? validate_chain+0x897/0x2140
[  483.935015][    C1]  ? xfrm_state_find+0x1da/0x5400
[  483.940085][    C1]  ? __pfx_xfrm_state_find+0x10/0x10
[  483.945414][    C1]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  483.951630][    C1]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  483.957564][    C1]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  483.964198][    C1]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  483.970673][    C1]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  483.976712][    C1]  ? xfrm_expand_policies+0x41f/0x6a0
[  483.982127][    C1]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  483.987541][    C1]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  483.993388][    C1]  ? dst_cache_get+0x10e/0x5b0
[  483.998209][    C1]  xfrm_lookup_route+0x3c/0x1c0
[  484.003089][    C1]  tipc_udp_xmit+0x1c3/0xaa0
[  484.007702][    C1]  ? tipc_udp_xmit+0xa4/0xaa0
[  484.012480][    C1]  ? __pfx_tipc_udp_xmit+0x10/0x10
[  484.017622][    C1]  ? __pskb_copy_fclone+0x9b5/0xfb0
[  484.022859][    C1]  ? __asan_memcpy+0x40/0x70
[  484.027470][    C1]  ? __pskb_copy_fclone+0x9b5/0xfb0
[  484.032691][    C1]  tipc_udp_send_msg+0x27f/0x3f0
[  484.037655][    C1]  tipc_bearer_xmit_skb+0x2b0/0x400
[  484.042882][    C1]  ? tipc_bearer_xmit_skb+0xa9/0x400
[  484.048194][    C1]  ? __pfx_tipc_bearer_xmit_skb+0x10/0x10
[  484.053943][    C1]  tipc_disc_timeout+0x580/0x6d0
[  484.058907][    C1]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  484.064402][    C1]  call_timer_fn+0x17e/0x5f0
[  484.069009][    C1]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  484.074482][    C1]  ? call_timer_fn+0xbe/0x5f0
[  484.079170][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  484.084303][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  484.089514][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  484.094739][    C1]  ? __pfx_tipc_disc_timeout+0x10/0x10
[  484.100210][    C1]  __run_timer_base+0x61a/0x860
[  484.105071][    C1]  ? ktime_get+0x3e/0x1f0
[  484.109416][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  484.114800][    C1]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  484.121078][    C1]  run_timer_softirq+0xb7/0x180
[  484.125972][    C1]  handle_softirqs+0x283/0x870
[  484.130749][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  484.135530][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  484.140836][    C1]  __irq_exit_rcu+0xca/0x1f0
[  484.145434][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  484.150665][    C1]  irq_exit_rcu+0x9/0x30
[  484.154937][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  484.160590][    C1]  </IRQ>
[  484.163525][    C1]  <TASK>
[  484.166463][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  484.172449][    C1] RIP: 0010:unwind_next_frame+0xa5/0x2390
[  484.178172][    C1] Code: de 1b 00 00 41 8b 06 85 c0 0f 84 32 02 00 00 89 84 24 84 00 00 00 4c 89 bc 24 90 00 00 00 e8 f2 57 34 00 4c 8d 3d 00 00 00 00 <48> c7 c7 20 9f 13 8e 31 f6 31 d2 b9 02 00 00 00 45 31 c0 45 31 c9
[  484.197781][    C1] RSP: 0018:ffffc90004916ad8 EFLAGS: 00000283
[  484.203858][    C1] RAX: 0000000000000001 RBX: ffffffff820c0ab1 RCX: dffffc0000000000
[  484.211840][    C1] RDX: dffffc0000000000 RSI: ffffffff820c0ab1 RDI: ffffc90004916ba8
[  484.219824][    C1] RBP: dffffc0000000000 R08: ffffc90004916c70 R09: 0000000000000007
[  484.227796][    C1] R10: ffffc90004916bf8 R11: ffffffff81ac3ae0 R12: 1ffff92000922d75
[  484.235774][    C1] R13: ffffc90004916be0 R14: ffffc90004916ba8 R15: ffffffff8172c195
[  484.243758][    C1]  ? unwind_next_frame+0xa5/0x2390
[  484.248886][    C1]  ? copy_pmd_range+0x6a91/0x71d0
[  484.253917][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  484.260078][    C1]  ? copy_pmd_range+0x6a91/0x71d0
[  484.265113][    C1]  ? unwind_next_frame+0x9e/0x2390
[  484.270229][    C1]  ? unwind_next_frame+0xa5/0x2390
[  484.275355][    C1]  ? __pte_alloc+0x25/0x1a0
[  484.279858][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  484.286023][    C1]  arch_stack_walk+0x11c/0x150
[  484.290796][    C1]  ? copy_pmd_range+0x6a91/0x71d0
[  484.295915][    C1]  stack_trace_save+0x9c/0xe0
[  484.300598][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  484.306010][    C1]  save_stack+0xf5/0x1f0
[  484.310270][    C1]  ? __pfx_save_stack+0x10/0x10
[  484.315133][    C1]  ? post_alloc_hook+0x240/0x2a0
[  484.320099][    C1]  ? get_page_from_freelist+0x21e4/0x22c0
[  484.325821][    C1]  ? __alloc_frozen_pages_noprof+0x181/0x370
[  484.331862][    C1]  ? alloc_pages_mpol+0x232/0x4a0
[  484.336900][    C1]  ? alloc_pages_noprof+0xa9/0x190
[  484.342024][    C1]  ? pte_alloc_one+0x21/0x170
[  484.346712][    C1]  ? __pte_alloc+0x25/0x1a0
[  484.351215][    C1]  ? copy_pmd_range+0x6a91/0x71d0
[  484.356272][    C1]  ? seqcount_lockdep_reader_access+0x102/0x180
[  484.362527][    C1]  __set_page_owner+0x8d/0x4a0
[  484.367312][    C1]  ? __pfx___set_page_owner+0x10/0x10
[  484.372697][    C1]  post_alloc_hook+0x240/0x2a0
[  484.377473][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  484.383025][    C1]  ? finish_task_switch+0x18b/0x950
[  484.388361][    C1]  ? __pfx_get_page_from_freelist+0x10/0x10
[  484.394254][    C1]  ? prepare_alloc_pages+0x213/0x610
[  484.399601][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  484.405413][    C1]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  484.411756][    C1]  ? copy_pmd_range+0x6890/0x71d0
[  484.416807][    C1]  alloc_pages_mpol+0x232/0x4a0
[  484.421676][    C1]  alloc_pages_noprof+0xa9/0x190
[  484.426646][    C1]  pte_alloc_one+0x21/0x170
[  484.431176][    C1]  __pte_alloc+0x25/0x1a0
[  484.435506][    C1]  copy_pmd_range+0x6a91/0x71d0
[  484.440387][    C1]  ? stack_depot_save_flags+0x40/0x860
[  484.445875][    C1]  ? __pfx_copy_pmd_range+0x10/0x10
[  484.451106][    C1]  copy_page_range+0xc14/0x1270
[  484.455963][    C1]  ? __lock_acquire+0xab9/0xd20
[  484.460844][    C1]  ? __pfx_copy_page_range+0x10/0x10
[  484.466139][    C1]  ? up_write+0x1c4/0x420
[  484.470477][    C1]  ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10
[  484.477251][    C1]  dup_mmap+0xf57/0x1ac0
[  484.481515][    C1]  ? __pfx_dup_mmap+0x10/0x10
[  484.486213][    C1]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  484.492111][    C1]  ? mm_init+0xcc3/0xef0
[  484.496364][    C1]  copy_mm+0x13c/0x4b0
[  484.500436][    C1]  copy_process+0x1706/0x3c00
[  484.505121][    C1]  ? copy_process+0x97f/0x3c00
[  484.509903][    C1]  ? __pfx_copy_process+0x10/0x10
[  484.514935][    C1]  kernel_clone+0x21e/0x840
[  484.519450][    C1]  ? css_rstat_updated+0x23a/0x4f0
[  484.524596][    C1]  ? __pfx_kernel_clone+0x10/0x10
[  484.529649][    C1]  __x64_sys_clone+0x18b/0x1e0
[  484.534417][    C1]  ? count_memcg_event_mm+0x21/0x260
[  484.539712][    C1]  ? __pfx___x64_sys_clone+0x10/0x10
[  484.545008][    C1]  ? do_user_addr_fault+0xc8a/0x1390
[  484.550302][    C1]  ? do_syscall_64+0xbe/0x3b0
[  484.554985][    C1]  do_syscall_64+0xfa/0x3b0
[  484.559487][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  484.564703][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.570768][    C1]  ? clear_bhb_loop+0x60/0xb0
[  484.575445][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.581342][    C1] RIP: 0033:0x7f6de5385453
[  484.585759][    C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00
[  484.605373][    C1] RSP: 002b:00007ffd8e619388 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  484.613798][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6de5385453
[  484.621776][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  484.629766][    C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001
[  484.637741][    C1] R10: 0000555569f9d7d0 R11: 0000000000000246 R12: 0000000000000000
[  484.645724][    C1] R13: 00000000000927c0 R14: 0000000000075c54 R15: 00007ffd8e619520
[  484.653715][    C1]  </TASK>
[  484.657133][    C1] Kernel Offset: disabled
[  484.661457][    C1] Rebooting in 86400 seconds..