last executing test programs:

2.76036673s ago: executing program 1 (id=1616):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0xfffffffffffffd5a}}, 0x48044)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, 0x0}, 0x3000c085)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004)
close(0x3)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010001fff00000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0200000000000600180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r3, @ANYBLOB="bf990808e5059113b4f8dbfa641d637e06723261a5a46ca84460fef8114a9b0dc32305a5e364e250beafbd9f8c4f16baa44a15a845e7cc05a8b25d7944a94e"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

2.291422029s ago: executing program 3 (id=1624):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4000000000000407910000000000000670000c200000000950005000000000071a13928b72c696950a4edd77f9876d874394900f3bde847f8c78119dfbc27abc969c82ce6f6f0b2e10179582eed3525598659f1307bc7dea42e897c2305fd2a9989f18e0b716808f6491a914b82ce112e8a52578b3a8078cfd0b7d34cd51a741cdf3bdf46d174934650e575b0f5097a4d8f97c4b165abe4bb2be76d95cdba3f0b3a790af9d04d66016aeb34cf29cfd883a854803074ce6d65e4f15f11719754006007593f2f12b706682b684633803352f0e8ce93a2570ca6dd0ff917652d"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYRES16=r0], 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB="0000000000000000000005000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb)
ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000000140)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x6, 0x0, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null]})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r1)
socket$inet_udp(0x2, 0x2, 0x0)
socket$packet(0x11, 0x2, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x16}, 0x94)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', <r6=>0x0})
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x11e, 0x488, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000098189eb87a26028e0018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10)
ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x8, 0x3f9a, 0x0, 0x8000000010001, 0x3}, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x40010, r5, 0x0)

1.823807341s ago: executing program 1 (id=1631):
r0 = socket$netlink(0x10, 0x3, 0x7)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x15}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0)

1.659729227s ago: executing program 1 (id=1634):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x44, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x30, 0x18, 0x0, 0x0, @binary="0dac0f000cac0f005608936caaf06bec869c1eba340c8e5349c00de3bf542907da861ef4bbab00d0043522c1"}]}, 0x44}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x1f}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xe}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xc5}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x94}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRESOCT=r3, @ANYRESOCT=r0], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x80400)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f00000002c0))
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@ipv6_getroute={0x1a0, 0x1a, 0x0, 0x70bd29, 0x25dfdbfd, {0xa, 0x20, 0x20, 0x3, 0xfc, 0x0, 0x1, 0x9, 0xc00}, [@RTA_METRICS={0xa8, 0x8, 0x0, 0x1, "d080a2108bb3b41eadbdab156fd68d966b8016b6ed4394edf6b7c1ea6f2b77ab5c388a0bae89f9ef1ea17d8ba65322adbe35cc848062f5ba9f19ccf17d2e5ce051aeeb178cddc06959903e201e7c087a360c3e0aca6ee2f3e901d2151427f0513e6b35deae0a18c7abeded630f936db0900f8364901044dabb0a886ac18266a5890bf18bc18915f877f7a85b9c03c2908ab6e215085652c1042f7a2644283b9c274ee9b8"}, @RTA_IIF={0x8, 0x3, r5}, @RTA_IIF={0x8, 0x3, r8}, @RTA_METRICS={0xffffffffffffff35, 0x8, 0x0, 0x1, "f7688af549c3d5d5c6a961d1d2aa2a3799508e79b49cd4269e49c58e0630d1f492f97d7d9e12f05b8e0e367a50f8fa2d8c9aa8d54fc77ae771722221c714db53b506b9954663cd06dcbbe0d1a0c82c182aedd7091f97f68112f6dd906ef614d900635d39ea827793452c5e90b51483ef011abf8be796bb2039fffdef5630728cc358cf92e81888753afa6308d86c246956bd8c6eec8c52f7185f21e0b97d5238922a641d52da7637c4948d4ab39130610c3739dc4bf5a5fbbbcb042dc16a9823c1b9f4421ff3bc1cfd17ad8c8286298ca8df65f6ed97db1b8a4a38e98eec8f01502350fd1683fd16df6ee6bc245819fdddcb"}, @RTA_PRIORITY={0x8, 0x6, 0x4}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)
syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0)

1.524980016s ago: executing program 2 (id=1635):
r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x20}, 0x18)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000500)=[0x0, 0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x92, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x6a, 0x8, 0x8, &(0x7f0000000380)}}, 0x10)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'macsec0\x00', @ifru_data=&(0x7f0000000040)="164f6980000000a5fd4c77320800235e97ae0afb4b1a00"})
ioctl$sock_netdev_private(r2, 0x89fa, &(0x7f0000000000))
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x18, 0x48, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x8002, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x80}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r0}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x28, 0xe, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0xd8}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'syzkaller1\x00'}]}, 0x30}}, 0xc0)
socket$inet6_sctp(0xa, 0x1, 0x84)

1.467524629s ago: executing program 2 (id=1636):
socket$netlink(0x10, 0x3, 0xe)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
ioctl$sock_inet_sctp_SIOCINQ(r0, 0x5761, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000090000000000000000000000850000004100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001001000850000008200000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000200)="165cb1fa0919976b4e046ea74f70", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000051fa29b7eeffffff00000000080000009111db00"/36], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)

1.431054874s ago: executing program 4 (id=1637):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48)
close(0x3) (async)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000001"], 0x48) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000780)="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"/269, &(0x7f00000001c0)=""/8, 0x2}, 0xfcd0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x20000, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x20000, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000007b00000095"], 0x0}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000007b00000095"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10)
socket$packet(0x11, 0x2, 0x300)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r5, @ANYRES32=r4, @ANYRES64], 0x38}}, 0xaf39ec59ed798e77) (async)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r5, @ANYRES32=r4, @ANYRES64], 0x38}}, 0xaf39ec59ed798e77)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000340)=@sack_info={0x0, 0x2, 0x4}, 0xc)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r6)
r7 = socket$unix(0x1, 0x5, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r4, 0x0, 0x14)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0x0, 0xffff}, {0xfff2, 0x4}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x3c, 0x2, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x47}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x14}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x4}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_TUPDATE={0x8}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x14}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x80000000}, @qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0xc, 0xff, 0x5, 0x31b66579}}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdc1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x6aa}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) (async)
sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x6aa}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.332933998s ago: executing program 3 (id=1638):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000181216000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x24, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x4}, {{0x1, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x2}, {0xffffffffffffffff, 0x1, 0x8}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008004}, 0x0)

1.331908113s ago: executing program 1 (id=1639):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0x38, r2, 0x1, 0x20000002, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_SSID={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004001}, 0x0)

1.286763517s ago: executing program 2 (id=1640):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x7)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0xb4013, r1, 0x0)
close(r0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r2, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890)
sendto$inet(r2, 0x0, 0x0, 0x48000, 0x0, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r6, 0x1, {}, 0xff}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vxcan1\x00', <r7=>0x0})
sendmsg$can_j1939(r4, &(0x7f0000000140)={&(0x7f0000000440)={0x1d, r7, 0x4, {0x2, 0xf0, 0x5}, 0xfe}, 0x18, &(0x7f0000000180)={0x0}, 0x4, 0x0, 0x0, 0x24004045}, 0x1)
setsockopt$sock_int(r4, 0x1, 0x6, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'veth0_virt_wifi\x00', @local})

1.128480647s ago: executing program 1 (id=1641):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x3c}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffff80, 0x10, &(0x7f0000000000), 0x76}, 0x48)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socket(0x11, 0x4, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000069000b4d6d275fd3a3931100e4ffffffffffffff080001"], 0x20}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
socket$xdp(0x2c, 0x3, 0x0) (async)
r3 = socket$xdp(0x2c, 0x3, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x3229000, 0x1000, 0xfffffff7}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x3229000, 0x1000, 0xfffffff7}, 0x20)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async)
bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r5, 0x1, 0x6, 0x0, 0x0) (async)
setsockopt$sock_int(r5, 0x1, 0x6, 0x0, 0x0)
sendmsg$inet(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000200)="1479c369caf28b0c600d5d976b000089bdbf4075277f938a9d8616c6bf", 0x1d}], 0x2}, 0x4048081)
bind$can_j1939(r5, &(0x7f0000000140)={0x1d, r6, 0x2, {0x2, 0x0, 0x4}, 0x2}, 0x18)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0xfffffffe, {0x0, 0x0, 0x74, r6, {0xfffd, 0xffeb}, {0xa, 0xc}, {0xc, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x400c012}, 0x8850)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x56, 0x0, 0x1}, 0x28) (async)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x56, 0x0, 0x1}, 0x28)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-aesni)\x00'}, 0x58) (async)
bind$alg(r8, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-aesni)\x00'}, 0x58)
mmap(&(0x7f0000202000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, r7, 0x0) (async)
mmap(&(0x7f0000202000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, r7, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r9, 0x27, 0xe, 0x0, &(0x7f0000000640)="ed7e17526b2d6f70ac1ae867fd2a", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

1.108930002s ago: executing program 4 (id=1642):
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socketpair(0x9, 0x4, 0xff, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000340)={0x5, {{0x2, 0x4e22, @rand_addr=0x64010102}}, 0x0, 0x1, [{{0x2, 0xff, @multicast1}}]}, 0x110)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
socketpair(0x9, 0x4, 0xff, &(0x7f0000000000)) (async)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000340)={0x5, {{0x2, 0x4e22, @rand_addr=0x64010102}}, 0x0, 0x1, [{{0x2, 0xff, @multicast1}}]}, 0x110) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)

1.060858545s ago: executing program 3 (id=1643):
socket$unix(0x1, 0x5, 0x0) (async)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080))
socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async)
unshare(0x6a040000) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8808}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x20000800) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0}) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x84) (async)
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000440)=@ethtool_ringparam={0xe, 0x0, 0x0, 0x0, 0x0, 0x1002, 0x80000000}}) (async)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r9, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r7) (async)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x3c, r3, 0x1, 0x70bd29, 0xffffffbe, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004056)

855.095548ms ago: executing program 4 (id=1645):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x41, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8)
sendmmsg$inet6(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)='y', 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040), 0x8)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000380), 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x2cc}, 0x8)
sendmmsg$inet6(r2, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x3404c8d4)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010001fff0000000000000000000000003e8288e325523cbc5f5cb654a157bfc8a90074f8491bf815514b966e3814291e6cd73b71f14f68206c69ac291b677b7d5021e52e6b2baf9e85282e2e8620d7cf6ba3c865d7a238cd2e5627dd5d05a8e927c13b22225e1c43515b06f1291984fee2f729282ab3bee6e8c29fa32dbe75e5780be84cfd39540d8d0f8223a4c463af8d173ef202b4f133872866ac5dec9d897ea7bd6b876c071ee4d3900381676f7fb53964dcd4c489a83312af5c886a", @ANYRES32=0x0, @ANYBLOB="0c00040000000000280012800b0001006272696467650000180002800a0014000180c200000e00000800090000000000"], 0x48}}, 0x4000)

804.658586ms ago: executing program 1 (id=1646):
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
sendmmsg(r1, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="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", 0xfd}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f42", 0xb8}, {&(0x7f0000001400)="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", 0xfbd}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199d70f8f7e05d9639d278d53151a6720a51979ffd78dcc1a000929160435bd61e3f36c78b9bd5baef79be54e537dfc26029f52cfd5b4dd3416fc140fce45c077ab5ee206763130ccdaedd3bff9b7a20b6b02e558fddbaf1bff01a4e9c33db278", 0xba}, {&(0x7f0000000a40)}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000640)="5506b690", 0x4}], 0x1}}], 0x3, 0x11)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x110, 0x1, 0xfffffffc}}], 0x18, 0x4c00}, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtaction={0x48, 0x32, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9, 0x3}, {0xfffffd91}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x4, 0x1}}}}]}]}, 0x48}}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r7, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10)
ppoll(&(0x7f0000000500)=[{r9}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4048469)
shutdown(r6, 0x0)

665.120344ms ago: executing program 0 (id=1647):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_emit_ethernet(0x72, &(0x7f0000000580)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa86dd6ef22ada003c3a9dfc010000000000000000000000000001fe0400000000000000000000000000aa03010000006240a61900402f00ff010000000000000000000000000001000000000000000000000000004f965b41a888bc7eec07d28d8b29c5000000"], 0x0)

664.413938ms ago: executing program 4 (id=1648):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x20}}, {0x14, 0x4, @private0}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x34, r2, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x7e}]}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

575.874467ms ago: executing program 3 (id=1649):
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='mm_lru_activate\x00'}, 0x10)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, 0x0, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = socket$key(0xf, 0x3, 0x2)
ioctl$SIOCGSTAMP(r3, 0x8906, 0x0)
setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=@newtaction={0x80, 0x30, 0x1, 0x0, 0xfffffefd, {}, [{0x6c, 0x1, [@m_csum={0x68, 0x1, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x61, 0x1, {{0x4, 0x8, 0x20000000, 0x1ff, 0x8}, 0x41}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x1, 0x8, 0x7860, 0xfff}, 0x25}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x85}, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r7 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmsg$inet6(r7, 0x0, 0x4004000)
r8 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r8, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4)
r9 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0)
poll(0x0, 0x0, 0x9)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd70000500000000000000", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076657468315f766c616e0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
socket$inet6_sctp(0xa, 0x1, 0x84)

506.578056ms ago: executing program 0 (id=1650):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x19, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x26, 0x0, @val=@iter={&(0x7f0000000080)=@cgroup={0x1, 0xffffffffffffffff, 0xfe}, 0x10}}, 0x20)

357.325415ms ago: executing program 0 (id=1651):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@gettaction={0x84, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x11d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffe}}]}, @action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x101}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055) (async)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x4e0}}, 0x20000000) (async)
socket$inet6_icmp(0xa, 0x2, 0x3a) (async)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000380)={@loopback, @multicast1}, &(0x7f00000003c0)=0xc) (async)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
socket(0x2a, 0x2, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000640)=@ethtool_gstrings={0x1b, 0x1, 0xe0, "5dfbe60df0a84de44beb8db32b05435fc493d6c348f76153ac79bf0a0b10c3ea2d1516b63d3f326806593859b37867becf721df2ea17dfe8b6af6254925103bbfeec9cb15a8eb1ab587956673b34b29d0b525f400dfe82a300d53d08762d53974a1d83b9ac269f298453b7dba3997febc2090aa86f20c268e20adf97b6b6bae9df0e1e4fc60d598c7a48dc67009c0d96db4f5904d8c5f2f7c4ff8633abb59b05eadfcad18f82be8c1099dfd63f0ad8aee5a15e3a5601a839ed6822a077904b2ddb11b54f50dd68088832e03ec32d552dad9d4a42e431b0953258d1f6e1e03f16"}}) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
r5 = socket$rds(0x15, 0x5, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRESHEX=r5, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f00000004c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) (async)
ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
r7 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async)
accept4(r7, 0x0, 0x0, 0x80000)

345.43007ms ago: executing program 2 (id=1652):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f00000002c0))
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket(0x8, 0x3, 0x0) (async)
r2 = socket(0x8, 0x3, 0x0)
ioctl$sock_netrom_SIOCADDRT(r2, 0x6180, 0x0)
sendmsg$netlink(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYRES64=r1], 0x33c}], 0x1, 0x0, 0x0, 0x20004060}, 0x220448c1)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) (async)
r3 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff)
connect$bt_l2cap(r2, &(0x7f0000000340)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8001}, 0xe) (async)
connect$bt_l2cap(r2, &(0x7f0000000340)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8001}, 0xe)
sendmsg$FOU_CMD_GET(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x4c, r3, 0x809, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8051}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x0)

248.853624ms ago: executing program 4 (id=1653):
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e"], 0x7c}}, 0x0)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010700000000000000001600000008000300", @ANYRES32=r4, @ANYBLOB="32f31adcc86eb1a43e2664003f96d9db44e8b7f6a3a93650bf10aafe7798317b926fc6ae4dfd97cb571913490ee7adb7e7890fde9b513e69d64adec17bd62164189ff27933eed8d0a504b0263a0ad9795b45a1a147fd70f294dc44369e3623215b2c3449e13763b56fa74caad267c8eaa9eba2e76dcc507f252e6a33ce"], 0x1c}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'dummy0\x00'})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="2800005b0706050000000000001400000900008408000640020073797a325c0000000000000000002bcb882014a1bdd1ef8173b834e08432967d411226cba4b92f98514c79f8c052398aebec797368e9684880649f2e0140e5b7506a87075022ca500a59970d579fb3c81e0dc7fa7f688804ff53281d3944f7c8e6a86ef66247b35f49c86f7ffb082ad0407804cc5c03a650dc7be0e3b81c7b6f7d5ae1f24fc8d86e008e2313f55308eae951917995289be7ff8730f05810ded60baf2f10bb7cb297731a92560ce7fd9c2bca939f927b1d30d330f4270be2cb46c90a9ad159f271321b09a7"], 0x28}, 0x1, 0x0, 0x0, 0x688d80817d4cbbcc}, 0x4000)
sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000140), 0xffffffffffffffff)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1f4}], 0x1}, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000580)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0xffffffffffffffff, 0x3e, 0x9, 0x2}, 0x20)
sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="146d4e6c23be7a811000000104010100000000000000ef0900fffa"], 0x14}, 0x1, 0x0, 0x0, 0x4010813}, 0x8008)
r8 = accept4$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14, 0x80800)
accept4$packet(r8, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000900)=0x14, 0x800)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r11 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r11, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x1, 0x4, 0x0, 0x4, {0xa, 0x4e21, 0x2, @local, 0x1ff}}}, 0x3a)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r12, &(0x7f0000001640)=ANY=[@ANYBLOB="6d6f0469000846e401cdb51ad1c500000000000000000001fc01000000000000f1000000000000004e254e2100089078"], 0x30)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r12, 0x0)

246.291299ms ago: executing program 0 (id=1654):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x1)
ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000001c0)=r1)
close(r0)

220.549635ms ago: executing program 2 (id=1655):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x18000000000002a0, 0xeff, 0xffffffffffffffde, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x4f}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket(0x10, 0x80003, 0x0) (async)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000300)={<r6=>0x0, @multicast1, @local}, &(0x7f0000000340)=0xc)
setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000380)={r6, @remote, @broadcast}, 0xc) (async)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300002000068000000090a010400000000fcff00000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000212c0011800b00010074617267657400001c0002800400030008000240000000000a0001"], 0xb0}}, 0x0)

189.322923ms ago: executing program 3 (id=1656):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', <r3=>0x0, 0x29, 0x3, 0x43, 0x7fff, 0x2, @empty, @local, 0x7, 0x8090, 0x4, 0x7}})
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xd45}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x7ff}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x5, 0x8, 0x4, 0xfffffffffffffff8, 0xffffffffffffffff}]}, &(0x7f0000000040)='syzkaller\x00', 0x946, 0x0, 0x0, 0x41000, 0xd, '\x00', r3, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000600)=[{0x3, 0x5, 0x3, 0x9}, {0x0, 0x5, 0x7, 0x9}, {0x0, 0x5, 0x3, 0xa}], 0x10, 0x9}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r2, 0xd8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, &(0x7f0000001000), 0xff81, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='virtio_transport_alloc_pkt\x00', r5}, 0x18)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)

81.164414ms ago: executing program 2 (id=1657):
r0 = socket$inet6(0xa, 0x2, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0xc101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000640)='bic', 0x3) (async, rerun: 64)
sendmmsg$inet(r3, &(0x7f0000004980)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80040000}}], 0x1, 0x20000810) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0)=0x4, 0x4) (async)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

80.313646ms ago: executing program 0 (id=1658):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x106}]}, 0x24}, 0x1, 0x0, 0x0, 0x809}, 0x48800)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r4, 0xc6e9f000)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0xffffe000)
mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)

77.375318ms ago: executing program 3 (id=1659):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async, rerun: 32)
shutdown(0xffffffffffffffff, 0x1) (async, rerun: 32)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x4}, 0x8) (async, rerun: 32)
sendto$inet6(r2, &(0x7f0000000240)="81", 0x1, 0x4040040, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) (async, rerun: 32)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, 0x0, &(0x7f0000000040)) (async)
socket$alg(0x26, 0x5, 0x0)
socket$packet(0x11, 0x3, 0x300) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x24}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1088}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0304000000000000140012800a000100767863616e0000006f2fabef2236cdf2", @ANYRES32=r1, @ANYBLOB], 0x3c}}, 0x0)

12.772024ms ago: executing program 4 (id=1660):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$inet(0x10, 0x3, 0x0)
socket$kcm(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r3, 0x0, r5, 0x0, 0xf3a, 0x5)
splice(r1, 0x0, r5, 0x0, 0x80, 0x6)
write(r5, &(0x7f0000003300)="ac", 0x1)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000300)={<r6=>0x0, 0xfe, "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"}, &(0x7f00000001c0)=0x106)
setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r6, 0xffffffffffffff8c)
r7 = socket(0x11, 0x80a, 0x0)
getsockname$packet(r7, 0x0, &(0x7f0000000040))
r8 = socket$l2tp(0x2, 0x2, 0x73)
accept4(r8, &(0x7f0000000140)=@nl, &(0x7f00000000c0)=0x80, 0x80000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
r9 = socket$netlink(0x10, 0x3, 0x12)
pipe(&(0x7f0000000080)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x40814}, 0x0)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2, <r12=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r4}, 0x20)
r13 = socket(0x10, 0x803, 0x0)
r14 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000026c0)=@newtclass={0x24, 0x28, 0x20, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x6}, {0xf, 0x4}, {0x2, 0x7}}}, 0x24}}, 0x400c0)
getsockname$packet(r13, &(0x7f0000000740)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14)
sendmsg$nl_route(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000104000000020000000000000000", @ANYRES32=r15, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x38, 0x10, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r15, 0x2500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x29, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_fd={0x18, 0x6, 0x1, 0x0, r10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}}, @jmp={0x5, 0x1, 0x8, 0x6, 0x0, 0x40, 0x8}, @alu={0x7, 0x1, 0xc, 0x2, 0xa, 0x100, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x439, 0x1000, &(0x7f0000000980)=""/4096, 0x40f00, 0x64, '\x00', r15, @fallback=0x18, r10, 0x8, &(0x7f0000000640)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0xf, 0xc, 0x5}, 0x10, 0xffffffffffffffff, r4, 0x0, &(0x7f00000006c0)=[r1, r1, r4, r1, r2, r2, r4], 0x0, 0x10, 0xf653}, 0x94)

0s ago: executing program 0 (id=1661):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x20000000}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_OKEY={0x8}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040080}, 0x0)
r1 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$bt_hci(r1, 0x84, 0x81, 0x0, &(0x7f00000010c0))
epoll_create1(0x80000)

0s ago: executing program 3 (id=1662):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) (async, rerun: 64)
unshare(0x22020400) (async, rerun: 64)
unshare(0x2c060000) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r1, 0x0) (async)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x843, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32=r2, @ANYBLOB="0000100000000000b7fafffffffe0000005e000007020000f8ffffffb703000008000020b704000000000000850000002400000095000020000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async, rerun: 64)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r4}, 0x38) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000f0f000000000700000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000003c000000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800b0007"], 0xc4}}, 0x0) (async, rerun: 32)
r6 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="4254016428000100280012800b00010065727370616e00001800028004001200080023001a4901000500160001"], 0x5c}, 0x1, 0x0, 0x0, 0x8c1}, 0x810) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="7a0a00ff000000007110430000000000950000b489ffecc32df1db8f971c0000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)

kernel console output (not intermixed with test programs):

enamed from eth3
[   90.220634][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   90.231825][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   90.254709][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   90.269085][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   90.305055][ T5857] Bluetooth: hci0: command tx timeout
[   90.305102][ T5859] Bluetooth: hci1: command tx timeout
[   90.365104][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   90.397359][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   90.421741][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   90.433469][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   90.529359][ T5851] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   90.545145][ T5859] Bluetooth: hci3: command tx timeout
[   90.556996][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.581720][ T5851] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   90.591988][ T5851] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   90.603539][ T5851] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   90.624245][ T5859] Bluetooth: hci2: command tx timeout
[   90.624252][ T5857] Bluetooth: hci4: command tx timeout
[   90.692466][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   90.711324][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.739523][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   90.749236][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.756588][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.782167][ T5849] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   90.819986][ T5849] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   90.835080][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.847155][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.857791][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.865834][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.896269][ T5849] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   90.916119][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.923359][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.939362][ T5849] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   91.156362][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.179049][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.248034][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   91.273706][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.281705][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.306866][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   91.336673][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.362839][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.370361][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.432329][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.440244][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.453107][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.460769][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.492882][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   91.540049][ T1036] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.548253][ T1036] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.588821][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.601690][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.609226][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.669948][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.800906][ T5842] veth0_vlan: entered promiscuous mode
[   91.881275][ T5842] veth1_vlan: entered promiscuous mode
[   91.903573][ T5837] veth0_vlan: entered promiscuous mode
[   91.998589][  T926] cfg80211: failed to load regulatory.db
[   92.010597][ T5837] veth1_vlan: entered promiscuous mode
[   92.077537][ T5842] veth0_macvtap: entered promiscuous mode
[   92.117301][ T5842] veth1_macvtap: entered promiscuous mode
[   92.212453][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.227626][ T5837] veth0_macvtap: entered promiscuous mode
[   92.245645][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.263157][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.291779][ T5837] veth1_macvtap: entered promiscuous mode
[   92.321325][ T3602] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.335559][ T3602] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.357715][ T3602] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.367469][ T3602] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.389879][ T5859] Bluetooth: hci0: command tx timeout
[   92.389890][ T5857] Bluetooth: hci1: command tx timeout
[   92.391560][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.416982][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.442098][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.490685][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.561159][ T5850] veth0_vlan: entered promiscuous mode
[   92.627287][ T5859] Bluetooth: hci3: command tx timeout
[   92.660722][ T3602] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.687589][ T5850] veth1_vlan: entered promiscuous mode
[   92.707337][ T5859] Bluetooth: hci4: command tx timeout
[   92.714524][ T5859] Bluetooth: hci2: command tx timeout
[   92.729904][ T3602] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.741287][ T3602] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.767789][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.810895][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.820878][ T3602] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.860179][ T5851] veth0_vlan: entered promiscuous mode
[   92.893126][ T5851] veth1_vlan: entered promiscuous mode
[   92.909898][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.923693][ T5850] veth0_macvtap: entered promiscuous mode
[   92.934359][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.987291][ T5850] veth1_macvtap: entered promiscuous mode
[   93.015960][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   93.039677][ T1036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.048929][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.061727][ T1036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.097546][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.179115][ T5851] veth0_macvtap: entered promiscuous mode
[   93.187969][ T5849] veth0_vlan: entered promiscuous mode
[   93.206652][   T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.216817][   T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.237885][   T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.247618][   T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.266707][ T5851] veth1_macvtap: entered promiscuous mode
[   93.306188][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.309200][ T5849] veth1_vlan: entered promiscuous mode
[   93.325432][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.389132][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.466701][ T5849] veth0_macvtap: entered promiscuous mode
[   93.521510][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.530476][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.550481][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.553905][ T5849] veth1_macvtap: entered promiscuous mode
[   93.600710][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.636678][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.646004][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.665803][ T3570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.665901][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.673925][ T3570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.712078][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.783757][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.854449][   T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.876135][   T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.916745][   T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.943281][   T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.020229][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.043777][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.163389][ T5981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'.
[   94.189033][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.199467][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   94.209179][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.218706][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_0
[   94.230431][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   94.233820][ T5983] Zero length message leads to an empty skb
[   94.244066][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_1
[   94.465057][ T5859] Bluetooth: hci0: command tx timeout
[   94.472247][ T5859] Bluetooth: hci1: command tx timeout
[   94.560222][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.598626][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.709946][ T5859] Bluetooth: hci3: command tx timeout
[   94.785807][ T5859] Bluetooth: hci2: command tx timeout
[   94.792263][ T5859] Bluetooth: hci4: command tx timeout
[   94.903309][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.925236][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.395733][ T6019] netlink: 144 bytes leftover after parsing attributes in process `syz.1.17'.
[   95.532536][ T6020] syzkaller0: entered promiscuous mode
[   95.576942][ T6020] syzkaller0: entered allmulticast mode
[   95.775041][ T6035] syz.3.19 uses obsolete (PF_INET,SOCK_PACKET)
[   95.867515][ T6043] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   95.896118][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22'.
[   95.917427][ T6048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22'.
[   95.946853][ T6048] netlink: 'syz.2.22': attribute type 14 has an invalid length.
[   96.079042][ T6058] netlink: 24 bytes leftover after parsing attributes in process `syz.4.23'.
[   96.190098][ T6058] netlink: 'syz.4.23': attribute type 10 has an invalid length.
[   96.267652][ T6058] team0: Device ipvlan1 failed to register rx_handler
[   96.333120][ T6069] dvmrp12: entered allmulticast mode
[   96.449566][ T6065] dvmrp12: left allmulticast mode
[   96.592941][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.28'.
[   96.854004][ T5840] IPVS: starting estimator thread 0...
[   96.878553][ T6084] sctp: [Deprecated]: syz.1.29 (pid 6084) Use of int in max_burst socket option.
[   96.878553][ T6084] Use struct sctp_assoc_value instead
[   96.912173][ T6100] netlink: 24 bytes leftover after parsing attributes in process `syz.0.32'.
[   96.954505][ T6101] IPVS: using max 24 ests per chain, 57600 per kthread
[   96.990581][ T6104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.32'.
[   97.025826][ T6104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.32'.
[   97.351047][ T6124] netlink: 'syz.3.37': attribute type 12 has an invalid length.
[   97.369662][ T6122] netlink: 'syz.3.37': attribute type 12 has an invalid length.
[   97.396879][ T6124] netlink: zone id is out of range
[   97.403359][ T6124] netlink: set zone limit has 8 unknown bytes
[   97.886809][ T6149] syz_tun: entered allmulticast mode
[   97.910337][ T6158] netlink: 24 bytes leftover after parsing attributes in process `syz.1.44'.
[   98.251709][ T6154] syz_tun: left allmulticast mode
[   98.520395][ T6171] warning: `syz.2.47' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   99.482517][ T6210] netlink: 'syz.4.51': attribute type 13 has an invalid length.
[   99.501499][ T6210] __nla_validate_parse: 1 callbacks suppressed
[   99.501517][ T6210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.51'.
[   99.793393][ T6219] Driver unsupported XDP return value 0 on prog  (id 23) dev N/A, expect packet loss!
[   99.842983][ T6223] netlink: 'syz.2.56': attribute type 16 has an invalid length.
[   99.862832][ T6223] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.56'.
[   99.949786][ T6226] netlink: 'syz.0.57': attribute type 5 has an invalid length.
[  100.277285][ T6243] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  100.429276][ T6259] netlink: 292 bytes leftover after parsing attributes in process `syz.0.61'.
[  100.627348][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.63'.
[  100.747013][ T6274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.66'.
[  100.808365][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.66'.
[  100.889771][ T6281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.66'.
[  101.122744][ T6287] netlink: 28 bytes leftover after parsing attributes in process `syz.1.68'.
[  101.473776][ T6312] netlink: 236 bytes leftover after parsing attributes in process `syz.2.74'.
[  101.489350][ T6312] netlink: 1 bytes leftover after parsing attributes in process `syz.2.74'.
[  102.494126][ T6355] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1
[  102.888245][ T6352] batadv0: entered promiscuous mode
[  102.894487][ T6352] macvtap1: entered promiscuous mode
[  102.908858][ T6352] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  102.941606][ T6352] batadv0: left promiscuous mode
[  103.288857][ T6386] netlink: 'syz.0.93': attribute type 10 has an invalid length.
[  103.310015][ T6387] netlink: 'syz.0.93': attribute type 10 has an invalid length.
[  103.391593][ T6394] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  103.417792][ T6390] macsec1: entered promiscuous mode
[  103.435169][ T6394] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.438414][ T6390] macvlan0: entered promiscuous mode
[  103.485904][ T6390] macvlan0: left promiscuous mode
[  103.582045][ T6406] netlink: 'syz.3.96': attribute type 1 has an invalid length.
[  103.604507][ T6387] team0: Failed to send options change via netlink (err -105)
[  103.635022][ T6387] team0: Port device dummy0 added
[  103.667765][ T6386] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  103.689423][ T6409] netlink: 'syz.1.97': attribute type 1 has an invalid length.
[  103.990795][ T6428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.040826][ T6428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.270123][ T6440] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  104.658923][ T5922] IPVS: starting estimator thread 0...
[  104.738127][ T6464] __nla_validate_parse: 3 callbacks suppressed
[  104.738166][ T6464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.103'.
[  104.777713][ T6461] IPVS: using max 31 ests per chain, 74400 per kthread
[  104.998745][ T6470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.104'.
[  105.338777][ T6485] netlink: 'syz.2.112': attribute type 23 has an invalid length.
[  105.349987][ T6485] netlink: 3 bytes leftover after parsing attributes in process `syz.2.112'.
[  105.374267][ T6485] 0ªX¹¦À: renamed from caif0
[  105.398242][ T6485] 0ªX¹¦À: entered allmulticast mode
[  105.405953][ T6490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.112'.
[  105.421608][ T6485] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  105.453532][ T6492] netlink: 24 bytes leftover after parsing attributes in process `syz.4.113'.
[  105.748011][ T6510] sock: sock_timestamping_bind_phc: sock not bind to device
[  105.910310][ T6521] netlink: 28 bytes leftover after parsing attributes in process `syz.0.121'.
[  105.938034][ T6521] netlink: 24 bytes leftover after parsing attributes in process `syz.0.121'.
[  106.096798][ T6528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.123'.
[  106.107922][ T6532] pim6reg: entered allmulticast mode
[  106.126639][ T6531] pim6reg: left allmulticast mode
[  106.199270][ T6535] netlink: 56 bytes leftover after parsing attributes in process `syz.2.126'.
[  106.303183][ T6539] netlink: 56 bytes leftover after parsing attributes in process `syz.2.126'.
[  107.500646][ T6575] veth0: entered promiscuous mode
[  107.694866][ T6574] veth0: left promiscuous mode
[  109.299444][ T6613] Bluetooth: MGMT ver 1.23
[  109.477726][ T6619] netlink: 'syz.0.148': attribute type 1 has an invalid length.
[  109.949777][ T6630] FAULT_INJECTION: forcing a failure.
[  109.949777][ T6630] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  109.974155][ T6630] CPU: 0 UID: 0 PID: 6630 Comm: syz.3.151 Not tainted syzkaller #0 PREEMPT(full) 
[  109.974182][ T6630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  109.974199][ T6630] Call Trace:
[  109.974208][ T6630]  <TASK>
[  109.974217][ T6630]  dump_stack_lvl+0x189/0x250
[  109.974250][ T6630]  ? __pfx____ratelimit+0x10/0x10
[  109.974277][ T6630]  ? __pfx_dump_stack_lvl+0x10/0x10
[  109.974299][ T6630]  ? __pfx__printk+0x10/0x10
[  109.974349][ T6630]  should_fail_ex+0x414/0x560
[  109.974379][ T6630]  _copy_to_user+0x31/0xb0
[  109.974404][ T6630]  bpf_test_finish+0x24e/0x700
[  109.974435][ T6630]  ? __pfx_bpf_test_finish+0x10/0x10
[  109.974462][ T6630]  ? rep_movs_alternative+0x4a/0x90
[  109.974490][ T6630]  bpf_prog_test_run_xdp+0x893/0x10e0
[  109.974530][ T6630]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  109.974556][ T6630]  ? __fget_files+0x2a/0x420
[  109.974588][ T6630]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  109.974608][ T6630]  bpf_prog_test_run+0x2c7/0x340
[  109.974629][ T6630]  __sys_bpf+0x562/0x860
[  109.974658][ T6630]  ? __pfx___sys_bpf+0x10/0x10
[  109.974699][ T6630]  ? ksys_write+0x22a/0x250
[  109.974725][ T6630]  ? __pfx_ksys_write+0x10/0x10
[  109.974743][ T6630]  ? rcu_is_watching+0x15/0xb0
[  109.974773][ T6630]  __x64_sys_bpf+0x7c/0x90
[  109.974799][ T6630]  do_syscall_64+0xfa/0x3b0
[  109.974817][ T6630]  ? lockdep_hardirqs_on+0x9c/0x150
[  109.974846][ T6630]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.974865][ T6630]  ? clear_bhb_loop+0x60/0xb0
[  109.974893][ T6630]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.974911][ T6630] RIP: 0033:0x7f997ad8eec9
[  109.974933][ T6630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  109.974949][ T6630] RSP: 002b:00007f997bbe7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  109.974973][ T6630] RAX: ffffffffffffffda RBX: 00007f997afe5fa0 RCX: 00007f997ad8eec9
[  109.974987][ T6630] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  109.974999][ T6630] RBP: 00007f997bbe7090 R08: 0000000000000000 R09: 0000000000000000
[  109.975010][ T6630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  109.975021][ T6630] R13: 00007f997afe6038 R14: 00007f997afe5fa0 R15: 00007ffd70a0b938
[  109.975055][ T6630]  </TASK>
[  110.576843][ T6632] __nla_validate_parse: 1 callbacks suppressed
[  110.576860][ T6632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.152'.
[  111.566956][ T6666] syzkaller1: tun_chr_ioctl cmd 3223385353
[  111.656261][ T6666] syzkaller1: tun_chr_ioctl cmd 1074025677
[  111.682897][ T6666] syzkaller1: linktype set to 519
[  111.770984][ T6679] FAULT_INJECTION: forcing a failure.
[  111.770984][ T6679] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  111.786407][ T6679] CPU: 0 UID: 0 PID: 6679 Comm: syz.4.163 Not tainted syzkaller #0 PREEMPT(full) 
[  111.786432][ T6679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  111.786443][ T6679] Call Trace:
[  111.786449][ T6679]  <TASK>
[  111.786457][ T6679]  dump_stack_lvl+0x189/0x250
[  111.786483][ T6679]  ? __pfx____ratelimit+0x10/0x10
[  111.786512][ T6679]  ? __pfx_dump_stack_lvl+0x10/0x10
[  111.786534][ T6679]  ? __pfx__printk+0x10/0x10
[  111.786572][ T6679]  should_fail_ex+0x414/0x560
[  111.786599][ T6679]  _copy_to_user+0x31/0xb0
[  111.786620][ T6679]  bpf_test_finish+0x56f/0x700
[  111.786649][ T6679]  ? __pfx_bpf_test_finish+0x10/0x10
[  111.786674][ T6679]  ? rep_movs_alternative+0x4a/0x90
[  111.786702][ T6679]  bpf_prog_test_run_xdp+0x893/0x10e0
[  111.786741][ T6679]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  111.786764][ T6679]  ? __fget_files+0x2a/0x420
[  111.786793][ T6679]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  111.786812][ T6679]  bpf_prog_test_run+0x2c7/0x340
[  111.786834][ T6679]  __sys_bpf+0x562/0x860
[  111.786863][ T6679]  ? __pfx___sys_bpf+0x10/0x10
[  111.786919][ T6679]  ? ksys_write+0x22a/0x250
[  111.786941][ T6679]  ? __pfx_ksys_write+0x10/0x10
[  111.786960][ T6679]  ? rcu_is_watching+0x15/0xb0
[  111.786989][ T6679]  __x64_sys_bpf+0x7c/0x90
[  111.787015][ T6679]  do_syscall_64+0xfa/0x3b0
[  111.787033][ T6679]  ? lockdep_hardirqs_on+0x9c/0x150
[  111.787060][ T6679]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.787079][ T6679]  ? clear_bhb_loop+0x60/0xb0
[  111.787102][ T6679]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.787121][ T6679] RIP: 0033:0x7fdfce18eec9
[  111.787138][ T6679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  111.787153][ T6679] RSP: 002b:00007fdfcef41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  111.787174][ T6679] RAX: ffffffffffffffda RBX: 00007fdfce3e5fa0 RCX: 00007fdfce18eec9
[  111.787188][ T6679] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  111.787200][ T6679] RBP: 00007fdfcef41090 R08: 0000000000000000 R09: 0000000000000000
[  111.787211][ T6679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  111.787222][ T6679] R13: 00007fdfce3e6038 R14: 00007fdfce3e5fa0 R15: 00007ffcb2693548
[  111.787248][ T6679]  </TASK>
[  111.823532][ T6681] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  112.113033][ T6689] IPVS: Error connecting to the multicast addr
[  112.160847][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.165'.
[  112.179180][ T6689] netlink: 24 bytes leftover after parsing attributes in process `syz.4.166'.
[  112.681258][ T6716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.173'.
[  112.742723][ T6716] veth1_macvtap: left promiscuous mode
[  112.843065][ T6714] netlink: 288 bytes leftover after parsing attributes in process `syz.0.173'.
[  112.972060][ T6723] IPVS: persistence engine module ip_vs_pe_ not found
[  113.162745][ T6731] macvtap1: entered allmulticast mode
[  113.170913][ T6731] veth0_macvtap: entered allmulticast mode
[  114.282790][ T6757] netlink: 232 bytes leftover after parsing attributes in process `syz.1.185'.
[  114.324971][ T6757] netlink: 16 bytes leftover after parsing attributes in process `syz.1.185'.
[  114.475918][ T6766] netlink: 28 bytes leftover after parsing attributes in process `syz.1.190'.
[  114.524654][ T6766] netlink: 32 bytes leftover after parsing attributes in process `syz.1.190'.
[  114.550663][ T6766] netlink: 28 bytes leftover after parsing attributes in process `syz.1.190'.
[  114.634969][ T6771] netlink: 'syz.2.189': attribute type 4 has an invalid length.
[  114.685171][ T6776] netlink: 'syz.2.189': attribute type 4 has an invalid length.
[  115.090880][ T6790] Bluetooth: MGMT ver 1.23
[  115.189746][ T6788] C: renamed from team_slave_0 (while UP)
[  115.217596][ T6788] netlink: 'syz.4.193': attribute type 2 has an invalid length.
[  115.248423][ T6788] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  115.544259][ T6806] 
: renamed from bond_slave_0 (while UP)
[  116.249345][ T6827] veth1_macvtap: left promiscuous mode
[  116.256778][ T6827] macsec0: entered promiscuous mode
[  116.262037][ T6827] macsec0: entered allmulticast mode
[  116.342039][ T6830] veth1_macvtap: entered promiscuous mode
[  116.359232][ T6830] veth1_macvtap: entered allmulticast mode
[  116.369734][ T6830] macsec0: left promiscuous mode
[  116.377377][ T6830] macsec0: left allmulticast mode
[  116.400340][ T6830] veth1_macvtap: left allmulticast mode
[  116.565118][ T6840] tc_dump_action: action bad kind
[  116.684238][ T6827] syz.2.202 (6827) used greatest stack depth: 15832 bytes left
[  116.904134][ T6858] __nla_validate_parse: 9 callbacks suppressed
[  116.904154][ T6858] netlink: 68 bytes leftover after parsing attributes in process `syz.2.213'.
[  117.757127][ T6894] netlink: 'syz.4.221': attribute type 1 has an invalid length.
[  118.296838][ T6919] tipc: Started in network mode
[  118.312016][ T6919] tipc: Node identity 46f70cc25452, cluster identity 4711
[  118.326441][ T6919] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.345061][ T6919] syzkaller0: entered promiscuous mode
[  118.350580][ T6919] syzkaller0: entered allmulticast mode
[  118.471396][ T6919] tipc: Resetting bearer <eth:syzkaller0>
[  118.511869][ T6918] tipc: Resetting bearer <eth:syzkaller0>
[  118.565408][ T6918] tipc: Disabling bearer <eth:syzkaller0>
[  118.590704][ T6928] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.231'.
[  118.828244][ T6939] netlink: 16 bytes leftover after parsing attributes in process `syz.1.234'.
[  119.016925][ T6947] netlink: 24 bytes leftover after parsing attributes in process `syz.1.236'.
[  119.657953][ T6970] ieee802154 phy0 wpan0: encryption failed: -22
[  120.007875][ T6988] netlink: 16 bytes leftover after parsing attributes in process `syz.1.248'.
[  120.137909][ T6988] erspan0: entered promiscuous mode
[  120.153183][ T6988] erspan0: left promiscuous mode
[  120.170202][ T6999] netlink: 16 bytes leftover after parsing attributes in process `syz.4.251'.
[  120.557920][ T7015] netlink: 'syz.1.256': attribute type 10 has an invalid length.
[  120.593587][ T7019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.257'.
[  120.621654][ T7015] 8021q: adding VLAN 0 to HW filter on device batadv0
[  120.636433][ T7019] netlink: 16 bytes leftover after parsing attributes in process `syz.4.257'.
[  120.650642][ T7021] netlink: 'syz.1.256': attribute type 10 has an invalid length.
[  120.683889][ T7015] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  120.699906][ T7021] netlink: 40 bytes leftover after parsing attributes in process `syz.1.256'.
[  120.735778][ T7021] batadv0: entered promiscuous mode
[  120.750763][ T7021] batadv0: entered allmulticast mode
[  120.795023][ T7021] bond0: (slave batadv0): Releasing backup interface
[  120.818386][ T7023] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  120.819670][ T7021] bridge0: port 3(batadv0) entered blocking state
[  120.874704][ T7021] bridge0: port 3(batadv0) entered disabled state
[  121.096229][   T36] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  121.106748][   T36] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  121.292532][ T7052] netlink: 'syz.2.266': attribute type 39 has an invalid length.
[  121.452733][ T7061] syzkaller0: entered promiscuous mode
[  121.462635][ T7061] syzkaller0: entered allmulticast mode
[  121.784111][ T7066] netlink: 52 bytes leftover after parsing attributes in process `syz.1.270'.
[  121.796896][ T7068] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5
[  123.520413][ T7129] netlink: 'syz.0.285': attribute type 16 has an invalid length.
[  123.545133][ T7129] netlink: 'syz.0.285': attribute type 17 has an invalid length.
[  123.606453][ T7133] IPv6: NLM_F_REPLACE set, but no existing node found!
[  123.737475][ T7129] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.746488][ T7129] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.956745][ T7129] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.021491][ T7129] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.253397][ T7129] veth0_macvtap: left allmulticast mode
[  124.323646][ T7142] vlan2: entered promiscuous mode
[  124.374569][ T7142] geneve1: entered promiscuous mode
[  124.382756][ T7142] vlan2: entered allmulticast mode
[  124.403402][ T7142] geneve1: entered allmulticast mode
[  124.419323][ T3602] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.465240][ T3602] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.565472][ T3602] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.604343][ T3602] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.002172][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.296'.
[  125.076436][ T7179] dvmrp8: entered allmulticast mode
[  125.452049][ T7176] dvmrp8: left allmulticast mode
[  125.803675][ T7203] IPVS: set_ctl: invalid protocol: 1 255.255.255.255:20002
[  126.687586][ T7232] ip6_tunnel: non-ECT from fc02:0000:0000:0000:2000:0000:0000:0000 with DS=0x6
[  126.704228][ T5859] Bluetooth: hci3: command tx timeout
[  127.752281][ T7265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.324'.
[  127.935745][ T7277] syzkaller0: entered promiscuous mode
[  127.941297][ T7277] syzkaller0: entered allmulticast mode
[  128.039756][ T7284] netlink: 24 bytes leftover after parsing attributes in process `syz.1.331'.
[  128.103105][ T7285] bond1: option lp_interval: invalid value (0)
[  128.111006][ T7285] bond1: option lp_interval: allowed values 1 - 2147483647
[  128.122405][ T7285] bond1 (unregistering): Released all slaves
[  128.647326][ T7306] netlink: 'syz.3.338': attribute type 1 has an invalid length.
[  128.664371][ T7306] netlink: 224 bytes leftover after parsing attributes in process `syz.3.338'.
[  128.729443][ T7308] Bluetooth: MGMT ver 1.23
[  129.139985][ T7317] netlink: 32 bytes leftover after parsing attributes in process `syz.3.341'.
[  129.856402][ T7358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.348'.
[  129.995615][ T3602] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  130.014182][ T7358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.348'.
[  130.038258][ T3602] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  130.058708][ T3602] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  130.083021][ T3602] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  130.328578][ T7333] netlink: 40 bytes leftover after parsing attributes in process `syz.3.344'.
[  130.857822][ T7388] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  130.936703][ T7388] syzkaller1: entered promiscuous mode
[  130.954501][ T7388] syzkaller1: entered allmulticast mode
[  131.526575][ T7399] netlink: 'syz.3.360': attribute type 5 has an invalid length.
[  131.636962][ T7404] tipc: Started in network mode
[  131.656051][ T7404] tipc: Node identity 56f1d82f1e6, cluster identity 4711
[  131.663403][ T7404] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  131.675446][ T7404] syzkaller0: entered promiscuous mode
[  131.681034][ T7404] syzkaller0: entered allmulticast mode
[  131.831129][ T7404] tipc: Resetting bearer <eth:syzkaller0>
[  131.875813][ T7404] netlink: 44 bytes leftover after parsing attributes in process `syz.0.362'.
[  131.910622][ T7403] tipc: Resetting bearer <eth:syzkaller0>
[  132.054650][ T7403] tipc: Disabling bearer <eth:syzkaller0>
[  132.692231][ T7440] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  132.949985][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  133.062756][ T7455] netlink: 'syz.0.375': attribute type 1 has an invalid length.
[  133.159156][ T7455] bond1: entered promiscuous mode
[  133.182825][ T7455] 8021q: adding VLAN 0 to HW filter on device bond1
[  133.386966][ T7463] netlink: 24 bytes leftover after parsing attributes in process `syz.0.377'.
[  133.794141][ T7472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.379'.
[  134.121942][ T7472] team0 (unregistering): Port device team_slave_0 removed
[  134.146608][ T7472] team0 (unregistering): Port device team_slave_1 removed
[  134.176415][ T7472] team0 (unregistering): Port device dummy0 removed
[  134.269959][ T7468] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  134.791001][   T13] nci: nci_rsp_packet: unknown rsp opcode 0x73a
[  135.142674][ T7497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.385'.
[  135.215811][ T7497] bridge0: entered promiscuous mode
[  135.225284][ T7497] macsec1: entered allmulticast mode
[  135.243781][ T7497] bridge0: entered allmulticast mode
[  135.280979][ T7497] bridge0: port 4(macsec1) entered blocking state
[  135.304384][ T7497] bridge0: port 4(macsec1) entered disabled state
[  135.422019][ T7497] bridge0: left allmulticast mode
[  135.444833][ T7497] bridge0: left promiscuous mode
[  135.550904][ T7500] 8021q: VLANs not supported on rose0
[  135.750475][ T7518] FAULT_INJECTION: forcing a failure.
[  135.750475][ T7518] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  135.800039][ T7518] CPU: 0 UID: 0 PID: 7518 Comm: syz.3.390 Not tainted syzkaller #0 PREEMPT(full) 
[  135.800066][ T7518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  135.800078][ T7518] Call Trace:
[  135.800086][ T7518]  <TASK>
[  135.800095][ T7518]  dump_stack_lvl+0x189/0x250
[  135.800135][ T7518]  ? __pfx____ratelimit+0x10/0x10
[  135.800165][ T7518]  ? __pfx_dump_stack_lvl+0x10/0x10
[  135.800188][ T7518]  ? __pfx__printk+0x10/0x10
[  135.800217][ T7518]  ? __might_fault+0xb0/0x130
[  135.800253][ T7518]  should_fail_ex+0x414/0x560
[  135.800285][ T7518]  _copy_from_user+0x2d/0xb0
[  135.800308][ T7518]  __sys_bpf+0x1e3/0x860
[  135.800340][ T7518]  ? __pfx___sys_bpf+0x10/0x10
[  135.800386][ T7518]  ? ksys_write+0x22a/0x250
[  135.800411][ T7518]  ? __pfx_ksys_write+0x10/0x10
[  135.800431][ T7518]  ? rcu_is_watching+0x15/0xb0
[  135.800461][ T7518]  __x64_sys_bpf+0x7c/0x90
[  135.800487][ T7518]  do_syscall_64+0xfa/0x3b0
[  135.800505][ T7518]  ? lockdep_hardirqs_on+0x9c/0x150
[  135.800534][ T7518]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.800553][ T7518]  ? clear_bhb_loop+0x60/0xb0
[  135.800576][ T7518]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.800601][ T7518] RIP: 0033:0x7f997ad8eec9
[  135.800622][ T7518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  135.800638][ T7518] RSP: 002b:00007f997bbe7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  135.800658][ T7518] RAX: ffffffffffffffda RBX: 00007f997afe5fa0 RCX: 00007f997ad8eec9
[  135.800672][ T7518] RDX: 0000000000000010 RSI: 00002000000004c0 RDI: 0000000000000011
[  135.800684][ T7518] RBP: 00007f997bbe7090 R08: 0000000000000000 R09: 0000000000000000
[  135.800696][ T7518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  135.800707][ T7518] R13: 00007f997afe6038 R14: 00007f997afe5fa0 R15: 00007ffd70a0b938
[  135.800740][ T7518]  </TASK>
[  136.282364][ T6638] IPVS: starting estimator thread 0...
[  136.378172][ T7528] IPVS: using max 29 ests per chain, 69600 per kthread
[  136.458261][ T7530] syzkaller0: entered promiscuous mode
[  136.463867][ T7530] syzkaller0: entered allmulticast mode
[  137.769820][ T7375] Set syz1 is full, maxelem 65536 reached
[  137.816949][ T7565] FAULT_INJECTION: forcing a failure.
[  137.816949][ T7565] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  137.853545][ T7567] ipip0: entered promiscuous mode
[  137.889801][ T7565] CPU: 0 UID: 0 PID: 7565 Comm: syz.3.403 Not tainted syzkaller #0 PREEMPT(full) 
[  137.889830][ T7565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  137.889841][ T7565] Call Trace:
[  137.889847][ T7565]  <TASK>
[  137.889855][ T7565]  dump_stack_lvl+0x189/0x250
[  137.889880][ T7565]  ? __pfx____ratelimit+0x10/0x10
[  137.889906][ T7565]  ? __pfx_dump_stack_lvl+0x10/0x10
[  137.889929][ T7565]  ? __pfx__printk+0x10/0x10
[  137.889971][ T7565]  should_fail_ex+0x414/0x560
[  137.889999][ T7565]  strncpy_from_user+0x36/0x290
[  137.890025][ T7565]  bpf_raw_tp_link_attach+0x1d9/0x6c0
[  137.890053][ T7565]  ? __pfx_bpf_raw_tp_link_attach+0x10/0x10
[  137.890088][ T7565]  ? __fget_files+0x2a/0x420
[  137.890120][ T7565]  bpf_raw_tracepoint_open+0x1b2/0x220
[  137.890142][ T7565]  __sys_bpf+0x73e/0x860
[  137.890173][ T7565]  ? __pfx___sys_bpf+0x10/0x10
[  137.890215][ T7565]  ? ksys_write+0x22a/0x250
[  137.890241][ T7565]  ? __pfx_ksys_write+0x10/0x10
[  137.890282][ T7565]  ? rcu_is_watching+0x15/0xb0
[  137.890311][ T7565]  __x64_sys_bpf+0x7c/0x90
[  137.890338][ T7565]  do_syscall_64+0xfa/0x3b0
[  137.890356][ T7565]  ? lockdep_hardirqs_on+0x9c/0x150
[  137.890390][ T7565]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.890409][ T7565]  ? clear_bhb_loop+0x60/0xb0
[  137.890433][ T7565]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.890452][ T7565] RIP: 0033:0x7f997ad8eec9
[  137.890469][ T7565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  137.890485][ T7565] RSP: 002b:00007f997bbe7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  137.890505][ T7565] RAX: ffffffffffffffda RBX: 00007f997afe5fa0 RCX: 00007f997ad8eec9
[  137.890520][ T7565] RDX: 0000000000000010 RSI: 00002000000004c0 RDI: 0000000000000011
[  137.890532][ T7565] RBP: 00007f997bbe7090 R08: 0000000000000000 R09: 0000000000000000
[  137.890544][ T7565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  137.890555][ T7565] R13: 00007f997afe6038 R14: 00007f997afe5fa0 R15: 00007ffd70a0b938
[  137.890587][ T7565]  </TASK>
[  138.273707][ T7571] netlink: 44 bytes leftover after parsing attributes in process `syz.4.405'.
[  138.776648][ T7579] netlink: 44 bytes leftover after parsing attributes in process `syz.1.406'.
[  139.349690][ T7599] RDS: rds_bind could not find a transport for fe80::44, load rds_tcp or rds_rdma?
[  139.456582][ T7605] syz_tun: entered allmulticast mode
[  139.490782][ T7612] FAULT_INJECTION: forcing a failure.
[  139.490782][ T7612] name failslab, interval 1, probability 0, space 0, times 1
[  139.505542][ T7612] CPU: 1 UID: 0 PID: 7612 Comm: syz.4.417 Not tainted syzkaller #0 PREEMPT(full) 
[  139.505569][ T7612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  139.505580][ T7612] Call Trace:
[  139.505588][ T7612]  <TASK>
[  139.505596][ T7612]  dump_stack_lvl+0x189/0x250
[  139.505623][ T7612]  ? __pfx____ratelimit+0x10/0x10
[  139.505651][ T7612]  ? __pfx_dump_stack_lvl+0x10/0x10
[  139.505674][ T7612]  ? __pfx__printk+0x10/0x10
[  139.505708][ T7612]  ? __pfx___might_resched+0x10/0x10
[  139.505727][ T7612]  ? fs_reclaim_acquire+0x7d/0x100
[  139.505759][ T7612]  should_fail_ex+0x414/0x560
[  139.505790][ T7612]  should_failslab+0xa8/0x100
[  139.505816][ T7612]  __kmalloc_cache_noprof+0x70/0x3d0
[  139.505839][ T7612]  ? bpf_raw_tp_link_attach+0x24e/0x6c0
[  139.505866][ T7612]  bpf_raw_tp_link_attach+0x24e/0x6c0
[  139.505894][ T7612]  ? __pfx_bpf_raw_tp_link_attach+0x10/0x10
[  139.505930][ T7612]  ? __fget_files+0x2a/0x420
[  139.505966][ T7612]  bpf_raw_tracepoint_open+0x1b2/0x220
[  139.505989][ T7612]  __sys_bpf+0x73e/0x860
[  139.506018][ T7612]  ? __pfx___sys_bpf+0x10/0x10
[  139.506062][ T7612]  ? ksys_write+0x22a/0x250
[  139.506086][ T7612]  ? __pfx_ksys_write+0x10/0x10
[  139.506104][ T7612]  ? rcu_is_watching+0x15/0xb0
[  139.506134][ T7612]  __x64_sys_bpf+0x7c/0x90
[  139.506164][ T7612]  do_syscall_64+0xfa/0x3b0
[  139.506180][ T7612]  ? lockdep_hardirqs_on+0x9c/0x150
[  139.506208][ T7612]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.506227][ T7612]  ? clear_bhb_loop+0x60/0xb0
[  139.506256][ T7612]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.506274][ T7612] RIP: 0033:0x7fdfce18eec9
[  139.506291][ T7612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  139.506307][ T7612] RSP: 002b:00007fdfcef41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  139.506327][ T7612] RAX: ffffffffffffffda RBX: 00007fdfce3e5fa0 RCX: 00007fdfce18eec9
[  139.506341][ T7612] RDX: 0000000000000010 RSI: 00002000000004c0 RDI: 0000000000000011
[  139.506353][ T7612] RBP: 00007fdfcef41090 R08: 0000000000000000 R09: 0000000000000000
[  139.506364][ T7612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  139.506375][ T7612] R13: 00007fdfce3e6038 R14: 00007fdfce3e5fa0 R15: 00007ffcb2693548
[  139.506408][ T7612]  </TASK>
[  139.748007][ T7605] dvmrp1: entered allmulticast mode
[  139.917691][ T7622] netlink: 'syz.0.418': attribute type 10 has an invalid length.
[  140.014407][ T7604] syz_tun: left allmulticast mode
[  140.204534][ T7643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.420'.
[  140.261967][ T7642] netlink: 'syz.3.423': attribute type 1 has an invalid length.
[  140.286849][ T7642] netlink: 'syz.3.423': attribute type 2 has an invalid length.
[  140.295161][ T7643] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  140.316433][ T7643] batman_adv: batadv0: Removing interface: batadv_slave_0
[  140.355098][ T7643] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  140.362840][ T7643] batman_adv: batadv0: Removing interface: batadv_slave_1
[  140.536881][ T7652] netlink: zone id is out of range
[  140.556127][ T7652] netlink: zone id is out of range
[  140.561694][ T7652] netlink: zone id is out of range
[  140.600748][ T7652] netlink: zone id is out of range
[  140.613815][ T7652] netlink: zone id is out of range
[  140.630042][ T7652] netlink: zone id is out of range
[  140.649562][ T7652] netlink: zone id is out of range
[  140.654224][ T7660] netlink: 'syz.1.429': attribute type 30 has an invalid length.
[  140.660584][ T7652] netlink: zone id is out of range
[  140.676275][ T7652] netlink: zone id is out of range
[  140.723235][ T7660] bond3: option arp_missed_max: invalid value (0)
[  140.730866][ T7660] bond3: option arp_missed_max: allowed values 1 - 255
[  140.747857][ T7660] bond3 (unregistering): Released all slaves
[  141.034760][ T7675] veth2: entered promiscuous mode
[  141.049985][ T7675] veth2: entered allmulticast mode
[  141.117122][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.435'.
[  141.133402][ T7682] netlink: 3696 bytes leftover after parsing attributes in process `syz.1.437'.
[  141.147627][ T7682] netlink: 3696 bytes leftover after parsing attributes in process `syz.1.437'.
[  142.164318][ T7718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.446'.
[  142.347276][ T7721] netlink: 216 bytes leftover after parsing attributes in process `syz.1.448'.
[  142.376015][ T7721] netlink: 24 bytes leftover after parsing attributes in process `syz.1.448'.
[  142.434348][ T7721] netlink: 16 bytes leftover after parsing attributes in process `syz.1.448'.
[  142.513019][ T7718] bridge_slave_1: left allmulticast mode
[  142.520035][ T7718] bridge_slave_1: left promiscuous mode
[  142.534940][ T7718] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.582043][ T7718] bridge_slave_0: left allmulticast mode
[  142.590319][ T7718] bridge_slave_0: left promiscuous mode
[  142.611015][ T7718] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.694435][ T7725] netlink: 24 bytes leftover after parsing attributes in process `syz.3.449'.
[  142.756004][ T7726] netlink: 24 bytes leftover after parsing attributes in process `syz.3.449'.
[  142.962948][ T7733] netlink: 'syz.4.451': attribute type 1 has an invalid length.
[  143.368089][ T7753] netlink: 'syz.3.456': attribute type 1 has an invalid length.
[  143.502585][ T7753] 8021q: adding VLAN 0 to HW filter on device bond1
[  145.113317][ T7800] netlink: 'syz.1.467': attribute type 3 has an invalid length.
[  145.374508][ T7807] __nla_validate_parse: 3 callbacks suppressed
[  145.374525][ T7807] netlink: 11 bytes leftover after parsing attributes in process `syz.1.470'.
[  145.921491][ T7830] syzkaller0: entered promiscuous mode
[  145.954167][ T7830] syzkaller0: entered allmulticast mode
[  194.190207][ T7861] netlink: 24 bytes leftover after parsing attributes in process `syz.3.484'.
[  194.234593][ T7854] 8021q: adding VLAN 0 to HW filter on device bond1
[  194.266682][ T7854] macvlan2: entered promiscuous mode
[  194.272188][ T7854] macvlan2: entered allmulticast mode
[  194.278979][ T7854] bond1: entered promiscuous mode
[  194.285275][ T7854] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  194.331504][ T7854] bond1: left promiscuous mode
[  194.399016][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  194.466790][ T7873] tipc: Started in network mode
[  194.471816][ T7873] tipc: Node identity f280599ca7ab, cluster identity 4711
[  194.485369][ T7873] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  194.501793][ T7881] net_ratelimit: 60 callbacks suppressed
[  194.501805][ T7881] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  194.559877][ T7886] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  194.596605][ T7873] syzkaller0: entered promiscuous mode
[  194.613847][ T7892] netlink: 'syz.0.493': attribute type 5 has an invalid length.
[  194.622507][ T7892] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.493'.
[  194.633095][ T7873] syzkaller0: entered allmulticast mode
[  194.650492][ T7871] tipc: Resetting bearer <eth:syzkaller0>
[  194.708880][ T7871] tipc: Disabling bearer <eth:syzkaller0>
[  194.714430][ T7898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.494'.
[  194.737612][ T7898] geneve2: entered promiscuous mode
[  194.742931][ T7898] geneve2: entered allmulticast mode
[  194.820727][ T7902] netlink: 12 bytes leftover after parsing attributes in process `syz.1.495'.
[  194.862590][ T7902] 8021q: adding VLAN 0 to HW filter on device bond3
[  194.874189][ T7907] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.497'.
[  194.900602][ T7902] 8021q: adding VLAN 0 to HW filter on device bond3
[  194.914049][ T7902] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address
[  194.935862][ T7902] bond3: (slave wireguard0): Error -95 calling set_mac_address
[  194.979370][ T7910] wg1 speed is unknown, defaulting to 1000
[  194.985719][ T7910] wg1 speed is unknown, defaulting to 1000
[  194.993510][ T7910] wg1 speed is unknown, defaulting to 1000
[  195.003518][ T7910] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  195.021926][ T7910] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  195.068513][ T7910] wg1 speed is unknown, defaulting to 1000
[  195.077444][ T7910] wg1 speed is unknown, defaulting to 1000
[  195.088098][ T7910] wg1 speed is unknown, defaulting to 1000
[  195.103193][ T7910] wg1 speed is unknown, defaulting to 1000
[  195.111695][ T7910] wg1 speed is unknown, defaulting to 1000
[  195.160702][ T7915] netlink: 240 bytes leftover after parsing attributes in process `syz.0.496'.
[  195.271361][ T7925] pim6reg: entered allmulticast mode
[  195.275354][ T7926] netlink: 'syz.3.501': attribute type 10 has an invalid length.
[  195.278014][ T7922] pim6reg: left allmulticast mode
[  195.332529][ T7926] team0: Port device dummy0 added
[  195.397110][ T7926] netlink: 'syz.3.501': attribute type 10 has an invalid length.
[  195.447825][ T7926] team0: Port device dummy0 removed
[  195.472809][ T7926] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  195.481982][ T7929] netlink: 3752 bytes leftover after parsing attributes in process `syz.4.502'.
[  195.531117][ T7937] veth0_to_bridge: entered promiscuous mode
[  195.576561][ T7931] wg1 speed is unknown, defaulting to 1000
[  195.580598][ T7928] veth0_to_bridge: left promiscuous mode
[  195.652092][ T7944] 
: renamed from bond_slave_0 (while UP)
[  195.719259][ T7947] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  195.866808][ T7950] wg1 speed is unknown, defaulting to 1000
[  196.142102][ T7970] bond0: option all_slaves_active: invalid value (7)
[  196.381527][ T7985] netlink: 16 bytes leftover after parsing attributes in process `syz.1.515'.
[  196.425786][ T7988] netlink: 'syz.3.516': attribute type 3 has an invalid length.
[  196.440878][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.516'.
[  196.470962][ T7991] netlink: 48 bytes leftover after parsing attributes in process `syz.2.518'.
[  196.500924][ T7983] bond2: ARP target 9.0.0.0 is already present
[  196.507455][ T7983] bond2: option arp_ip_target: invalid value (9)
[  196.520746][ T7983] bond2 (unregistering): Released all slaves
[  196.543188][ T7997] openvswitch: netlink: Flow key attr not present in new flow.
[  196.667951][ T7988] netlink: 'syz.3.516': attribute type 3 has an invalid length.
[  196.749377][ T8001] wg1 speed is unknown, defaulting to 1000
[  197.814328][ T8057] tipc: Started in network mode
[  197.825670][ T8057] tipc: Node identity 6aaebce745a, cluster identity 4711
[  197.895775][ T8057] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  197.976926][ T8057] tipc: Disabling bearer <eth:syzkaller0>
[  198.838237][ T8089] vlan2: entered promiscuous mode
[  198.844084][ T8089] ip6gretap0: entered promiscuous mode
[  198.980670][ T8085] wg1 speed is unknown, defaulting to 1000
[  199.415466][ T8117] netlink: 'syz.3.549': attribute type 2 has an invalid length.
[  199.423188][ T8117] __nla_validate_parse: 10 callbacks suppressed
[  199.423206][ T8117] netlink: 4856 bytes leftover after parsing attributes in process `syz.3.549'.
[  199.500872][ T8112] wg1 speed is unknown, defaulting to 1000
[  199.673031][ T8113] wg1 speed is unknown, defaulting to 1000
[  199.991069][ T8141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.556'.
[  200.039018][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.557'.
[  200.042655][ T8146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.557'.
[  200.111867][ T8146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.557'.
[  200.114963][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.557'.
[  200.173387][ T8146] netlink: 'syz.0.557': attribute type 14 has an invalid length.
[  200.201066][ T8145] netlink: 'syz.0.557': attribute type 14 has an invalid length.
[  200.223133][ T8146] netlink: 'syz.0.557': attribute type 13 has an invalid length.
[  200.236737][ T8145] netlink: 'syz.0.557': attribute type 13 has an invalid length.
[  200.571642][ T8160] batman_adv: batadv0: Adding interface: dummy0
[  200.584715][ T8162] netlink: 24 bytes leftover after parsing attributes in process `syz.2.559'.
[  200.594156][ T8160] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  200.620889][ T8163] netlink: 24 bytes leftover after parsing attributes in process `syz.2.559'.
[  200.632285][ T8160] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  200.990159][ T8176] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  201.545793][ T8189] netlink: 'syz.1.567': attribute type 1 has an invalid length.
[  201.589198][ T8189] netlink: 20 bytes leftover after parsing attributes in process `syz.1.567'.
[  201.605764][ T8189] netlink: 52 bytes leftover after parsing attributes in process `syz.1.567'.
[  203.235137][ T8235] wg1 speed is unknown, defaulting to 1000
[  203.882804][ T8281] unsupported nla_type 52263
[  204.168321][ T8289] trusted_key: syz.1.596 sent an empty control message without MSG_MORE.
[  204.911353][ T8305] __nla_validate_parse: 3 callbacks suppressed
[  204.911372][ T8305] netlink: 104 bytes leftover after parsing attributes in process `syz.1.599'.
[  205.091029][ T8303] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  205.267185][ T8312] syzkaller0: entered promiscuous mode
[  205.272897][ T8312] syzkaller0: entered allmulticast mode
[  206.106006][ T8324] netlink: 'syz.2.604': attribute type 39 has an invalid length.
[  207.514988][ T8350] netlink: 16 bytes leftover after parsing attributes in process `syz.1.612'.
[  207.677419][ T8355] netlink: 'syz.2.615': attribute type 4 has an invalid length.
[  207.852464][ T8364] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20000
[  207.883117][ T8364] sctp: [Deprecated]: syz.2.618 (pid 8364) Use of struct sctp_assoc_value in delayed_ack socket option.
[  207.883117][ T8364] Use struct sctp_sack_info instead
[  208.111796][ T8375] syzkaller1: entered promiscuous mode
[  208.134123][ T8375] syzkaller1: entered allmulticast mode
[  208.278764][ T8384] wg1 speed is unknown, defaulting to 1000
[  208.356262][ T8388] netlink: 60 bytes leftover after parsing attributes in process `syz.0.624'.
[  208.383000][ T8387] netlink: 60 bytes leftover after parsing attributes in process `syz.0.624'.
[  208.476634][ T8394] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20002
[  208.508142][ T8387] bond2: ARP target 9.0.0.0 is already present
[  208.521565][ T8387] bond2: option arp_ip_target: invalid value (9)
[  208.535455][ T8387] bond2 (unregistering): Released all slaves
[  208.677455][ T8388] bond2: ARP target 9.0.0.0 is already present
[  208.684021][ T8388] bond2: option arp_ip_target: invalid value (9)
[  208.714710][ T8388] bond2 (unregistering): Released all slaves
[  208.859015][ T8405] syzkaller0: entered promiscuous mode
[  208.871917][ T8421] netlink: 24 bytes leftover after parsing attributes in process `syz.0.630'.
[  208.879910][ T8405] syzkaller0: entered allmulticast mode
[  208.935120][ T8422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.630'.
[  209.082683][ T8432] netlink: 'syz.1.634': attribute type 11 has an invalid length.
[  209.126919][ T8422] bridge_slave_1: left allmulticast mode
[  209.132607][ T8422] bridge_slave_1: left promiscuous mode
[  209.139278][ T8422] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.150277][ T8422] bridge_slave_0: left allmulticast mode
[  209.158405][ T8422] bridge_slave_0: left promiscuous mode
[  209.164631][ T8422] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.708271][ T8454] netlink: 'syz.0.639': attribute type 1 has an invalid length.
[  209.734776][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.641'.
[  209.888368][ T8468] gretap1: entered allmulticast mode
[  209.920777][ T8472] netlink: 'syz.1.643': attribute type 142 has an invalid length.
[  209.956504][ T8468] bond1: (slave gretap1): making interface the new active one
[  209.979472][ T8468] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  210.127716][ T8456] wg1 speed is unknown, defaulting to 1000
[  210.256405][ T8481] netlink: 56 bytes leftover after parsing attributes in process `syz.3.645'.
[  210.487555][ T8493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.648'.
[  210.533058][ T8501] netlink: 32 bytes leftover after parsing attributes in process `syz.0.650'.
[  210.661826][ T8509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.651'.
[  210.945467][ T8536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.659'.
[  211.025405][ T8536] 8021q: adding VLAN 0 to HW filter on device bond2
[  211.100891][ T8542] bond2: entered promiscuous mode
[  211.407315][ T8572] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  211.501476][ T8583] bond0: option miimon: invalid value (18446744072937799680)
[  211.519780][ T8583] bond0: option miimon: allowed values 0 - 2147483647
[  211.716789][ T8585] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.724371][ T8585] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.828161][ T5855] Bluetooth: hci1: command 0x0406 tx timeout
[  211.828847][ T5841] Bluetooth: hci4: command 0x0406 tx timeout
[  211.834855][ T5844] Bluetooth: hci2: command 0x0406 tx timeout
[  211.993767][ T8590] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.672'.
[  212.150476][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  212.160968][ T8596] wg1 speed is unknown, defaulting to 1000
[  212.176453][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  212.207741][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  212.223773][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  212.330117][ T8600] batman_adv: batadv0: Removing interface: dummy0
[  212.347907][ T8600] bond0: (slave bond_slave_0): Releasing backup interface
[  212.374880][ T8600] bond0: (slave bond_slave_1): Releasing backup interface
[  212.385319][ T8600] batman_adv: batadv0: Removing interface: batadv_slave_0
[  212.398500][ T8600] batman_adv: batadv0: Removing interface: batadv_slave_1
[  212.407470][ T8600] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  212.428648][ T8599] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  212.464358][ T8607] tipc: Enabled bearer <udp:s>, priority 10
[  212.583627][ T8619] netlink: 88 bytes leftover after parsing attributes in process `syz.1.674'.
[  212.612450][ T8611] wg1 speed is unknown, defaulting to 1000
[  212.751189][ T8625] netlink: 44 bytes leftover after parsing attributes in process `syz.0.680'.
[  212.768532][ T8620] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  212.805623][ T8629] netlink: 508 bytes leftover after parsing attributes in process `syz.1.681'.
[  212.817021][ T8628] block nbd0: not configured, cannot reconfigure
[  212.845558][ T8604] wg1 speed is unknown, defaulting to 1000
[  212.887717][ T8637] netlink: 20 bytes leftover after parsing attributes in process `syz.3.682'.
[  213.027767][ T8640] 8021q: adding VLAN 0 to HW filter on device bond2
[  213.078487][ T8641] 8021q: adding VLAN 0 to HW filter on device batadv1
[  213.088912][ T8641] bond2: (slave batadv1): Enslaving as an active interface with an up link
[  213.575302][ T5908] tipc: Node number set to 1428904348
[  213.588063][ T8673] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  213.639894][ T8673] tipc: Disabling bearer <eth:syzkaller0>
[  213.709131][ T8677] sctp: [Deprecated]: syz.0.693 (pid 8677) Use of struct sctp_assoc_value in delayed_ack socket option.
[  213.709131][ T8677] Use struct sctp_sack_info instead
[  213.724524][ T8676] bond2: option resend_igmp: invalid value (2878)
[  213.746792][ T8676] bond2: option resend_igmp: allowed values 0 - 255
[  213.778990][ T8676] bond2 (unregistering): Released all slaves
[  214.490313][ T8718] netlink: 'syz.1.702': attribute type 11 has an invalid length.
[  214.613561][ T8722] wg1 speed is unknown, defaulting to 1000
[  215.574920][ T8773] wg1 speed is unknown, defaulting to 1000
[  215.782581][ T8781] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  216.260380][ T8793] __nla_validate_parse: 6 callbacks suppressed
[  216.260400][ T8793] netlink: 136 bytes leftover after parsing attributes in process `syz.2.723'.
[  216.317918][ T8795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.724'.
[  216.334761][ T8797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.725'.
[  216.363399][ T8797] netlink: 56 bytes leftover after parsing attributes in process `syz.0.725'.
[  216.482936][ T8801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.723'.
[  216.491096][ T8798] wg1 speed is unknown, defaulting to 1000
[  217.405635][ T8838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.736'.
[  217.419337][ T8837] netlink: 36 bytes leftover after parsing attributes in process `syz.2.735'.
[  217.512718][ T8839] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  217.776870][ T8855] ip6gretap0: entered promiscuous mode
[  217.782772][ T8855] macsec1: entered promiscuous mode
[  217.835072][ T8855] macsec1: entered allmulticast mode
[  217.840540][ T8855] ip6gretap0: entered allmulticast mode
[  217.913426][ T8867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.743'.
[  218.096498][ T8869] bond3: option packets_per_slave: mode dependency failed, not supported in mode 802.3ad(4)
[  218.131284][ T8869] bond3 (unregistering): Released all slaves
[  218.269087][ T8874] wg1 speed is unknown, defaulting to 1000
[  218.318915][ T8890] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  218.418992][ T8897] netlink: 40 bytes leftover after parsing attributes in process `syz.0.751'.
[  218.488672][ T8892] syzkaller1: tun_chr_ioctl cmd 1074025677
[  218.496949][ T8892] syzkaller1: linktype set to 519
[  218.668698][ T8907] netlink: 7 bytes leftover after parsing attributes in process `syz.4.753'.
[  218.729098][ T8910] dvmrp8: entered allmulticast mode
[  218.736520][ T8899] tun0: tun_chr_ioctl cmd 1074025675
[  218.742246][ T8899] tun0: persist enabled
[  218.752672][ T8899] tun0: tun_chr_ioctl cmd 1074025675
[  218.764075][ T8899] tun0: persist disabled
[  218.769479][ T8899] openvswitch: netlink: Duplicate key (type 32).
[  219.245864][ T8908] wg1 speed is unknown, defaulting to 1000
[  219.622887][ T8923] wg1 speed is unknown, defaulting to 1000
[  219.656334][ T8595] IPVS: starting estimator thread 0...
[  219.670885][ T8936] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  219.764009][ T8941] IPVS: using max 28 ests per chain, 67200 per kthread
[  219.825910][ T8930] wg1 speed is unknown, defaulting to 1000
[  219.982550][ T8973] netlink: 'syz.2.771': attribute type 6 has an invalid length.
[  220.073351][ T8973] netlink: 'syz.2.771': attribute type 6 has an invalid length.
[  220.144258][ T5859] Bluetooth: hci3: command 0x0405 tx timeout
[  220.582272][ T8998] netlink: 'syz.4.778': attribute type 1 has an invalid length.
[  220.651871][ T9001] wg1 speed is unknown, defaulting to 1000
[  221.251279][ T9017] syzkaller1: entered promiscuous mode
[  221.258199][ T9017] syzkaller1: entered allmulticast mode
[  221.316230][ T9019] xt_HMARK: spi-set and port-set can't be combined
[  221.496506][ T9024] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  221.512775][ T9027] __nla_validate_parse: 8 callbacks suppressed
[  221.512794][ T9027] netlink: 20 bytes leftover after parsing attributes in process `syz.1.788'.
[  221.531456][ T9024] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  221.544739][ T9022] netlink: 20 bytes leftover after parsing attributes in process `syz.4.786'.
[  221.556042][ T9022] netlink: 152 bytes leftover after parsing attributes in process `syz.4.786'.
[  222.034852][ T9065] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  222.151828][ T9054] wg1 speed is unknown, defaulting to 1000
[  222.202114][ T9078] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  222.218988][ T9078] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check.
[  222.299421][ T9071] raw_sendmsg: syz.1.799 forgot to set AF_INET. Fix it!
[  222.350647][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.802'.
[  222.350900][ T9082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.802'.
[  222.360105][ T9084] openvswitch: netlink: Flow key attr not present in new flow.
[  222.424030][ T9082] openvswitch: netlink: Flow key attr not present in new flow.
[  222.729067][ T9103] netlink: 64 bytes leftover after parsing attributes in process `syz.3.807'.
[  222.963875][ T9105] wg1 speed is unknown, defaulting to 1000
[  222.996717][ T9113] netlink: 352 bytes leftover after parsing attributes in process `syz.2.810'.
[  223.066242][ T9113] netlink: 76 bytes leftover after parsing attributes in process `syz.2.810'.
[  223.090187][ T9113] netlink: 24 bytes leftover after parsing attributes in process `syz.2.810'.
[  223.105180][ T9113] netlink: 32 bytes leftover after parsing attributes in process `syz.2.810'.
[  223.246805][ T9117] bond3: option ad_select: invalid value (34)
[  223.276658][ T9117] bond3 (unregistering): Released all slaves
[  223.373838][ T9129] wg1 speed is unknown, defaulting to 1000
[  223.713642][ T9139] geneve3: entered promiscuous mode
[  223.719656][ T9139] geneve3: entered allmulticast mode
[  223.737971][   T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 43032 - 0
[  223.751565][   T13] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 56744 - 0
[  223.794402][   T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 43032 - 0
[  223.803272][   T13] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 56744 - 0
[  223.929554][   T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 43032 - 0
[  223.941345][   T13] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 56744 - 0
[  223.954379][ T9162] netlink: 'syz.2.821': attribute type 29 has an invalid length.
[  223.964545][ T9167] netlink: 'syz.2.821': attribute type 29 has an invalid length.
[  223.998542][   T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 43032 - 0
[  224.008730][   T13] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 56744 - 0
[  224.086741][ T9162] bond2: option downdelay: invalid value (18446744073709551615)
[  224.119760][ T9162] bond2: option downdelay: allowed values 0 - 2147483647
[  224.161091][ T9162] bond2 (unregistering): Released all slaves
[  225.097465][ T9220] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  225.174705][ T9222] netlink: 'syz.0.836': attribute type 1 has an invalid length.
[  225.513719][ T9249] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  225.837762][ T9265] netlink: 'syz.1.844': attribute type 1 has an invalid length.
[  225.972831][ T9265] 8021q: adding VLAN 0 to HW filter on device bond4
[  226.544354][ T9287] batadv_slave_1: entered promiscuous mode
[  226.686074][ T9300] __nla_validate_parse: 9 callbacks suppressed
[  226.686091][ T9300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.853'.
[  226.748723][ T9301] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  226.774091][ T9300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.853'.
[  226.837156][ T9309] netlink: 28 bytes leftover after parsing attributes in process `syz.2.854'.
[  226.862821][ T9282] wg1 speed is unknown, defaulting to 1000
[  226.871937][ T9309] netlink: 216 bytes leftover after parsing attributes in process `syz.2.854'.
[  226.881291][ T9309] netlink: 24 bytes leftover after parsing attributes in process `syz.2.854'.
[  226.892274][ T9309] netlink: 16 bytes leftover after parsing attributes in process `syz.2.854'.
[  226.909126][ T9286] batadv_slave_1: left promiscuous mode
[  227.063665][ T9313] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  227.079721][ T9315] wg1 speed is unknown, defaulting to 1000
[  227.086065][ T9313] syzkaller0: entered promiscuous mode
[  227.097531][ T9313] syzkaller0: entered allmulticast mode
[  227.154846][ T9313] netlink: 36 bytes leftover after parsing attributes in process `syz.1.856'.
[  227.201614][ T9312] tipc: Resetting bearer <eth:syzkaller0>
[  227.219588][ T9312] tipc: Disabling bearer <eth:syzkaller0>
[  227.527782][ T9338] bond0: (slave dummy0): Releasing backup interface
[  227.563348][ T9338] bridge_slave_0: left allmulticast mode
[  227.587740][ T9338] bridge_slave_0: left promiscuous mode
[  227.602899][ T9338] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.618028][ T9338] bridge_slave_1: left allmulticast mode
[  227.624995][ T9338] bridge_slave_1: left promiscuous mode
[  227.630974][ T9338] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.647092][ T9338] bond0: (slave 
3
0
): Releasing backup interface
[  227.659126][ T9338] bond0: (slave bond_slave_1): Releasing backup interface
[  227.672384][ T9338] team0: Port device team_slave_0 removed
[  227.682212][ T9338] team0: Port device team_slave_1 removed
[  227.689033][ T9338] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  227.697792][ T9338] batman_adv: batadv0: Removing interface: batadv_slave_0
[  227.706550][ T9338] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  227.714579][ T9338] batman_adv: batadv0: Removing interface: batadv_slave_1
[  227.723517][ T9338] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  227.741121][   T43] wg1 speed is unknown, defaulting to 1000
[  227.860315][ T9354] gre2: entered promiscuous mode
[  227.866144][ T9354] gre2: entered allmulticast mode
[  228.102535][ T9362] netlink: 88 bytes leftover after parsing attributes in process `syz.3.866'.
[  228.203490][ T9371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.871'.
[  228.233950][ T9371] netlink: 20 bytes leftover after parsing attributes in process `syz.4.871'.
[  228.353313][ T9378] netlink: 'syz.2.873': attribute type 83 has an invalid length.
[  228.621391][ T9399] netlink: 'syz.2.878': attribute type 1 has an invalid length.
[  228.712342][ T9399] 8021q: adding VLAN 0 to HW filter on device bond2
[  228.737973][ T9404] bond0: (slave gretap0): Opening slave failed
[  228.933612][ T9425] netlink: 'syz.4.881': attribute type 1 has an invalid length.
[  228.998243][ T9425] bond2: entered promiscuous mode
[  229.005504][ T9425] 8021q: adding VLAN 0 to HW filter on device bond2
[  229.024921][ T9428] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  229.052979][ T9428] tipc: Enabling of bearer <ib:pimreg1> rejected, failed to enable media
[  229.562984][ T9460] sctp: [Deprecated]: syz.1.892 (pid 9460) Use of int in max_burst socket option deprecated.
[  229.562984][ T9460] Use struct sctp_assoc_value instead
[  230.004592][ T9482] bridge0: entered promiscuous mode
[  230.010081][ T9482] macvtap1: entered allmulticast mode
[  230.020026][ T9482] bridge0: entered allmulticast mode
[  230.027701][ T9482] bridge0: port 4(macvtap1) entered blocking state
[  230.036482][ T9482] bridge0: port 4(macvtap1) entered disabled state
[  230.054660][ T9482] bridge0: left allmulticast mode
[  230.059889][ T9482] bridge0: left promiscuous mode
[  230.105636][ T9485] sch_fq: defrate 4294967293 ignored.
[  230.157899][ T9489] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  230.171086][ T9489] bond3 (unregistering): Released all slaves
[  230.234967][ T9496] syzkaller0: entered promiscuous mode
[  230.240624][ T9496] syzkaller0: entered allmulticast mode
[  230.261130][ T9494] vlan2: entered allmulticast mode
[  230.266990][ T9494] dummy0: entered allmulticast mode
[  230.319035][ T9496] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  230.357703][ T9495] tipc: Resetting bearer <eth:syzkaller0>
[  230.374698][ T9495] tipc: Disabling bearer <eth:syzkaller0>
[  230.526945][ T9502] netlink: 'syz.1.902': attribute type 178 has an invalid length.
[  230.552925][ T9509] bond3: entered promiscuous mode
[  230.560781][ T9509] 8021q: adding VLAN 0 to HW filter on device bond3
[  230.600790][ T9509] 8021q: adding VLAN 0 to HW filter on device bond4
[  230.609582][ T9509] bond4: entered promiscuous mode
[  230.618077][ T9509] bond3: (slave bond4): Enslaving as an active interface with an up link
[  230.628102][ T9522] netlink: 'syz.3.908': attribute type 4 has an invalid length.
[  230.643268][ T9524] netlink: 'syz.3.908': attribute type 4 has an invalid length.
[  231.967533][ T9534] __nla_validate_parse: 10 callbacks suppressed
[  231.967552][ T9534] netlink: 28 bytes leftover after parsing attributes in process `syz.0.912'.
[  232.133443][ T9542] wg1 speed is unknown, defaulting to 1000
[  232.153198][ T9556] netlink: 20 bytes leftover after parsing attributes in process `syz.0.916'.
[  232.207963][ T9564] netlink: 108 bytes leftover after parsing attributes in process `syz.0.916'.
[  232.239189][ T9556] netlink: 16 bytes leftover after parsing attributes in process `syz.0.916'.
[  232.326914][ T9572] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0
[  232.700488][ T9595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.926'.
[  232.709600][ T9595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.926'.
[  232.723333][ T9595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.926'.
[  232.736622][ T9597] wg1 speed is unknown, defaulting to 1000
[  232.738020][ T9596] netlink: 64 bytes leftover after parsing attributes in process `syz.2.928'.
[  232.751856][ T9596] block nbd0: not configured, cannot reconfigure
[  232.831237][ T9598] wg1 speed is unknown, defaulting to 1000
[  232.978660][ T9604] tun0: tun_chr_ioctl cmd 2148045848
[  232.985840][ T9604] tun0: tun_chr_ioctl cmd 21731
[  233.202752][ T9620] netlink: 404 bytes leftover after parsing attributes in process `syz.0.934'.
[  233.212225][ T9620] netlink: 28 bytes leftover after parsing attributes in process `syz.0.934'.
[  233.330478][ T9623] 8021q: adding VLAN 0 to HW filter on device bond5
[  233.533517][ T9644] netlink: 'syz.1.940': attribute type 33 has an invalid length.
[  233.543044][ T9644] `: renamed from team0
[  233.812989][ T9653] sctp: [Deprecated]: syz.1.942 (pid 9653) Use of int in max_burst socket option.
[  233.812989][ T9653] Use struct sctp_assoc_value instead
[  233.863767][ T9653] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.876019][ T9653] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 43032 - 0
[  233.895795][ T9653] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 56744 - 0
[  234.033827][ T9653] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.044693][ T9653] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 43032 - 0
[  234.056074][ T9653] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 56744 - 0
[  234.148919][ T9653] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.159853][ T9653] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 43032 - 0
[  234.172707][ T9653] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 56744 - 0
[  234.330061][ T9653] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.343509][ T9653] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 43032 - 0
[  234.371280][ T9653] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 56744 - 0
[  234.494698][   T60] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 56744 - 0
[  234.503007][   T60] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 43032 - 0
[  234.522113][   T60] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  234.541572][   T60] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 56744 - 0
[  234.550563][   T60] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 43032 - 0
[  234.559261][   T60] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  234.578836][   T60] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 56744 - 0
[  234.587272][   T60] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 43032 - 0
[  234.595834][   T60] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  234.613769][   T60] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 56744 - 0
[  234.630364][   T60] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 43032 - 0
[  234.638935][   T60] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  234.792721][ T9686] wg1 speed is unknown, defaulting to 1000
[  235.473599][ T9710] wg1 speed is unknown, defaulting to 1000
[  235.496945][ T9711] netlink: 'syz.0.957': attribute type 1 has an invalid length.
[  235.568632][ T9717] netlink: 'syz.0.957': attribute type 10 has an invalid length.
[  235.599836][ T9717] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  236.165138][ T9742] netlink: 'syz.4.965': attribute type 3 has an invalid length.
[  236.676336][ T9773] netlink: 'syz.4.974': attribute type 10 has an invalid length.
[  236.727779][ T9770] syzkaller1: entered promiscuous mode
[  236.733847][ T9770] syzkaller1: entered allmulticast mode
[  237.022872][ T9793] netlink: 'syz.4.979': attribute type 3 has an invalid length.
[  237.042638][ T9793] __nla_validate_parse: 15 callbacks suppressed
[  237.042657][ T9793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.979'.
[  237.280298][ T9803] wg1 speed is unknown, defaulting to 1000
[  237.499310][ T9819] netlink: 'syz.4.983': attribute type 10 has an invalid length.
[  237.575600][ T9819] netlink: 'syz.4.983': attribute type 10 has an invalid length.
[  237.594737][ T9819] netlink: 40 bytes leftover after parsing attributes in process `syz.4.983'.
[  237.618463][ T9816] wg1 speed is unknown, defaulting to 1000
[  237.972289][ T9826] wg1 speed is unknown, defaulting to 1000
[  238.092941][ T9846] netlink: 28 bytes leftover after parsing attributes in process `syz.2.988'.
[  238.105890][ T9846] netlink: 28 bytes leftover after parsing attributes in process `syz.2.988'.
[  238.189953][ T9830] wg1 speed is unknown, defaulting to 1000
[  238.399482][ T9831] wg1 speed is unknown, defaulting to 1000
[  238.932307][ T9856] syzkaller0: entered promiscuous mode
[  238.934208][ T9859] netlink: 32 bytes leftover after parsing attributes in process `syz.2.991'.
[  238.938004][ T9856] syzkaller0: entered allmulticast mode
[  239.076983][ T9862] wg1 speed is unknown, defaulting to 1000
[  239.165323][ T9866] netlink: 'syz.3.993': attribute type 1 has an invalid length.
[  239.367413][ T9871] wg1 speed is unknown, defaulting to 1000
[  239.713759][ T9884] netdevsim netdevsim4 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP)
[  239.932213][ T9863] wg1 speed is unknown, defaulting to 1000
[  239.989744][ T9894] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1001'.
[  240.051374][ T9880] wg1 speed is unknown, defaulting to 1000
[  240.127985][ T9896] netlink: 'syz.0.1002': attribute type 22 has an invalid length.
[  240.136064][ T9896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1002'.
[  240.240865][ T9896] netlink: 'syz.0.1002': attribute type 22 has an invalid length.
[  240.250433][ T9896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1002'.
[  240.635637][ T9913] netlink: 'syz.1.1006': attribute type 1 has an invalid length.
[  240.647518][ T9916] netlink: 14212 bytes leftover after parsing attributes in process `syz.3.1007'.
[  240.768878][ T9922] netlink: 'syz.4.1008': attribute type 5 has an invalid length.
[  240.780497][ T9925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1006'.
[  241.098554][ T9914] netlink: 'syz.0.1005': attribute type 13 has an invalid length.
[  241.271197][ T9943] IPVS: length: 141 != 8
[  241.481647][ T9940] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  241.516019][ T9944] ipvlan0: entered promiscuous mode
[  241.523261][ T9944] ipvlan0: left promiscuous mode
[  241.599668][   T60] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  241.689429][   T60] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  241.714292][   T60] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  241.776874][   T60] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  242.048852][ T9974] netlink: 'syz.3.1016': attribute type 21 has an invalid length.
[  242.116789][ T9974] __nla_validate_parse: 5 callbacks suppressed
[  242.116806][ T9974] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1016'.
[  242.162505][ T9961] wg1 speed is unknown, defaulting to 1000
[  255.828276][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  295.090797][ T9991] pim6reg1: entered promiscuous mode
[  295.098323][ T9991] pim6reg1: entered allmulticast mode
[  295.191137][T10003] netlink: 284 bytes leftover after parsing attributes in process `syz.4.1024'.
[  295.364189][ T9996] siw: device registration error -23
[  295.517533][T10016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1026'.
[  295.588497][T10020] vlan2: entered promiscuous mode
[  295.593818][T10020] dummy0: entered promiscuous mode
[  295.653165][T10016] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 56744 - 0
[  295.674408][T10016] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 43032 - 0
[  295.686776][T10016] netdevsim netdevsim1 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  295.760310][T10016] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 56744 - 0
[  295.772206][T10016] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 43032 - 0
[  295.793482][T10016] netdevsim netdevsim1 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  295.862752][T10028] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1030'.
[  295.884900][T10032] netlink: 'syz.4.1032': attribute type 30 has an invalid length.
[  295.899032][T10035] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1031'.
[  295.913782][T10028] bond3: option ad_select: invalid value (7)
[  295.923549][T10028] bond3 (unregistering): Released all slaves
[  296.009405][T10016] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 56744 - 0
[  296.034070][T10016] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 43032 - 0
[  296.047878][T10016] netdevsim netdevsim1 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  296.084819][T10035] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1031'.
[  296.104121][T10044] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  296.129458][T10016] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 56744 - 0
[  296.155090][T10016] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 43032 - 0
[  296.165861][T10016] netdevsim netdevsim1 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  296.205764][T10044] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  296.230180][T10044] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  296.241839][T10044] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  296.262925][T10038] syzkaller1: entered promiscuous mode
[  296.269162][T10038] syzkaller1: entered allmulticast mode
[  296.451878][T10049] syzkaller0: entered allmulticast mode
[  296.464074][T10051] wg1 speed is unknown, defaulting to 1000
[  296.491469][T10056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1036'.
[  297.893503][T10053] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  297.942665][T10075] veth0_to_bridge: entered promiscuous mode
[  297.964320][T10075] veth0_to_bridge: entered allmulticast mode
[  298.004152][   T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 56744 - 0
[  298.023036][   T36] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 43032 - 0
[  298.032862][   T36] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  298.056210][T10087] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  298.095465][   T60] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 56744 - 0
[  298.114124][   T60] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 43032 - 0
[  298.122750][   T60] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  298.166324][T10102] netlink: 'syz.3.1044': attribute type 1 has an invalid length.
[  298.191854][T10102] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1044'.
[  298.285421][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 56744 - 0
[  298.293830][   T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 43032 - 0
[  298.314144][   T13] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  298.342874][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 56744 - 0
[  298.357672][   T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 43032 - 0
[  298.367218][   T13] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  298.812940][T10122] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5
[  298.991207][T10137] netlink: 67 bytes leftover after parsing attributes in process `syz.1.1053'.
[  299.044043][T10142] 0ªX¹¦À: left allmulticast mode
[  299.136217][T10150] netlink: 'syz.4.1056': attribute type 10 has an invalid length.
[  299.197317][T10150] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  299.305647][T10159] netlink: 'syz.1.1057': attribute type 3 has an invalid length.
[  299.369199][T10160] wg1 speed is unknown, defaulting to 1000
[  299.545745][T10170] netlink: 'syz.1.1061': attribute type 8 has an invalid length.
[  299.569022][T10170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1061'.
[  299.589636][T10170] bond0: entered promiscuous mode
[  299.595151][T10170] 
: entered promiscuous mode
[  299.606062][T10170] bond_slave_1: entered promiscuous mode
[  299.617895][T10170] veth1_to_bridge: entered promiscuous mode
[  299.625360][T10170] ip6gretap0: entered promiscuous mode
[  299.633097][T10170] hsr1: entered promiscuous mode
[  300.121387][T10204] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1073'.
[  300.264578][T10214] __nla_validate_parse: 3 callbacks suppressed
[  300.264596][T10214] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1074'.
[  300.337501][T10227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  300.409439][T10227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  300.432640][T10228] bridge0: entered promiscuous mode
[  300.441022][T10228] macvtap1: entered allmulticast mode
[  300.446689][T10228] bridge0: entered allmulticast mode
[  300.455626][T10228] bridge0: port 4(macvtap1) entered blocking state
[  300.463309][T10228] bridge0: port 4(macvtap1) entered disabled state
[  300.487803][T10228] bridge0: left allmulticast mode
[  300.503792][T10228] bridge0: left promiscuous mode
[  300.805608][T10260] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.996401][T10260] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.999096][T10270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1086'.
[  301.122645][T10275] netlink: 'syz.2.1087': attribute type 10 has an invalid length.
[  301.187569][T10260] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.216435][T10275] bond0: (slave wlan1): Opening slave failed
[  301.382478][T10260] netdevsim netdevsim4 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.636202][   T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  301.666889][T10310] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1099'.
[  301.707794][T10310] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1099'.
[  301.721604][   T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  301.757190][   T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  301.829093][   T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  301.878669][T10312] wg1 speed is unknown, defaulting to 1000
[  301.970900][T10316] netlink: 'syz.3.1100': attribute type 13 has an invalid length.
[  301.981279][T10316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1100'.
[  302.207043][T10330] vlan2: entered allmulticast mode
[  302.223687][T10330] batadv0: entered allmulticast mode
[  302.253246][T10326] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1101'.
[  302.784533][T10364] vcan0: tx drop: invalid da for name 0x0000004000000000
[  302.908103][T10371] wg1 speed is unknown, defaulting to 1000
[  302.922109][T10375] macsec0: entered promiscuous mode
[  302.927759][T10375] ip6gretap0: entered promiscuous mode
[  302.931072][T10373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1115'.
[  302.933410][T10375] macsec0: entered allmulticast mode
[  302.978736][T10375] ip6gretap0: entered allmulticast mode
[  302.983654][T10373] sctp: [Deprecated]: syz.3.1115 (pid 10373) Use of struct sctp_assoc_value in delayed_ack socket option.
[  302.983654][T10373] Use struct sctp_sack_info instead
[  303.025133][T10381] syzkaller1: entered promiscuous mode
[  303.030646][T10381] syzkaller1: entered allmulticast mode
[  303.203059][T10391] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1120'.
[  303.791272][T10430] geneve2: entered promiscuous mode
[  303.808356][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  303.819849][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  303.837379][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  303.869771][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  303.910207][T10432] geneve2: entered promiscuous mode
[  303.930362][T10434] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1133'.
[  303.995412][T10436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1132'.
[  304.290659][T10444] wg1 speed is unknown, defaulting to 1000
[  304.572357][T10450] bridge0: port 1(syz_tun) entered blocking state
[  304.618336][T10450] bridge0: port 1(syz_tun) entered disabled state
[  304.641150][T10450] syz_tun: entered allmulticast mode
[  304.660703][T10450] syz_tun: entered promiscuous mode
[  304.736403][T10455] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 56744 - 0
[  304.747854][T10455] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 43032 - 0
[  304.758572][T10455] netdevsim netdevsim1 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  304.852620][T10455] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 56744 - 0
[  304.877841][T10455] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 43032 - 0
[  304.910501][T10455] netdevsim netdevsim1 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  304.990371][T10464] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.040947][T10455] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 56744 - 0
[  305.060060][T10455] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 43032 - 0
[  305.097638][T10455] netdevsim netdevsim1 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  305.150166][T10464] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.197205][T10455] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 56744 - 0
[  305.228491][T10455] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 43032 - 0
[  305.254401][T10455] netdevsim netdevsim1 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  305.300624][T10464] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.418780][T10464] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.438280][T10477] netlink: 'syz.3.1144': attribute type 16 has an invalid length.
[  305.451604][T10477] netlink: 'syz.3.1144': attribute type 17 has an invalid length.
[  305.488847][ T3537] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 56744 - 0
[  305.501407][ T3537] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 43032 - 0
[  305.510574][ T3537] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  305.519621][ T3537] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 56744 - 0
[  305.529021][ T3537] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 43032 - 0
[  305.537948][ T3537] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  305.574813][T10477] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  305.640343][ T3537] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 56744 - 0
[  305.651025][ T3537] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 43032 - 0
[  305.660254][ T3537] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  305.708749][ T3602] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 56744 - 0
[  305.742721][ T3602] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 43032 - 0
[  305.761849][ T3602] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  305.817547][ T3602] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  305.853451][ T3602] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  305.905480][   T60] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  305.966631][ T3602] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  306.770520][T10510] netlink: 'syz.3.1151': attribute type 1 has an invalid length.
[  306.786032][T10510] nbd: error processing sock list
[  306.801168][T10505] veth2: entered allmulticast mode
[  306.913288][T10516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1154'.
[  306.999467][T10521] syzkaller1: entered promiscuous mode
[  307.014869][T10521] syzkaller1: entered allmulticast mode
[  307.358153][T10531] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1160'.
[  307.392134][T10533] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1161'.
[  307.395711][T10531] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1160'.
[  307.446742][T10533] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1161'.
[  307.465075][T10533] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1161'.
[  307.491704][T10533] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1161'.
[  307.505326][T10533] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1161'.
[  307.539811][T10533] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1161'.
[  307.565441][T10533] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1161'.
[  308.123581][T10549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  308.138606][T10555] netlink: 'syz.1.1166': attribute type 13 has an invalid length.
[  308.147312][ T3602] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  308.164943][ T3602] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  308.173351][ T3602] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  308.184933][T10555] netlink: 'syz.1.1166': attribute type 17 has an invalid length.
[  308.217819][T10558] netlink: 'syz.4.1167': attribute type 1 has an invalid length.
[  308.305857][T10555] 8021q: adding VLAN 0 to HW filter on device `
[  308.334442][T10555] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  308.377481][ T3602] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  308.468870][T10555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  308.478410][T10559] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  308.490877][T10559] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  308.560469][T10561] bond4: (slave bridge1): Enslaving as an active interface with a down link
[  308.579081][T10555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  308.600123][T10573] macvlan2: entered promiscuous mode
[  308.605890][T10573] macvlan2: entered allmulticast mode
[  308.612056][T10573] bond4: entered promiscuous mode
[  308.618394][T10573] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  308.628788][T10573] bond4: left promiscuous mode
[  308.692935][T10556] wg1 speed is unknown, defaulting to 1000
[  308.837972][T10582] wg1 speed is unknown, defaulting to 1000
[  309.591711][T10619] IPv6: Can't replace route, no match found
[  309.595401][T10613] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  344.944063][ T5159] Bluetooth: hci3: command 0x0405 tx timeout
[  364.356823][T10622] __nla_validate_parse: 150 callbacks suppressed
[  364.356844][T10622] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1184'.
[  364.412891][T10623] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1182'.
[  364.427534][T10627] wg1 speed is unknown, defaulting to 1000
[  364.575708][T10628] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  365.688916][T10679] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  365.783448][T10685] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1201'.
[  365.812347][T10685] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1201'.
[  365.841554][T10685] block nbd0: not configured, cannot reconfigure
[  365.863736][T10685] syz_tun: Device is already in use.
[  365.943082][T10691] veth0_to_bridge: entered promiscuous mode
[  365.997154][T10695] IPv6: NLM_F_CREATE should be specified when creating new route
[  366.014699][T10690] veth0_to_bridge: left promiscuous mode
[  366.077666][T10701] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1205'.
[  366.093541][T10702] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1205'.
[  366.300531][T10723] veth0_to_bond: entered allmulticast mode
[  366.490924][T10740] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1214'.
[  366.503441][T10738] bond3: entered promiscuous mode
[  366.509064][T10738] bond3: entered allmulticast mode
[  366.515065][T10738] 8021q: adding VLAN 0 to HW filter on device bond3
[  366.690230][T10738] bond3 (unregistering): Released all slaves
[  366.805184][T10734] wg1 speed is unknown, defaulting to 1000
[  367.405673][T10780] wg1 speed is unknown, defaulting to 1000
[  367.538371][T10787] wg1 speed is unknown, defaulting to 1000
[  367.591769][T10795] Bluetooth: MGMT ver 1.23
[  367.707248][T10800] pimreg: entered allmulticast mode
[  368.285373][T10825] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1238'.
[  368.297075][T10824] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1238'.
[  368.514972][T10835] wg1 speed is unknown, defaulting to 1000
[  368.915631][T10846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1243'.
[  369.298932][T10863] wg1 speed is unknown, defaulting to 1000
[  369.664291][ T5857] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  369.664576][ T5159] Bluetooth: hci2: command 0x0406 tx timeout
[  369.830921][T10878] netlink: 'syz.4.1252': attribute type 13 has an invalid length.
[  370.090232][T10871] wg1 speed is unknown, defaulting to 1000
[  370.308021][T10893] veth1_to_bond: Caught tx_queue_len zero misconfig
[  370.348439][T10898] __nla_validate_parse: 1 callbacks suppressed
[  370.348457][T10898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1255'.
[  370.400931][T10897] !
: renamed from dummy0 (while UP)
[  370.415698][T10908] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1259'.
[  370.642850][T10893] wg1 speed is unknown, defaulting to 1000
[  370.738494][T10897] wg1 speed is unknown, defaulting to 1000
[  371.389623][T10946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1266'.
[  371.438481][T10946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1266'.
[  371.958325][T10956] 8021q: adding VLAN 0 to HW filter on device bond0
[  372.018495][T10956] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  372.029430][T10972] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1272'.
[  372.221965][T11009] wg1 speed is unknown, defaulting to 1000
[  372.275368][T10995] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  372.291791][T10995] bond0: (slave bond_slave_1): link status definitely down, disabling slave
[  372.302735][T10995] bond0: now running without any active interface!
[  372.520194][T11031] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1278'.
[  372.760925][T11042] netlink: 'syz.2.1282': attribute type 1 has an invalid length.
[  372.811859][T11042] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1282'.
[  373.004578][T11063] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1284'.
[  373.058410][T11065] block nbd0: Unsupported socket: should be TCP or UNIX.
[  373.331330][T11080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1289'.
[  373.416677][T11080] 8021q: adding VLAN 0 to HW filter on device bond5
[  373.697515][T11097] netlink: 'syz.3.1292': attribute type 1 has an invalid length.
[  373.705776][T11097] netlink: 'syz.3.1292': attribute type 2 has an invalid length.
[  373.713568][T11097] netlink: 'syz.3.1292': attribute type 1 has an invalid length.
[  374.060846][T11121] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1299'.
[  374.203050][T11125] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  374.223342][T11125] syzkaller0: entered promiscuous mode
[  374.239257][T11125] syzkaller0: entered allmulticast mode
[  374.408589][T11125] tipc: Resetting bearer <eth:syzkaller0>
[  374.427008][T11124] tipc: Resetting bearer <eth:syzkaller0>
[  374.477856][T11124] tipc: Disabling bearer <eth:syzkaller0>
[  374.822607][T11145] netlink: 'syz.1.1308': attribute type 39 has an invalid length.
[  374.846257][T11145] vcan0: tx drop: invalid da for name 0x0000000000000001
[  375.171690][T11153] wg1 speed is unknown, defaulting to 1000
[  375.207183][T11158] wg1 speed is unknown, defaulting to 1000
[  375.746010][T11189] __nla_validate_parse: 6 callbacks suppressed
[  375.746031][T11189] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1316'.
[  375.747222][T11187] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  375.806652][T11187] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  375.806703][T11194] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1318'.
[  375.875994][T11187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1315'.
[  375.904190][T11187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1315'.
[  375.944421][T11187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1315'.
[  375.953699][T11187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1315'.
[  376.049681][T11187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1315'.
[  376.066326][T11187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1315'.
[  376.106735][T11187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1315'.
[  376.151780][T11187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1315'.
[  376.725799][T11203] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  376.743627][T11203] syzkaller0: entered promiscuous mode
[  376.764042][T11203] syzkaller0: entered allmulticast mode
[  376.796641][T11203] netlink: 'syz.1.1320': attribute type 1 has an invalid length.
[  376.833112][T11203] tipc: Resetting bearer <eth:syzkaller0>
[  376.867751][T11201] tipc: Resetting bearer <eth:syzkaller0>
[  376.902259][T11201] tipc: Disabling bearer <eth:syzkaller0>
[  376.927894][T11209] tipc: Started in network mode
[  376.932975][T11209] tipc: Node identity cab7f5687916, cluster identity 4711
[  376.954210][T11209] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  376.972022][T11209] syzkaller0: entered promiscuous mode
[  376.988864][T11209] syzkaller0: entered allmulticast mode
[  377.026652][T11209] tipc: Resetting bearer <eth:syzkaller0>
[  377.164459][T11208] tipc: Resetting bearer <eth:syzkaller0>
[  377.186850][T11208] tipc: Disabling bearer <eth:syzkaller0>
[  377.212690][T11216] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  377.797450][T11246] siw: device registration error -23
[  377.817273][T11246] netlink: 'syz.1.1328': attribute type 33 has an invalid length.
[  377.848819][T11242] wg1 speed is unknown, defaulting to 1000
[  378.478118][T11256] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  378.621648][T11258] bridge2: entered promiscuous mode
[  378.652047][T11258] bridge2: entered allmulticast mode
[  378.990169][T11268] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  379.085768][T11268] syzkaller0: entered promiscuous mode
[  379.091276][T11268] syzkaller0: entered allmulticast mode
[  379.125964][T11268] tipc: Resetting bearer <eth:syzkaller0>
[  379.260330][T11013] tipc: Resetting bearer <eth:syzkaller0>
[  379.394110][T11267] tipc: Resetting bearer <eth:syzkaller0>
[  379.734526][T11288] netlink: 'syz.2.1340': attribute type 2 has an invalid length.
[  379.760352][T11288] netlink: 'syz.2.1340': attribute type 1 has an invalid length.
[  379.784177][T11288] netlink: 'syz.2.1340': attribute type 1 has an invalid length.
[  379.803173][T11288] netlink: 'syz.2.1340': attribute type 1 has an invalid length.
[  379.826959][T11288] netlink: 'syz.2.1340': attribute type 1 has an invalid length.
[  379.849390][T11288] netlink: 'syz.2.1340': attribute type 1 has an invalid length.
[  380.094004][   T43] tipc: Node number set to 1217517615
[  381.203216][T11267] tipc: Disabling bearer <eth:syzkaller0>
[  381.214502][T11304] __nla_validate_parse: 29 callbacks suppressed
[  381.214521][T11304] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1344'.
[  381.603257][T11339] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  381.622919][T11342] netlink: 'syz.2.1351': attribute type 10 has an invalid length.
[  381.641926][T11342] bond0: (slave team0): Enslaving as an active interface with a down link
[  381.822179][T11351] macsec1: entered promiscuous mode
[  381.833490][T11351] macsec1: entered allmulticast mode
[  381.990936][T11359] netlink: 'syz.4.1358': attribute type 10 has an invalid length.
[  382.002758][T11359] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1358'.
[  382.019666][T11359] team0: Port device geneve0 added
[  382.026520][T10993] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  382.035333][T10993] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  382.045086][T10993] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  382.063275][T10993] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  382.177081][T11349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1355'.
[  382.450710][T11379] netlink: 'syz.1.1364': attribute type 2 has an invalid length.
[  382.514688][T11384] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1365'.
[  382.536324][T11392] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1363'.
[  382.661216][T11394] wg1 speed is unknown, defaulting to 1000
[  382.688150][T11395] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1367'.
[  382.725049][T11395] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1367'.
[  382.827122][T11395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1367'.
[  382.859959][T11395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1367'.
[  383.492473][T11413] netlink: 'syz.1.1372': attribute type 3 has an invalid length.
[  383.509984][T11410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1370'.
[  383.765935][T11430] nbd: device at index 1 is going down
[  383.774388][T11429] nbd: device at index 1 is going down
[  383.782875][T11428] veth5: entered promiscuous mode
[  384.333489][T11467] netlink: 'syz.2.1386': attribute type 10 has an invalid length.
[  384.439124][T11467] team0: Port device dummy0 added
[  384.478952][T11476] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  384.547418][T11476] bond0: (slave syz_tun): Releasing backup interface
[  384.570615][T11476] bond0: (slave bond_slave_0): Releasing backup interface
[  384.602063][T11476] bond0: (slave bond_slave_1): Releasing backup interface
[  384.618332][T11476] team0: Port device C removed
[  384.625665][T11476] team0: Port device team_slave_1 removed
[  384.631992][T11476] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  384.673158][T11476] netlink: 'syz.4.1387': attribute type 10 has an invalid length.
[  384.681266][T11476] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[  384.690326][T11476] bond0: (slave wlan1): Opening slave failed
[  384.729909][T11491] !
: renamed from dummy0
[  384.744573][T11003] bond0: (slave team0): link status definitely up, 0 Mbps full duplex
[  384.753238][T11003] bond0: active interface up!
[  384.911787][T11497] wg1 speed is unknown, defaulting to 1000
[  385.141855][T11511] netlink: 'syz.1.1397': attribute type 1 has an invalid length.
[  385.204413][T11511] netlink: 'syz.1.1397': attribute type 1 has an invalid length.
[  385.235732][T11511] netlink: 'syz.1.1397': attribute type 1 has an invalid length.
[  386.204457][T11547] wg1 speed is unknown, defaulting to 1000
[  386.400763][T11571] __nla_validate_parse: 11 callbacks suppressed
[  386.400785][T11571] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1410'.
[  386.427429][T11571] bridge_slave_0: entered allmulticast mode
[  386.436371][T11571] netlink: 'syz.0.1410': attribute type 4 has an invalid length.
[  386.465438][T11571] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1410'.
[  386.530559][T11569] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  386.704662][T11585] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  386.883212][T11596] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1415'.
[  386.925945][T11597] syzkaller0: entered promiscuous mode
[  386.931584][T11597] syzkaller0: entered allmulticast mode
[  387.054072][   T30] audit: type=1800 audit(1759744504.015:2): pid=11609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1418" name="memory.events" dev="tmpfs" ino=1464 res=0 errno=0
[  387.135623][   T30] audit: type=1804 audit(1759744504.015:3): pid=11609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1418" name="/newroot/280/memory.events" dev="tmpfs" ino=1464 res=1 errno=0
[  387.440729][T11633] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1423'.
[  387.556298][T11633] netlink: 336 bytes leftover after parsing attributes in process `syz.2.1423'.
[  387.642067][T11645] netlink: 'syz.0.1427': attribute type 1 has an invalid length.
[  387.650925][T11645] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1427'.
[  387.755209][T11651] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  387.825901][T11654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1429'.
[  387.834965][T11654] netlink: 'syz.0.1429': attribute type 5 has an invalid length.
[  387.842886][T11654] netlink: 'syz.0.1429': attribute type 8 has an invalid length.
[  387.850901][T11654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1429'.
[  387.856920][T11655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1431'.
[  387.870396][T11655] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  387.886151][T11654] geneve2: entered promiscuous mode
[  387.891527][T11654] geneve2: entered allmulticast mode
[  387.898216][T11656] syz_tun: left allmulticast mode
[  387.903384][T11656] syz_tun: left promiscuous mode
[  387.909892][T11656] bridge0: port 1(syz_tun) entered disabled state
[  387.921558][T11656] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  387.938515][T10997] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0
[  387.947577][T10997] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[  387.997337][T10997] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0
[  388.006780][T10997] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0
[  388.042937][T11658] wg1 speed is unknown, defaulting to 1000
[  388.132588][T11659] syzkaller0: entered promiscuous mode
[  388.138147][T11659] syzkaller0: entered allmulticast mode
[  388.369434][T11671] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1434'.
[  388.891647][T11680] tipc: Can't bind to reserved service type 1
[  388.899238][T11680] netlink: 'syz.4.1437': attribute type 5 has an invalid length.
[  389.514357][T11679] tunl0: Caught tx_queue_len zero misconfig
[  389.986039][T11698] netlink: 'syz.1.1444': attribute type 1 has an invalid length.
[  390.360375][T11717] bond0 (unregistering): Released all slaves
[  390.425771][T11722] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20001
[  390.628942][T11738] sctp: [Deprecated]: syz.1.1456 (pid 11738) Use of int in max_burst socket option deprecated.
[  390.628942][T11738] Use struct sctp_assoc_value instead
[  390.716143][T11747] nbd: socks must be embedded in a SOCK_ITEM attr
[  390.823175][T11753] syzkaller0: entered promiscuous mode
[  390.838656][T11753] syzkaller0: entered allmulticast mode
[  391.358182][T11796] netlink: 'syz.3.1472': attribute type 4 has an invalid length.
[  391.367042][T11795] netlink: 'syz.3.1472': attribute type 4 has an invalid length.
[  391.465979][T11799] wg1 speed is unknown, defaulting to 1000
[  391.575645][T11809] __nla_validate_parse: 19 callbacks suppressed
[  391.575664][T11809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1476'.
[  391.709020][T11821] veth0: entered promiscuous mode
[  391.718972][T11820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1476'.
[  391.842157][T11799] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1473'.
[  391.855203][T11799] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1473'.
[  392.360208][T11839] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993
[  392.642736][T11815] veth0: left promiscuous mode
[  392.707002][T11871] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1488'.
[  393.395115][T11919] wg1 speed is unknown, defaulting to 1000
[  393.514331][T11925] netlink: 468 bytes leftover after parsing attributes in process `syz.3.1502'.
[  393.528506][T11925] netlink: 'syz.3.1502': attribute type 1 has an invalid length.
[  393.536840][T11925] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1502'.
[  393.549300][T11925] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1502'.
[  393.761130][T11932] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1503'.
[  393.855121][T11932] wg1 speed is unknown, defaulting to 1000
[  393.936273][T11938] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1505'.
[  393.957514][T11919] netlink: 'syz.4.1500': attribute type 17 has an invalid length.
[  394.036536][T11919] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  394.605267][T11956] netlink: 'syz.0.1508': attribute type 58 has an invalid length.
[  394.842424][T11963] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  395.380122][T11995] wg1 speed is unknown, defaulting to 1000
[  395.833167][T12016] syzkaller1: entered promiscuous mode
[  395.839252][T12016] syzkaller1: entered allmulticast mode
[  395.985450][T12024] sctp: [Deprecated]: syz.3.1525 (pid 12024) Use of struct sctp_assoc_value in delayed_ack socket option.
[  395.985450][T12024] Use struct sctp_sack_info instead
[  396.012445][T12024] netlink: 'syz.3.1525': attribute type 3 has an invalid length.
[  396.078240][T12026] veth5: entered promiscuous mode
[  396.744264][T12050] __nla_validate_parse: 15 callbacks suppressed
[  396.744285][T12050] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1532'.
[  396.761798][T12044] veth5: entered promiscuous mode
[  396.917031][T12056] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1533'.
[  396.986365][T12059] netlink: 'syz.2.1535': attribute type 1 has an invalid length.
[  397.109940][T12064] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  397.164422][T12064] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  397.186847][T12070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1538'.
[  397.204541][T12064] netlink: 'syz.3.1536': attribute type 10 has an invalid length.
[  397.233005][T12064] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[  397.261870][T12064] 8021q: adding VLAN 0 to HW filter on device bond0
[  397.341011][T12064] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  397.349935][T12082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1539'.
[  397.552665][T12080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1539'.
[  397.679189][T12101] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1544'.
[  397.780068][T12102] : entered promiscuous mode
[  397.914698][T12108] pim6reg1: entered promiscuous mode
[  397.920046][T12108] pim6reg1: entered allmulticast mode
[  398.227319][T12125] wg1 speed is unknown, defaulting to 1000
[  398.303242][T12136] netlink: 'syz.3.1554': attribute type 14 has an invalid length.
[  398.523759][T12152] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1558'.
[  398.946036][T12175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  398.977616][T12179] geneve4: entered promiscuous mode
[  398.983057][T12179] geneve4: entered allmulticast mode
[  399.170877][T12184] bond0: (slave team0): Releasing backup interface
[  399.186889][T12184] team0: Port device dummy0 removed
[  399.192738][T12184] bridge_slave_0: left allmulticast mode
[  399.208067][T12184] bridge_slave_0: left promiscuous mode
[  399.213802][T12184] bridge0: port 1(bridge_slave_0) entered disabled state
[  399.225457][T12184] bridge_slave_1: left allmulticast mode
[  399.231129][T12184] bridge_slave_1: left promiscuous mode
[  399.237330][T12184] bridge0: port 2(bridge_slave_1) entered disabled state
[  399.247329][T12184] bond0: (slave bond_slave_0): Releasing backup interface
[  399.256680][T12184] bond0: (slave bond_slave_1): Releasing backup interface
[  399.267294][T12184] team0: Port device team_slave_0 removed
[  399.275531][T12184] team0: Port device team_slave_1 removed
[  399.281859][T12188] netlink: 'syz.2.1566': attribute type 10 has an invalid length.
[  399.281903][T12184] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  399.290122][T12188] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1566'.
[  399.309225][T12186] team0: Mode changed to "broadcast"
[  399.368284][T12192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1568'.
[  399.421999][T12194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1569'.
[  399.433099][T12194] tipc: Enabled bearer <eth:vlan0>, priority 18
[  400.544246][ T5908] tipc: Node number set to 3013735784
[  400.641201][T12279] netlink: 'syz.2.1590': attribute type 14 has an invalid length.
[  400.708047][T12284] netlink: 'syz.4.1588': attribute type 1 has an invalid length.
[  400.716885][T12282] syzkaller1: entered allmulticast mode
[  400.876766][T12293] wg1 speed is unknown, defaulting to 1000
[  401.083483][T12297] macsec1: entered promiscuous mode
[  401.089049][T12297] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  401.111289][T12297] macsec1: entered allmulticast mode
[  401.117049][T12297] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  401.254528][T12306] siw: device registration error -23
[  401.350709][T12310] netlink: 'syz.2.1597': attribute type 1 has an invalid length.
[  401.451257][T11015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  401.467060][T11015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  401.731124][T12337] netlink: 'syz.1.1602': attribute type 10 has an invalid length.
[  401.754857][T12337] __nla_validate_parse: 11 callbacks suppressed
[  401.754879][T12337] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1602'.
[  401.800111][T12337] `: entered promiscuous mode
[  401.824822][T12346] sctp: [Deprecated]: syz.1.1602 (pid 12346) Use of int in max_burst socket option deprecated.
[  401.824822][T12346] Use struct sctp_assoc_value instead
[  401.848773][T12337] team_slave_0: entered promiscuous mode
[  401.882751][T12337] team_slave_1: entered promiscuous mode
[  401.920376][T12337] bridge0: port 4(`) entered blocking state
[  401.941429][T12337] bridge0: port 4(`) entered disabled state
[  401.959840][T12337] `: entered allmulticast mode
[  401.974988][T12337] team_slave_0: entered allmulticast mode
[  401.987954][T12337] team_slave_1: entered allmulticast mode
[  402.008779][T12356] bond0: option mode: unable to set because the bond device has slaves
[  402.019014][T12360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1610'.
[  402.181640][T12356] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  402.287624][T12372] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1613'.
[  402.483044][T12387] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1618'.
[  402.501974][T12387] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1618'.
[  402.540821][T12387] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1618'.
[  402.631939][T12396] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1620'.
[  402.664374][T12400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1619'.
[  402.676639][T12397] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1620'.
[  402.685879][T12399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1619'.
[  402.707885][T12402] netlink: 'syz.4.1621': attribute type 1 has an invalid length.
[  402.715858][T12402] NCSI netlink: No device for ifindex 813332851
[  402.728648][T12407] netlink: 'syz.3.1622': attribute type 1 has an invalid length.
[  402.737089][T12406] netlink: 'syz.3.1622': attribute type 1 has an invalid length.
[  402.791650][T12407] 8021q: adding VLAN 0 to HW filter on device bond3
[  402.804235][T12406] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  403.174602][T12438] wg1 speed is unknown, defaulting to 1000
[  403.534762][T12459] netlink: 'syz.1.1634': attribute type 1 has an invalid length.
[  404.261954][T12492] wg1 speed is unknown, defaulting to 1000
[  404.532021][T12518] netlink: 'syz.1.1646': attribute type 3 has an invalid length.
[  404.742705][T11020] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  404.776571][T11020] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  404.805338][T11020] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  404.833275][T11020] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  404.922999][T12539] netlink: 'syz.4.1653': attribute type 9 has an invalid length.
[  405.125059][T12551] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  405.258768][T12567] ------------[ cut here ]------------
[  405.265062][T12567] ida_free called for id=1212 which is not allocated.
[  405.285410][T12567] WARNING: CPU: 0 PID: 12567 at lib/idr.c:592 ida_free+0x280/0x310
[  405.293468][T12567] Modules linked in:
[  405.297915][T12567] CPU: 0 UID: 0 PID: 12567 Comm: syz.3.1662 Not tainted syzkaller #0 PREEMPT(full) 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer)
[  405.307903][T12567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  405.318371][T12567] RIP: 0010:ida_free+0x280/0x310
[  405.324086][T12567] Code: 00 00 00 00 fc ff df 48 8b 5c 24 10 48 8b 7c 24 40 48 89 de e8 81 2c 0c 00 90 48 c7 c7 20 27 74 8c 44 89 fe e8 91 1c 59 f6 90 <0f> 0b 90 90 eb 34 e8 75 ae 95 f6 49 bd 00 00 00 00 00 fc ff df eb
[  405.344729][T12567] RSP: 0018:ffffc9000bbc7b60 EFLAGS: 00010246
[  405.351217][T12567] RAX: 70580d69e9a24a00 RBX: 0000000000000a02 RCX: ffff888031d13c80
[  405.359532][T12567] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  405.368002][T12567] RBP: ffffc9000bbc7c60 R08: 0000000000000003 R09: 0000000000000004
[  405.376904][T12567] R10: dffffc0000000000 R11: fffffbfff1b7a118 R12: 1ffff92001778f70
[  405.384959][T12567] R13: dffffc0000000000 R14: ffff888030856a00 R15: 00000000000004bc
[  405.392962][T12567] FS:  00007f997bba56c0(0000) GS:ffff88812639b000(0000) knlGS:0000000000000000
[  405.402054][T12567] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  405.409020][T12567] CR2: 00007fac4af156c0 CR3: 0000000076228000 CR4: 00000000003526f0
[  405.417088][T12567] Call Trace:
[  405.420390][T12567]  <TASK>
[  405.423335][T12567]  ? __pfx_ida_free+0x10/0x10
[  405.428819][T12567]  ? down_write+0x162/0x1f0
[  405.433360][T12567]  ? __pfx_down_write+0x10/0x10
[  405.438559][T12567]  ? alloc_mnt_ns+0x24e/0x310
[  405.443268][T12567]  copy_mnt_ns+0x197/0x820
[  405.447799][T12567]  ? rcu_is_watching+0x15/0xb0
[  405.452599][T12567]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  405.458046][T12567]  create_new_namespaces+0xd1/0x720
[  405.463363][T12567]  ? bpf_lsm_capable+0x9/0x20
[  405.468412][T12567]  ? security_capable+0x7e/0x2e0
[  405.473615][T12567]  unshare_nsproxy_namespaces+0x11c/0x170
[  405.479747][T12567]  ksys_unshare+0x4c8/0x8c0
[  405.484448][T12567]  ? __pfx_ksys_unshare+0x10/0x10
[  405.489521][T12567]  __x64_sys_unshare+0x38/0x50
[  405.494587][T12567]  do_syscall_64+0xfa/0x3b0
[  405.499116][T12567]  ? lockdep_hardirqs_on+0x9c/0x150
[  405.504393][T12567]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.510483][T12567]  ? clear_bhb_loop+0x60/0xb0
[  405.515335][T12567]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.521259][T12567] RIP: 0033:0x7f997ad8eec9
[  405.526135][T12567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  405.546043][T12567] RSP: 002b:00007f997bba5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  405.554821][T12567] RAX: ffffffffffffffda RBX: 00007f997afe6180 RCX: 00007f997ad8eec9
[  405.562825][T12567] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c060000
[  405.570909][T12567] RBP: 00007f997ae11f91 R08: 0000000000000000 R09: 0000000000000000
[  405.579210][T12567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  405.587707][T12567] R13: 00007f997afe6218 R14: 00007f997afe6180 R15: 00007ffd70a0b938
[  405.595789][T12567]  </TASK>
[  405.598837][T12567] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  405.606135][T12567] CPU: 0 UID: 0 PID: 12567 Comm: syz.3.1662 Not tainted syzkaller #0 PREEMPT(full) 
[  405.615527][T12567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  405.625587][T12567] Call Trace:
[  405.628866][T12567]  <TASK>
[  405.631791][T12567]  dump_stack_lvl+0x99/0x250
[  405.636386][T12567]  ? __asan_memcpy+0x40/0x70
[  405.641062][T12567]  ? __pfx_dump_stack_lvl+0x10/0x10
[  405.646277][T12567]  ? __pfx__printk+0x10/0x10
[  405.650888][T12567]  vpanic+0x281/0x750
[  405.654869][T12567]  ? __pfx__printk+0x10/0x10
[  405.659459][T12567]  ? __pfx_vpanic+0x10/0x10
[  405.663966][T12567]  ? is_bpf_text_address+0x26/0x2b0
[  405.669171][T12567]  panic+0xb9/0xc0
[  405.672892][T12567]  ? __pfx_panic+0x10/0x10
[  405.677316][T12567]  __warn+0x31b/0x4b0
[  405.681304][T12567]  ? ida_free+0x280/0x310
[  405.685629][T12567]  ? ida_free+0x280/0x310
[  405.689950][T12567]  report_bug+0x2be/0x4f0
[  405.694271][T12567]  ? ida_free+0x280/0x310
[  405.698589][T12567]  ? ida_free+0x280/0x310
[  405.702926][T12567]  ? ida_free+0x282/0x310
[  405.707248][T12567]  handle_bug+0x84/0x160
[  405.711488][T12567]  exc_invalid_op+0x1a/0x50
[  405.715988][T12567]  asm_exc_invalid_op+0x1a/0x20
[  405.720830][T12567] RIP: 0010:ida_free+0x280/0x310
[  405.725850][T12567] Code: 00 00 00 00 fc ff df 48 8b 5c 24 10 48 8b 7c 24 40 48 89 de e8 81 2c 0c 00 90 48 c7 c7 20 27 74 8c 44 89 fe e8 91 1c 59 f6 90 <0f> 0b 90 90 eb 34 e8 75 ae 95 f6 49 bd 00 00 00 00 00 fc ff df eb
[  405.745623][T12567] RSP: 0018:ffffc9000bbc7b60 EFLAGS: 00010246
[  405.751723][T12567] RAX: 70580d69e9a24a00 RBX: 0000000000000a02 RCX: ffff888031d13c80
[  405.759715][T12567] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  405.767684][T12567] RBP: ffffc9000bbc7c60 R08: 0000000000000003 R09: 0000000000000004
[  405.775688][T12567] R10: dffffc0000000000 R11: fffffbfff1b7a118 R12: 1ffff92001778f70
[  405.783658][T12567] R13: dffffc0000000000 R14: ffff888030856a00 R15: 00000000000004bc
[  405.791643][T12567]  ? __pfx_ida_free+0x10/0x10
[  405.796319][T12567]  ? down_write+0x162/0x1f0
[  405.800818][T12567]  ? __pfx_down_write+0x10/0x10
[  405.805664][T12567]  ? alloc_mnt_ns+0x24e/0x310
[  405.810435][T12567]  copy_mnt_ns+0x197/0x820
[  405.814850][T12567]  ? rcu_is_watching+0x15/0xb0
[  405.819616][T12567]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  405.824988][T12567]  create_new_namespaces+0xd1/0x720
[  405.830188][T12567]  ? bpf_lsm_capable+0x9/0x20
[  405.834877][T12567]  ? security_capable+0x7e/0x2e0
[  405.839821][T12567]  unshare_nsproxy_namespaces+0x11c/0x170
[  405.845538][T12567]  ksys_unshare+0x4c8/0x8c0
[  405.850047][T12567]  ? __pfx_ksys_unshare+0x10/0x10
[  405.855083][T12567]  __x64_sys_unshare+0x38/0x50
[  405.859850][T12567]  do_syscall_64+0xfa/0x3b0
[  405.864345][T12567]  ? lockdep_hardirqs_on+0x9c/0x150
[  405.869547][T12567]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.875622][T12567]  ? clear_bhb_loop+0x60/0xb0
[  405.880296][T12567]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.886182][T12567] RIP: 0033:0x7f997ad8eec9
[  405.890733][T12567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  405.910507][T12567] RSP: 002b:00007f997bba5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  405.918918][T12567] RAX: ffffffffffffffda RBX: 00007f997afe6180 RCX: 00007f997ad8eec9
[  405.926983][T12567] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c060000
[  405.934966][T12567] RBP: 00007f997ae11f91 R08: 0000000000000000 R09: 0000000000000000
[  405.943045][T12567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  405.951033][T12567] R13: 00007f997afe6218 R14: 00007f997afe6180 R15: 00007ffd70a0b938
[  405.959033][T12567]  </TASK>
[  405.962328][T12567] Kernel Offset: disabled
[  405.966653][T12567] Rebooting in 86400 seconds..