last executing test programs:

12.77004883s ago: executing program 4 (id=5265):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000380)=@gcm_128={{0x303}, "db57cda808852139", "252432e72844858a068b92a5a810f4dc", "11802ff5", '\x00\x00\x00\x00\x00@\x00'}, 0x28)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1012}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14}}, 0xa4}}, 0x0)

12.56744634s ago: executing program 4 (id=5270):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001214010002000000fcdbdf2508004b0013000000080001000000000008004f0000000000080015000400000008000300"], 0x38}}, 0x80)
ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000040)={'dummy0\x00', 0x1ff})
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001214010002000000fcdbdf2508004b0013000000080001000000000008004f0000000000080015000400000008000300"], 0x38}}, 0x80) (async)
ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000040)={'dummy0\x00', 0x1ff}) (async)

12.417865074s ago: executing program 4 (id=5273):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x94}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1)
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0xe0, r2, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3e}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xa}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6124}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x101}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x800}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x91}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x40}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x371}]}, 0xe0}, 0x1, 0x0, 0x0, 0x44040}, 0x4)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x84, 0x0, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x68, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @initial, {}, @value=@ver_80211n={0x0, 0xf, 0x1, 0x3, 0x0, 0x0, 0x1}}, 0x0, @default, 0x508, @void, @val, @void, @void, @val={0x6, 0x2, 0x2}, @void, @void, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x1, 0x5, 0x57, 0x2}}, @val={0x2d, 0x1a, {0x4000, 0x2, 0x4, 0x0, {0x7fd, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2}, 0x6, 0x400, 0x7}}, @void, @val={0x71, 0x7, {0x3, 0xffffffffffffffff, 0x0, 0xfa, 0xffffffffffffffff, 0x8d, 0x60}}, @val={0x76, 0x6, {0xe, 0x39, 0x3, 0x2}}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8090}, 0x20040000)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

12.129244464s ago: executing program 4 (id=5277):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10)
r2 = socket(0x1e, 0x805, 0x0)
connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10)
connect$tipc(r2, &(0x7f0000000000)=@id, 0x10)
close(r2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa2}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', <r6=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r5, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40011}, 0x80)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r7, 0x2, 0x2, 0x0, @void, @value}, 0x10)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000001ac0), 0x6)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r4, 0x2, 0x0, 0x5, &(0x7f0000000180)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)

11.965992251s ago: executing program 4 (id=5281):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8932, &(0x7f0000003f80)={'team0\x00', &(0x7f0000003f40)=@ethtool_channels})
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x1f, 0x2, 0x520, 0x360, 0x360, 0x290, 0x1c0, 0x0, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth0_to_hsr\x00', 'geneve0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@empty, @mcast1, [], [], 'macvtap0\x00', 'macsec0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_team\x00', 'veth1_to_bond\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, [], [], 'veth0_to_bond\x00', 'caif0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580)
recvmmsg(r5, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000740)=""/1, 0x1}], 0x1}, 0x5}, {{&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000280)=""/241, 0xf1}, {&(0x7f0000000480)=""/163, 0xa3}, {&(0x7f00000003c0)=""/56, 0x38}, {&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000880)=""/44, 0x2c}, {&(0x7f00000008c0)=""/206, 0xce}, {&(0x7f0000000540)=""/140, 0x8c}, {&(0x7f00000006c0)=""/80, 0x50}, {&(0x7f00000009c0)=""/146, 0x92}, {&(0x7f0000000a80)=""/81, 0x51}, {&(0x7f0000000b00)=""/232, 0xe8}, {&(0x7f0000000c00)=""/127, 0x7f}, {&(0x7f0000000c80)=""/2, 0x2}], 0xd, &(0x7f00000007c0)=""/51, 0x33}, 0x9}], 0x2, 0x2000, 0x0)
r6 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000dc0)=ANY=[@ANYRES32, @ANYRES16=r1, @ANYRESOCT=r1, @ANYRES64=r4, @ANYRESOCT=r4, @ANYRES32=r6, @ANYRESDEC=r0, @ANYRESHEX=r0], 0x20)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x4)
r7 = socket$inet6(0xa, 0x1, 0x84)
sendto$inet6(r7, &(0x7f0000000400)="00ec23888d", 0x5, 0x200048c0, &(0x7f00000000c0)={0xa, 0x5, 0x0, @empty}, 0x1c)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)=@newtaction={0xe4, 0x30, 0x2, 0x0, 0x0, {}, [{0xd0, 0x1, [@m_mpls={0xcc, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x3}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_LABEL={0x8}]}, {0x72, 0x4, "a10bf6e5bcd8524f9987e8fd6704349d01a9977b09d2227192eeb9dd50ee06876dbaecd075916099172f4162aebb72ce3a076aafcdf94b07c7af0d2509c5a5adc0b6f478012cee628fbdd0f10fe08c77260202eb08b9dd5433ee0efff1db21e069f291e9ba45c4dc1d8240af8843"}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0xc4}, 0x0)
r11 = socket$inet_sctp(0x2, 0x1, 0x84)
r12 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r13=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x85, &(0x7f0000000000)={r13, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90)
sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\t\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000038000180060001000200000008000500000000000c0007000000000000000000080009000000000008000800000000000800060073697000"], 0x4c}}, 0x0)

10.030733239s ago: executing program 4 (id=5286):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6}]}}}]}, 0x40}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0)

7.585613403s ago: executing program 1 (id=5320):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x58, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x28, 0x51, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "dba06c8914"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}]}]}]}, 0x58}}, 0x800)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x14, r5, 0x28543634fae43ad}, 0x14}}, 0x0)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008001c000000002018000180140002006e657464657673696d300000000000000800080000000000080009"], 0x44}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000011c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r7, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001200)={0x54, r8, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6}, {0x8}, {0x5}}]}, 0x54}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b0010000", @ANYRES16=r8, @ANYBLOB="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"/426], 0x1b0}, 0x1, 0x0, 0x0, 0x24000090}, 0x80)

7.034560261s ago: executing program 1 (id=5326):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000013c0)={0x1, <r0=>0xffffffffffffffff}, 0x4)
getpeername$packet(0xffffffffffffffff, &(0x7f0000001400)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001540)=0x14)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001480)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xad98, '\x00', r1, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
epoll_create1(0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001380)=@ipv6_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}, @FRA_DST={0x14, 0x1, @mcast1}]}, 0x38}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
socket$kcm(0x29, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={<r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'vlan0\x00'})
r5 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r5, 0x8008f513, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@deltfilter={0x0, 0x2d, 0x761e64a0e03707fc, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x10, 0xfff1}, {0x1, 0x10}, {0x8, 0x9}}, [@TCA_RATE={0x0, 0x5, {0x0, 0x5}}, @TCA_RATE={0x0, 0x5, {0x2, 0x1}}]}, 0x44}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x5, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r7, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r7, r7, 0xc, 0x0, 0x0, 0x9, 0x1, 0x699a, 0x5505, 0x8b, 0x1, 0x0, 'syz1\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x75}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f0000001300)=0x5)

6.769805223s ago: executing program 1 (id=5328):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
r3 = socket$inet6(0xa, 0x80803, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0}, {}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0x1}, {{@in=@empty}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ac0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0x1, 0xffec}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x39}]}}]}, 0x3c}}, 0x1)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}]}], {0x14}}, 0x70}}, 0x0)

6.593087697s ago: executing program 1 (id=5332):
syz_emit_ethernet(0x5e, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffff6a00084fa53b86dd691bf85900001100fe8000000000000000000000000000aafc0200000000000000000000000000013c00010500000000200100000000000000000000000000013b0000060000000000000000000000000000ffffac1e0001fe8000000000000000000000000000aafc020000000000000000000000000000fe800000000000000000000000000010fc000000000000000000000000000000ff010000000000000000000000000001ff010000000000000000000000000001ff020000000000000000000000000001ff020000000000000000000000000001ff000241650000000100040009505be100000000000000000000ffffac1414aafc00000000000000000000000000000000000000000000000000ffffac1414bbfe8000000000000000000000000000bbfc020000000000000000000000000000fe88000000000000000000000000000100000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000000ffffac1414bb200100000000000000000000000000026c0004000450df0dff01000000000000000000000000000100000000000000000000000000000001fc000000000000000000000000000001fe880000000000000000000000000001fc000000000000000000000000000000fe8000000000000000000000000000394e204e2100009078dbf85b271810ca6d183b4e55a639f3eeae15e3ba2da9709d55c26f072588d5c7090b72c34ae01bf284b08f0048089df2701acdbcd20d452c1da8c6752d8d06d7d098af25f7f6404c24ea27d49107971f177c7e9895245578ddc5d2a3b8d950a4e1f37c7d2c857d0e3d9e97"], 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="02"], 0x10)
r2 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
close(r0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYBLOB="0200"], 0x10)
r6 = socket$kcm(0x29, 0x0, 0x0)
sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="586bc698d7908d33cfc33e096518e7d5bb4b7475fd6aeefeb15cb2e6929fa2e6730a0e04eadf309669f0b43d01c28451f14bede78a391d238424eda819372be71109017ae91f4d4141c20c0e2c430f7f8ed64876f1cb9816c9bad08ec290d1b0f65f0c6d85f0027d54a4ad070ded561f4f587fb28ada4317c3bc78fec4c1b5d137c16459cf676dc4cdfb576c6dbea155ef0b5ecba3a83024c9ad96687a3329cb65056255b31a2a145c6ee9421fca055688472e6c2e1bc547e52082b20f9dbde3236f8b63ed31f24b139e5c299ac09128a23d147c8c9fc1297d", 0xd9}], 0x1, &(0x7f0000000140)=[{0xd0, 0x10b, 0x1, "c3f3b684c42f4ce2d92a7982cdd0a6cc0c3ed5ef42808eb26cbe075b7a234547347c169e421fd2c9895f48842458880692c19a53a4bcf3c186a6718a0ae6be711d7265c137e6bf50bdb9b69c1c721742580a200434cde144eb9d3ec40a0b33e79e20fb2bc2d90bfd7bb8b34053ec3e7965a578f3da7a16700f5dfce08162f317edc89a8667c4328bf15c857880e60d8a28a2472133769cab40902d594885282769823945266d1dffb5a2e254e4361509d465e7a34af84d0197b5d74eb61939"}, {0x30, 0x116, 0x1, "20c26f413537941848263a977c40589b01c5d7485aebfc1263cc1c3005f30e"}], 0x100}, 0x8001)

6.464220528s ago: executing program 1 (id=5333):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x248}}, 0x4008084)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
listen(r2, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000080)=0x3, 0x4)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0)
ppoll(0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0)
sendmsg$tipc(r3, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) (async)
connect$tipc(r3, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x3, {{0x0, 0x1}}}, 0x10) (async)
read(r2, &(0x7f0000000680)=""/250, 0xfa) (async)
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00a0067c000000000000000004272940eb40343e67f2d3e60e00000000c40000261eea9800fb835b997c96639bc9d501007f47d6f603b1c043f9d70232e4aa370167945988a8aada482f935740cead5ff9157ac1a52a267aeb2b649e007379a4c0d4c1622966cd4b85a76b85e8fb3e8185e8e93c0bfd5d6f682fd764e922cb59f133c7e77eb15029"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r6, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r2}, 0x20) (async)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0x3a, 0x4, 0x338, 0xffffffff, 0x110, 0x0, 0x1a8, 0x110, 0xffffffff, 0x110, 0x2a0, 0x2a0, 0x110, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398)
recvfrom$inet6(r2, &(0x7f0000004000)=""/4107, 0x100b, 0x10000, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010080000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000000000080000ce3abfe09a4516c08810a0103000000000000000001000000082b0440000000000900010073feff300000000038000380340000800400018004000680140007800c000100636f756e7465720004000280140001800c000100636f756e74657200800402801400000010000100000000"], 0xe4}}, 0x0) (async)
bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x400}, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a32000000002800038024000080090026400000000018000b80140001800a0001006c696d697400000004fe02800900010073797a30"], 0xd8}}, 0x0)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f00000003c0)=""/195, &(0x7f00000004c0)=0xc3)

6.221186623s ago: executing program 1 (id=5337):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007000600000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0x4c000)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0)
sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00', @ANYRES16=r1, @ANYBLOB="000128bd7000ffdbdf250d00000008000600350000000800040005000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1.941139055s ago: executing program 3 (id=5386):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000000)={@rand_addr=0x64010102, @multicast1, 0x1, "9cc229ddc1bd762cb9517c6ed9c0155a98d09a117aebd56a0bbd86b2afbbb6b7", 0x2, 0x40, 0x6, 0x4}, 0x3c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'wg2\x00', 0x2101})
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=<r4=>r0, 0x20, 0x0, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0x1, <r5=>0x0}, 0x8)
r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r5, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r6, r4, 0x4, r4}, 0x10)
socket$inet(0x2, 0xa, 0x1a)
sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000380)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000005c0)=[{&(0x7f00000003c0)="8252e6714482096dbbe2bdf320cbda3497ef500db0b7d254adc13f8525bd84a0b106398eb43e15444b74d271d26f794866dbd42715d8f2519b251b7e6b7b6feb2be6fd29c30ca21571b80d35a51be9ba0263ece746fc1dbe2dd1fdf7c16c65b4bf99c85436018d687274d066", 0x6c}, {&(0x7f0000000440)="5475fe735f60c2d3c65bb3ecf33efed81a84bb1bdd5b9cf1643c6b6243397607e5dbadf1", 0x24}, {&(0x7f0000000480)="96629e3f910c822fb4d369743b2d5517c372d9c58bf0bf99660bb7b5464f4e0a892a1e8cadec504db845b8112a556e011062739915ae941ef04cdbcaad67573f0330fa8dbb11d8fbd203349519599f7d7f97354a703b0834f2a33daa158bc61c60b4b1d59c6e4bda1a7e2af1f9cf356fcbf706f8c1e71bad0f33e9eb0ea2a827674b46588945ea493bcbf7353066aed8613c9dd3fd16d6f4b367f7f065e4985718b000075f7dfa414b27cbf0c1aacd71f26bdb570b540d00864f670f3fae", 0xbe}, {&(0x7f0000000540)="9eb884798c90c9729a08c900ae1023bedb355a8a4f742f4626c91a3298ee477c793edd808decfa1fe00b2dc893429aacfe84c1233e854bef85bfc621e89a687d64c0aa1d8c5ee7edd250fdb88224376d4e463dee87494b527b", 0x59}], 0x4, &(0x7f0000000600)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9b1}}, @ip_retopts={{0x58, 0x0, 0x7, {[@cipso={0x86, 0x26, 0x0, [{0x4, 0xe, "c483049bc5a5d367e2a13e06"}, {0x0, 0x7, "753e9b1590"}, {0x0, 0xb, "67c2aa145d1824b8ed"}]}, @rr={0x7, 0x1f, 0xc, [@rand_addr=0x64010101, @remote, @multicast2, @empty, @multicast1, @remote, @local]}]}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x43, 0x1, 0x2, [{@remote, 0xbd5c}]}]}}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x39}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0x58, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x44, 0x3a, 0x3, 0x6, [{@broadcast, 0xc0c}, {@local, 0x3}, {@multicast1, 0x9}, {@local, 0x7}, {@rand_addr=0x64010102, 0x7fff}, {@multicast1, 0x8}, {@multicast2, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x168}, 0x50)
setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f00000007c0)={@remote, @multicast2, 0x0, "21addc24e0605f38b7090fd244e4777dd7325c23a0c93134d4fdb3d04b8937c9", 0xd, 0xfffffff7, 0x400, 0x5}, 0x3c)
setsockopt$inet6_buf(r4, 0x29, 0x2a, &(0x7f0000000800)="2b4d04bdd0cee658194e1c15f9fa1d56656cfae0e93c9e6b479a49f37ce1ef60995a64b4e1048fe38e3aefa0a966672a1cf8e12dff57cd14b94ddef46a9762b2968bd6873e07af9357f4b0f02aab98a6a16d0abc62e39337f5", 0x59)
sendmsg$nl_route(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)=@getroute={0x14, 0x1a, 0x20, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x48004)
listen(0xffffffffffffffff, 0xfffff0e5)
recvfrom$inet6(r4, &(0x7f0000000980), 0x0, 0x100, &(0x7f00000009c0)={0xa, 0x4e20, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000a00)={<r7=>0x0, 0x5, 0x8, 0x7f241b62, 0x4, 0x4}, &(0x7f0000000a40)=0x14)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000a80)={r7, 0x3, "c9aa40"}, &(0x7f0000000ac0)=0xb)
r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$key(r4, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000b00)={0x2, 0x6, 0xfa, 0x0, 0x217, 0x0, 0x70bd26, 0x25dfdbfe, [@sadb_address={0x5, 0x6, 0xff, 0xa0, 0x0, @in6={0xa, 0x4e20, 0x0, @mcast2, 0x800000}}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e24}, @sadb_sa={0x2, 0x1, 0x4d6, 0x3, 0xe, 0x5c, 0x2, 0x40000000}, @sadb_key={0x201, 0x8, 0x8000, 0x0, "8a571a1264e7174e5067132a922abc3946a338979ab2798a015be0c03edaa22f5f3b4387276dc781832e57d76ab7e9e6363930dd758b1c21bc54e16064e453929892f6ce516cbf2ebae9c496bd46ea15972e1c80b10388634fac7fa701cdc62891c37e5b6a595ebbd807e32cca191be7372c8f2c5df88b33117554432cf539947b83fa82b99dffe19d51821696b072a6ba7a64a661975464a15f801e1a8f6628a77be4e051678727353d33b08298001faf88327742fa6fb8d984892b7b754356e1c60ada7982220df4dcf34f26153c838f747c8bf000914340533d97dcd6db3641cfd067684c1345127f6326c4167219f7b0ea532b89fe5f05751a94b5146bff39ea0b83f6924b5f845c0b0de518eb79ee52f74907b2765793ee91bf95d2fc0b157c16cef00a3d936cad1417ab32fce04c8b30ee1ad14d02564d5a9e0feb885c2e8f3295f606962bf638f7a00f7d8361890ab54f2baa850cd5278c0a5fb80f9f3161e80c52f462f30dd3055acbef37674bd5b43c2e3ddc7afe11e0121fe33639338afd0a5888446a1d57023535c6a16a552b0199e3c7aa0c8153ae69c8f53e90eff647f0b1eeb3a3c0a8961db06d2475d6b75c057444def42e632fe3578e399bfc308bfc21836ed1cfc93af93bd173294161bb2c24252e9bacf5d9bb76eb768b9a311943106e4ad6764358d303e626f1ad26404eb3f11609de790e7f45f46561f10a3e03be547ff4af4151e570a4cb141133368f4e37716e05f68fb6b206f5ca6ba3bbbad29c6073a07ada3def336d2a6e722900fea2e5c7b7d9b2a4fffd0a978a062b0448ba76fc34571a2ecc1f71e59764f87a4d0dfee5c08793ed3d2bcb0db9a31c193742f8d573e8511f341cf155436af882becb7f634eed9344356d1f97a38f5ddcaaf5be5fa956e84ac909c96c736367729574aa00bfffb76619885939fc4cf95305a3f565f646ea6cb0b20ad5be0b77f9f33952034f3f5097eb7695b6395512c75ed300b7fc1190f9fd727571c78b5ce8f5adb68047240d66ef7465eead3be374ca2306cbec2e0b706be8923106fed77ada64d2eb35f7617263690ecd6c910791b63a184c4611299018461414e9238181fe2e0c5979386dcc5ab3fbadda1b0db0127144664bf945b6ccee89853ee82eabba64e0a1c6de12b614ca69affa3fda914c12e8f8471aff76bb72160248745a578e47197b714febd043371faad0a3e7ef0c986c8342cb95790629a5ba60b0ec24ccae9a8cc405a7e7f2312707d15939e98dfc5eec1063053f76324e6c23d37d78adf7f814ac03f4f8365265f8fca5f95e792c9fa038b69fc7e49ceae243b19c25fd8aafca8c83504924bf513c37a717c9ed552d5fd6559a1b8722dee18cee9140043b4dfec8dc23b0dc33aca8fbc596b5713917d4d74959422d91debb1aaed4c73b7530881e9b98d365a97981274def89688e089294cc1412df87dfe584c9977bd6942f46af76f5801f51e111457420a3056cffdc23b332a89ecddc3c0e954832d5400cf15b24b4bca1427a23b6572c3f19043a57e41eb2169c3abc17d63a8e8d82621bc672559a456b20d3070c877818ab0d3bc8bcc3345c740f4b30dd063236267e077279d182477ffcf3105e1c6abfc12c213b069e43971a605b9679fa59378c73c416c5c208053c81cad8724ed7c63224f42d6cc732c118a738fd5cf420466b78116028cca4ddf3b0aaa38660cbd367f66023b2dea28466161494a6302ad6956db97c4d6999d089a6b98170e9ca3c36c39af754b127edb9a69f1f0c63372b291b39d7d48fb072cb87cadb071401da6a31da27ce090748866f7f388d9e46e3c2ba9258d2e464ff89753d193a9790f64fd64b2c583f70f2f394c3a99ca15d1650bcec4600301a221d04bc8a78f20a1256dc0bf820679520a4337380228ed207a4ecf0704e4591157fab0828a9ddcb44c89bae62d89be6b38c8034bd2b8d097647b867b40129908e0f6fbd264cebb744a76be5536cbf874e36088132f88dc72523a1cde71919545762840f56d5538ca54a746b0b31c539c3775283124dcca6650d4c9f667c589776f8375208a144e32ddfd8fb532bbd45ab06986a0b5472859781028224285ac594b58d1de6eddf1ab7d2f35acadf53a81002d712dc54ee6178342ed847fb49aa5d401f9f9bc506c1b158c9bc728e7457940fb6690e8ca339ff6419fb67aa1e532c07d7acb7e0a5683438f01a68ae6d00eb226757c907ccd895319dd513097cef4c25a03dbe6e3356cf4f6891c490597347b3fbbfd7394db9468886642a94b83bfaca1eb59bce11173b95ad7e853c6358709d5f908df14159a2d8f8e15ed8cd1c05056d917a324b310ee347948a6834d22e5cecaccbbb951d8c84b35d4178207b2991b12b388925cce12a5ef8b106cc2ff0921e9be59063e10f08653add60cb0ba5e34b5a9099c6e5527349155b29b0b40c864468300fd37a0aace74b7525ae05c4a7f9a9c927be3246c4a23d89c26cf1e0f4112397e04717a62a960a208ce858e592ccb0852b2cb4939c285c440e2d0ac205781dfb90e54c2c296a29e43f32514a44b95af06f5877a0f6c53dae454ca3b9431b6c52e80a7bfda2f26c68d2483d8992dce9c7b3d1090e59cb9429c5306aa9f3c5c04a21a65f80ea893f655340cc3fce7ed7c7eb3b27237762ae32349b00c16a4a56423a15f5daf628055169a162e1e6db78cb248237a87824243a9e48c0109ac8162e1b8f6181cad08e94bb8256ef32197624bec5a8746890ac7da80d41205d04314ec65c2c71cd1bce47f797e1af9c9a4645c25ca8a9aab7c81279477f97251809851ea23c2d0adbfe1685b93fc47b436bb51bc6182175913ab735adfc3ccd282ba256efe455e7928a57a316c453650467f9eb6ded611b96a13be5c6abd03816dffd51d292c2df3b8ed89ca5a403fa5780be3f74132c0525be55a285dd58e2afc5ae63f4f0f9a379e966080be1584661015a3202c24df1fcbc4cbb7b584061a5b93db615493d3d31138f736f8eaac892618550e357b749a7fccdd9aad4dcf5388c636a243a8c3d73ca585187c70899160136e7a24a2dca1091b3bf6a8c84483da58098fc1868454d382db68e95e6b0d7878561725eb1ea5b941eee2eca09ebf1f0b071770c30fbcdbb4036e4070b3f12a00060de97c11e4ca00baa50087f0f2c2838861bfe80a28c16a1e0964d8404b6923bd14fb11f749e65664a57e79cb1280f264a39529dd4d2d2b2d8b1d78dedf961b5c723d10eb3e0439123d307567101e9f85dcc7cf5c756740207f16b8e1b92a679c33725060bf497b78951b12a4863878f91ba7ebf13509be303a74a85518b78ec6d953ab49be103acd2faecd66a6af8e2a14aa9ede4fb1c49341461eb0d112ae46a6aa8e566997521bd7d329322e58ef26b9c108122738b3b002bf418964f29fcbce2c531517a2210a5f4400b230669e941639fec1f377963fbfdf41f6031055851a10b7134d977fd5e203789ab7121a92bc0f3493b2ac1e75fbb6d9888c2b8dbeb989b8393a900efdc36a571559555da1555b98de9239e0aad0d31ef5a88f84cbbbdc477a5c6c6b4eaa0a6e74c1be5aeca33d17cef023320e9a14719b5284ccdecf3aeba2d80507bbf19d234921f472811f3949f2982273b290582a3f1b846ac55057626ad8f69ee4a868891a72417c41c00642fe10a0b1d71c9152d6eb318a355aadbf4504d07d091ffe417ae7d2ecfdc51eb22462638a6c2964e51dad264e34f8fabc5848636020fdfe49901ec0f7bb7fc2d8820f47212c761812ceaa3a3ce667ec915a7e0c82dc1de83d7c85bfe8cf0acdb68aa3ae02b1b864d876c25619cec03b091e9db8335df543d55c4196fbb6d9adf48a24768ea6decca001c0df6718c82783df037f79a92339763d1142623002524d9f75d015176a43e3f8857cb3d7d5f83839e7bd75d7439917a2c00089049d32609c5ddf47d42808657bed3a0462129e4bbd88421224fb3ab320ba6d8bd45f823a987e9c1865fc6251147321fa806a9b5b3ebc98ed28b318491d019f1cdc8538618b2c3314984970a8d473960e814cd20d8ce477156755865c7557dda63dda847b0c72300df82688dd1110f33f5f2ad609e038ab85c79caecbf52c3cbc1b0cb84731bf8883ef37b6e002ba765d3b3dc03397db8acfc64788cca9072323588e53edc6542c4ccd50b63d46340486b212b61774aade7b325085db8f1640803e696f1948c0525b749403f4a66eefeda26167f45e2186826689f80ede6aaff620e9c049ab07b73f8c5874c2db2fa11e205c5567654196da746b6af6245f1410ca01d4ca2bb17ded35a6859f2ac3258593154455ae33cda539d7a0932c8e07ccc0714721fe5996b80ddbc4c33f4c481c356e17cb75287d89dbd05387aa69d0d34fdbf369fd78ad33bdfbd20df1ac866ac8a8ccb2bdf79781bea2b7e57a92ce82a1ce54910db01675af7bc721befa24bc7578b637531179fbff9549c20f0583745e8874c89212bc6e162fc6ddd78996f20c726f2320384e6d3c47b0c1525436c81d3170ce44388d51dc57aa6fa7da91688df63d98e2a6d1355ccb9221152910f24bd0c4ea79e8254a949735a378b56485892925c751bc30834972dda4136756ab6d7539fa03a552b2f87eacc6b908a7865e0d8b2ab7a78a934d7485e1488b186028fe12e01b13544892d933d1b88a68d2e1051ae357e3e4dbe2898bd1d0c1ceec6f4119de8a14b274740687b263fbf52094f7f516357dd33feb375201e481ae782e87bbb731454d94f41fc44c0d172da8a948043d41aaee7487571374ddf2259af80b0959008d4f6bb9c70833d2b4973095400a12194fc23b60ea3ee7dc1c76091c07b35eb5ef29eff861e65e45210013eee9d3a3853affd5112e68e3ef7696637744e3fa4f634ce6a6acf09544f852c804ef4f0da2bb4df4a762b41fc78570cf3302614a1b22a4c96bd598b3321858602d21dab513256dfcd743633adfa5617f8241705776ea302fbb0052e05e89c481d93da8c1c59e7518fa814b45cddc3bf014a1fb418ee3f457f403a1dc255d11ca82df05878ae98e869928a4c2f8090a974c401e63b3aa4f696ff68e2240c0bf614dd745680010a718fe7c05661d03f2261a6531901decbd6f98500a3d21859fded483ff10f8d82fb1f06f15e8ab1137e7ba8e023ffecf88242b0ce63e380387b8b04c50b78cde3279435a6a34c1da7167a1ec62087bb007c01735ad6e341438ab6723c32877336905b04be980c816045fefe253c11c227eadc0f33c6a8075d15f1c440791e1e6e50b896e826b28138b048669804cbdb930ed707e946309fc41f647f939b45b952ea46ea5a797c8c58ca6f8a1fa7cc7df83741cae214ab466a77df1f164909fc5476c677bc1b5348551d1c359fbfcfa52e05170a4f0f3105f34c9f6524aedf8502941139634c705465f5dab57c98f6fb024231ddecc2d785c8e93b06207701ff43d88dc4d9a9199a76c2cd687c1491d62d3af97ab32be7eb49a4033958ff947a8800ad42e4152b839f5b8cce7640a244d10b29b3440ce7313f418fcc5615a23e39b7aada6eeb70006eff6f9ca2aeadc4f42b67fcb0cce30b70b165fa6f297765eefe307693781ffe29c573312db047db4c86d257497f6a7e5cebd97f42f956c0aa6f5f4d4681a6ca600d96a159d082f31429ed29192651fcf442044807ba98c7ff4a1c7af66608f7ff55dfdfb47efa3857517064503ecc8c8d96b90cc457fa7c7a4a4a2858200b15aca2eb2d5ebb3f3dcabfe19581116bd875d56c"}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d5}, @sadb_ident={0x2, 0xa, 0x3000, 0x0, 0xb32}, @sadb_lifetime={0x4, 0x2, 0x7, 0xfffffffffffffffd, 0x3, 0x8}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d5}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e22}, @sadb_x_nat_t_type={0x1, 0x14, 0x7}]}, 0x10b8}}, 0x20040000)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000001c40)={0x0, 0xfffffffffffffeff, 0x646})
sendmsg$NFNL_MSG_COMPAT_GET(r9, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002100)={&(0x7f0000002080)={0x64, 0x0, 0xb, 0x3, 0x0, 0x0, {0xb, 0x0, 0x2}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_NAME={0x8, 0x1, 'wg2\x00'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xe, 0x1, '\xa7%\\,\x89]{{\x89\x00'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0x48090)
listen(r8, 0xb)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000002240)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c00}, 0x4)
socket$nl_route(0x10, 0x3, 0x0)

1.540429279s ago: executing program 3 (id=5392):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r1=>0x0})
socket$packet(0x11, 0x2, 0x300)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000002400)=ANY=[@ANYBLOB="000086dd000311000400000000006eec00be10a42f01fe8000000000000000000000000000aaff02000000000000000000000000000133"], 0x10da)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x610}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}]}}}]}, 0x3c}, 0x1, 0x2}, 0x0)

1.433719927s ago: executing program 0 (id=5393):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', <r1=>0x0, 0x40, 0x80, 0xe0d, 0x2, {{0x20, 0x4, 0x2, 0x1, 0x80, 0x66, 0x0, 0x6, 0x2f, 0x0, @remote, @local, {[@rr={0x7, 0x1b, 0x13, [@local, @broadcast, @local, @remote, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x94, 0xc, "2fa41744c58ae2bdf05c"}, @timestamp_addr={0x44, 0x1c, 0x5b, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private=0xa010100, 0xd8}, {@rand_addr=0x64010100}]}, @lsrr={0x83, 0x27, 0x1c, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @broadcast, @rand_addr=0x64010101, @local]}, @end]}}}}})
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0xc}, 0x7c, r1})
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x17, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x4}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x40, 0x80, 0xe0d, 0x2, {{0x20, 0x4, 0x2, 0x1, 0x80, 0x66, 0x0, 0x6, 0x2f, 0x0, @remote, @local, {[@rr={0x7, 0x1b, 0x13, [@local, @broadcast, @local, @remote, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x94, 0xc, "2fa41744c58ae2bdf05c"}, @timestamp_addr={0x44, 0x1c, 0x5b, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private=0xa010100, 0xd8}, {@rand_addr=0x64010100}]}, @lsrr={0x83, 0x27, 0x1c, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @broadcast, @rand_addr=0x64010101, @local]}, @end]}}}}}) (async)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0xc}, 0x7c, r1}) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x17, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x4}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async)

1.394941419s ago: executing program 2 (id=5394):
r0 = socket(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r3, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x20}}, 0x0)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYRESHEX=r1], 0x6c}}, 0x80)
bind$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@default, @bcast, @netrom, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
sendto(r1, 0x0, 0x4d, 0x0, &(0x7f0000000480)=@llc={0x1a, 0x200, 0x0, 0x0, 0x0, 0x0, @local}, 0x80)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0)

1.310492233s ago: executing program 0 (id=5395):
r0 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)}, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "000f000000000000000100000e00"}}}]}, 0x48}}, 0x0) (async)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

1.201205839s ago: executing program 3 (id=5396):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0xd, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000c4}, 0x40040)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001380)={'syztnl1\x00', &(0x7f0000001300)={'syztnl0\x00', <r2=>0x0, 0x8000, 0x40, 0x4, 0xfffff2f5, {{0x10, 0x4, 0x0, 0x3c, 0x40, 0x64, 0x0, 0x0, 0x0, 0x0, @local, @local, {[@ssrr={0x89, 0x1b, 0xc5, [@multicast1, @remote, @empty, @multicast1, @local, @multicast2]}, @ssrr={0x89, 0xf, 0xc4, [@multicast2, @private=0xa010101, @remote]}, @end]}}}}})
pipe(&(0x7f00000013c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001440)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000014c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xb787, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50)
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000001540), 0x8)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001580)={0x1, <r8=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000015c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001600)={0x1, <r10=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001700)={0x11, 0x1e, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0x2}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}, @call={0x85, 0x0, 0x0, 0xcf}, @ringbuf_query], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000000300)=""/4096, 0x40f00, 0x40, '\x00', r2, 0x0, r4, 0x8, &(0x7f0000001400)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001640)=[r5, r6, r7, r8, 0xffffffffffffffff, r9, r10], &(0x7f0000001680)=[{0x0, 0x1, 0x3, 0x2}, {0x3, 0x4, 0xd}, {0x2, 0x1, 0x4, 0x8}, {0x0, 0x1, 0xd, 0x4}, {0x0, 0x5, 0x10, 0xa}, {0x2, 0x3, 0x8, 0xc}], 0x10, 0x9, @void, @value}, 0x94)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0xd5c71000)
sendto$inet6(r7, &(0x7f00000017c0)="0facc59cc870e9a84305610687e9c52b0c702ae438c6f577c662568c4f2e3887055d494b9f5d0ed16c00e89d87511915fb0c33296d5ce804e7ac07841f1ad272ef542f11c2b7320d776488ff8fa61d69bd79d875c8c034ac2654f9eac867ae099bdc036a4caa547348ba7097aa6590739ed4a086d38f48629e949abaddeedee7f2a1cd50e93b1d4307e2e703b852618cb4eb5cce9d8bee79e559efb7472db25441c25467618895efff27922136fb1ba4c408fe31137ae864e64d938fdff5f255eb6b8ba6a2c268154b8626a890ee0c8da9fb8daafdc1fbd754", 0xd9, 0x20008800, &(0x7f00000018c0)={0xa, 0x4e22, 0x2, @remote, 0x3}, 0x1c)
ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000001900)={<r11=>r10, 0x200, 0xff, 0x1})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000019c0)={{r7, <r12=>0xffffffffffffffff}, &(0x7f0000001940), &(0x7f0000001980)=r3}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d40)={0x11, 0x27, &(0x7f0000001a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r12}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001b40)='syzkaller\x00', 0xdfaf, 0x8c, &(0x7f0000001b80)=""/140, 0x40f00, 0x21, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001c40)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000001c80)={0x0, 0x2, 0x81, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001cc0)=[r9], &(0x7f0000001d00)=[{0x3, 0x4, 0x4, 0x1}, {0x5, 0x4, 0xb, 0x7}], 0x10, 0x7f, @void, @value}, 0x94)
r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000001e40), r3)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r11, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x1c, r13, 0x10, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000014)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), r4)
pipe(&(0x7f0000001f80)={<r14=>0xffffffffffffffff, <r15=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000022c0)={0x0, 0x27, &(0x7f0000001fc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffd}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r15}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @exit, @map_fd={0x18, 0x2, 0x1, 0x0, r8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002100)='GPL\x00', 0x10, 0x53, &(0x7f0000002140)=""/83, 0x41100, 0x66, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000021c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000002200)={0x3, 0x9, 0x7, 0x1000}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000002240)=[r4, r5, r10, r11], &(0x7f0000002280)=[{0x0, 0x5, 0x5, 0x5}, {0x0, 0x5, 0x5, 0x8}], 0x10, 0x660, @void, @value}, 0x94)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002580)={r7, 0x0, 0x8c, 0x3, &(0x7f0000002380)="0e09dd4e14df53388ababa1f53eedb714dc031d98c9b2f7c0966ae50d5d540f0a837e056709d3a028c8d734bdafa681c86e2ad8282f7ff4c30ba30d0c99e7e69b425d6d6e6c5e470ffbcd85f5a58a5f0931a01f441a58ba757ddf9bd8b5e6933d80dcc66c621e7201724018edc9264fd4b47ce22126c3626550e9826022aebe3a30ea7cb6e8ee622fe604186", &(0x7f0000002440)=""/3, 0x633a, 0x0, 0x16, 0x96, &(0x7f0000002480)="a942c0df2cd4d48ad87a6fbaf32d32072e6141f46c49", &(0x7f00000024c0)="a437b443fda0b7d3d4158968738597cffd28b8bb816348dde2b5583f6aa606a734781da9b7f264342d8596e58476a4b06f09d1af3860e2741ba37cbd9b9053e6a509bb7bccc6a744583e578e7cab0cbfebe9dd1daca73e270d42caa15dc648b294c5809226c51f78c1fca80eed22ed2fadab51dcece58cdcae1ed588bcc37ede93af44433364450108f8fefd93349e39bb64225c12c4", 0x6}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000002800)={'batadv0\x00', <r16=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000034c0)={'vcan0\x00', <r17=>0x0})
sendmmsg$inet6(r1, &(0x7f0000003580)=[{{&(0x7f0000002600)={0xa, 0x4e20, 0x401, @private2, 0x6}, 0x1c, &(0x7f00000027c0)=[{&(0x7f0000002640)="21c7198b7fabfc78196ad5fa9dfa8fc4c8b160ea756008f4d9cbbdbfed32933376d10feee764cbad2681a3d9f0b70f779b4c65a9461bf5a4b9656d89cdcab78d268c85f62ab007813cb3a4c58d037d09f51ee69827a90cde5f2eb203806f7566ed7c46185b865062207c3945fd78a295faf503015e2389fe655c3427c6b65a46cf021bf218b051ddf4521a21c741399f669f365f6ea23a762343df4a4741284449291c2dc091252b7e08900d7e8446f6e592bab00fb9ba05b5d60c1fb27981", 0xbf}, {&(0x7f0000002700)="f1e24d9531689c126671e8987875bee41515efef51a8c8079c35b9484b1343981ba3c52a68c81c8b7b77c9102a1ebc2e3352bdaab60a97db37b6da32d62298b4ddd190294e49de89cbec4e64b4a6a6e6ac898a3b845bd2720fc58eb8fc84056e3d0741525a", 0x65}, {&(0x7f0000002780)="34f097fafef9fa97b92f050c655a8ab8e6a0243785328908838cff54b31ca7e351512ddc7182fbb472a8f48bf18d594db6f293ee3daac1", 0x37}], 0x3, &(0x7f0000002840)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r16}}}, @hoplimit_2292={{0x14}}, @dstopts={{0x40, 0x29, 0x37, {0x6c7a7aa1d8ebdd90, 0x4, '\x00', [@ra={0x5, 0x2, 0x3}, @hao={0xc9, 0x10, @mcast2}, @enc_lim={0x4, 0x1, 0xfb}, @padn={0x1, 0x1, [0x0]}, @pad1, @jumbo={0xc2, 0x4, 0x10000}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x10000}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x2, 0x12, 0x1, 0x4, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}, @private2, @ipv4={'\x00', '\xff\xff', @loopback}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @mcast1, @local, @mcast2]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}, @hopopts_2292={{0x168, 0x29, 0x36, {0x2c, 0x29, '\x00', [@generic={0xf7, 0xbe, "95750888520716e6f113383a47efbdce017267b603acbe0296d9cbeb786c9287bb11ef95885332acc4635a87760eba67834be12014af9d1c97dd97dfc86ef9712d2a01c1b999100207570d3a60468ff14ac8d672c4ca462a240c37c9c44d430f0d69f2a977699e692a7d902ffc9b924a1540f154f0030bf82e4854ed23b2065c2118ad0683312c1a5bfe48b96a3ebdc1e59658d81611dc3346efd8395351aa9433577e1c97bab0c38178917163ebace3f57de94d5de2cae636121f8845d8"}, @calipso={0x7, 0x18, {0x0, 0x4, 0x6, 0xa, [0x80000000, 0x1]}}, @generic={0x7, 0x65, "e102a36ca9ffb4636e79342b3f2406086fc4e69b4fdb6ab190c5887c0571d1b2ab719ee5de16868b5584bb5ccb81ebc122dac3359aae7d861f77fe92bc803dd54f88b18120710961940fb58c456d3883f7789e5f85c7f0f04413364bf3ffebcd9f7d993ad0"}, @pad1, @jumbo={0xc2, 0x4, 0x2}]}}}], 0x2c0}}, {{&(0x7f0000002b00)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x7}, 0x1c, &(0x7f0000002cc0)=[{&(0x7f0000002b40)="2261dbe6699fe6e6f8eddff91cf7c148273517ccf4e3a34178f69fcb2cd84cd57d07f4d70ce9a7b87499295900614ab2644f4c9642b86438557a159c643e719b9519e71310bf85dab217c056d2d0b3629414d2a56de3e6e761569e72743fea3b189d", 0x62}, {&(0x7f0000002bc0)="c5f0990cc5a498adebac5076f1", 0xd}, {&(0x7f0000002c00)="1a27278885087d98918fa93ca58b849eb38735141a034582a05dc8513320e08ac57c768f2d613cfcdd0efcfe224a514aeedfe836f460efb9b57e82447de87d48bd1a3adcfb3051d9a0ee4d81e5a49c64276c3d775d0f27371e844e6efa98804c7edae077791728ec41059b57f9d76d7d3f0b260d16b97549388462e8ba42253e58249a4806955a42333f68a6afb6b8680e224e03308c538a2ce7d0f8fb2dc75fd6316ea109dd74816f2a6e0c8a909e42039e0a", 0xb3}], 0x3}}, {{&(0x7f0000002d00)={0xa, 0x4e20, 0x72a1, @loopback, 0x1}, 0x1c, &(0x7f0000003400)=[{&(0x7f0000002d40)="87f6884855821d5188602f849bc0a151b0d85d0295e81b0a6ace3c6e1c8d12a502a2097630fca247f263774ae36a61f216c9c0cc4cba2472ab1cdf17c6ac743aef00f1d7e80d1edde194a96ec3f02b7ec4d7ef5d1b696c981fdc3c51", 0x5c}, {&(0x7f0000002dc0)="c4924476725f6b0c17af99dea8f5331141d29723cb6de75365f84c6aec15300226bab49a9d2fcf0f300b30dec8ab56c2a949ddcc8d4e401ac9b926ec81f3c7a225d8a452864aa55e14660356f39661e075dcdf4ef1b798abfc978bcfc3d9e7a4170da72a1a47750b3c2f08c0ba5edfa5417338a5e371d7b5b1adc5938e7cdfae887234975928e63f68623c72606f8142d6839d2ed13d885ffea7319c541a2239f27ffe7b2e73a5b78fc814954f0ccb37dd7beb768b067b1fa4d1b12e91a6fd9c88ba4fbf43fa82c815", 0xc9}, {&(0x7f0000002ec0)="859551a5df99e6454bef279b6d74cbb04dc7ea5e38feff707841e6e47e720c66917b16f80a7ca764292c6323ba421f064503ddd73f8e835dca0f3329c26bf08f9fe6351d6f32752b5dd4b5097f8bee841ac1925cb74e9887bcd7328bec12e3f9bb62066697d9d5dbc225b5d78dc99dc0880451e14647fc6402a168435f4b5a84b5d326e783af9e20c81578069b1144", 0x8f}, {&(0x7f0000002f80)="b8ab31c0cabf3727acf89ab54c09510857cf215fcbc265f743a55d15d0f70d3b448442a69ba5e35bcfe6dce9cc4ae1fd76782ed4f00f78d1a2fd6854a4410eb76859b053c3a954de5341d448e0b5fe3dd4655f31d72215767a3a11d1fc54fdf5bb82ef45890dc48f3608732efe98fe8aa22a63e891812de5035f3c97968cfd911fe244229c845011b3fe5b4c514019ba228a31d87ae2895ee081cf910c7db34b37737f0104f0baac4ab5ac1b71a3a106a52e8817ec85f2b32b3d9391a85eac2cf8da1f113ceb5b5a76fdfce302396784228573800f64d477fca43708f2fbc067d6415698caacc4d04392b922730b837930", 0xf1}, {&(0x7f0000003080)="3659806b0d00633b88aba5ff9ceb79c825108034228fb635efed078602fa", 0x1e}, {&(0x7f00000030c0)="962c1f7b11f0e720381e820a7d8ad6fa68f2340674b18df498a364fdedcd1f7228f3237599a003d64d3da89f9c50d326765a1d30b7646caa97d77097dd358fa2b460ec894fd85f17a38fe5e2ec73075cf1698a82b6691991b6b3dd9afdf528eb6d7f9b44e7b538c28d15de382a9d987feaaa13256bc1780af6fb7fd4f566e1506ec1d870b1a68de9a65a3cf415093053a8562e157049e3265b8a7f8214ee6b7790f635cbef865d49034a9fa22ee9d7d63080747b4063f5212df3fed2d874055688da83f6e372c7934f0052e25b8373f187a6ba5c7a17436f8477d660e1bdfdfcf4d928", 0xe3}, {&(0x7f00000031c0)="d828b80f6051705e297b0169b395d06c53cb2892da1c0c1eeff383e5363ea11aa4b909ae9ae3ba491650a06e5eaa6824d4e0db9b25e9a2565fb1bc8da70c943d4e4d7d9df4454434c98474ca5b66d5e5fa878b206490234ceff4ef8bd224cbc8a87efd89901bc99d004fd9dc0ce52304256969abe6b5034c3ec9c1e8ad30dfcc39119ff1f761dca390cecec84f8220d18182a48a8b5667fe8da7f7bc4d118ec066ba18ae63d88449298ba54c151a45f98743e7e32fa15347e152691fd0692642463824504601725a78793b1f2c3d3e1d85f6488dec", 0xd5}, {&(0x7f00000032c0)="7a59031683d4b8d8fa821fbe13e016fa1189a7998d82", 0x16}, {&(0x7f0000003300)="08ac0a23dc1433fe557be5873c2b0c24c123cfae49dfe2c2edb7a023dda019477ccabfb48ed9874aaf6db494f0286214b178548ab53c1d5bda4fdd5b343a841ddd218ed120563a587b24186a03e17116cfa04272663f3a210b758cd13ac5b6b05ad0f6cdc4eb636b2204dfd75cca116da62c8bbd4f0aeb72007423ae62da00b89686838c8b9a9181967bf8571dd50b245e88ebb6633fda46a7bbf5ef21e16cc0d2b403eee52ffc15b9c1f13ee82223a7cfc04d2a28a73a25040215ec0476fa6afd9288", 0xc3}], 0x9, &(0x7f0000003500)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2, r17}}}, @flowinfo={{0x14, 0x29, 0xb, 0xfffffff4}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x800}}], 0x58}}], 0x3, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000003700)={r14, <r18=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003800)=@bpf_tracing={0x1a, 0x1, &(0x7f0000003640)=@raw=[@jmp={0x5, 0x1, 0x6, 0x5, 0x2, 0x6}], &(0x7f0000003680)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x4, '\x00', r2, 0x1a, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f00000036c0)={0x4, 0xc, 0x2, 0x200}, 0x10, 0x2c2c2, 0xffffffffffffffff, 0x6, &(0x7f0000003740)=[r10, r18, r7, r11, r9, r12, r3, r9, r10], &(0x7f0000003780)=[{0x0, 0x3, 0x7, 0x7}, {0x2, 0x3, 0x3, 0xb}, {0x4, 0x4, 0xa, 0x4}, {0x5, 0x1, 0xb, 0xc}, {0x4, 0x4, 0xf, 0x4}, {0x1, 0x2, 0x9, 0xb}], 0x10, 0x8, @void, @value}, 0x94)

1.173003284s ago: executing program 0 (id=5397):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet(r0, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0xfffffffffffffee6}], 0x1}}], 0x1, 0x20008000)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e000058"}}}]}, 0x48}}, 0x0) (async, rerun: 64)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2) (rerun: 64)
setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="b40800000000000073110e00000000008510000002000000b7000000000000009500c200000000009500001200000000830345f5b3f42590c416b734596006d9dec99bdcb359ce8c"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async)
connect$phonet_pipe(r4, &(0x7f0000000000)={0x23, 0xb, 0x8, 0x40}, 0x10)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x200}, 0x8)
close(r0)

1.088960776s ago: executing program 3 (id=5398):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b704000000000000850000004600000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfe, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@ptr={0x2}, @fwd={0x9}]}, {0x0, [0x2e, 0x2e, 0x5f, 0x5f, 0x0, 0x61, 0x2e]}}, &(0x7f0000000040)=""/38, 0x39, 0x26, 0x0, 0x4, 0x10000, @value}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x200, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, r1, 0x0, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50)

1.001809224s ago: executing program 2 (id=5399):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000)=0xfffffffd, 0x4)
setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x20, r5, 0x1, 0x70bd28, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1fffff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x240280d0}, 0x8090)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010003904000000000000000040000000", @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r7)
sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=ANY=[@ANYBLOB="14010000", @ANYRES16=r8, @ANYBLOB="cd3e0000000000000000010000000800020005000000ce00010043ecf8a077157cd8bc73e1b93314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1d88cdbdbc1d29c9c0f91bc4d2ee65aa67516c7f094b740c631f175dd5d0f0a8ebd2679204020b"], 0x114}}, 0x0)
sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x1c, r8, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}]}, 0x1c}, 0x1, 0x0, 0x0, 0x88804}, 0x10)
r9 = socket(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtfilter={0x64, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r10, {0xe, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, [@m_ct={0x2c, 0x4, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x48c0)

943.839024ms ago: executing program 3 (id=5400):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b703000000090001db020a000000000007000000000000009500000000000a6682f0a61b01e4c027d252f602901b7cbbd5b9097bb8334a5541cf9e345af317e35f0ad53d857708f974879196ac07622b10548ccd2028eaf7610ae297a58e413b22d81494fcb1dbd1e9cb784c590ddd06ee929a27a5dedf301650960d8ae1cf339f6bda65bf6594c2839dcea6e419c9b8b7d17b9e49f392c857ccb0a3f64a59a87332ffa41c17b82700789b163bbc8507f171b46d2c569e75810e60a06b6f69ef41ca39a200"/212], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x2, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007008b617400140004800800014000000000080002"], 0xa4}}, 0x0)

706.506323ms ago: executing program 3 (id=5401):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
syz_init_net_socket$ax25(0x3, 0x2, 0xc4)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, 0x0, 0x0)
r3 = accept4(r1, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/143, 0x8f}], 0x1}}], 0x2, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001e0001000000000001000000000000001400030076657468315f746f5f7465616d000000080017004e234e230c000c40000000008000000008000200640101020000000000000000"], 0x4c}}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_emit_ethernet(0x22, &(0x7f00000000c0)={@multicast, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x32, 0x14, 0x64, 0x0, 0x7f, 0x29, 0x0, @private=0xa010101, @multicast1}}}}}, 0x0)
r6 = socket$tipc(0x1e, 0x5, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba6f32})
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
readv(r7, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/227, 0xe3}], 0x1)
r9 = socket$tipc(0x1e, 0x2, 0x0)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
r12 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000008, 0x100010, r12, 0x131dd000)
sendmsg$nl_xfrm(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r8], 0xb8}}, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0xfca804a0, 0xe, 0x0, &(0x7f0000000580)="b80022ab98d1db1b883e04000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000061116c000000000017000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
socket(0x9, 0x5, 0x80)

627.338064ms ago: executing program 0 (id=5402):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r3, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)
listen(r3, 0x80)
r4 = accept$netrom(r3, 0x0, 0x0)
recvmmsg(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x12143, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000001000)=ANY=[@ANYBLOB="80010000100001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000ffff00000000000000006c000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001007467723136302d67656e65726963000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480003"], 0x180}}, 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r5, 0x1, 0x870bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xff31}, {0x5}}]}, 0x58}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x7, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000073013f00000000009500"/32], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

626.909063ms ago: executing program 2 (id=5403):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @rand_addr=0x64010102}}, {{0x2, 0x0, @empty}}}, 0x108)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x50}}, 0x4000000)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x7, @loopback, 0x9}, 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
sendmsg(r3, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x578}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f00000000c0), &(0x7f0000000280))
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1)
close(0x3)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1)

376.913848ms ago: executing program 2 (id=5404):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan1\x00', <r5=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x30, r4, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x30}, 0x4, 0x700000000000000}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}}, 0x0)

349.037219ms ago: executing program 0 (id=5405):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(0xffffffffffffffff, 0x4002f516, &(0x7f0000000080)={0x8, 0x9})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="8fed008607002fdffc81c5b998a70888132424f80e481175d37538e486dd6317ce2220"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x8, 0x3, 0x448, 0xf0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x378, 0xffffffff, 0xffffffff, 0x378, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6000, 0x50000000, 0xfff, 'snmp\x00', {0xffffffffffff4d26}}}}, {{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4a8)

229.681599ms ago: executing program 2 (id=5406):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async, rerun: 32)
r1 = accept4(r0, 0x0, 0x0, 0x0) (async, rerun: 32)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000a00)=ANY=[@ANYRESOCT=r2], 0x9)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
accept4$llc(r4, 0x0, 0x0, 0x80000) (async)
sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000840)=""/127, 0x7f}], 0x2}}], 0x2, 0x60, 0x0) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

134.709832ms ago: executing program 2 (id=5407):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gre0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x12}]}}}]}, 0x38}}, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd70000000000002000000000000001b000000080018004e214e24"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)
sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01032ac87000fedbdf250b280000"], 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x20000080)
bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x1}}, 0x10)

0s ago: executing program 0 (id=5408):
r0 = accept(0xffffffffffffffff, &(0x7f00000001c0)=@can, &(0x7f0000000080)=0x80)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000240)={@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x0, 0x10, 0x0, [{@broadcast}]}})
socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4000}, 0x10)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r6=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10)
setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000e40)=0x2082, 0x4)
sendmmsg$sock(r4, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x7220b6d4399144fb)
ioctl$sock_bt_hci(r3, 0x400448ca, &(0x7f00000002c0)="7f8c72b71a37c920924f")
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
close(0x5)
recvfrom(r1, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0)
r7 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x3, @broadcast, @private1, @local, @loopback}}}}, 0x0)

kernel console output (not intermixed with test programs):

slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  342.588975][T17460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  342.783796][T17592] netlink: 'syz.1.3257': attribute type 39 has an invalid length.
[  342.943975][T17598] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3257'.
[  343.118000][T17460] hsr_slave_0: entered promiscuous mode
[  343.126093][T17611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3261'.
[  343.148203][T17460] hsr_slave_1: entered promiscuous mode
[  343.166078][T17613] netlink: 'syz.1.3257': attribute type 2 has an invalid length.
[  343.169926][T17460] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  343.182924][T17460] Cannot create hsr debugfs directory
[  343.189435][T17604] mac80211_hwsim hwsim32 ÿ
: renamed from wlan1 (while UP)
[  343.283837][    T9] IPVS: starting estimator thread 0...
[  343.312829][T17584] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  343.386634][T17620] IPVS: using max 27 ests per chain, 64800 per kthread
[  343.471991][T17598] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3257'.
[  343.716436][ T5200] udevd[5200]: worker [5846] /devices/virtual/block/nbd1 timeout; kill it
[  343.755818][ T5200] udevd[5200]: seq 12235 '/devices/virtual/block/nbd1' killed
[  343.883109][T17643] netlink: 312 bytes leftover after parsing attributes in process `syz.2.3274'.
[  343.923929][T17647] netlink: 312 bytes leftover after parsing attributes in process `syz.2.3274'.
[  344.092093][T17653] IPVS: set_ctl: invalid protocol: 115 172.20.20.39:20000
[  344.180041][T17460] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.201797][T17659] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3277'.
[  344.256884][T17661] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3279'.
[  344.269346][T17460] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.298733][T17661] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3279'.
[  344.356873][ T5848] Bluetooth: hci5: command tx timeout
[  344.377219][T17460] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.518418][T17460] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.912540][T17460] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  344.950048][T17460] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  344.990234][T17460] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  345.037240][T17460] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  345.297991][T17460] 8021q: adding VLAN 0 to HW filter on device bond0
[  345.332031][T17697] netlink: 'syz.3.3287': attribute type 1 has an invalid length.
[  345.342203][T17460] 8021q: adding VLAN 0 to HW filter on device team0
[  345.359720][T11103] bridge0: port 1(bridge_slave_0) entered blocking state
[  345.366995][T11103] bridge0: port 1(bridge_slave_0) entered forwarding state
[  345.389130][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state
[  345.396364][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state
[  345.512477][T17703] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  345.653371][T17703] batman_adv: batadv0: Removing interface: batadv_slave_1
[  345.969879][T17460] 8021q: adding VLAN 0 to HW filter on device batadv0
[  346.122275][T17727] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  346.147368][T17727] syzkaller0: entered promiscuous mode
[  346.152983][T17727] syzkaller0: entered allmulticast mode
[  346.187455][T17727] tipc: Resetting bearer <eth:syzkaller0>
[  346.272923][T17727] tipc: Disabling bearer <eth:syzkaller0>
[  346.436995][ T5848] Bluetooth: hci5: command tx timeout
[  346.557912][T17745] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  346.635731][T17460] veth0_vlan: entered promiscuous mode
[  346.665696][T17460] veth1_vlan: entered promiscuous mode
[  346.684468][T17747] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (18446744073709551614)
[  346.695386][T17747] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  346.712545][T17747] netlink: 'syz.0.3299': attribute type 3 has an invalid length.
[  346.790913][T17460] veth0_macvtap: entered promiscuous mode
[  346.810270][T17460] veth1_macvtap: entered promiscuous mode
[  346.841679][T17460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  346.855271][T17460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.872913][T17460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  346.892371][T17460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.905919][T17460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  346.924035][T17460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.935252][T17460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  346.952257][T17460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.963231][T17460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  346.974242][T17460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  346.988201][T17460] batman_adv: batadv0: Interface activated: batadv_slave_0
[  347.005899][T17460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  347.019713][T17460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.035172][T17460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  347.049607][T17460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.060268][T17460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  347.071930][T17460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.083235][T17460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  347.094269][T17460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.107159][T17460] batman_adv: batadv0: Interface activated: batadv_slave_1
[  347.121830][T17460] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  347.132697][T17460] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  347.145307][T17460] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  347.154474][T17460] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  347.299317][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  347.316704][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  347.393384][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  347.408515][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  347.835190][T17782] bridge0: port 3(gretap0) entered blocking state
[  347.857073][T17782] bridge0: port 3(gretap0) entered disabled state
[  347.877434][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.885032][T17782] gretap0: entered allmulticast mode
[  347.891994][   T59] block nbd1: Possible stuck request ffff888025010000: control (read@0,4096B). Runtime 210 seconds
[  347.901309][T17782] gretap0: entered promiscuous mode
[  347.925328][T17782] bridge0: port 3(gretap0) entered blocking state
[  347.932077][T17782] bridge0: port 3(gretap0) entered forwarding state
[  348.249323][T17805] __nla_validate_parse: 6 callbacks suppressed
[  348.249344][T17805] netlink: 948 bytes leftover after parsing attributes in process `syz.4.3316'.
[  348.349869][T17809] sctp: [Deprecated]: syz.0.3318 (pid 17809) Use of int in maxseg socket option.
[  348.349869][T17809] Use struct sctp_assoc_value instead
[  348.550570][T17820] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3321'.
[  348.600521][T17822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3322'.
[  348.629294][T17822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3322'.
[  349.257482][T17863] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3335'.
[  349.362062][T17866] syzkaller1: entered promiscuous mode
[  349.371413][T17866] syzkaller1: entered allmulticast mode
[  349.409407][T17869] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3339'.
[  349.479810][T17869] netlink: 'syz.0.3339': attribute type 4 has an invalid length.
[  349.488403][T17874] netlink: 'syz.3.3341': attribute type 1 has an invalid length.
[  349.637712][T17874] 8021q: adding VLAN 0 to HW filter on device bond2
[  349.723835][T17875] 8021q: adding VLAN 0 to HW filter on device bond2
[  349.749655][T17875] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  349.762865][T17875] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  349.829983][T17877] vxcan1: entered allmulticast mode
[  349.891991][T17876] veth5: entered promiscuous mode
[  349.902258][T17876] bond2: (slave veth5): Enslaving as an active interface with a down link
[  349.931315][T17894] netlink: 'syz.4.3345': attribute type 33 has an invalid length.
[  350.114578][T17896] virt_wifi0 speed is unknown, defaulting to 1000
[  350.595542][T17900] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  350.650219][T17907] 8021q: VLANs not supported on ip6_vti0
[  351.258051][T17940] netlink: 'syz.0.3361': attribute type 1 has an invalid length.
[  351.307141][T17939] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3358'.
[  351.395909][T17940] 8021q: adding VLAN 0 to HW filter on device bond1
[  351.404837][T17943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3358'.
[  351.453573][T17946] 8021q: adding VLAN 0 to HW filter on device bond1
[  351.462815][T17946] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  351.475351][T17946] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  351.588675][T17940] netlink: 'syz.0.3361': attribute type 1 has an invalid length.
[  351.596724][T17940] netlink: 'syz.0.3361': attribute type 4 has an invalid length.
[  351.604457][T17940] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3361'.
[  351.680359][T17951] ip6erspan0: entered promiscuous mode
[  351.690295][T17951] bond1: (slave ip6erspan0): making interface the new active one
[  351.698842][T17951] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[  351.988060][T17974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3367'.
[  352.035708][T17977] FAULT_INJECTION: forcing a failure.
[  352.035708][T17977] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  352.067656][T17977] CPU: 1 UID: 0 PID: 17977 Comm: syz.0.3368 Not tainted 6.15.0-rc4-syzkaller-00163-ge8716b5b0dff #0 PREEMPT(full) 
[  352.067687][T17977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  352.067699][T17977] Call Trace:
[  352.067707][T17977]  <TASK>
[  352.067716][T17977]  dump_stack_lvl+0x189/0x250
[  352.067748][T17977]  ? __lock_acquire+0xaac/0xd20
[  352.067778][T17977]  ? __pfx_dump_stack_lvl+0x10/0x10
[  352.067806][T17977]  ? __pfx__printk+0x10/0x10
[  352.067826][T17977]  ? __might_fault+0xb0/0x130
[  352.067862][T17977]  should_fail_ex+0x414/0x560
[  352.067897][T17977]  _copy_from_user+0x2d/0xb0
[  352.067924][T17977]  ___sys_sendmsg+0x158/0x2a0
[  352.067952][T17977]  ? __pfx____sys_sendmsg+0x10/0x10
[  352.068025][T17977]  ? __fget_files+0x2a/0x420
[  352.068049][T17977]  ? __fget_files+0x3a0/0x420
[  352.068085][T17977]  __x64_sys_sendmsg+0x19b/0x260
[  352.068113][T17977]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  352.068155][T17977]  ? do_syscall_64+0xba/0x210
[  352.068182][T17977]  do_syscall_64+0xf6/0x210
[  352.068206][T17977]  ? clear_bhb_loop+0x45/0xa0
[  352.068229][T17977]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.068248][T17977] RIP: 0033:0x7f651b98e969
[  352.068265][T17977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  352.068281][T17977] RSP: 002b:00007f651c8a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  352.068301][T17977] RAX: ffffffffffffffda RBX: 00007f651bbb5fa0 RCX: 00007f651b98e969
[  352.068315][T17977] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000004
[  352.068327][T17977] RBP: 00007f651c8a3090 R08: 0000000000000000 R09: 0000000000000000
[  352.068339][T17977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  352.068350][T17977] R13: 0000000000000000 R14: 00007f651bbb5fa0 R15: 00007ffd63825958
[  352.068381][T17977]  </TASK>
[  352.397560][T17974] bond3: entered promiscuous mode
[  352.545459][T17985] netlink: 'syz.0.3370': attribute type 11 has an invalid length.
[  352.560898][T17985] netlink: 'syz.0.3370': attribute type 4 has an invalid length.
[  352.757711][T17991] virt_wifi0 speed is unknown, defaulting to 1000
[  352.899868][T18008] netlink: 'syz.1.3377': attribute type 5 has an invalid length.
[  353.104721][T18021] FAULT_INJECTION: forcing a failure.
[  353.104721][T18021] name failslab, interval 1, probability 0, space 0, times 0
[  353.136548][T18021] CPU: 1 UID: 0 PID: 18021 Comm: syz.0.3381 Not tainted 6.15.0-rc4-syzkaller-00163-ge8716b5b0dff #0 PREEMPT(full) 
[  353.136579][T18021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  353.136592][T18021] Call Trace:
[  353.136601][T18021]  <TASK>
[  353.136610][T18021]  dump_stack_lvl+0x189/0x250
[  353.136653][T18021]  ? __pfx_dump_stack_lvl+0x10/0x10
[  353.136682][T18021]  ? __pfx__printk+0x10/0x10
[  353.136709][T18021]  ? __pfx___might_resched+0x10/0x10
[  353.136734][T18021]  should_fail_ex+0x414/0x560
[  353.136771][T18021]  should_failslab+0xa8/0x100
[  353.136800][T18021]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  353.136827][T18021]  ? __alloc_skb+0x112/0x2d0
[  353.136854][T18021]  __alloc_skb+0x112/0x2d0
[  353.136881][T18021]  netlink_sendmsg+0x5c6/0xb30
[  353.136913][T18021]  ? __pfx_netlink_sendmsg+0x10/0x10
[  353.136938][T18021]  ? aa_sock_msg_perm+0x94/0x160
[  353.136961][T18021]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  353.136983][T18021]  ? __pfx_netlink_sendmsg+0x10/0x10
[  353.137005][T18021]  __sock_sendmsg+0x219/0x270
[  353.137044][T18021]  ____sys_sendmsg+0x505/0x830
[  353.137075][T18021]  ? __pfx_____sys_sendmsg+0x10/0x10
[  353.137110][T18021]  ? import_iovec+0x74/0xa0
[  353.137147][T18021]  ___sys_sendmsg+0x21f/0x2a0
[  353.137175][T18021]  ? __pfx____sys_sendmsg+0x10/0x10
[  353.137241][T18021]  ? __fget_files+0x2a/0x420
[  353.137266][T18021]  ? __fget_files+0x3a0/0x420
[  353.137303][T18021]  __x64_sys_sendmsg+0x19b/0x260
[  353.137331][T18021]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  353.137375][T18021]  ? do_syscall_64+0xba/0x210
[  353.137407][T18021]  do_syscall_64+0xf6/0x210
[  353.137431][T18021]  ? clear_bhb_loop+0x45/0xa0
[  353.137455][T18021]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.137475][T18021] RIP: 0033:0x7f651b98e969
[  353.137493][T18021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  353.137510][T18021] RSP: 002b:00007f651c8a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  353.137531][T18021] RAX: ffffffffffffffda RBX: 00007f651bbb5fa0 RCX: 00007f651b98e969
[  353.137546][T18021] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000004
[  353.137558][T18021] RBP: 00007f651c8a3090 R08: 0000000000000000 R09: 0000000000000000
[  353.137571][T18021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  353.137582][T18021] R13: 0000000000000000 R14: 00007f651bbb5fa0 R15: 00007ffd63825958
[  353.137614][T18021]  </TASK>
[  353.683705][T18039] xt_connbytes: Forcing CT accounting to be enabled
[  353.701451][T18038] __nla_validate_parse: 4 callbacks suppressed
[  353.701473][T18038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3386'.
[  353.707683][T18039] --map-set only usable from mangle table
[  353.789914][T18038] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  353.819469][T18038] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  353.858232][T18047] netlink: 'syz.2.3390': attribute type 2 has an invalid length.
[  353.967609][T18058] netlink: 'syz.1.3391': attribute type 10 has an invalid length.
[  353.993690][T18058] hsr0: entered promiscuous mode
[  354.031727][T18058] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  354.043908][T18058] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  354.067178][T18058] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  354.074648][T18054] syzkaller1: entered promiscuous mode
[  354.094352][T18054] syzkaller1: entered allmulticast mode
[  354.219437][T18067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3395'.
[  354.801559][T18094] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3407'.
[  355.051649][T18112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3411'.
[  355.092805][T18112] netlink: 21 bytes leftover after parsing attributes in process `syz.3.3411'.
[  355.202446][T18116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3413'.
[  355.449752][T18136] netlink: 'syz.0.3419': attribute type 10 has an invalid length.
[  355.493306][T18136] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3419'.
[  355.572558][T18143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3420'.
[  355.644472][T18146] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001
[  355.645322][T18136] team0: Port device geneve0 added
[  355.664308][T18146] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20004
[  355.694187][T18141] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3421'.
[  355.949117][T18167] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3428'.
[  355.986888][T18166] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  356.040766][T18167] erspan0: entered promiscuous mode
[  356.070242][T18167] erspan0: left promiscuous mode
[  356.306549][T18186] openvswitch: netlink: IPv4 tunnel dst address is zero
[  356.341912][T18190] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  356.376728][T18192] bridge: RTM_NEWNEIGH with invalid state 0x4
[  356.941937][T18224] FAULT_INJECTION: forcing a failure.
[  356.941937][T18224] name failslab, interval 1, probability 0, space 0, times 0
[  356.958832][T18225] openvswitch: netlink: Flow actions attr not present in new flow.
[  356.968444][T18225] netlink: 'syz.1.3445': attribute type 1 has an invalid length.
[  356.984219][T18224] CPU: 1 UID: 0 PID: 18224 Comm: syz.3.3447 Not tainted 6.15.0-rc4-syzkaller-00163-ge8716b5b0dff #0 PREEMPT(full) 
[  356.984247][T18224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  356.984260][T18224] Call Trace:
[  356.984267][T18224]  <TASK>
[  356.984276][T18224]  dump_stack_lvl+0x189/0x250
[  356.984313][T18224]  ? __pfx_dump_stack_lvl+0x10/0x10
[  356.984342][T18224]  ? __pfx__printk+0x10/0x10
[  356.984368][T18224]  ? ref_tracker_alloc+0x318/0x460
[  356.984392][T18224]  should_fail_ex+0x414/0x560
[  356.984429][T18224]  should_failslab+0xa8/0x100
[  356.984458][T18224]  kmem_cache_alloc_noprof+0x73/0x3c0
[  356.984482][T18224]  ? skb_clone+0x212/0x3a0
[  356.984514][T18224]  skb_clone+0x212/0x3a0
[  356.984543][T18224]  __netlink_deliver_tap+0x404/0x850
[  356.984579][T18224]  ? netlink_deliver_tap+0x2e/0x1b0
[  356.984601][T18224]  netlink_deliver_tap+0x19c/0x1b0
[  356.984623][T18224]  netlink_unicast+0x72f/0x8d0
[  356.984665][T18224]  netlink_sendmsg+0x805/0xb30
[  356.984698][T18224]  ? __pfx_netlink_sendmsg+0x10/0x10
[  356.984724][T18224]  ? aa_sock_msg_perm+0x94/0x160
[  356.984747][T18224]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  356.984769][T18224]  ? __pfx_netlink_sendmsg+0x10/0x10
[  356.984799][T18224]  __sock_sendmsg+0x219/0x270
[  356.984834][T18224]  ____sys_sendmsg+0x505/0x830
[  356.984865][T18224]  ? __pfx_____sys_sendmsg+0x10/0x10
[  356.984899][T18224]  ? import_iovec+0x74/0xa0
[  356.984929][T18224]  ___sys_sendmsg+0x21f/0x2a0
[  356.984957][T18224]  ? __pfx____sys_sendmsg+0x10/0x10
[  356.985024][T18224]  ? __fget_files+0x2a/0x420
[  356.985048][T18224]  ? __fget_files+0x3a0/0x420
[  356.985084][T18224]  __x64_sys_sendmsg+0x19b/0x260
[  356.985113][T18224]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  356.985156][T18224]  ? do_syscall_64+0xba/0x210
[  356.985183][T18224]  do_syscall_64+0xf6/0x210
[  356.985206][T18224]  ? clear_bhb_loop+0x45/0xa0
[  356.985230][T18224]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.985249][T18224] RIP: 0033:0x7f68d038e969
[  356.985266][T18224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  356.985282][T18224] RSP: 002b:00007f68d1234038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  356.985304][T18224] RAX: ffffffffffffffda RBX: 00007f68d05b5fa0 RCX: 00007f68d038e969
[  356.985318][T18224] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000004
[  356.985330][T18224] RBP: 00007f68d1234090 R08: 0000000000000000 R09: 0000000000000000
[  356.985342][T18224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  356.985353][T18224] R13: 0000000000000000 R14: 00007f68d05b5fa0 R15: 00007ffc878fd128
[  356.985385][T18224]  </TASK>
[  357.956872][T18236] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  358.001361][T18239] x_tables: duplicate underflow at hook 4
[  358.114734][T18233] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  358.200525][T18245] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  358.214932][T18242] syzkaller1: entered promiscuous mode
[  358.230918][T18242] syzkaller1: entered allmulticast mode
[  358.291454][T18245] netlink: 'syz.0.3452': attribute type 30 has an invalid length.
[  358.323749][T18245] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  358.368729][T18259] netlink: 'syz.0.3452': attribute type 1 has an invalid length.
[  358.393267][T18245] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  358.463777][T18245] netlink: 'syz.0.3452': attribute type 16 has an invalid length.
[  358.482533][T18245] netlink: 'syz.0.3452': attribute type 17 has an invalid length.
[  358.491458][T18259] bridge0: port 1(bridge_slave_0) entered disabled state
[  358.501806][T18259] bridge0: port 2(bridge_slave_1) entered disabled state
[  358.565446][T18265] xt_policy: output policy not valid in PREROUTING and INPUT
[  358.753178][T18245] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.760577][T18245] bridge0: port 1(bridge_slave_0) entered forwarding state
[  358.794873][T18245] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.802216][T18245] bridge0: port 2(bridge_slave_1) entered forwarding state
[  359.014721][   T30] audit: type=1800 audit(1746578984.121:8): pid=18274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3459" name="memory.events" dev="tmpfs" ino=575 res=0 errno=0
[  359.047880][T18274] __nla_validate_parse: 16 callbacks suppressed
[  359.047901][T18274] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3459'.
[  359.069387][   T30] audit: type=1804 audit(1746578984.151:9): pid=18274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3459" name="/newroot/110/memory.events" dev="tmpfs" ino=575 res=1 errno=0
[  359.377572][T18294] FAULT_INJECTION: forcing a failure.
[  359.377572][T18294] name failslab, interval 1, probability 0, space 0, times 0
[  359.441135][T18283] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3463'.
[  359.456489][T18294] CPU: 0 UID: 0 PID: 18294 Comm: syz.0.3461 Not tainted 6.15.0-rc4-syzkaller-00163-ge8716b5b0dff #0 PREEMPT(full) 
[  359.456517][T18294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  359.456529][T18294] Call Trace:
[  359.456538][T18294]  <TASK>
[  359.456547][T18294]  dump_stack_lvl+0x189/0x250
[  359.456585][T18294]  ? __pfx_dump_stack_lvl+0x10/0x10
[  359.456615][T18294]  ? __pfx__printk+0x10/0x10
[  359.456642][T18294]  ? __pfx___might_resched+0x10/0x10
[  359.456660][T18294]  ? fs_reclaim_acquire+0x7d/0x100
[  359.456693][T18294]  should_fail_ex+0x414/0x560
[  359.456731][T18294]  should_failslab+0xa8/0x100
[  359.456759][T18294]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  359.456785][T18294]  ? __alloc_skb+0x112/0x2d0
[  359.456812][T18294]  __alloc_skb+0x112/0x2d0
[  359.456838][T18294]  netlink_ack+0x146/0xa50
[  359.456855][T18294]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  359.456881][T18294]  ? ref_tracker_free+0x63a/0x7d0
[  359.456899][T18294]  ? __copy_skb_header+0xa7/0x550
[  359.456934][T18294]  netlink_rcv_skb+0x2a0/0x490
[  359.456956][T18294]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  359.456977][T18294]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  359.457019][T18294]  ? netlink_deliver_tap+0x2e/0x1b0
[  359.457038][T18294]  ? netlink_deliver_tap+0x2e/0x1b0
[  359.457065][T18294]  netlink_unicast+0x758/0x8d0
[  359.457107][T18294]  netlink_sendmsg+0x805/0xb30
[  359.457139][T18294]  ? __pfx_netlink_sendmsg+0x10/0x10
[  359.457163][T18294]  ? aa_sock_msg_perm+0x94/0x160
[  359.457186][T18294]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  359.457208][T18294]  ? __pfx_netlink_sendmsg+0x10/0x10
[  359.457229][T18294]  __sock_sendmsg+0x219/0x270
[  359.457264][T18294]  ____sys_sendmsg+0x505/0x830
[  359.457301][T18294]  ? __pfx_____sys_sendmsg+0x10/0x10
[  359.457337][T18294]  ? import_iovec+0x74/0xa0
[  359.457366][T18294]  ___sys_sendmsg+0x21f/0x2a0
[  359.457393][T18294]  ? __pfx____sys_sendmsg+0x10/0x10
[  359.457458][T18294]  ? __fget_files+0x2a/0x420
[  359.457481][T18294]  ? __fget_files+0x3a0/0x420
[  359.457517][T18294]  __x64_sys_sendmsg+0x19b/0x260
[  359.457545][T18294]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  359.457590][T18294]  ? do_syscall_64+0xba/0x210
[  359.457618][T18294]  do_syscall_64+0xf6/0x210
[  359.457641][T18294]  ? clear_bhb_loop+0x45/0xa0
[  359.457666][T18294]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  359.457684][T18294] RIP: 0033:0x7f651b98e969
[  359.457701][T18294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  359.457718][T18294] RSP: 002b:00007f651c8a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  359.457739][T18294] RAX: ffffffffffffffda RBX: 00007f651bbb5fa0 RCX: 00007f651b98e969
[  359.457753][T18294] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000004
[  359.457765][T18294] RBP: 00007f651c8a3090 R08: 0000000000000000 R09: 0000000000000000
[  359.457777][T18294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  359.457788][T18294] R13: 0000000000000000 R14: 00007f651bbb5fa0 R15: 00007ffd63825958
[  359.457820][T18294]  </TASK>
[  359.995140][   T24] IPVS: starting estimator thread 0...
[  360.017070][T18308] netlink: 'syz.4.3470': attribute type 10 has an invalid length.
[  360.097584][T18312] IPVS: using max 26 ests per chain, 62400 per kthread
[  360.130784][T18308] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  360.157686][T18318] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3473'.
[  360.191553][T18318] netlink: 'syz.2.3473': attribute type 1 has an invalid length.
[  360.280367][T18318] 8021q: adding VLAN 0 to HW filter on device bond1
[  360.299596][T18326] bond1: (slave gretap1): making interface the new active one
[  360.310512][T18326] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  360.521070][T18336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3479'.
[  361.044604][T18359] team0 (unregistering): Port device team_slave_0 removed
[  361.058385][T18359] team0 (unregistering): Port device team_slave_1 removed
[  361.092791][T18367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3490'.
[  361.108354][T18363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3488'.
[  361.287357][T18375] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  361.360843][T18381] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3491'.
[  361.465060][T18381] bridge0: port 3(gretap0) entered disabled state
[  361.507487][T18389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3491'.
[  361.518611][T18391] openvswitch: netlink: Missing key (keys=40, expected=100)
[  361.636631][T18395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3497'.
[  361.699554][T18395] geneve2: entered promiscuous mode
[  361.707439][T18395] geneve2: entered allmulticast mode
[  361.832827][T18401] Bluetooth: MGMT ver 1.23
[  361.852499][T18402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3499'.
[  362.185967][T18419] netlink: 'syz.1.3504': attribute type 2 has an invalid length.
[  362.512323][T18433] vlan2: entered promiscuous mode
[  362.522189][T18433] bridge0: entered promiscuous mode
[  362.575629][T18434] netlink: 'syz.0.3511': attribute type 12 has an invalid length.
[  363.539235][T18491] netlink: 'syz.4.3532': attribute type 1 has an invalid length.
[  363.557153][T18491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  363.564475][T18491] IPv6: NLM_F_CREATE should be set when creating new route
[  363.877453][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  364.599049][T18536] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526
[  364.744851][T18545] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0
[  364.755633][T18545] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  364.780983][T18545] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0
[  365.212846][T18570] __nla_validate_parse: 4 callbacks suppressed
[  365.212870][T18570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3561'.
[  365.266599][T18575] netlink: 'syz.0.3563': attribute type 5 has an invalid length.
[  365.277522][T18577] netlink: 'syz.0.3563': attribute type 5 has an invalid length.
[  365.339801][T18570] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  365.358747][T18570] batadv_slave_1: entered promiscuous mode
[  365.500125][T18586] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3567'.
[  365.552216][T18586] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  365.639837][T18595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3569'.
[  365.696819][T18595] netlink: 'syz.0.3569': attribute type 1 has an invalid length.
[  365.704616][T18595] netlink: 'syz.0.3569': attribute type 2 has an invalid length.
[  365.777410][T18600] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3571'.
[  366.276443][ T5848] Bluetooth: hci5: command tx timeout
[  366.501595][T18640] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3582'.
[  366.771010][T18649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3585'.
[  366.900759][T18654] IPVS: ip_vs_edit_dest(): server weight less than zero
[  366.909173][ T5900] IPVS: starting estimator thread 0...
[  367.026858][T18655] IPVS: using max 26 ests per chain, 62400 per kthread
[  367.174974][T18666] delete_channel: no stack
[  367.313638][T18658] team0: Port device team_slave_1 removed
[  367.437030][T18678] syzkaller1: entered promiscuous mode
[  367.442650][T18678] syzkaller1: entered allmulticast mode
[  367.643359][T18682] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3595'.
[  368.552929][T18728] netlink: 576 bytes leftover after parsing attributes in process `syz.3.3608'.
[  369.041734][T18756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3615'.
[  369.059684][T18759] netlink: 'syz.2.3618': attribute type 1 has an invalid length.
[  369.176749][T18765] ªªªªªª: renamed from vlan0 (while UP)
[  369.190433][T18770] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3618'.
[  369.264218][T18766] netlink: 'syz.3.3620': attribute type 21 has an invalid length.
[  369.289385][T18766] netlink: 'syz.3.3620': attribute type 20 has an invalid length.
[  369.303100][T18766] IPv6: NLM_F_CREATE should be specified when creating new route
[  369.561780][T18786] netlink: 'syz.0.3625': attribute type 10 has an invalid length.
[  369.588027][T18786] vlan0: entered allmulticast mode
[  369.599934][T18786] veth0_vlan: entered allmulticast mode
[  369.661332][T18786] team0: Port device vlan0 added
[  369.780966][T18794] IPv6: sit1: Disabled Multicast RS
[  369.840243][T18806] openvswitch: netlink: Actions may not be safe on all matching packets
[  370.045911][T18810] macsec0: entered promiscuous mode
[  370.608039][T18848] blkio.reset_stats is deprecated
[  370.653105][T18848] __nla_validate_parse: 2 callbacks suppressed
[  370.653126][T18848] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3638'.
[  370.801745][T18856] netlink: 576 bytes leftover after parsing attributes in process `syz.4.3640'.
[  370.968839][T18869] unknown channel width for channel at 909000KHz?
[  371.115440][T18874] netlink: 18221 bytes leftover after parsing attributes in process `syz.4.3645'.
[  371.203567][T18879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3647'.
[  371.283625][T18884] bond2: entered promiscuous mode
[  371.390020][T18894] netlink: 'syz.0.3652': attribute type 4 has an invalid length.
[  371.659333][T18911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3657'.
[  371.728677][T18911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3657'.
[  371.768101][T18916] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3659'.
[  371.780701][T18912] SET target dimension over the limit!
[  372.673671][T18965] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  372.677175][T18969] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3673'.
[  372.748358][T18974] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3675'.
[  372.804430][T18977] bridge0: port 1(bridge_slave_0) entered disabled state
[  373.022519][T18988] netlink: 'syz.2.3678': attribute type 1 has an invalid length.
[  373.117974][T18988] bond3: entered promiscuous mode
[  373.125510][T18988] 8021q: adding VLAN 0 to HW filter on device bond3
[  373.155974][T18988] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3678'.
[  373.191507][T18990] bond3: (slave bridge3): making interface the new active one
[  373.199684][T18990] bridge3: entered promiscuous mode
[  373.215202][T18990] bond3: (slave bridge3): Enslaving as an active interface with an up link
[  373.251832][T18988] bond3: left promiscuous mode
[  373.260624][T18988] bridge3: left promiscuous mode
[  374.623635][T19077] pimreg: entered allmulticast mode
[  374.941769][T19094] netlink: 'syz.4.3711': attribute type 3 has an invalid length.
[  375.363873][T19121] x_tables: duplicate underflow at hook 1
[  375.435259][T19078] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  375.445909][T19125] x_tables: duplicate underflow at hook 1
[  376.680464][ T5848] Bluetooth: hci2: command 0x0401 tx timeout
[  376.930822][T19132] netlink: 'syz.2.3725': attribute type 1 has an invalid length.
[  377.159000][T19145] __nla_validate_parse: 15 callbacks suppressed
[  377.159021][T19145] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3727'.
[  377.208663][T19145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3727'.
[  377.251731][T19147] bond_slave_0: mtu less than device minimum
[  377.409640][T19154] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7
[  377.612809][T19159] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms
[  377.960364][   T59] block nbd1: Possible stuck request ffff888025010000: control (read@0,4096B). Runtime 240 seconds
[  378.223556][T19196] lo: entered promiscuous mode
[  378.244440][T19198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3742'.
[  378.458501][T19209] 8021q: adding VLAN 0 to HW filter on device bond6
[  378.471586][T19209] bond0: (slave bond6): Enslaving as an active interface with an up link
[  378.604727][T19204] 8021q: adding VLAN 0 to HW filter on device bond7
[  378.632145][T19204] bond0: (slave bond7): Enslaving as an active interface with an up link
[  378.743700][T19223] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3752'.
[  378.774072][T19228] netlink: 'syz.4.3753': attribute type 2 has an invalid length.
[  378.805273][T19223] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3752'.
[  378.864828][T19223] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3752'.
[  378.885025][T19225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3752'.
[  378.885070][T19231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3752'.
[  379.001093][T19239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3757'.
[  379.016417][T19239] netlink: 21 bytes leftover after parsing attributes in process `syz.3.3757'.
[  379.368103][T19251] tipc: Started in network mode
[  379.373041][T19251] tipc: Node identity ffffa848, cluster identity 4711
[  379.452335][T19251] tipc: Node number set to 4294944840
[  379.819928][T19267] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  380.095599][T19289] syz.4.3770 uses old SIOCAX25GETINFO
[  380.451570][T19307] No such timeout policy "syz1"
[  380.461882][T19300] xt_HMARK: spi-set and port-set can't be combined
[  380.494754][T19300] xt_HMARK: spi-set and port-set can't be combined
[  381.029523][T19335] netlink: 'syz.1.3782': attribute type 11 has an invalid length.
[  381.059676][T19337] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  381.731740][T19374] veth3: entered allmulticast mode
[  381.813976][T19381] netlink: 'syz.2.3800': attribute type 4 has an invalid length.
[  381.952610][T19393] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  382.039026][ T5881] IPVS: starting estimator thread 0...
[  382.139903][T19402] IPVS: using max 26 ests per chain, 62400 per kthread
[  382.140486][T19403] bridge0: port 1(bridge_slave_0) entered disabled state
[  382.219479][T19403] bridge_slave_0 (unregistering): left allmulticast mode
[  382.227274][T19403] bridge_slave_0 (unregistering): left promiscuous mode
[  382.234370][T19403] bridge0: port 1(bridge_slave_0) entered disabled state
[  382.424273][T19418] __nla_validate_parse: 17 callbacks suppressed
[  382.424292][T19418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3810'.
[  382.428049][T19417] lo: entered promiscuous mode
[  382.465355][T19417] netlink: 'syz.0.3809': attribute type 2 has an invalid length.
[  382.475227][T19417] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  383.153657][T19462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3822'.
[  383.709096][T19480] x_tables: ip_tables: osf match: only valid for protocol 6
[  384.399935][T19514] x_tables: duplicate underflow at hook 2
[  384.759751][T19534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3843'.
[  385.128914][T19565] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3850'.
[  385.151534][T19561] geneve2: entered promiscuous mode
[  385.167218][T19561] geneve2: entered allmulticast mode
[  385.191752][T19568] bridge0: port 3(gretap0) entered blocking state
[  385.212012][T19568] bridge0: port 3(gretap0) entered disabled state
[  385.224095][T19568] gretap0: entered allmulticast mode
[  385.261137][T19568] gretap0: entered promiscuous mode
[  385.272070][T19568] bridge0: port 3(gretap0) entered blocking state
[  385.278699][T19568] bridge0: port 3(gretap0) entered forwarding state
[  385.393239][T19578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3856'.
[  385.446632][T19578] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3856'.
[  385.517087][T19586] netlink: 'syz.0.3858': attribute type 16 has an invalid length.
[  385.525303][T19578] netlink: 'syz.4.3856': attribute type 39 has an invalid length.
[  385.541268][T19586] netlink: 'syz.0.3858': attribute type 17 has an invalid length.
[  385.564056][T19592] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3860'.
[  385.598215][T19586] lo: left promiscuous mode
[  385.675544][T19586] vlan0: left allmulticast mode
[  385.687696][T19586] veth0_vlan: left allmulticast mode
[  385.721534][T19586] ip6erspan0: left promiscuous mode
[  385.731944][T19586] vlan2: left promiscuous mode
[  385.753826][T19586] bridge0: left promiscuous mode
[  385.789952][T19590] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3858'.
[  385.984787][T19617] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3863'.
[  386.084231][T19618] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  386.091577][T19618] IPv6: NLM_F_CREATE should be set when creating new route
[  386.240509][T19626] xt_CT: No such helper "pptp"
[  386.285902][T19637] netlink: 191164 bytes leftover after parsing attributes in process `syz.2.3867'.
[  386.643180][T19650] netlink: 'syz.4.3871': attribute type 13 has an invalid length.
[  388.035917][T19642] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3869'.
[  388.168646][ T1151] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  388.190129][ T1151] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  388.200268][ T3078] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  388.224537][T19664] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3875'.
[  388.255844][T19670] vlan0: entered promiscuous mode
[  388.269278][T19670] bridge0: entered promiscuous mode
[  388.289777][T19670] vlan0: entered allmulticast mode
[  388.294960][T19670] bridge0: entered allmulticast mode
[  388.348890][T19666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3877'.
[  388.356541][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  388.692634][T19694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3883'.
[  388.851755][T19712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3889'.
[  388.872402][T19712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3889'.
[  388.883280][T19712] netlink: 'syz.0.3889': attribute type 20 has an invalid length.
[  388.934510][T19715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3891'.
[  388.966405][T19715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3891'.
[  389.054126][T19726] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3892'.
[  389.158581][   T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  389.208301][T19731] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  389.218552][T19734] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3898'.
[  389.691476][T19762] netlink: 'syz.2.3906': attribute type 4 has an invalid length.
[  389.921246][T19775] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  390.005309][T19780] netlink: 'syz.3.3910': attribute type 6 has an invalid length.
[  390.145893][T19788] netlink: 'syz.1.3913': attribute type 1 has an invalid length.
[  390.171059][T19786] netlink: 'syz.4.3912': attribute type 7 has an invalid length.
[  390.185298][T19786] netlink: 'syz.4.3912': attribute type 8 has an invalid length.
[  390.656228][T19817] IPVS: length: 233 != 24
[  391.358219][T19850] xt_addrtype: ipv6 does not support BROADCAST matching
[  391.983802][T19882] TCP: TCP_TX_DELAY enabled
[  392.597555][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  393.402771][T19951] veth0_to_hsr: invalid flags given to default FDB implementation
[  393.472796][T19956] pim6reg527: entered allmulticast mode
[  393.483606][T19956] __nla_validate_parse: 13 callbacks suppressed
[  393.483624][T19956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3970'.
[  393.500065][T19956] netlink: 21 bytes leftover after parsing attributes in process `syz.2.3970'.
[  393.532835][T19956] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3970'.
[  393.666125][T19967] IPVS: Error joining to the multicast group
[  393.743452][T19969] netlink: 'syz.0.3971': attribute type 1 has an invalid length.
[  393.793733][T19969] bond2: entered promiscuous mode
[  393.812570][T19969] 8021q: adding VLAN 0 to HW filter on device bond2
[  393.873272][T19975] 8021q: adding VLAN 0 to HW filter on device bond2
[  393.884007][T19975] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address
[  393.894999][T19975] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  393.911551][T19975] bond2: (slave wireguard0): making interface the new active one
[  393.919614][T19975] wireguard0: entered promiscuous mode
[  393.927931][T19975] bond2: (slave wireguard0): Enslaving as an active interface with an up link
[  393.937060][T19979] lo: entered promiscuous mode
[  393.942788][T19979] netlink: 'syz.2.3974': attribute type 2 has an invalid length.
[  393.966416][T19979] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  394.329125][T19993] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3980'.
[  394.378963][T19996] netlink: 'syz.3.3980': attribute type 1 has an invalid length.
[  394.387022][T19996] netlink: 'syz.3.3980': attribute type 3 has an invalid length.
[  394.428838][T19996] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3980'.
[  394.497838][T19996] NCSI netlink: No device for ifindex 131080
[  394.537031][T20008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3982'.
[  394.557299][T19993] netlink: 'syz.3.3980': attribute type 1 has an invalid length.
[  394.565504][T19993] netlink: 'syz.3.3980': attribute type 3 has an invalid length.
[  394.580158][T19993] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3980'.
[  394.595200][T19993] NCSI netlink: No device for ifindex 131080
[  394.697296][T20011] netlink: 'syz.4.3985': attribute type 1 has an invalid length.
[  394.716888][T20011] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3985'.
[  395.054458][T20022] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3989'.
[  395.467319][T20034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3992'.
[  396.279150][T20082] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  396.603673][T20098] netlink: 'syz.0.4009': attribute type 10 has an invalid length.
[  396.749074][T20098] team0: Failed to send port change of device geneve0 via netlink (err -105)
[  396.983024][T20114] netlink: 'syz.3.4015': attribute type 2 has an invalid length.
[  397.017995][T20112] netlink: 'syz.2.4014': attribute type 11 has an invalid length.
[  397.094952][T20120] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  397.222169][T20128] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  397.232004][T20128] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  397.241185][T20128] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  397.249498][T20128] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  397.310486][T20125] virt_wifi0 speed is unknown, defaulting to 1000
[  397.322923][T20131] pim6reg1: entered promiscuous mode
[  397.339164][T20131] pim6reg1: entered allmulticast mode
[  397.371947][T20131] netlink: 'syz.2.4019': attribute type 7 has an invalid length.
[  397.385306][T20131] netlink: 'syz.2.4019': attribute type 1 has an invalid length.
[  397.543247][T20147] Cannot find add_set index 0 as target
[  397.550500][T20131] bond4: entered promiscuous mode
[  397.571837][T20131] 8021q: adding VLAN 0 to HW filter on device bond4
[  397.617098][T20140] bond4: (slave bridge4): making interface the new active one
[  397.625961][T20140] bridge4: entered promiscuous mode
[  397.633513][T20140] bond4: (slave bridge4): Enslaving as an active interface with an up link
[  397.658343][T20155] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  398.095014][T20171] 8021q: adding VLAN 0 to HW filter on device bond4
[  398.230728][T20178] veth3: entered promiscuous mode
[  398.265227][T20178] bond4: (slave veth3): Enslaving as an active interface with an up link
[  398.312637][T20171] vlan3: entered allmulticast mode
[  398.330633][T20171] bond4: entered allmulticast mode
[  398.335900][T20171] veth3: entered allmulticast mode
[  398.398703][T20184] geneve2: entered promiscuous mode
[  398.404035][T20184] geneve2: entered allmulticast mode
[  398.681031][T20197] syz_tun: entered allmulticast mode
[  398.887755][T20197] syz_tun: left allmulticast mode
[  399.334994][T20243] __nla_validate_parse: 13 callbacks suppressed
[  399.335017][T20243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4051'.
[  399.381697][T20243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4051'.
[  399.512274][T20255] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  399.602485][T20260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4057'.
[  399.602511][T20254] openvswitch: netlink: IPv6 tunnel dst address is zero
[  399.631729][T20260] sctp: [Deprecated]: syz.1.4057 (pid 20260) Use of int in max_burst socket option.
[  399.631729][T20260] Use struct sctp_assoc_value instead
[  399.648444][T20262] openvswitch: netlink: IPv6 tunnel dst address is zero
[  400.253906][T20289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4066'.
[  400.267185][T20287] tipc: Started in network mode
[  400.272098][T20287] tipc: Node identity 02b1b51b669d, cluster identity 4711
[  400.280767][T20287] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  400.305834][T20289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4066'.
[  400.345967][T20286] tipc: Disabling bearer <eth:syzkaller0>
[  400.464180][T20303] xt_bpf: check failed: parse error
[  400.480496][T20305] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4071'.
[  400.505642][T20307] IPVS: Error joining to the multicast group
[  400.533353][T20310] bridge5: entered promiscuous mode
[  400.549182][T20310] bridge5: entered allmulticast mode
[  400.685338][T20315] netlink: 'syz.4.4075': attribute type 4 has an invalid length.
[  400.715945][T20319] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  400.724595][T20316] netlink: 'syz.0.4074': attribute type 4 has an invalid length.
[  400.759369][T20321] netlink: 'syz.1.4077': attribute type 1 has an invalid length.
[  400.786631][T20321] netlink: 'syz.1.4077': attribute type 2 has an invalid length.
[  400.818003][T20321] netlink: 1172 bytes leftover after parsing attributes in process `syz.1.4077'.
[  400.925462][T20332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4080'.
[  400.965568][T20332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4080'.
[  400.995302][T20332] netlink: 'syz.0.4080': attribute type 12 has an invalid length.
[  401.007839][T20332] netlink: 'syz.0.4080': attribute type 11 has an invalid length.
[  401.287863][T20352] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  401.342697][T20355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4089'.
[  401.636332][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  403.021360][T20441] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  403.095513][T20441] IPVS: set_ctl: invalid protocol: 47 100.1.1.0:20002
[  403.208793][T20441] IPVS: Scheduler module ip_vs_sip not found
[  403.291643][T20458] ip6gre1: entered allmulticast mode
[  403.789278][T20484] geneve3: entered promiscuous mode
[  403.794565][T20484] geneve3: entered allmulticast mode
[  404.113837][T20513] netlink: 'syz.1.4133': attribute type 2 has an invalid length.
[  404.302756][T20522] vlan3: entered allmulticast mode
[  404.309275][T20522] veth1: entered allmulticast mode
[  404.427544][T20533] __nla_validate_parse: 70 callbacks suppressed
[  404.427560][T20533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4141'.
[  404.704112][T20546] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4145'.
[  405.288840][T20575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4154'.
[  405.323260][T20575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4154'.
[  405.433129][T20587] tipc: Failed to obtain node identity
[  405.461119][T20587] tipc: Enabling of bearer <ib:ipvlan1> rejected, failed to enable media
[  405.589504][T20598] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4160'.
[  405.611618][    C0] vcan0: j1939_tp_rxtimer: 0xffff888076d31c00: rx timeout, send abort
[  405.642140][T20600] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4161'.
[  405.707545][T20604] netlink: 'syz.1.4163': attribute type 11 has an invalid length.
[  405.730028][T20603] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  405.734879][T20604] xt_l2tp: v2 doesn't support IP mode
[  405.784903][T20604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4163'.
[  406.003554][T20620] xt_connbytes: Forcing CT accounting to be enabled
[  406.111725][    C0] vcan0: j1939_tp_rxtimer: 0xffff888076d32000: rx timeout, send abort
[  406.120634][    C0] vcan0: j1939_tp_rxtimer: 0xffff888076d31c00: abort rx timeout. Force session deactivation
[  406.204120][T20639] netlink: 'syz.4.4175': attribute type 2 has an invalid length.
[  406.230910][T20641] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4173'.
[  406.263703][T20639] xt_CT: No such helper "pptp"
[  406.325495][T20647] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4176'.
[  406.520333][T20659] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4180'.
[  406.620022][    C0] vcan0: j1939_tp_rxtimer: 0xffff888076d32000: abort rx timeout. Force session deactivation
[  406.804290][T20672] ip6t_srh: unknown srh match flags  536B
[  406.903697][T20674] tipc: Invalid UDP bearer configuration
[  406.903756][T20674] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  407.131079][T20687] sctp: [Deprecated]: syz.3.4189 (pid 20687) Use of int in max_burst socket option.
[  407.131079][T20687] Use struct sctp_assoc_value instead
[  407.362256][T20702] netlink: zone id is out of range
[  407.371099][T20703] netlink: zone id is out of range
[  407.373890][T20702] netlink: zone id is out of range
[  407.383171][T20702] netlink: zone id is out of range
[  407.388943][T20702] netlink: zone id is out of range
[  407.394425][T20702] netlink: zone id is out of range
[  407.402541][T20702] netlink: zone id is out of range
[  407.414114][T20703] netlink: zone id is out of range
[  407.431227][T20703] netlink: zone id is out of range
[  407.440962][T20703] netlink: zone id is out of range
[  407.770072][T20720] netlink: 'syz.4.4200': attribute type 26 has an invalid length.
[  407.795296][T20720] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  407.809004][T20720] batman_adv: batadv0: Removing interface: batadv_slave_0
[  407.825626][T20720] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  407.838653][T20720] batman_adv: batadv0: Removing interface: batadv_slave_1
[  408.038802][   T59] block nbd1: Possible stuck request ffff888025010000: control (read@0,4096B). Runtime 270 seconds
[  408.362661][T20757] bridge0: port 2(bridge_slave_1) entered disabled state
[  408.370496][T20757] bridge0: port 1(bridge_slave_0) entered disabled state
[  408.793617][T20777] xt_CT: You must specify a L4 protocol and not use inversions on it
[  408.898925][T20783] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  408.932338][T20783] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  409.161405][T20799] xt_CONNSECMARK: invalid mode: 0
[  409.503238][T20819] netlink: 'syz.0.4234': attribute type 1 has an invalid length.
[  409.511824][T20819] __nla_validate_parse: 144 callbacks suppressed
[  409.511839][T20819] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4234'.
[  409.552357][T20820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4234'.
[  409.559943][T20825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4235'.
[  409.562592][T20819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4234'.
[  409.626323][T20825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4235'.
[  409.651647][T20829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4238'.
[  409.714422][T20829] 8021q: adding VLAN 0 to HW filter on device bond0
[  409.760022][T20829] team0: Port device bond0 added
[  409.960080][T20845] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  409.978109][T20846] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4242'.
[  410.031664][T20846] Cannot find add_set index 0 as target
[  410.264481][T20866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4249'.
[  410.790386][T20905] netlink: 'syz.1.4262': attribute type 10 has an invalid length.
[  410.793082][T20899] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4261'.
[  410.812045][T20905] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4262'.
[  410.879260][T20905] dummy0: entered promiscuous mode
[  410.885095][T20905] bridge0: port 4(dummy0) entered blocking state
[  410.906727][T20905] bridge0: port 4(dummy0) entered disabled state
[  410.924631][T20905] dummy0: entered allmulticast mode
[  410.944815][T20908] netlink: 'syz.4.4264': attribute type 4 has an invalid length.
[  411.739553][T20953] netlink: 'syz.0.4278': attribute type 10 has an invalid length.
[  411.802703][T20953] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  412.103405][T20978] netlink: 'syz.2.4284': attribute type 1 has an invalid length.
[  412.307691][T20989] netlink: 'syz.4.4288': attribute type 8 has an invalid length.
[  412.940776][T21026] 8021q: adding VLAN 0 to HW filter on device bond9
[  412.950639][T21026] bond0: (slave bond9): Enslaving as an active interface with an up link
[  414.538482][T21112] __nla_validate_parse: 16 callbacks suppressed
[  414.538503][T21112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4321'.
[  414.565360][T21111] tipc: Started in network mode
[  414.572544][T21111] tipc: Node identity ac14140f, cluster identity 4711
[  414.617242][T21111] tipc: New replicast peer: 255.255.255.255
[  414.618151][T21110] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4325'.
[  414.631577][T21111] tipc: Enabled bearer <udp:syz2>, priority 10
[  414.647162][T21122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4327'.
[  414.656087][T21122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4327'.
[  415.251929][T21139] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  415.409809][T21139] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  415.515494][T21152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4337'.
[  415.571979][T21139] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  415.594925][T21152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4337'.
[  415.613759][T21152] netlink: 'syz.4.4337': attribute type 13 has an invalid length.
[  415.664350][T21155] sctp: [Deprecated]: syz.1.4338 (pid 21155) Use of int in max_burst socket option.
[  415.664350][T21155] Use struct sctp_assoc_value instead
[  415.747102][ T5880] tipc: Node number set to 2886997007
[  415.802084][T21139] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  415.806344][T21159] sctp: [Deprecated]: syz.4.4340 (pid 21159) Use of int in max_burst socket option.
[  415.806344][T21159] Use struct sctp_assoc_value instead
[  415.869372][T21162] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4341'.
[  416.076999][T21171] netlink: 'syz.4.4344': attribute type 10 has an invalid length.
[  416.089436][T21139] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  416.101254][T21171] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4344'.
[  416.125391][T21139] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  416.136532][T21171] netlink: 'syz.4.4344': attribute type 10 has an invalid length.
[  416.145403][T21171] bridge0: port 2(bridge_slave_1) entered disabled state
[  416.153209][T21171] bridge0: port 1(bridge_slave_0) entered disabled state
[  416.185407][T21171] bridge0: port 2(bridge_slave_1) entered blocking state
[  416.192961][T21171] bridge0: port 2(bridge_slave_1) entered forwarding state
[  416.200549][T21171] bridge0: port 1(bridge_slave_0) entered blocking state
[  416.207753][T21171] bridge0: port 1(bridge_slave_0) entered forwarding state
[  416.249794][T21171] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  416.313707][T21139] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  416.373977][T21139] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  416.393343][T21181] tun0: tun_chr_ioctl cmd 1074025675
[  416.399547][T21181] tun0: persist enabled
[  416.404922][T21181] tun0: tun_chr_ioctl cmd 1074025675
[  416.410925][T21181] tun0: persist disabled
[  416.416044][T21190] tun0: tun_chr_ioctl cmd 1074025675
[  416.430113][T21190] tun0: persist disabled
[  416.435620][T21185] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) !
[  416.450047][T21185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4348'.
[  416.542396][T21185] vxcan1 (unregistering): left allmulticast mode
[  416.747222][T21204] sch_tbf: burst 0 is lower than device team_slave_0 mtu (1514) !
[  417.090115][T21228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4361'.
[  417.156522][T21235] net_ratelimit: 20 callbacks suppressed
[  417.156542][T21235] openvswitch: netlink: Message has 20 unknown bytes.
[  417.187387][T21235] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  417.530125][T21253] dvmrp0: entered allmulticast mode
[  417.759850][T21267] x_tables: duplicate underflow at hook 1
[  417.863741][T21274] C: renamed from lo
[  417.932065][T21274] x_tables: duplicate underflow at hook 1
[  417.948586][T21274] Bluetooth: MGMT ver 1.23
[  418.292118][T21285] delete_channel: no stack
[  418.344491][T21284] delete_channel: no stack
[  418.829156][T21323] 8021q: adding VLAN 0 to HW filter on device bond1
[  418.916364][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  419.137729][T21334] tap0: tun_chr_ioctl cmd 1074025676
[  419.159497][T21334] tap0: owner set to 0
[  419.710879][T21368] __nla_validate_parse: 9 callbacks suppressed
[  419.710899][T21368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4406'.
[  419.751522][T21368] xt_cluster: node mask cannot exceed total number of nodes
[  420.249727][T21392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4414'.
[  420.400718][T21405] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4418'.
[  420.422923][T21404] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  420.489294][T21400] tipc: Resetting bearer <eth:syzkaller0>
[  422.027692][T21400] tipc: Disabling bearer <eth:syzkaller0>
[  422.180591][T21431] netlink: 'syz.4.4424': attribute type 12 has an invalid length.
[  422.205930][T21431] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255)
[  422.267212][T21437] geneve1: entered promiscuous mode
[  422.278899][T21437] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  422.746697][T21463] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4436'.
[  422.757961][T21461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4434'.
[  422.948883][T21471] lo: left promiscuous mode
[  423.030189][T21477] netlink: 516 bytes leftover after parsing attributes in process `syz.4.4441'.
[  423.095085][T21483] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  423.210068][T21471] bridge0: port 3(gretap0) entered disabled state
[  423.532746][T21471] bridge0: port 2(bridge_slave_1) entered disabled state
[  423.540555][T21471] bridge0: port 1(bridge_slave_0) entered disabled state
[  423.643771][T21478] ÿ
: renamed from vcan0 (while UP)
[  423.979092][T21513] netlink: 'syz.0.4450': attribute type 4 has an invalid length.
[  424.112080][T21519] netlink: 'syz.3.4446': attribute type 4 has an invalid length.
[  424.173382][T21515] netlink: 'syz.3.4446': attribute type 4 has an invalid length.
[  424.200056][T21524] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4452'.
[  424.496056][T21536] xt_CT: No such helper "pptp"
[  424.975570][T21574] pimreg: entered allmulticast mode
[  425.029492][T21570] dvmrp0: left allmulticast mode
[  425.065877][T21570] pimreg: left allmulticast mode
[  425.230957][T21577] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4464'.
[  425.592849][T21607] netlink: 160 bytes leftover after parsing attributes in process `syz.2.4473'.
[  425.975947][T21622] team0: Port device team_slave_1 removed
[  426.657167][T21652] nbd: device at index 3 is going down
[  426.788790][T21655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4489'.
[  426.797939][T21655] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  426.911787][T21664] netlink: 165 bytes leftover after parsing attributes in process `syz.4.4492'.
[  426.980126][T21664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4492'.
[  427.055665][T21668] sctp: [Deprecated]: syz.0.4494 (pid 21668) Use of int in max_burst socket option.
[  427.055665][T21668] Use struct sctp_assoc_value instead
[  427.222990][T21676] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4496'.
[  427.661237][T21709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4506'.
[  427.890401][T21725] netlink: 'syz.2.4511': attribute type 11 has an invalid length.
[  427.915577][T21725] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4511'.
[  428.106799][T21736] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  428.245976][T21747] netlink: 'syz.4.4518': attribute type 10 has an invalid length.
[  428.265441][T21747] vlan0: entered allmulticast mode
[  428.272484][T21747] veth0_vlan: entered allmulticast mode
[  428.310098][T21747] team0: Port device vlan0 added
[  428.375674][T21753] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4520'.
[  428.399869][T21755] netlink: 'syz.1.4521': attribute type 7 has an invalid length.
[  428.401477][T21753] x_tables: duplicate underflow at hook 1
[  428.508102][T21760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4523'.
[  429.398503][T21809] bridge0: port 1(gretap0) entered blocking state
[  429.405166][T21809] bridge0: port 1(gretap0) entered disabled state
[  429.412744][T21809] gretap0: entered allmulticast mode
[  429.425799][T21809] gretap0: entered promiscuous mode
[  429.434211][T21809] bridge0: port 1(gretap0) entered blocking state
[  429.440822][T21809] bridge0: port 1(gretap0) entered forwarding state
[  429.595352][T21814] netlink: 'syz.1.4540': attribute type 9 has an invalid length.
[  429.613739][T21814] netlink: 'syz.1.4540': attribute type 1 has an invalid length.
[  429.903176][T21830] xt_cgroup: invalid path, errno=-2
[  430.511187][T21866] __nla_validate_parse: 4 callbacks suppressed
[  430.511206][T21866] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4553'.
[  430.534292][T21865] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4553'.
[  430.564222][T21866] 0ªî{X¹¦: renamed from gretap0 (while UP)
[  430.575197][T21866] 0ªî{X¹¦: entered allmulticast mode
[  430.595092][T21866] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  430.615307][T21865] 0ªî{X¹¦: entered promiscuous mode
[  430.631598][T21865] 0ªî{X¹¦: left allmulticast mode
[  430.940990][T21886] netlink: 'syz.1.4559': attribute type 10 has an invalid length.
[  430.985919][T21886] dummy0: left allmulticast mode
[  431.012919][T21886] dummy0: left promiscuous mode
[  431.022724][T21886] bridge0: port 4(dummy0) entered disabled state
[  431.044538][T21886] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  431.092947][T21895] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4560'.
[  431.355585][T21913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4564'.
[  431.447138][T21913] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4564'.
[  431.522851][T21918] 8021q: VLANs not supported on caif0
[  431.768410][T21933] netlink: 'syz.2.4570': attribute type 1 has an invalid length.
[  431.787635][T21933] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4570'.
[  431.826336][T21933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4570'.
[  431.998870][T21944] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4573'.
[  432.212757][T21957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4577'.
[  432.261337][T21962] netlink: 'syz.1.4579': attribute type 1 has an invalid length.
[  432.286631][T21962] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4579'.
[  432.394118][T21968] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌULÙvy¸ÚØ¢
…D£øUDŒw˜}�zR3âëp(@O'
[  432.444175][T21972] netlink: 'syz.1.4584': attribute type 17 has an invalid length.
[  432.447579][T21968] CPU: 0 UID: 0 PID: 21968 Comm: syz.3.4581 Not tainted 6.15.0-rc4-syzkaller-00163-ge8716b5b0dff #0 PREEMPT(full) 
[  432.447613][T21968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  432.447632][T21968] Call Trace:
[  432.447645][T21968]  <TASK>
[  432.447655][T21968]  dump_stack_lvl+0x189/0x250
[  432.447697][T21968]  ? lockdep_hardirqs_on+0x9c/0x150
[  432.447724][T21968]  ? __pfx_dump_stack_lvl+0x10/0x10
[  432.447757][T21968]  ? __pfx__printk+0x10/0x10
[  432.447783][T21968]  ? kernfs_path_from_node+0x2b/0x260
[  432.447819][T21968]  ? kernfs_path_from_node+0x216/0x260
[  432.447853][T21968]  sysfs_warn_dup+0x8e/0xa0
[  432.447891][T21968]  sysfs_do_create_link_sd+0xc0/0x110
[  432.447924][T21968]  device_add_class_symlinks+0x1cf/0x240
[  432.447956][T21968]  device_add+0x475/0xb50
[  432.447986][T21968]  wiphy_register+0x199a/0x26b0
[  432.448038][T21968]  ? __pfx_wiphy_register+0x10/0x10
[  432.448066][T21968]  ? minstrel_ht_alloc+0x893/0x990
[  432.448108][T21968]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  432.448147][T21968]  ieee80211_register_hw+0x334b/0x4060
[  432.448187][T21968]  ? ieee80211_register_hw+0x1401/0x4060
[  432.448223][T21968]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  432.448249][T21968]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  432.448281][T21968]  ? __hrtimer_setup+0x187/0x210
[  432.448312][T21968]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  432.448339][T21968]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  432.448409][T21968]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  432.448439][T21968]  ? trace_kmalloc+0x1f/0xd0
[  432.448463][T21968]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  432.448492][T21968]  ? kstrndup+0xbf/0x160
[  432.448528][T21968]  hwsim_new_radio_nl+0xea4/0x1b10
[  432.448565][T21968]  ? __pfx___nla_validate_parse+0x10/0x10
[  432.448614][T21968]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  432.448650][T21968]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  432.448692][T21968]  ? __nla_parse+0x40/0x60
[  432.448723][T21968]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  432.448764][T21968]  genl_family_rcv_msg_doit+0x212/0x300
[  432.448804][T21968]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  432.448851][T21968]  ? bpf_lsm_capable+0x9/0x20
[  432.448890][T21968]  ? security_capable+0x7e/0x2e0
[  432.448922][T21968]  genl_rcv_msg+0x60e/0x790
[  432.448961][T21968]  ? __pfx_genl_rcv_msg+0x10/0x10
[  432.448989][T21968]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  432.449040][T21968]  netlink_rcv_skb+0x219/0x490
[  432.449064][T21968]  ? __pfx_genl_rcv_msg+0x10/0x10
[  432.449096][T21968]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  432.449149][T21968]  ? down_read+0x1ad/0x2e0
[  432.449180][T21968]  genl_rcv+0x28/0x40
[  432.449206][T21968]  netlink_unicast+0x758/0x8d0
[  432.449255][T21968]  netlink_sendmsg+0x805/0xb30
[  432.449290][T21968]  ? __pfx_netlink_sendmsg+0x10/0x10
[  432.449318][T21968]  ? aa_sock_msg_perm+0x94/0x160
[  432.449344][T21968]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  432.449368][T21968]  ? __pfx_netlink_sendmsg+0x10/0x10
[  432.449393][T21968]  __sock_sendmsg+0x219/0x270
[  432.449432][T21968]  ____sys_sendmsg+0x505/0x830
[  432.449467][T21968]  ? __pfx_____sys_sendmsg+0x10/0x10
[  432.449507][T21968]  ? import_iovec+0x74/0xa0
[  432.449541][T21968]  ___sys_sendmsg+0x21f/0x2a0
[  432.449572][T21968]  ? __pfx____sys_sendmsg+0x10/0x10
[  432.449646][T21968]  ? __fget_files+0x2a/0x420
[  432.449674][T21968]  ? __fget_files+0x3a0/0x420
[  432.449715][T21968]  __x64_sys_sendmsg+0x19b/0x260
[  432.449747][T21968]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  432.449796][T21968]  ? do_syscall_64+0xba/0x210
[  432.449828][T21968]  do_syscall_64+0xf6/0x210
[  432.449855][T21968]  ? clear_bhb_loop+0x45/0xa0
[  432.449889][T21968]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  432.449912][T21968] RIP: 0033:0x7f68d038e969
[  432.449934][T21968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  432.449954][T21968] RSP: 002b:00007f68d1234038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  432.449978][T21968] RAX: ffffffffffffffda RBX: 00007f68d05b5fa0 RCX: 00007f68d038e969
[  432.449995][T21968] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  432.450009][T21968] RBP: 00007f68d0410ab1 R08: 0000000000000000 R09: 0000000000000000
[  432.450023][T21968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  432.450036][T21968] R13: 0000000000000000 R14: 00007f68d05b5fa0 R15: 00007ffc878fd128
[  432.450073][T21968]  </TASK>
[  432.461350][T18844] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  432.897139][ T5880] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  432.904942][T18844] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  433.039897][  T975] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  433.167400][T21997] bridge0: entered allmulticast mode
[  433.392481][T22009] sit0: entered promiscuous mode
[  433.406384][T22009] netlink: 'syz.2.4591': attribute type 1 has an invalid length.
[  433.433295][T22008] netlink: 'syz.2.4591': attribute type 1 has an invalid length.
[  433.716840][  T975] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  434.255050][T22060] vlan3: entered promiscuous mode
[  434.525337][T22078] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  434.917489][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  434.992698][T22104] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  435.414421][T22130] xt_TCPMSS: Only works on TCP SYN packets
[  435.654012][T22143] __nla_validate_parse: 19 callbacks suppressed
[  435.654035][T22143] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4632'.
[  435.754943][T22148] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  435.802135][T22151] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4634'.
[  436.510493][T22168] netlink: 'syz.1.4639': attribute type 21 has an invalid length.
[  436.526850][T22168] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4639'.
[  436.761259][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  437.837431][T22168] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4639'.
[  438.064623][T22189] x_tables: ip_tables: osf match: only valid for protocol 6
[  438.127443][   T59] block nbd1: Possible stuck request ffff888025010000: control (read@0,4096B). Runtime 300 seconds
[  438.163343][T22189] gtp0: entered promiscuous mode
[  438.204401][T22192] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  438.281827][T22205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4648'.
[  438.435575][T22213] x_tables: duplicate underflow at hook 1
[  438.472353][T22215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4651'.
[  438.544636][T22210] veth0: entered promiscuous mode
[  438.554551][T22209] veth0: left promiscuous mode
[  438.950110][T22242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4662'.
[  438.994552][T22245] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4663'.
[  439.015131][T22244] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4663'.
[  439.114212][T22245] pim6reg527: entered allmulticast mode
[  439.339061][T22260] netlink: 'syz.1.4666': attribute type 1 has an invalid length.
[  439.343889][T22264] netlink: 71 bytes leftover after parsing attributes in process `syz.2.4667'.
[  439.469085][T22260] bond5: entered promiscuous mode
[  439.475847][T22260] 8021q: adding VLAN 0 to HW filter on device bond5
[  439.572044][T22270] bond5: (slave bridge3): making interface the new active one
[  439.580527][T22270] bridge3: entered promiscuous mode
[  439.587400][T22270] bond5: (slave bridge3): Enslaving as an active interface with an up link
[  439.747486][T22291] rdma_rxe: rxe_newlink: failed to add bond_slave_1
[  439.927331][T22302] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  440.227138][T22326] netlink: 'syz.4.4685': attribute type 7 has an invalid length.
[  440.251744][T22325] IPv6: sit1: Disabled Multicast RS
[  440.278975][T22325] sit1: entered allmulticast mode
[  440.388220][T22326] : entered promiscuous mode
[  440.743156][T22352] team0: Port device vlan0 removed
[  440.995952][T22365] netlink: 'syz.3.4698': attribute type 11 has an invalid length.
[  441.094603][T22370] __nla_validate_parse: 6 callbacks suppressed
[  441.094625][T22370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4700'.
[  441.119244][T22370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4700'.
[  441.221588][T22370] netlink: 'syz.4.4700': attribute type 20 has an invalid length.
[  441.583840][T22385] IPVS: set_ctl: invalid protocol: 111 172.20.20.187:20002
[  441.755526][T22396] nbd: nbd0 already in use
[  441.803198][T22396] block nbd0: NBD_DISCONNECT
[  441.836340][T22396] block nbd0: Send disconnect failed -32
[  441.859186][T22396] block nbd0: shutting down sockets
[  442.010688][T22408] macsec3: entered allmulticast mode
[  442.033693][T22408] macvlan0: entered allmulticast mode
[  442.056343][T22408] veth1_vlan: entered allmulticast mode
[  442.088523][T22408] macvlan0: left allmulticast mode
[  442.106274][T22408] veth1_vlan: left allmulticast mode
[  442.116615][ T5140] Bluetooth: hci1: command 0x0406 tx timeout
[  442.122898][ T5845] Bluetooth: hci3: command 0x040f tx timeout
[  442.173963][T22415] xt_CT: No such helper "snmp_trap"
[  442.499305][T22429] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.4718'.
[  442.520843][T18841] bond5 (unregistering): (slave ip6erspan0): Releasing active interface
[  442.680576][T22435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4720'.
[  442.812458][T18841] gretap0 (unregistering): left allmulticast mode
[  442.855505][T22440] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4722'.
[  442.979954][T18841] dvmrp0 (unregistering): left allmulticast mode
[  443.075193][T18841] team0: Port device geneve0 removed
[  443.359373][T18841] bond1 (unregistering): Released all slaves
[  443.471489][T18841] bond2 (unregistering): Released all slaves
[  443.580674][T18841] bond3 (unregistering): Released all slaves
[  443.596958][T18841] bond4 (unregistering): Released all slaves
[  443.707650][T18841] bond5 (unregistering): Released all slaves
[  443.732422][T22445] team0: No ports can be present during mode change
[  443.746922][T22448] bridge0: Device is already in use.
[  443.865426][T22450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4726'.
[  443.940325][T22452] Cannot find del_set index 3 as target
[  444.076785][T22457] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  444.143050][T22457] syzkaller0: entered promiscuous mode
[  444.155779][T22457] syzkaller0: entered allmulticast mode
[  444.183554][T22457] tipc: Resetting bearer <eth:syzkaller0>
[  444.299731][T22457] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.453672][T22457] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.577823][T22457] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.728571][T22457] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.922451][T22492] netlink: 'syz.0.4739': attribute type 5 has an invalid length.
[  444.936571][T22492] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4739'.
[  444.982761][T18844] tipc: Resetting bearer <eth:syzkaller0>
[  444.995796][T22456] tipc: Resetting bearer <eth:syzkaller0>
[  445.171726][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  445.347454][T22512] openvswitch: netlink: Flow actions attr not present in new flow.
[  445.785994][T22521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4750'.
[  446.719982][T22456] tipc: Disabling bearer <eth:syzkaller0>
[  446.879648][T22457] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  446.942784][T22530] netlink: 'syz.3.4754': attribute type 1 has an invalid length.
[  446.976489][T22530] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4754'.
[  446.995856][T22457] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  447.066047][T22457] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  447.109699][T22457] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  447.181362][T22541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4757'.
[  447.199426][T22541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4757'.
[  447.239556][ T5834] Bluetooth: hci2: command 0x0401 tx timeout
[  447.251911][T22550] openvswitch: netlink: IPv6 tunnel dst address is zero
[  447.335729][T18841] : left promiscuous mode
[  447.407075][T22562] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4762'.
[  447.446225][T22562] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4762'.
[  447.482261][T18841] tipc: Disabling bearer <udp:syz2>
[  447.518067][T18841] tipc: Left network mode
[  447.570171][T22569] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4765'.
[  447.645710][T22571] xt_HMARK: spi-set and port-set can't be combined
[  447.923620][T22571] team0: Port device team_slave_1 removed
[  448.174360][T22604] netlink: 'syz.2.4776': attribute type 12 has an invalid length.
[  448.204877][T22604] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4776'.
[  448.252980][T22610] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4779'.
[  448.277065][T22614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4776'.
[  448.299289][T22615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4778'.
[  448.309997][T22615] netlink: 'syz.0.4778': attribute type 7 has an invalid length.
[  448.353693][T22613] ip6gretap0: entered promiscuous mode
[  448.507734][T18841] hsr_slave_0: left promiscuous mode
[  448.538927][T18841] hsr_slave_1: left promiscuous mode
[  448.669745][T18841] pimreg3 (unregistering): left allmulticast mode
[  450.189255][T22663] netlink: 'syz.2.4792': attribute type 7 has an invalid length.
[  450.213520][T22663] netlink: 'syz.2.4792': attribute type 1 has an invalid length.
[  450.889379][T22695] netlink: 'syz.1.4799': attribute type 4 has an invalid length.
[  450.994974][T22695] netlink: 'syz.1.4799': attribute type 4 has an invalid length.
[  451.248685][T22718] delete_channel: no stack
[  451.394448][T22717] delete_channel: no stack
[  451.426688][T22717] delete_channel: no stack
[  451.431346][T22717] delete_channel: no stack
[  451.462414][T22717] delete_channel: no stack
[  451.492654][T22717] delete_channel: no stack
[  451.509775][T22717] delete_channel: no stack
[  451.514434][T22717] delete_channel: no stack
[  451.544948][T22732] netlink: 'syz.0.4808': attribute type 2 has an invalid length.
[  451.546359][T22717] delete_channel: no stack
[  451.572955][T22731] xt_bpf: check failed: parse error
[  451.623177][T22726] bridge0: port 2(bridge_slave_1) entered disabled state
[  451.626868][T22717] delete_channel: no stack
[  451.676911][T22717] delete_channel: no stack
[  451.691810][T22717] delete_channel: no stack
[  451.715272][T22717] delete_channel: no stack
[  451.825453][T22717] delete_channel: no stack
[  451.850713][T22717] delete_channel: no stack
[  451.870711][T22717] delete_channel: no stack
[  451.875783][T22717] delete_channel: no stack
[  451.915940][T22717] delete_channel: no stack
[  451.935763][T22717] delete_channel: no stack
[  451.950888][T22717] delete_channel: no stack
[  451.955540][T22717] delete_channel: no stack
[  451.967089][T22717] delete_channel: no stack
[  451.977110][T22717] delete_channel: no stack
[  451.986904][T22717] delete_channel: no stack
[  451.996458][T22717] delete_channel: no stack
[  452.013438][T22717] delete_channel: no stack
[  452.039220][T22717] delete_channel: no stack
[  452.062295][T22717] delete_channel: no stack
[  452.068957][T22754] __nla_validate_parse: 13 callbacks suppressed
[  452.068976][T22754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4817'.
[  452.096920][T22717] delete_channel: no stack
[  452.101559][T22717] delete_channel: no stack
[  452.112314][T22717] delete_channel: no stack
[  452.117081][T22754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4817'.
[  452.126377][T22717] delete_channel: no stack
[  452.144545][T22717] delete_channel: no stack
[  452.166683][T22717] delete_channel: no stack
[  452.172093][T22717] delete_channel: no stack
[  452.201990][T22717] delete_channel: no stack
[  452.207646][T22764] netlink: 'syz.3.4818': attribute type 1 has an invalid length.
[  452.235135][T22717] delete_channel: no stack
[  452.240898][T22717] delete_channel: no stack
[  452.246000][T22717] delete_channel: no stack
[  452.250927][T22764] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4818'.
[  452.269056][T22717] delete_channel: no stack
[  452.279109][T22717] delete_channel: no stack
[  452.283965][T22717] delete_channel: no stack
[  452.300865][T22717] delete_channel: no stack
[  452.315907][T22717] delete_channel: no stack
[  452.323713][T22766] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4820'.
[  452.342576][T22717] delete_channel: no stack
[  452.352377][T22717] delete_channel: no stack
[  452.372957][T22717] delete_channel: no stack
[  452.388256][T22771] netlink: 'syz.4.4821': attribute type 4 has an invalid length.
[  452.406882][T22717] delete_channel: no stack
[  452.416737][T22717] delete_channel: no stack
[  452.431635][T22717] delete_channel: no stack
[  452.438368][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  452.456091][T22774] netlink: 'syz.4.4821': attribute type 4 has an invalid length.
[  452.469886][T22717] delete_channel: no stack
[  452.474422][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  452.498080][T22717] delete_channel: no stack
[  452.514697][T22717] delete_channel: no stack
[  452.525259][T22717] delete_channel: no stack
[  452.535439][T22771] C: left promiscuous mode
[  452.558865][T22717] delete_channel: no stack
[  452.576506][T22717] delete_channel: no stack
[  452.588276][T22717] delete_channel: no stack
[  452.601752][T22717] delete_channel: no stack
[  452.623789][T22717] delete_channel: no stack
[  452.641770][T22717] delete_channel: no stack
[  452.651349][T22717] delete_channel: no stack
[  452.657609][T22717] delete_channel: no stack
[  452.662378][T22717] delete_channel: no stack
[  452.667257][T22717] delete_channel: no stack
[  452.671984][T22717] delete_channel: no stack
[  452.972294][T22803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4831'.
[  453.079381][T22810] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4831'.
[  453.201254][T22818] xt_hashlimit: invalid rate
[  453.210710][T22818] xt_hashlimit: invalid rate
[  453.221703][T22818] xt_hashlimit: invalid rate
[  453.234235][T22818] xt_hashlimit: invalid rate
[  453.262954][T22818] xt_hashlimit: invalid rate
[  453.282117][T22822] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4837'.
[  453.315175][T22818] xt_hashlimit: invalid rate
[  453.322878][T22818] xt_hashlimit: invalid rate
[  453.357463][T22818] xt_hashlimit: invalid rate
[  453.362710][T22818] xt_hashlimit: invalid rate
[  453.387091][T22818] xt_hashlimit: invalid rate
[  453.490328][T22834] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4840'.
[  453.999560][T22865] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4846'.
[  454.066974][T22871] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4847'.
[  454.116505][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  454.251390][T22871] netlink: 'syz.1.4847': attribute type 13 has an invalid length.
[  454.299154][T22871] netlink: 'syz.1.4847': attribute type 58 has an invalid length.
[  454.482019][T22889] 8021q: VLANs not supported on ip6_vti0
[  456.276073][T22982] netlink: 'syz.0.4883': attribute type 10 has an invalid length.
[  456.351546][T22982] team0: Device veth0_macvtap failed to register rx_handler
[  456.417637][T22988] netlink: 'syz.2.4886': attribute type 12 has an invalid length.
[  456.431450][T22988] netlink: 'syz.2.4886': attribute type 29 has an invalid length.
[  456.439679][T22988] netlink: 'syz.2.4886': attribute type 2 has an invalid length.
[  456.448639][T22988] netlink: 'syz.2.4886': attribute type 2 has an invalid length.
[  456.456655][T22988] netlink: 'syz.2.4886': attribute type 1 has an invalid length.
[  456.465071][T22988] netlink: 'syz.2.4886': attribute type 37 has an invalid length.
[  456.473565][T22988] netlink: 'syz.2.4886': attribute type 2 has an invalid length.
[  456.716047][T23003] ip6t_REJECT: ECHOREPLY is not supported
[  456.895940][T23012] xt_socket: unknown flags 0x3c
[  458.905849][   T13] tipc: Subscription rejected, illegal request
[  459.030504][T23053] __nla_validate_parse: 16 callbacks suppressed
[  459.030526][T23053] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4903'.
[  459.042240][T23058] netlink: 'syz.4.4906': attribute type 1 has an invalid length.
[  459.064158][T23056] netlink: 'syz.3.4904': attribute type 3 has an invalid length.
[  459.072491][T23053] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4903'.
[  459.072534][T23053] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4903'.
[  459.109302][T23056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4904'.
[  459.155415][T23058] 8021q: adding VLAN 0 to HW filter on device bond2
[  459.225583][T23056] vlan0: entered allmulticast mode
[  459.231354][T23056] veth0_vlan: entered allmulticast mode
[  459.264665][T23062] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4906'.
[  459.277259][T23056] team0: Port device vlan0 added
[  459.459106][T23066] 8021q: VLANs not supported on ip6tnl0
[  459.478536][T23066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4909'.
[  459.499977][T23066] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4909'.
[  459.523210][T23082] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  459.530556][T23082] IPv6: NLM_F_CREATE should be set when creating new route
[  459.587005][T23082] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  459.615781][T23086] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4911'.
[  459.659463][T23082] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  459.885339][T23107] tls_set_device_offload_rx: netdev not found
[  460.346866][T23130] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4921'.
[  460.434386][T23139] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4923'.
[  461.157205][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  461.419112][T23188] syzkaller1: entered promiscuous mode
[  461.433478][T23188] syzkaller1: entered allmulticast mode
[  461.638043][T23197] xt_hashlimit: size too large, truncated to 1048576
[  462.609450][ T5834] Bluetooth: hci4: command 0x0406 tx timeout
[  462.727868][T23249] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  462.745704][T23255] ip6t_srh: unknown srh match flags  4001
[  462.758603][T23249] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  462.782375][T23251] vlan4: entered promiscuous mode
[  462.794550][T23251] bridge0: entered promiscuous mode
[  462.832106][T23256] validate_nla: 5 callbacks suppressed
[  462.832128][T23256] netlink: 'syz.0.4968': attribute type 14 has an invalid length.
[  462.900962][T23251] vlan4: entered promiscuous mode
[  463.024432][T23251] vlan4: entered promiscuous mode
[  463.127444][T23251] vlan4: entered promiscuous mode
[  463.207153][T23251] vlan4: entered promiscuous mode
[  463.300773][T23290] netlink: 'syz.0.4975': attribute type 2 has an invalid length.
[  463.307977][T23285] 8021q: adding VLAN 0 to HW filter on device bond3
[  463.322329][T23285] bond0: (slave bond3): Enslaving as an active interface with an up link
[  463.339550][T23251] vlan4: entered promiscuous mode
[  463.432294][T23251] vlan4: entered promiscuous mode
[  463.516751][T23251] vlan4: entered promiscuous mode
[  463.692040][T23302] xt_CT: No such helper "pptp"
[  464.074114][T23329] netlink: 'syz.0.4991': attribute type 4 has an invalid length.
[  464.103362][T23329] __nla_validate_parse: 12 callbacks suppressed
[  464.103383][T23329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4991'.
[  464.438544][T23356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5001'.
[  464.453645][T23359] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input8
[  464.489206][T23362] openvswitch: netlink: IP tunnel TTL not specified.
[  464.508928][T23356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5001'.
[  464.608896][T23364] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5003'.
[  464.625245][T23367] xt_limit: Overflow, try lower: 2147483649/128
[  464.737024][T23376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5006'.
[  464.773141][T23376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5006'.
[  464.820765][T23383] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5008'.
[  464.944965][T23389] xt_hashlimit: overflow, try lower: 4294967295/0
[  464.990077][T23398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5012'.
[  465.353583][T23424] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5019'.
[  465.556902][T23440] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  465.725971][T23449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5026'.
[  466.012082][T23463] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  466.344767][T23482] 8021q: adding VLAN 0 to HW filter on device bond0
[  466.782135][T23510] x_tables: duplicate underflow at hook 3
[  466.851322][T23515] xt_recent: Unsupported userspace flags (00000061)
[  466.868378][T23513] 8021q: adding VLAN 0 to HW filter on device bond0
[  467.277711][T23542] netlink: 'syz.0.5056': attribute type 1 has an invalid length.
[  467.434600][T23546] netlink: 'syz.4.5058': attribute type 10 has an invalid length.
[  467.464828][T23546] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  467.562300][T23555] netlink: 'syz.3.5061': attribute type 1 has an invalid length.
[  467.567806][T23557] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1366
[  468.154447][T23587] netlink: 'syz.0.5068': attribute type 11 has an invalid length.
[  468.163451][T23587] netlink: 'syz.0.5068': attribute type 11 has an invalid length.
[  468.189529][T23588] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  468.205188][   T59] block nbd1: Possible stuck request ffff888025010000: control (read@0,4096B). Runtime 330 seconds
[  468.584326][   T24] IPVS: starting estimator thread 0...
[  468.690091][T23621] IPVS: using max 27 ests per chain, 64800 per kthread
[  468.829119][T23635] 8021q: adding VLAN 0 to HW filter on device bond4
[  468.920663][T23636] veth3: entered promiscuous mode
[  468.976814][T23636] bond4: (slave veth3): Enslaving as an active interface with an up link
[  469.129267][T23660] 
@ÿ: renamed from bond_slave_0 (while UP)
[  469.161782][T23660] tipc: Enabled bearer <udp:s>, priority 10
[  469.468540][T23681] ipt_REJECT: ECHOREPLY no longer supported.
[  469.565350][T23686] tipc: MTU too low for tipc bearer
[  469.893560][T23718] netlink: 'syz.2.5102': attribute type 10 has an invalid length.
[  469.923328][T23718] 8021q: adding VLAN 0 to HW filter on device batadv0
[  469.944235][T23718] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  470.001258][T23723] __nla_validate_parse: 19 callbacks suppressed
[  470.001277][T23723] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5104'.
[  470.030756][T23723] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5104'.
[  470.205090][T23732] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  470.379378][T23739] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5111'.
[  470.481961][T23749] netlink: 'syz.4.5114': attribute type 1 has an invalid length.
[  470.757189][T23764] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5118'.
[  470.999402][T23773] bridge3: the hash_elasticity option has been deprecated and is always 16
[  471.111188][T23776] vlan2: entered promiscuous mode
[  471.132355][T23776] bridge0: entered promiscuous mode
[  471.176706][T23781] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5121'.
[  471.237091][T23786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5124'.
[  471.420580][T23794] netlink: 'syz.2.5128': attribute type 1 has an invalid length.
[  471.438021][T23795] netlink: 'syz.2.5128': attribute type 1 has an invalid length.
[  471.491684][T23795] 8021q: adding VLAN 0 to HW filter on device bond7
[  471.648198][T23807] netlink: zone id is out of range
[  471.654126][T23807] netlink: zone id is out of range
[  471.660706][T23807] netlink: zone id is out of range
[  471.668834][T23807] netlink: zone id is out of range
[  471.673972][T23807] netlink: zone id is out of range
[  471.703809][T23807] netlink: zone id is out of range
[  471.714378][T23811] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5133'.
[  471.723939][T23807] netlink: zone id is out of range
[  471.735198][T23807] netlink: zone id is out of range
[  471.766871][T23807] netlink: zone id is out of range
[  471.833882][T23815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5131'.
[  471.863139][T23821] Cannot find set identified by id 0 to match
[  471.989973][T23815] batman_adv: batadv0: Removing interface: batadv_slave_1
[  472.449656][T23845] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5146'.
[  472.466539][T23845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5146'.
[  472.524496][T23845] syzkaller1: entered promiscuous mode
[  472.530668][T23845] syzkaller1: entered allmulticast mode
[  472.713848][T23858] xt_CONNSECMARK: invalid mode: 0
[  472.770004][   T47] hid-generic 0005:0458:0009.0006: unknown main item tag 0x0
[  472.794736][   T47] hid-generic 0005:0458:0009.0006: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[  472.872855][T23861] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  473.199582][T23887] syzkaller0: entered promiscuous mode
[  473.205328][T23887] syzkaller0: entered allmulticast mode
[  473.246458][T23889] IPVS: set_ctl: invalid protocol: 29 100.1.1.2:20003
[  473.261169][T23889] IPVS: set_ctl: invalid protocol: 137 224.0.0.2:20004
[  473.515467][T23900] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004
[  473.840639][T23919] 8021q: VLANs not supported on caif0
[  474.068842][T23935] delete_channel: no stack
[  474.762571][T23961] netlink: 'syz.4.5184': attribute type 12 has an invalid length.
[  474.789087][T23967] netlink: 'syz.2.5187': attribute type 11 has an invalid length.
[  475.061284][T23980] tipc: Started in network mode
[  475.079485][T23980] tipc: Node identity 080211, cluster identity 4711
[  475.122894][T23980] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  475.155335][T23986] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode
[  475.178828][T23986] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode
[  475.194883][T23989] __nla_validate_parse: 15 callbacks suppressed
[  475.194902][T23989] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5193'.
[  475.389026][T24000] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5197'.
[  475.614840][T24011] can: request_module (can-proto-5) failed.
[  475.683025][T24022] netlink: 'syz.3.5202': attribute type 1 has an invalid length.
[  475.696576][T24022] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5202'.
[  475.705885][T24022] team0: No ports can be present during mode change
[  475.890686][T24024] xt_CT: No such helper "pptp"
[  476.228964][T24048] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5210'.
[  476.254567][  T975] tipc: Node number set to 134353152
[  476.271230][T24051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5211'.
[  476.532461][T24062] netlink: 'syz.2.5216': attribute type 1 has an invalid length.
[  476.773095][T24078] set match dimension is over the limit!
[  476.795397][T24079] netlink: 18 bytes leftover after parsing attributes in process `syz.4.5219'.
[  476.912530][T24086] netlink: 'syz.2.5223': attribute type 1 has an invalid length.
[  476.922187][T24086] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5223'.
[  477.268350][T24110] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5228'.
[  477.376625][T24111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5227'.
[  477.428415][T24116] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5227'.
[  477.513321][T24122] netlink: 'syz.3.5232': attribute type 9 has an invalid length.
[  478.524751][T24172] netlink: 'syz.4.5245': attribute type 32 has an invalid length.
[  478.548811][T24172] (unnamed net_device) (uninitialized): option coupled_control: invalid value (10)
[  478.798907][T24188] netlink: 'syz.0.5251': attribute type 1 has an invalid length.
[  478.815508][T24194] net_ratelimit: 398 callbacks suppressed
[  478.815529][T24194] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  478.867586][T24198] x_tables: unsorted entry at hook 1
[  479.000440][T24204] x_tables: duplicate underflow at hook 2
[  479.027466][T18843] tipc: Subscription rejected, illegal request
[  479.379180][T24233] mac80211_hwsim hwsim30 ÿ
: renamed from wlan1 (while UP)
[  479.852382][T24265] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  479.894964][T24265] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  479.990556][T24270] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  479.997897][T24270] IPv6: NLM_F_CREATE should be set when creating new route
[  480.030392][T24270] lo: entered allmulticast mode
[  480.043126][T24270] tunl0: entered allmulticast mode
[  480.087978][T24270] gre0: entered allmulticast mode
[  480.311198][T24270] bridge0: port 1(gretap0) entered disabled state
[  480.326336][T24270] erspan0: entered allmulticast mode
[  480.362432][T24270] ip_vti0: entered allmulticast mode
[  480.403581][T24270] ip6_vti0: entered allmulticast mode
[  480.429205][T24270] sit0: entered allmulticast mode
[  480.472314][T24270] ip6tnl0: entered allmulticast mode
[  480.559182][T24270] ip6gre0: entered allmulticast mode
[  480.611640][T24270] syz_tun: entered allmulticast mode
[  480.656846][T24270] ip6gretap0: entered allmulticast mode
[  480.761303][T24270] bridge0: entered allmulticast mode
[  480.802011][T24280] __nla_validate_parse: 13 callbacks suppressed
[  480.802033][T24280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5278'.
[  480.835637][T24280] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5278'.
[  480.879215][T24270] vcan0: entered allmulticast mode
[  480.905725][T24270] bond0: entered allmulticast mode
[  480.932083][T24270] bond_slave_0: entered allmulticast mode
[  480.946648][T24270] bond_slave_1: entered allmulticast mode
[  480.952983][T24270] dummy0: entered allmulticast mode
[  480.959699][T24270] bond3: entered allmulticast mode
[  480.983738][T24270] team0: entered allmulticast mode
[  480.991114][T24270] team_slave_0: entered allmulticast mode
[  481.004608][T24270] geneve0: entered allmulticast mode
[  481.040954][T24270] nlmon0: entered allmulticast mode
[  481.052106][T24270] caif0: entered allmulticast mode
[  481.058229][T24270] batadv0: entered allmulticast mode
[  481.080575][T24270] veth0: entered allmulticast mode
[  481.120255][T24270] wg0: entered allmulticast mode
[  481.150455][T24270] wg1: entered allmulticast mode
[  481.158038][T24270] wg2: entered allmulticast mode
[  481.176565][T24270] veth1_to_bridge: entered allmulticast mode
[  481.208455][T24270] veth0_to_bond: entered allmulticast mode
[  481.248862][T24270] veth1_to_bond: entered allmulticast mode
[  481.285361][T24270] veth0_to_team: entered allmulticast mode
[  481.324571][T24270] veth0_to_batadv: entered allmulticast mode
[  481.338993][T24270] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  481.352107][T24270] batadv_slave_0: entered allmulticast mode
[  481.372526][T24270] xfrm0: entered allmulticast mode
[  481.389188][T24270] veth0_to_hsr: entered allmulticast mode
[  481.407615][T24270] hsr_slave_0: entered allmulticast mode
[  481.429497][T24270] veth1_to_hsr: entered allmulticast mode
[  481.443919][T24270] hsr_slave_1: entered allmulticast mode
[  481.468094][T24270] hsr0: entered allmulticast mode
[  481.480540][T24270] veth1_vlan: entered allmulticast mode
[  481.491249][T24270] veth0_vlan: entered allmulticast mode
[  481.509837][T24270] vlan1: entered allmulticast mode
[  481.515142][T24270] macvlan0: entered allmulticast mode
[  481.521764][T24270] macvlan1: entered allmulticast mode
[  481.543457][T24270] ipvlan0: entered allmulticast mode
[  481.553934][T24270] ipvlan1: entered allmulticast mode
[  481.570047][T24270] veth1_macvtap: entered allmulticast mode
[  481.585320][T24270] veth0_macvtap: entered allmulticast mode
[  481.602390][T24270] macvtap0: entered allmulticast mode
[  481.624698][T24270] macsec0: entered allmulticast mode
[  481.647458][T24270] geneve1: entered allmulticast mode
[  481.666574][T24270] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  481.697069][T24270] netdevsim netdevsim0 netdevsim1: entered allmulticast mode
[  481.714800][T24270] netdevsim netdevsim0 netdevsim2: entered allmulticast mode
[  481.729295][T24270] netdevsim netdevsim0 netdevsim3: entered allmulticast mode
[  481.747714][T24270] mac80211_hwsim hwsim35 wlan0: entered allmulticast mode
[  481.783655][T24270] mac80211_hwsim hwsim36 wlan1: entered allmulticast mode
[  481.809963][T24270] bridge1: entered allmulticast mode
[  481.817276][T24270] bond1: entered allmulticast mode
[  481.822446][T24270] ip6erspan0: entered allmulticast mode
[  481.831898][T24270] vlan2: entered allmulticast mode
[  481.837911][T24270] gre1: entered allmulticast mode
[  481.847686][T24270] vxlan0: entered allmulticast mode
[  481.853767][T24270] bond2: left promiscuous mode
[  481.859070][T24270] wireguard0: left promiscuous mode
[  481.866711][T24270] bond2: entered allmulticast mode
[  481.871864][T24270] wireguard0: entered allmulticast mode
[  481.884981][T24270] mac80211_hwsim hwsim40 wlan2: entered allmulticast mode
[  481.893386][T24270] ip6tnl1: entered allmulticast mode
[  481.906041][T24270] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  481.915606][T24270] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  481.924954][T24270] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  481.934442][T24270] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  481.944212][T24270] geneve2: left promiscuous mode
[  481.955166][T24270] vxlan1: entered allmulticast mode
[  481.966495][T24270] ip6tnl2: entered allmulticast mode
[  481.976626][T24270] syztnl1: entered allmulticast mode
[  481.991235][T24270] gre2: entered allmulticast mode
[  481.998409][T24270] bridge2: entered allmulticast mode
[  482.008714][T24270] mac80211_hwsim hwsim35 syzkaller0: left promiscuous mode
[  482.021402][T24270] geneve3: entered allmulticast mode
[  482.029745][T24270] bridge3: entered allmulticast mode
[  482.044293][T24270] bond4: entered allmulticast mode
[  482.050444][T24270] veth3: entered allmulticast mode
[  482.066761][T24270] veth2: entered allmulticast mode
[  482.072615][T24270] veth3: left promiscuous mode
[  482.082493][T24270] ip6tnl3: entered allmulticast mode
[  482.090231][T24270] veth4: entered allmulticast mode
[  482.095690][T24270] veth5: entered allmulticast mode
[  482.373060][T24317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5288'.
[  482.627674][T24330] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5292'.
[  482.910989][T24343] netlink: 'syz.1.5296': attribute type 29 has an invalid length.
[  483.217248][T24352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5297'.
[  483.244539][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  483.245008][T24352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5297'.
[  483.264652][T24355] netlink: 'syz.3.5298': attribute type 1 has an invalid length.
[  483.273460][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  483.283261][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  483.297493][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  483.305322][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  483.468617][T24361] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.5300'.
[  483.740218][T24381] netlink: 'syz.1.5306': attribute type 1 has an invalid length.
[  483.801155][T24381] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5306'.
[  484.017616][T24353] chnl_net:caif_netlink_parms(): no params data found
[  484.282452][T24415] netlink: 'syz.2.5315': attribute type 1 has an invalid length.
[  484.297509][T24353] bridge0: port 1(bridge_slave_0) entered blocking state
[  484.304905][T24353] bridge0: port 1(bridge_slave_0) entered disabled state
[  484.314478][T24353] bridge_slave_0: entered allmulticast mode
[  484.323628][T24415] netlink: 'syz.2.5315': attribute type 10 has an invalid length.
[  484.323777][T24353] bridge_slave_0: entered promiscuous mode
[  484.341201][T24353] bridge0: port 2(bridge_slave_1) entered blocking state
[  484.349596][T24353] bridge0: port 2(bridge_slave_1) entered disabled state
[  484.357255][T24353] bridge_slave_1: entered allmulticast mode
[  484.367312][T24353] bridge_slave_1: entered promiscuous mode
[  484.453262][T24353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  484.489411][T24353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  484.632059][T24426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5319'.
[  484.652543][T24353] team0: Port device team_slave_0 added
[  484.663395][T24426] netlink: 'syz.2.5319': attribute type 1 has an invalid length.
[  484.683845][T24353] team0: Port device team_slave_1 added
[  484.783638][T24353] batman_adv: batadv0: Adding interface: batadv_slave_0
[  484.806498][T24353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  484.879096][T24353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  484.899476][T24353] batman_adv: batadv0: Adding interface: batadv_slave_1
[  484.912871][T24353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  484.965834][T24353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  485.132591][T24353] hsr_slave_0: entered promiscuous mode
[  485.157389][T24353] hsr_slave_1: entered promiscuous mode
[  485.206949][T24449] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input9
[  485.397694][ T5848] Bluetooth: hci0: command tx timeout
[  485.597194][T24463] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5330'.
[  485.850126][T24353] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.862576][T24475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5335'.
[  486.006059][T24486] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  486.059562][T24353] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.094322][T24486] geneve0: entered promiscuous mode
[  486.102124][T24486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5338'.
[  486.113772][T24486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5338'.
[  486.269201][T24353] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.332732][T24493] netlink: 'syz.3.5341': attribute type 4 has an invalid length.
[  486.412036][T24494] xt_TPROXY: Can be used only with -p tcp or -p udp
[  486.491556][T24353] bond0: (slave netdevsim0): Releasing backup interface
[  486.567379][T24353] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.627195][T24502] pimreg: entered allmulticast mode
[  486.709971][T24506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5345'.
[  486.740797][T24508] netlink: 'syz.3.5346': attribute type 1 has an invalid length.
[  486.964854][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  486.975838][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  486.985194][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  486.995865][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  487.009375][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  487.084997][T24353] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  487.105330][T24524] pim6reg1: entered promiscuous mode
[  487.119629][T24524] pim6reg1: entered allmulticast mode
[  487.141172][T24353] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  487.149265][T24527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5351'.
[  487.193467][T24353] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  487.211090][T24353] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  487.309775][T24536] netlink: 'syz.2.5353': attribute type 142 has an invalid length.
[  487.333452][T24536] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  487.479085][ T5834] Bluetooth: hci0: command tx timeout
[  487.589163][T24543] pim6reg: entered allmulticast mode
[  487.632833][T24543] lo: entered allmulticast mode
[  487.664358][T24543] pim6reg: left allmulticast mode
[  487.678145][T24543] lo: left allmulticast mode
[  487.702934][T24551] netlink: 'syz.2.5356': attribute type 10 has an invalid length.
[  487.743827][T24519] chnl_net:caif_netlink_parms(): no params data found
[  487.775797][T24554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5359'.
[  487.778951][T24353] 8021q: adding VLAN 0 to HW filter on device bond0
[  487.810247][T24554] ipvlan2: entered allmulticast mode
[  487.927592][T24353] 8021q: adding VLAN 0 to HW filter on device team0
[  487.977053][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  487.984281][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  488.011675][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  488.018919][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  488.072986][T24519] bridge0: port 1(bridge_slave_0) entered blocking state
[  488.083222][T24519] bridge0: port 1(bridge_slave_0) entered disabled state
[  488.094220][T24519] bridge_slave_0: entered allmulticast mode
[  488.109096][T24519] bridge_slave_0: entered promiscuous mode
[  488.163741][T24519] bridge0: port 2(bridge_slave_1) entered blocking state
[  488.181772][T24519] bridge0: port 2(bridge_slave_1) entered disabled state
[  488.193827][T24519] bridge_slave_1: entered allmulticast mode
[  488.213351][T24519] bridge_slave_1: entered promiscuous mode
[  488.335049][T24519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  488.389418][T24519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  488.409568][T24582] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5365'.
[  488.588120][T24519] team0: Port device team_slave_0 added
[  488.596057][T24588] netlink: 316 bytes leftover after parsing attributes in process `syz.2.5368'.
[  488.610319][T24519] team0: Port device team_slave_1 added
[  488.717592][T24519] batman_adv: batadv0: Adding interface: batadv_slave_0
[  488.740730][T24519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  488.780277][T24519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  488.830662][T24592] sit0: entered promiscuous mode
[  488.843160][T24592] validate_nla: 1 callbacks suppressed
[  488.843177][T24592] netlink: 'syz.3.5370': attribute type 1 has an invalid length.
[  488.869724][T24592] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5370'.
[  488.897823][T24519] batman_adv: batadv0: Adding interface: batadv_slave_1
[  488.908666][T24519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  488.960827][T24603] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5372'.
[  488.972389][T24519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  488.972422][T24603] openvswitch: netlink: Flow key attr not present in new flow.
[  489.078814][ T5834] Bluetooth: hci1: command tx timeout
[  489.247914][T24614] netlink: 'syz.3.5374': attribute type 12 has an invalid length.
[  489.355560][T24519] hsr_slave_0: entered promiscuous mode
[  489.396011][T24519] hsr_slave_1: entered promiscuous mode
[  489.416643][T24519] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  489.424256][T24519] Cannot create hsr debugfs directory
[  489.563932][ T5834] Bluetooth: hci0: command tx timeout
[  489.775185][T24640] xt_CT: You must specify a L4 protocol and not use inversions on it
[  489.785260][T24353] 8021q: adding VLAN 0 to HW filter on device batadv0
[  490.003840][T24651] xt_CT: You must specify a L4 protocol and not use inversions on it
[  490.052807][T24519] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  490.081906][T24519] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.118749][T24647] 8021q: VLANs not supported on nr0
[  490.207736][T24519] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  490.230002][T24519] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.328879][T24658] 8021q: adding VLAN 0 to HW filter on device bond5
[  490.339354][T24519] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  490.355329][T24519] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.427652][T24662] veth7: entered promiscuous mode
[  490.437705][T24662] bond5: (slave veth7): Enslaving as an active interface with an up link
[  490.450743][T24661] nft_compat: unsupported protocol 11
[  490.462275][T24519] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  490.497589][T24519] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.683538][T24353] veth0_vlan: entered promiscuous mode
[  490.748059][T24353] veth1_vlan: entered promiscuous mode
[  490.943613][T24353] veth0_macvtap: entered promiscuous mode
[  490.986146][T24353] veth1_macvtap: entered promiscuous mode
[  491.033881][T24519] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  491.063334][T24353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  491.082835][T24353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.093247][T24353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  491.106804][T24353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.119895][T24353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  491.132667][T24353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.143178][T24353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  491.154173][T24353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.165566][ T5834] Bluetooth: hci1: command tx timeout
[  491.178579][T24353] batman_adv: batadv0: Interface activated: batadv_slave_0
[  491.192818][T24519] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  491.197969][T24702] __nla_validate_parse: 6 callbacks suppressed
[  491.197989][T24702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5399'.
[  491.240811][T24353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  491.260043][T24353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.270967][T24703] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5399'.
[  491.282090][T24353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  491.296915][T24353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.308703][T24353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  491.319492][T24353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.345719][T24353] batman_adv: batadv0: Interface activated: batadv_slave_1
[  491.354125][T24519] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  491.418435][T24519] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  491.469448][T24353] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  491.497697][T24353] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  491.520636][T24353] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  491.533710][T24353] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  491.605885][T24716] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5403'.
[  491.618883][T24715] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5402'.
[  491.638616][ T5834] Bluetooth: hci0: command tx timeout
[  491.659736][T24713] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5403'.
[  491.669893][T24713] 0ªî{X¹¦: renamed from gretap0
[  491.685399][T24713] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  492.178416][T24734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5407'.
[  492.526801][   T31] INFO: task udevd:5846 blocked for more than 143 seconds.
[  492.534109][   T31]       Not tainted 6.15.0-rc4-syzkaller-00163-ge8716b5b0dff #0
[  492.556293][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  492.565250][   T31] task:udevd           state:D stack:22184 pid:5846  tgid:5846  ppid:5200   task_flags:0x400140 flags:0x00004006
[  492.578990][   T31] Call Trace:
[  492.582415][   T31]  <TASK>
[  492.585479][   T31]  __schedule+0x16e2/0x4cd0
[  492.590342][   T31]  ? schedule+0x165/0x360
[  492.594812][   T31]  ? __lock_acquire+0xaac/0xd20
[  492.600090][   T31]  ? __pfx___schedule+0x10/0x10
[  492.605226][   T31]  ? schedule+0x91/0x360
[  492.610833][   T31]  schedule+0x165/0x360
[  492.615298][   T31]  io_schedule+0x81/0xe0
[  492.624254][   T31]  folio_wait_bit_common+0x6b0/0xb90
[  492.631758][   T31]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  492.642491][   T31]  ? __pfx_wake_page_function+0x10/0x10
[  492.648385][   T31]  ? __filemap_get_folio+0x750/0xaf0
[  492.654689][   T31]  ? do_read_cache_folio+0x4ed/0x590
[  492.660191][   T31]  do_read_cache_folio+0x1ae/0x590
[  492.665460][   T31]  ? __pfx_blkdev_read_folio+0x10/0x10
[  492.672213][   T31]  read_part_sector+0xb6/0x270
[  492.677297][   T31]  adfspart_check_POWERTEC+0x8c/0xf30
[  492.682711][   T31]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  492.688451][   T31]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  492.694462][   T31]  ? set_page_refcounted+0xa0/0x1e0
[  492.700718][   T31]  bdev_disk_changed+0x75c/0x14b0
[  492.705771][   T31]  ? __pfx_bdev_disk_changed+0x10/0x10
[  492.711361][   T31]  ? wait_on_inode+0xc0/0x230
[  492.716085][   T31]  blkdev_get_whole+0x380/0x510
[  492.721142][   T31]  bdev_open+0x31e/0xd30
[  492.725454][   T31]  blkdev_open+0x3a8/0x510
[  492.730820][   T31]  ? __pfx_blkdev_open+0x10/0x10
[  492.735866][   T31]  do_dentry_open+0xdf0/0x1970
[  492.741022][   T31]  vfs_open+0x3b/0x340
[  492.745128][   T31]  ? path_openat+0x2ecd/0x3830
[  492.749967][   T31]  path_openat+0x2ee5/0x3830
[  492.754583][   T31]  ? arch_stack_walk+0xfc/0x150
[  492.761825][   T31]  ? __pfx_path_openat+0x10/0x10
[  492.766891][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.773008][   T31]  do_filp_open+0x1fa/0x410
[  492.777727][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  492.782820][   T31]  ? _raw_spin_unlock+0x28/0x50
[  492.788922][   T31]  ? alloc_fd+0x64c/0x6c0
[  492.793306][   T31]  do_sys_openat2+0x121/0x1c0
[  492.798169][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  492.803448][   T31]  __x64_sys_openat+0x138/0x170
[  492.808408][   T31]  do_syscall_64+0xf6/0x210
[  492.812942][   T31]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  492.819818][   T31]  ? clear_bhb_loop+0x45/0xa0
[  492.824515][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  492.830453][   T31] RIP: 0033:0x7f5d7cf169a4
[  492.834872][   T31] RSP: 002b:00007ffecfc2cd20 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  492.843900][   T31] RAX: ffffffffffffffda RBX: 000055ae626c00d0 RCX: 00007f5d7cf169a4
[  492.853096][   T31] RDX: 00000000000a0800 RSI: 000055ae626acb20 RDI: 00000000ffffff9c
[  492.862189][   T31] RBP: 000055ae626acb20 R08: 0000000000000001 R09: 7fffffffffffffff
[  492.870344][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800
[  492.879671][   T31] R13: 000055ae626a5ce0 R14: 0000000000000001 R15: 000055ae6269a910
[  492.887896][   T31]  </TASK>
[  492.898596][   T31] 
[  492.898596][   T31] Showing all locks held in the system:
[  492.915028][   T31] 1 lock held by khungtaskd/31:
[  492.920585][   T31]  #0: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  492.930552][   T31] 3 locks held by kworker/u8:2/36:
[  492.935706][   T31]  #0: ffff88814dccf948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0
[  492.948348][   T31]  #1: ffffc90000ad7c60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0
[  492.962573][   T31]  #2: ffffffff8f2f4248 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0
[  492.972412][   T31] 5 locks held by kworker/u8:7/2992:
[  492.979003][   T31]  #0: ffff8880b8839b58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  492.989062][   T31]  #1: ffff8880b8823b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39e/0x6d0
[  493.000827][   T31]  #2: ffff888062719158 (key#18){+...}-{3:3}, at: batadv_nc_process_nc_paths+0xba/0x3a0
[  493.018189][   T31]  #3: ffff8880b8839b58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  493.028262][   T31]  #4: ffff8880b8839b58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  493.039330][   T31] 2 locks held by getty/5589:
[  493.044016][   T31]  #0: ffff8880308b30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  493.053826][   T31]  #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  493.064778][   T31] 1 lock held by udevd/5846:
[  493.070664][   T31]  #0: ffff888024f73358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  493.083993][   T31] 3 locks held by kworker/u8:15/23696:
[  493.089616][   T31]  #0: ffff88801a089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0
[  493.108430][   T31]  #1: ffffc9000c807c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0
[  493.119746][   T31]  #2: ffffffff8f2f4248 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  493.130163][   T31] 1 lock held by syz-executor/24353:
[  493.135476][   T31]  #0: ffffffff8f2f4248 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  493.145017][   T31] 1 lock held by syz-executor/24519:
[  493.150411][   T31]  #0: ffffffff8f2f4248 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  493.161792][   T31] 2 locks held by syz.3.5401/24708:
[  493.168041][   T31]  #0: ffffffff8f2f4248 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  493.177268][   T31]  #1: ffffffff8df41338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f4/0x730
[  493.189106][   T31] 2 locks held by syz.2.5407/24730:
[  493.194325][   T31]  #0: ffffffff8f807318 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  493.203996][   T31]  #1: ffffffff8f2f4248 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  493.213156][   T31] 1 lock held by syz.2.5407/24731:
[  493.219351][   T31]  #0: ffffffff8f2f4248 (rtnl_mutex){+.+.}-{4:4}, at: fib_newrule+0x3ef/0xeb0
[  493.228382][   T31] 1 lock held by syz.2.5407/24734:
[  493.233547][   T31]  #0: ffffffff8f2f4248 (rtnl_mutex){+.+.}-{4:4}, at: fib_delrule+0x38c/0x1f40
[  493.243467][ T5834] Bluetooth: hci1: command tx timeout
[  493.252026][   T31] 2 locks held by syz.0.5408/24732:
[  493.257400][   T31]  #0: ffff88804ee46808 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  493.267764][   T31]  #1: ffffffff8df41338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730
[  493.280274][   T31] 1 lock held by syz.0.5408/24733:
[  493.285416][   T31]  #0: ffffffff8f2f4248 (rtnl_mutex){+.+.}-{4:4}, at: xsk_bind+0x156/0xfe0
[  493.294190][   T31] 
[  493.304678][   T31] =============================================
[  493.304678][   T31] 
[  493.321959][   T31] NMI backtrace for cpu 1
[  493.321982][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc4-syzkaller-00163-ge8716b5b0dff #0 PREEMPT(full) 
[  493.322004][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  493.322016][   T31] Call Trace:
[  493.322022][   T31]  <TASK>
[  493.322029][   T31]  dump_stack_lvl+0x189/0x250
[  493.322053][   T31]  ? __wake_up_klogd+0xd9/0x110
[  493.322071][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  493.322098][   T31]  ? __pfx__printk+0x10/0x10
[  493.322121][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  493.322145][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  493.322165][   T31]  ? _printk+0xcf/0x120
[  493.322184][   T31]  ? __pfx__printk+0x10/0x10
[  493.322205][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  493.322228][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  493.322260][   T31]  watchdog+0xfee/0x1030
[  493.322286][   T31]  ? watchdog+0x1de/0x1030
[  493.322309][   T31]  kthread+0x70e/0x8a0
[  493.322329][   T31]  ? __pfx_watchdog+0x10/0x10
[  493.322346][   T31]  ? __pfx_kthread+0x10/0x10
[  493.322363][   T31]  ? __pfx_kthread+0x10/0x10
[  493.322378][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  493.322392][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  493.322407][   T31]  ? __pfx_kthread+0x10/0x10
[  493.322422][   T31]  ret_from_fork+0x4b/0x80
[  493.322435][   T31]  ? __pfx_kthread+0x10/0x10
[  493.322450][   T31]  ret_from_fork_asm+0x1a/0x30
[  493.322474][   T31]  </TASK>
[  493.322482][   T31] Sending NMI from CPU 1 to CPUs 0:
[  493.479646][    C0] NMI backtrace for cpu 0
[  493.479664][    C0] CPU: 0 UID: 0 PID: 53 Comm: kworker/u8:3 Not tainted 6.15.0-rc4-syzkaller-00163-ge8716b5b0dff #0 PREEMPT(full) 
[  493.479685][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  493.479697][    C0] Workqueue:  0x0 (bat_events)
[  493.479726][    C0] RIP: 0010:debug_lockdep_rcu_enabled+0xd/0x40
[  493.479749][    C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 31 c0 83 3d 27 e6 28 04 00 <74> 1e 83 3d ea 13 29 04 00 74 15 65 48 8b 0c 25 08 40 75 92 31 c0
[  493.479764][    C0] RSP: 0018:ffffc90000be7810 EFLAGS: 00000002
[  493.479778][    C0] RAX: 0000000000000000 RBX: 0000000000003552 RCX: b419882141627100
[  493.479789][    C0] RDX: 0000000000000000 RSI: ffffffff8d93503a RDI: ffffffff8bc1cde0
[  493.479800][    C0] RBP: 0000002cad25ed54 R08: ffffffff8f7ed377 R09: 1ffffffff1efda6e
[  493.479812][    C0] R10: dffffc0000000000 R11: fffffbfff1efda6f R12: dffffc0000000000
[  493.479825][    C0] R13: ffff888021ab06c0 R14: ffff888021aada00 R15: ffffffff8df74cc0
[  493.479838][    C0] FS:  0000000000000000(0000) GS:ffff8881260cc000(0000) knlGS:0000000000000000
[  493.479851][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  493.479862][    C0] CR2: 000000110c38d0fe CR3: 000000007c818000 CR4: 00000000003526f0
[  493.479877][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  493.479886][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  493.479897][    C0] Call Trace:
[  493.479903][    C0]  <TASK>
[  493.479910][    C0]  update_curr_task+0x113/0x330
[  493.479938][    C0]  update_curr+0x380/0x8b0
[  493.479968][    C0]  dequeue_entity+0x27/0x1690
[  493.480001][    C0]  dequeue_entities+0x1fa/0x1510
[  493.480032][    C0]  dequeue_task_fair+0x2a1/0x690
[  493.480055][    C0]  __schedule+0x5b8/0x4cd0
[  493.480076][    C0]  ? process_scheduled_works+0x1701/0x17a0
[  493.480104][    C0]  ? __lock_acquire+0xaac/0xd20
[  493.480128][    C0]  ? schedule+0x165/0x360
[  493.480145][    C0]  ? __pfx___schedule+0x10/0x10
[  493.480170][    C0]  ? schedule+0x91/0x360
[  493.480187][    C0]  schedule+0x165/0x360
[  493.480204][    C0]  worker_thread+0xa82/0xda0
[  493.480234][    C0]  kthread+0x70e/0x8a0
[  493.480255][    C0]  ? __pfx_worker_thread+0x10/0x10
[  493.480270][    C0]  ? __pfx_kthread+0x10/0x10
[  493.480296][    C0]  ? __pfx_kthread+0x10/0x10
[  493.480314][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  493.480329][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  493.480347][    C0]  ? __pfx_kthread+0x10/0x10
[  493.480365][    C0]  ret_from_fork+0x4b/0x80
[  493.480381][    C0]  ? __pfx_kthread+0x10/0x10
[  493.480399][    C0]  ret_from_fork_asm+0x1a/0x30
[  493.480424][    C0]  </TASK>
[  493.490904][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  493.490928][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc4-syzkaller-00163-ge8716b5b0dff #0 PREEMPT(full) 
[  493.490955][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025
[  493.490970][   T31] Call Trace:
[  493.490983][   T31]  <TASK>
[  493.490994][   T31]  dump_stack_lvl+0x99/0x250
[  493.491041][   T31]  ? __asan_memcpy+0x40/0x70
[  493.491064][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  493.491096][   T31]  ? __pfx__printk+0x10/0x10
[  493.491133][   T31]  panic+0x2db/0x790
[  493.491171][   T31]  ? __pfx_panic+0x10/0x10
[  493.491198][   T31]  ? tick_nohz_tick_stopped+0x86/0xb0
[  493.491225][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  493.491252][   T31]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  493.491305][   T31]  watchdog+0x102d/0x1030
[  493.491334][   T31]  ? watchdog+0x1de/0x1030
[  493.491370][   T31]  kthread+0x70e/0x8a0
[  493.491399][   T31]  ? __pfx_watchdog+0x10/0x10
[  493.491425][   T31]  ? __pfx_kthread+0x10/0x10
[  493.491450][   T31]  ? __pfx_kthread+0x10/0x10
[  493.491474][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  493.491495][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  493.491519][   T31]  ? __pfx_kthread+0x10/0x10
[  493.491542][   T31]  ret_from_fork+0x4b/0x80
[  493.491564][   T31]  ? __pfx_kthread+0x10/0x10
[  493.491588][   T31]  ret_from_fork_asm+0x1a/0x30
[  493.491625][   T31]  </TASK>
[  493.882209][   T31] Kernel Offset: disabled
[  493.886536][   T31] Rebooting in 86400 seconds..