last executing test programs:

2m13.459040696s ago: executing program 3 (id=688):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x11, 0x13}}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002)
r2 = accept(r0, &(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x80)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x28, r4, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r4, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000004}, 0x10)

2m13.227280323s ago: executing program 3 (id=690):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000621014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775530d16a4683f5ae24e25ccca9e00360db798265667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a450000000000", 0xd8}], 0x1}, 0x894)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x4840)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)

2m13.003293752s ago: executing program 3 (id=691):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b16000000e8fe55a11800150006001400030000120800040048000300a80016000a0001400d000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000000)="f2b9be18bf3183a2ee9296566f688198152066572d5629cc902a837d7bcb3f7c19f7de3670bee18c714a433ef8e5b1e855e30f02e7c9dbc0ff109e0a7c283de8059c8a3b3e701f48b1ece62563a342e909045979dafa86a4415a245ecc3ce1b228fb770bf94f1b1317ff52b892fe073f02573d1dbfd0b3fdace9a3052c1b984d9715b77161c678c92c2584be395294c6679dbe3da6b09c17ed7c891c05cf6d59e2", 0xa1, 0x4010, 0x0, 0x0)
r1 = socket(0x2b, 0x80801, 0x1)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r6=>0x0)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=<r7=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=<r8=>0x0)
sendmsg$NFC_CMD_DISABLE_SE(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x34, r5, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20060c90}, 0x20000000)
setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040)=0x8, 0x4)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0)

2m11.984837715s ago: executing program 3 (id=702):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$l2tp6(r1, 0x0, 0x0, 0xc096, &(0x7f0000000000)={0xa, 0x0, 0x5, @private2, 0x1, 0x8}, 0x20)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000070a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003803100010076657468305f746f5f687372000000005c000000200a0101000b000000000000010000000900020073797a30000084000900010073797a30"], 0xe8}}, 0x0)

2m11.726001542s ago: executing program 3 (id=707):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xb8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x7}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x24, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x1000, 0x0, 0x0, 0x8000]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}]}]}}]}, 0xb8}}, 0x0)

2m11.276418699s ago: executing program 3 (id=713):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000000940)='z', 0x1}], 0x1}}], 0x2, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0x0, 0xee01}}]}, 0x28}}, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64)
setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r3, &(0x7f0000000400)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2, @default}, 0x1c) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async, rerun: 32)
sendto$inet6(r2, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) (async, rerun: 32)
shutdown(r2, 0x1) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)
shutdown(r0, 0x1)

2m10.672664534s ago: executing program 32 (id=713):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000000940)='z', 0x1}], 0x1}}], 0x2, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0x0, 0xee01}}]}, 0x28}}, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64)
setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r3, &(0x7f0000000400)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2, @default}, 0x1c) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async, rerun: 32)
sendto$inet6(r2, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) (async, rerun: 32)
shutdown(r2, 0x1) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)
shutdown(r0, 0x1)

2.881394676s ago: executing program 1 (id=1350):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r2=>0x0})
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab00000000b0a010100000000000000000700000808000340000000180c000b40000000000000000908000340000000400900020073797a32000000000c0011800800010064757000100011800a0001007175657565000000090001"], 0x250}, 0x1, 0x0, 0x0, 0x40}, 0x44800) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab00000000b0a010100000000000000000700000808000340000000180c000b40000000000000000908000340000000400900020073797a32000000000c0011800800010064757000100011800a0001007175657565000000090001"], 0x250}, 0x1, 0x0, 0x0, 0x40}, 0x44800)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x40, r1, 0x5, 0x4, 0x27dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x18, 0x49, [0xfac01, 0xfac01, 0xfac09, 0xfac0d, 0xfac08]}]]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x8060044)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r6}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r5}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r5}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', <r9=>0x0})
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r10, 0x0)
epoll_pwait(r10, 0x0, 0x0, 0x45, &(0x7f0000000280)={[0x8]}, 0x8)
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_getroute={0x24, 0x1a, 0x0, 0x0, 0x0, {0xa}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e8500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e8500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000dc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @fwd={0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x52}, 0x20)
socket$nl_route(0x10, 0x3, 0x0) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netrom_NETROM_T4(r11, 0x103, 0x6, &(0x7f0000000180)=0x2, 0x4) (async)
setsockopt$netrom_NETROM_T4(r11, 0x103, 0x6, &(0x7f0000000180)=0x2, 0x4)
sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000019000100000000000000000023"], 0x24}}, 0x0)

2.659940813s ago: executing program 1 (id=1355):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0xe01, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x60}, 0x1, 0x0, 0x0, 0x20048880}, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x1, 0xfff, 0x55, 0x0, 0xf7ac, 0x0, 0xcc}, &(0x7f00000000c0)={0xf08, 0x2, 0x3, 0x800, 0xc, 0x5, 0x404, 0x375}, &(0x7f0000000100)={0x5, 0x3, 0x0, 0x7, 0x3, 0xfffffffffffffffe, 0x2, 0xc00000}, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180)={[0xfffffffffffffff7]}, 0x8})

2.45242085s ago: executing program 1 (id=1359):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000000c0)="fa", 0x1}], 0x1}}], 0x1, 0x20040804)
accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x80800) (async)
r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x80800)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'erspan0\x00', <r2=>0x0, 0x8, 0x7800, 0x3, 0x6, {{0x12, 0x4, 0x1, 0x7, 0x48, 0x66, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010102, @multicast1, {[@timestamp_prespec={0x44, 0x34, 0xf5, 0x3, 0x7, [{@broadcast, 0x9}, {@rand_addr=0x64010102}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x6}, {@private=0xa010100, 0x4}, {@empty, 0x6}, {@broadcast, 0x8}]}]}}}}})
sendmmsg$sock(r1, &(0x7f0000001280)=[{{&(0x7f0000000140)=@rc={0x1f, @none}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)="0ab5420bc1134a5514c2b1bd7ba1e32e5bdac2af6bb369de2849b62f48640ef0ea4e54a54086fb692b76983ac4d1351e91b0493e58669f93f20d934100006605c4c07baace064a172cf032f520e6b243fcf108d9639aff441f130b0b32bbb2366e2a7b6996e5b204668555df889fd8b72a33048162249812689812c86ef865d3f2acd379ff70093ea595ebc59bd9dd6a4fa54637a61440b1c9283aef6e566add5a14f39fa7fdaaa2ef0559cfd43f89b548798ea5f7d89471d8454a6bae3c6f413d699ac73a2d7ffc73de897e0c32bcc517b969ff97292c2541bd6464874fe65a8a5664ccd2d76d2183dbbb35", 0xec}], 0x1, &(0x7f0000000300)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0xf}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14}}], 0xa8}}, {{&(0x7f00000004c0)=@xdp={0x2c, 0x4, r2, 0xf}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000540)="39f2002d11b9f30d8b13b4fbc38d48b13da028c90bae6907c21bc6b4de8bfd8ebda8be80de7db7bca2a8fb214d4c13dd246314e0e6ff19d843c55b6443f183f7799d2480788e12b8f41a9e0d528b5ce4d82089ffec4947", 0x57}, {&(0x7f00000005c0)="3af060dd6c2a85c931caa77b11a63a62947a28c104a458ef3f03016f3ccb6de088e69e8c00af25bdd609878413324eb38230a1f22f000be152e6c4a3e0ac7fba3e4dfa94fcf074121107820bcb15ec8df9cb8d3b93819fe84591358b2d5ab989ba2f49709af50ea2dd42d3e3489a1e68848c7aff0d86907d446413092265845117cdac10f7b0a24c9afeb4050e2b448a6b2864b415eb6fa12cddbcccce48824667f3f788452807a22e99a36ac6c84a6f1aea801ecb11b95e8a1396aacbbb7b847887ed7060c1b1aeaa666ea1992ea39bf8300484d13534d1e86f4906b8a72af813d87b6140b285210db7cfeb59e8ac83", 0xf0}, {&(0x7f00000006c0)="bd8028ee52329559bdd87d663189e04abc26231e069f8573cad3c50856ac000719476bc1aff6570c64e0752d8a49ef057f26d0762f5c6086dd2a727a66b56209fcc217fc394e40df924ddc733635fc0c4c1718da56ee93bb666c0f9f1ea91938cd4208f3d641fd8b58aeaf804381cc5a86bafc638fff4009823efb520c60e2d14fae02470121451a1d2659f8d433ffdd52034e1650a7ef5c0afada9be640f68791c3f57754b9e3180c76fa41", 0xac}, {&(0x7f0000000780)="f936e84ac722af6d54e73df3f4c1a589394656610ae04a9a4a03c45e17b85869adc856e1b68b7f86a2ba2f1c6c436cc803f344a6119937be43a5c43de78904bc3d1690d861cd6da0318756435ce88170a23ad2fd2e1a5ef229b8ae282aded93ad63c14ba1aef80434f4ccb64911b2c4d6d926e64c346d0ab33dcd295e1ce0b8b8c05a804137f2fd4d5c421821d28ab963c185c4b348b104360a0b56d38d5cbf9548df43bb520b9c6cef24b41f7114388886830f0386355dbdc026290ffda0f09f7a4f7c7d225a1e8799cfee8", 0xcc}, {&(0x7f0000000880)}, {&(0x7f00000008c0)="2a12eca29300af464eabdcdaf3fe6ed2ffd4c01d0aa9ca2e50750c7a04d4f10c530f2f69376c923cb77a94da343a8a84813808885b3ceee32263883bad49088cb787330db4e4f88241f67caef1effad43b6504e7231d7d939ee2c69b44d2", 0x5e}], 0x6, &(0x7f00000009c0)=[@txtime={{0x18, 0x1, 0x3d, 0x81}}], 0x18}}, {{&(0x7f0000000a00)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000a80)="ac97ebc452d108c753b169705301007a8daa2a6d00cfd989c4db78f9e762da9f5cb4025cef81f89845c85a59a14ecd18a50216ee1a0746e80aa21abdce531f126dad3f4ccd0b7631d9ff0f105d3bdcd5fcef79db8e6b4c7b310027f87ccbe16d4243e02eb98861f187e678b6d5b5e28ee7b61384a670b17280f28d45ae8b4ff6d8e9c9a6b0c86ae6acda17233f0fb977c87cad4d59112b735b05c328b42fa14249021addd9b9c812913dfdfb31e9fb0d0e5dea3b170ac3ab4277112108252d651efcf2d2ff4c56993ef46c08cc8d750e4986e6949d93a3a7090707cfc2881a17324dbe67377d9403dd90c23fa8d78367252d", 0xf2}, {&(0x7f0000000b80)="ec97b6fa9a22256c09643705e94c9d899ebb9aae7a98ab9cf01a3cac8fb0f83a4c13ea8320aa9f589dc9222afbff11aaf3c39a2f4e15be50496cbae9f6fe05204d98b1f0ae7622af830459982ba4d01e37748954d2a50d027465b9492cf1e4110af2ff35953c25a0369ca9439d200032d1c834fca1a362cb7af9fccc346c98dce2b340cac1bdb5cb8fd0d10e2b05604f0b01cc9ece5f1fb3124f96c6831da57845a939", 0xa3}, {&(0x7f0000000c40)="1dcb432339a79d52726edb2f541ef242db8500632c538c63ba9347f29edd8b918bef6c9e1cc7d52cdd875802d5efcbff7a51f85e91bbf9d9f5358f4b30a847ec1000945f9ab032ff839285a5b964b39666fad575bcab33fd05b5e25a6ef7dbff943e7c98a071cf", 0x67}, {&(0x7f0000000cc0)="18f812bbce8c2f787b38cd6e717c8854043395cee9051c2cd4f9a397e87e941b9ed54e97cd283757e0d0d6d70ef38153a170728c1f48e9fab54d54dd077491a4021434f6c317317195e1fe492bba68f0d2a5f89a6eaca0b1ea67115135f043b51ad245b19f068f27a0b12a546d0a20d00b5b8d0f749b8ac4a51955b0ce905c19d57af809241a5e0399a875", 0x8b}, {&(0x7f0000000d80)="206796f30b6fb98c2d73d325bd4305cfeab0ef7783380148c4", 0x19}, {&(0x7f0000000dc0)="1f282078e0deba57605546ebbfa6676da57033bb1c43f438", 0x18}], 0x6, &(0x7f0000000e80)=[@timestamping={{0x14, 0x1, 0x25, 0x80000000}}, @mark={{0x14, 0x1, 0x24, 0x6ab7}}, @txtime={{0x18, 0x1, 0x3d, 0x10000}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x3b4}}, @timestamping={{0x14, 0x1, 0x25, 0x400}}], 0x90}}, {{&(0x7f0000000f40)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x1, 0x3, 0x3, {0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}}}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000fc0)="27be45de569f9debc072f8032496762affe7a54d024e5ef1c17d1d", 0x1b}, {&(0x7f0000001000)="42187d3bb90fcf19e9833bd5cce7e795c84407ac6d537332194890", 0x1b}, {&(0x7f0000001040)="a0012d2b8fc90456655c3f5e2df0c3db25537fb5", 0x14}, {&(0x7f0000001080)="8bdb2433ebd43160034caed4b1aab2876ba78047c9e207f241a078f53857dc2048de15c68ea2d98c6fea34eae1f5a2eead187526e8fbf4515cbc4921abb2a7ee5302f8a8b639a06339dadccb98fef635033a410b0df711a309b1d83aa9de4f056a51279cc3c05636b6ba972a18cf67d9673072dd376e43f3b2c569d0ee34c41217f30003614bfac86b4b2280a51eb11bd2773d80c59d1d56517c2a3991677924b3078948418c", 0xa6}, {&(0x7f0000001140)="50a356790a20db45b9764bf266093c9375290110a1cc77aa92ec0697c0352fa337219b2b0d59559d2801e39d6d591e8e427a87cd30764d75de5b4861ff74a33b58641e1c483a423c3d784f461d896fbdfc1f9548ca65179b248e93963ffec69bea18d5d257840632aa240e2ea122853e0bc04078b4bee67d2fbeb2b85fc4063b6c5be1e60afdd5bab68ab5787909eadda4db77a0fbc8e89f4c1e044d", 0x9c}], 0x5}}], 0x4, 0x4000000)

2.318738472s ago: executing program 5 (id=1360):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000001440)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0xfc0, 0x68, 0x0, 0x60, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "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"}}, 0xfce)

2.002925803s ago: executing program 5 (id=1364):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x538, 0x2c0, 0x398, 0x398, 0x398, 0x0, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0xffffff00], [], 'nicvf0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@empty, 0x39, 0x16}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x0, 0x5, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@ipv6={@mcast1, @loopback, [], [], 'batadv_slave_0\x00', 'ipvlan1\x00', {}, {}, 0x2}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'batadv0\x00', 'virt_wifi0\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x1b, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0xa, 0x5, 0x0, 0xe}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @exit, @jmp={0x5, 0x1, 0x6, 0xa, 0x3, 0x10, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000000}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @exit], &(0x7f0000000240)='syzkaller\x00', 0x1, 0x0, 0x0, 0x1f00}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x1b, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0xa, 0x5, 0x0, 0xe}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @exit, @jmp={0x5, 0x1, 0x6, 0xa, 0x3, 0x10, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000000}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @exit], &(0x7f0000000240)='syzkaller\x00', 0x1, 0x0, 0x0, 0x1f00}, 0x94)

1.854849998s ago: executing program 5 (id=1366):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BETA={0x4}]}}]}, 0x38}}, 0x0)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000f4e20f00000006000000040000000200000000005f00"], 0x0, 0x2c}, 0x20)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x2c, 0xfc0, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1, {[@rr={0x7, 0x3, 0x15}]}}, {{0x4e1e, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x10, 0x7, 0x0, 0x8, {[@md5sig={0x13, 0x12, "570ae7f0b105a456f064be0300ffe61e"}]}}, {"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"}}}}, 0xfce)

1.784805246s ago: executing program 2 (id=1368):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r3 = getpid()
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@private0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@dev}, 0x0, @in6=@private2}}, &(0x7f0000000280)=0xe8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000380)={<r6=>0x0, <r7=>0x0, <r8=>0x0}, &(0x7f00000003c0)=0xc)
r9 = syz_open_procfs$namespace(r6, &(0x7f0000001780)='ns/ipc\x00')
r10 = getpid()
sendmmsg$unix(r5, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r6, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1c0000000f000016000000000200000071bbf035563b86b74a84678263eccadccc0f3bd6f6cc6ec397d19e32704cb2536da5d5c76046cbe4b1b33879f7526b80e574c4d70722d1c90609191811b1f1b86051d0c1d2a598845a8d23f497672420b70a137ff65e4ea9601451fbb31d7b23378fb3f2d1a0", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r9, @ANYRES32], 0x58, 0x800}}], 0x2, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in6=@dev}, 0x0, @in=@private}}, &(0x7f00000003c0)=0xe8)
r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r13 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x80000)
sendmsg$netlink(r0, &(0x7f0000000540)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfb}, 0xc, &(0x7f0000000140)=[{&(0x7f0000000080)={0xa0, 0x3c, 0x8, 0x70bd2b, 0x25dfdbfc, "", [@nested={0x8e, 0xee, 0x0, 0x1, [@generic="4ecb6b03bd6aeb42abce53eb1d0adc00a8d6b71a42e63dce11cfd6e4e659e1e35d78839940b62838329af7d154a5bd4fcddf7c3d76c3c6ec8529999b5d716b4e4ddd6a3561f8ba60acccc8ad8dddfe936ed973f48927e483f5e73b7085a2", @nested={0x4, 0x6a}, @generic="135ddac6973886d051018a05d6bfbc0aa99ffdd77d97c6c3ca643d292ac85c31", @typed={0x8, 0x11d, 0x0, 0x0, @u32=0xcce}]}]}, 0xa0}], 0x1, &(0x7f0000000440)=[@rights={{0x34, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r8}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r11, 0xee01}}}, @rights={{0x34, 0x1, 0x1, [r12, r13, r0, r0, r0, r0, r0, r0, r0]}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}}], 0xe0, 0x4000}, 0x4000000)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'virt_wifi0\x00', {}, 0x4})

1.562708947s ago: executing program 5 (id=1370):
r0 = socket$inet(0xa, 0x801, 0x84)
r1 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x8, 0xffffffffffffffff, &(0x7f00000001c0)=0x4)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2309000000000000000001000000050007000000000008000900000000000600020001e0000008000a0000000000080017"], 0x3c}}, 0x0) (async)
r4 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f00000012c0), 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
pipe(&(0x7f00000001c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
vmsplice(r7, &(0x7f0000000440)=[{&(0x7f0000000140)="df", 0x1}], 0x1, 0x0) (async)
write(r8, &(0x7f0000000300)="6a8b63bd33", 0x5) (async)
sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042abd7000fddbdf251900000005001e000600000005001e00010000000500a3000000000005001e000100000005001d0002000000"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000380)={<r9=>0x0, @in={{0x2, 0x4e23, @local}}, 0x7, 0x8, 0xa, 0x8, 0x40, 0x1, 0x5}, &(0x7f0000000180)=0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000480)={r9, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}, 0x80000000, 0x7, 0x1, 0x8d, 0x8c, 0x8, 0x6}, 0x9c) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x8, 0x2c, 0x1, @remote, @local, {[@routing={0x2c, 0x0, 0x0, 0x1}]}}}}}, 0x0)

1.499101029s ago: executing program 2 (id=1372):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r0, &(0x7f0000000200)="80ce6fc320c33de4df64a50ce01697a611f506818ba10dd06fac156e61ca072ff93c72698a93123fa2ed4e988d1cd1d89ea0620987793eac0f9c8c7c58d65ebdb52fc2a3f37dd6c3ab877aee3da815b1f73090a3e1bc6a1a5a07457158fde2aff34ae9d757f278999c9aa262b51d1e1e01fbefa005c89730cdf4", 0x7a, 0x40085, &(0x7f0000000100)={0x2, 0x4e21, @private=0xa010102}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newsa={0x13c, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000a00)="e499", 0x2}], 0x1}, 0x41)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6e5415445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d8b6d2ccd00"}, 0xd8)
r4 = socket$kcm(0x23, 0x5, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4)
listen(r4, 0x800)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78)
select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, 0x0)
recvmsg(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
sendmsg$inet(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4002}, 0x20000014)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540))
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r7, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef)
recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/247, 0xf7}], 0x1}, 0x40000122)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4)
sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000000c0)="002c5e85867a", 0xffffffffffffff86}], 0x1}}], 0x2, 0x2400c042)

1.469455031s ago: executing program 1 (id=1373):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x2, 0x3, 0x301, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x28}}, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x30, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}, [{0x1, 0x1, "2025b07f3c58"}]}}}}}}, 0x0)

1.468542527s ago: executing program 5 (id=1374):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x28, 0xa, 0x1ff)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
close(0xffffffffffffffff)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
getsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000240), &(0x7f0000000380)=0x10)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048000}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@newqdisc={0x44, 0x24, 0x800, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0x2, 0xb}, {0xfff3, 0xa}}, [@qdisc_kind_options=@q_rr={{0x68}, {0x18, 0x2, {0x6, "1a9158aea6c9ac5e4186a23ce7d02c66"}}}]}, 0x44}}, 0x44000)
connect$pppl2tp(r3, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x3a)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0)
sendto$packet(r1, &(0x7f00000002c0)="01fc5b", 0x3, 0x20000000, &(0x7f00000003c0)={0x11, 0x11, r6, 0x1, 0x8, 0x6, @local}, 0x14)
r7 = socket(0x2b, 0x80801, 0x1)
bind$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x2, 0x2}, 0x3}}, 0x10)
sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000300)=@tipc=@name={0x1e, 0x2, 0x2, {{0x1, 0x3}, 0x20}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x14}, 0x11)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, r9, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0)
r10 = accept(r4, 0x0, &(0x7f00000000c0))
ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000140)={'vcan0\x00'})
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000048000000030a01020000000000000000010000000900030073797a3200000000143204800800024000000000080001400000000009000100000003140000001100010000000000000000000000000a", @ANYRESHEX=r0], 0x90}}, 0x0)

1.302598426s ago: executing program 1 (id=1376):
r0 = socket$kcm(0x10, 0x2, 0x0) (async)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) (async, rerun: 32)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, <r2=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) (async, rerun: 32)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x9, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r5)
ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r6=>0x0}) (async)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x2}}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xc, 0x2}, {0x2, 0x5}]}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e]}}, &(0x7f0000000580)=""/68, 0x52, 0x44, 0x0, 0xe451, 0x10000}, 0x28) (async, rerun: 64)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50) (async, rerun: 64)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000070a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003803100010076657468305f746f5f687372000000005c000000200a0101000b000000000000010000000900020073797a30000084000900010073797a30"], 0xe8}}, 0x0) (async)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r10, 0x0) (async)
r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@o_path={&(0x7f0000000740)='./file0\x00', 0x0, 0x8008}, 0x18)
r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0xffffffffffffffff, 0x1, 0x10}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x1c, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x65}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x4, 0x0, 0x7, 0x2, 0x4, 0x40, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @generic={0x3, 0x6, 0x6, 0x1}, @call={0x85, 0x0, 0x0, 0x94}, @map_val={0x18, 0x4, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0x81, 0xd2, &(0x7f00000003c0)=""/210, 0x41000, 0x0, '\x00', r6, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x3, 0xe, 0x9, 0x2}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000800)=[r8, r10, r11, r12], &(0x7f0000000840)=[{0x1, 0x5, 0x9, 0xb}, {0x0, 0x3, 0xd, 0xa}, {0x5, 0x2, 0x0, 0x6}], 0x10, 0x9}, 0x94)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) (async)
r13 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r14, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)

1.241737079s ago: executing program 2 (id=1377):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x98, 0x8, 0xfa04, 0x1b0, 0x6c02, 0x1b0, 0x194, 0x194, 0x1b0, 0x194, 0x3, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x32}, 0x0, 0x0, 'veth0_to_hsr\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'vlan0\x00', {}, {}, 0x0, 0x1, 0x44}, 0x0, 0xb0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x4, 0x5, 0x3, 0x1, 0x2, 0x4], 0x4}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1b, 0x5, 0x1, 0x9, 'syz0\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8)
sendmsg$nl_generic(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={0x18c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@generic="112f8ee81115cc65cf282311710ed1cf2b34223979ca6953cc2c088dfe6808ffc7cb992d06c526ff49bba9363cf4a896b65c4f9ee76a1a1ca12c9dfb4354c4029ae61ab05b8d3ac32565a31b1137196cc642ea79fa663cf1a704faa1d68842ec19ff3a8814be9a658e40e408f29b9c99537c4c9201f4b8803ec0336cfd8a6883e2af6d08ecf08e0da1c62655ad", @generic="7662f436053ba577b862a278f5d542d6c9737776b3f1a272f5a188e15524fa8f625a043e279a2961800b813039c03f1540567e9bdfa6691c1720cff6453f02e2538779c62c7fd9d355b5edecf73c2d9b2087f7000fd143babd15fb37d64778dcab5adfc86948471c87fde989f85d76659bb0fe032a9d0022ef0cae48a762035ebaa66f501c279085a8d59c3177275b691ca2641bda74a2995cf25ff0c4264a69dca6ab4ce0a79fdd21a025173ace4fbbe498317a35abe61747260609277090313db08b446a47d1bdf7987f0889472e0ba7728f2c72ac6fe35de7ef248933b0e985e32cd7770b2e", @nested={0x4, 0x2}]}, 0x18c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
r4 = socket$isdn(0x22, 0x2, 0x3)
close(r4)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'wg2\x00', {0x3}, 0xbcb})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003400)={'wlan0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000104000000000000000086000000000000000000"], 0x48)
syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @echo={0x8, 0x0, 0x0, 0x9, 0x9}}}}}, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r7}, &(0x7f0000000000), &(0x7f0000000040)='%+9llu \x00'}, 0x20)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1)
sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x80, r8, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0x2a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x800}, @NL80211_ATTR_SSID={0x1c, 0x34, @random="5316d58c7dfbac7dc747d176447c8e840619a384b08ebcdd"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="708f1a39e322"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6}, @NL80211_ATTR_PMKID={0x14, 0x55, "70f3672bfeb9a759bb736fdd9f57b756"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="8f06dfab862d"}]}, 0x80}}, 0x840)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DEL_PMKSA(r9, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x48, r8, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x7f}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "f514903ec417ec154640c1f45c2fc7a7"}, @NL80211_ATTR_PMKID={0x14, 0x55, "224aac875b19ec9eed7965f52dfb3609"}]}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000030429bd70000000000000000400", @ANYRES32=0x0, @ANYBLOB="00a30000000000002c0012800b0001006d6163736563000104000000000000062b00666f086317206b4aceddc726ea0005000300"], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x800)
sendmsg$nl_generic(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x2c, 0x1, 0x70bd2a, 0x25dfdbff, {0x13}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4040)
getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000400), &(0x7f0000000480)=0x10)
sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r0, 0x101, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x24040090)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x4aa82, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000680)={'veth0_to_team\x00', 0x2})

1.039132205s ago: executing program 1 (id=1379):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x4, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x1, 0x1}, {0x3, 0x2}, {0x9, 0x2}, {0x7, 0x2}, {0x6, 0x3}]}, @func={0x2, 0x0, 0x0, 0xc, 0x2}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x72, 0x0, 0x2, 0x2}]}, {0x0, [0x0, 0xb56cea99d7d0f667]}}, 0x0, 0x6c}, 0x28) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1830000001000000000000000300000095"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94)
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async, rerun: 64)
r6 = socket$unix(0x1, 0x1, 0x0) (rerun: 64)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x4, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
close(r5) (async)
r9 = socket$unix(0x1, 0x1, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0}) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @empty}}}}}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x0, 0x2, {0x4, 0x1, 0xfffffffa}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r12=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000004c0)=ANY=[@ANYRES32=r12, @ANYBLOB="0300030002009e"], 0xb) (async)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x1)

1.038572965s ago: executing program 2 (id=1380):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="80000000", @ANYRESHEX=r1, @ANYBLOB="050000000000000200000200000008000300", @ANYRES32=r2], 0x80}}, 0x0)

959.74511ms ago: executing program 4 (id=1381):
r0 = socket(0x26, 0x5, 0xffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r1)
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0x24, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x4008880)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x114, r2, 0x10, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xe0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x170}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff0}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x575}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x36439de196de706d}, 0x40841)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
writev(r3, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b00a3878a791f64bd79d1d7cc97eed1cb0ad91426115a3b3bf2738347b0acfb01a5aeb09818f35ba6f394fcc023050ec0fab5b7405e7ce33e50e3efb3f9373ce372307160e67a6ab876630aa7d83b5f9cc93a11ddb6849c9cc173c0f9592e1c14ee8c687710260aefc1ce06038fa1b8b2e76f29703bb5fc7549318f6f4287daef439fd58863abc71e3b186e7998b8e60aba2a4bcc76eb07d365afc639fd8b115", 0xd8}, {&(0x7f0000000180)="a0a94f8518f2e7d417de2318f9700d66104c6a93da76b8fcaa99404227f34808d6ae2a7990b2c398", 0x28}], 0x3)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0)

937.192964ms ago: executing program 0 (id=1382):
r0 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0})
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000780)="ee340ad606a8ba6e1e06303bac9177f9a3f6d9178ca1bad7eccc3d7ae8b07450e0a3c731907db20ecf01a9511db303e44811acbd45fe6edf94bd96e076302cf7d8b6e3fa8ffe70ad9535c25c101c0370a80d867a2973a213fd246db2454a0041bcb061928774290f65a55b06443fb6112b943a42b44409af03583799006b61bf1e12650e8f23dbe8b8d7a9b52d8b0a96e406b358114283a359b6100ffc316e2b73b5c1ecde61f6334c", 0xa9)
close(0x3)

883.42598ms ago: executing program 2 (id=1383):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000000)={0x30, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf898}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0xf, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @local}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

799.012812ms ago: executing program 0 (id=1384):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1, <r3=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r1, <r4=>0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)='%-010d \x00'}, 0x20)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x50)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r6, 0xc6e9f000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES8], 0x38}}, 0x4000000)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0xffffe000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x1a, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0x4}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_val={0x18, 0x9, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffff808, 0x0, 0x0, 0x0, 0x69e00}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0xbe}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f00000004c0)='syzkaller\x00', 0x4808, 0x8d, &(0x7f00000006c0)=""/141, 0x41000, 0x5, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000500)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0x8, 0x3, 0x81}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[r1, r1, r1, 0xffffffffffffffff, r1, r1], 0x0, 0x10, 0x3ff}, 0x94)
bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r2, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x14, 0x200000000000003a, &(0x7f0000001e80)=ANY=[@ANYRES32=0x0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5, 0x2}, 0x8}, 0x94)

689.21911ms ago: executing program 4 (id=1385):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
syz_emit_ethernet(0xb0, &(0x7f00000001c0)={@multicast, @empty, @val, {@x25={0x805, {0x1, 0x3, 0xf1, "a6fc09365e6306c6e3eee34ace1e19d7696417e386956138e41604f2633784f12ebea2ee6d43b436583bc15af99848c53a2999d220e639e53118e839f26c4d1006657de1e093cee67f9f97c9be78679badfed89c8b30ed072c4f843e4933b569d7f72db0ef88a29a194f1527b29923d0f2d4ca9739d9a5596089a0c0b1b4cc95da6856af0e36f53d3494c7c8753c7d8306bcecaa755e6a"}}}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async)
writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x9}], 0x2)

646.906205ms ago: executing program 2 (id=1386):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @broadcast, 'macvlan1\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084)
setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a0000", 0x3)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000080), 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000711227000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)

558.474189ms ago: executing program 0 (id=1387):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000000c0)=0x9b, &(0x7f0000000080)=0x4) (async)
getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000000c0)=0x9b, &(0x7f0000000080)=0x4)
bind$tipc(r1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010300000000000000002d"], 0x14}}, 0x0)

471.602551ms ago: executing program 4 (id=1388):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000010000008000000000000000d8027f5e321ac2714428462ee708d6d77115f0931aec7bff", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {0x3, 0x0}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x4, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0xb7}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

413.697159ms ago: executing program 0 (id=1389):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$packet(r0, &(0x7f0000000040)={0x10, 0x9}, 0x14)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x4000010)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000000010104000000000000000002000005240001801400018008000100e000000108000200000000000c0002800500010000000000240002801400018008000100e000000108000200ac1e00010c00028005000100000000000800074000000000100016"], 0x74}}, 0x0)

299.356658ms ago: executing program 5 (id=1390):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}], 0x1, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="f20000000906ac493ecae638aafd0001000000"], 0x14}, 0x1, 0x0, 0x0, 0x24018800}, 0x24000810)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x880)

280.420457ms ago: executing program 4 (id=1391):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x2300}, [@RTA_PRIORITY={0x8, 0x1e, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x48000)

243.606818ms ago: executing program 0 (id=1392):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a80)={0x2c, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x8e, 0x0, 0x1, [@nested={0x4, 0xe9}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0xc010)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$sock(r2, &(0x7f0000001b00)=[{{&(0x7f0000000080)=@isdn={0x22, 0x7, 0x9, 0x4, 0x7}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)="216d039d60266f289183409943058a8a6c9f64b28d3fa11c4581aa1cc589018ba8d010fea1376f658a0d0ad783b53da3bdf2b6e73ebff90a490ab2ab3075be5eb9674947f92ce9e337d8cbc4e66388251f5c06d993cd5bcc4d365c921235020f114a1d6820b46e408d5baf91434fe72aae80a5bbbdfe27b37680bc2aeaf1105b50c0bd000ef16dbb030269846fd8729d3e54472089fe2b44ce0db28588d2d4794b70cf38", 0xa4}, {&(0x7f0000000280)="a3ef18ebb8079b2f8e9cc46d7c2010552113f63c8383b55c2ee441898de3b697a10d628257e0ce68934364488ef621ce50a632efadeb08eed8c2be2a9d7e697db9a2e3115fe5d0140cd4a630d78c8ee7c89e2c5c98fd583440d1efaa55f2f988289cf19e1e6bf26ae55361a6fba5351145c9a60c25df4f82a13ddf126348d2a5de1547ea254f4a6063956ae8b2b4eb7487350101a1e2eb3a73a3bc67d7d6eb9df4432c65f070cc1bf9d19d08f611ed3c3ebc7ee70aa669cab15edce91d129b2db8c81088c4d1", 0xc6}], 0x2, &(0x7f0000000380)=[@txtime={{0x18, 0x1, 0x3d, 0x10000}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x7042}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000000400)="06a90a5c8e56189c0b822a372f9c2ab243d3b67ed0e689a677e5b3e3f44695d9c0e0997eb5f0e53c8b449cdaf110826a7db9f37c3d5f8e0c1741890a11c6545d123a7f37e9d1b97b864228b051fc825605a5004c83cfe06ab5377e6846884e7387da9e112d831c8d6e31c4dd", 0x6c}, {&(0x7f0000000480)="beb17d33f6f0e7c60df6e2df250aefc6d5576f6865cfdacbcc4129ff059eba33751493b179a9ea3dfdf606fb98f1b84b0fef6a8e9606e43cb61e45066f19b3bec495f1131b761a634a10f813e0a23449ecd91261b2609ca74f964800e060af8abf1dd5080d0b1d8c5baf448cd0548b9f5d59b0c48452dfcf0d0cae38ebaeab70af8d838085e81e56192d02e96b6b197d728297e4d96b9b1153eaddc1ff2be7472a0ee2fd2807ed612853aad13e43cd85de62de0a58cb6c716177be80fdabd23c12174f5f22a75756c65bb1ec09dce9599ab817b5724f1a6c08b1fd2e6912132d4531343399fc943cef9ae9bcc8e4450e", 0xf0}], 0x3, &(0x7f0000000600)=[@txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x1ff}}, @txtime={{0x18, 0x1, 0x3d, 0xc5c0}}, @timestamping={{0x14, 0x1, 0x25, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x7fff}}, @txtime={{0x18, 0x1, 0x3d, 0x80000001}}, @timestamping={{0x14, 0x1, 0x25, 0x40}}], 0xa8}}, {{&(0x7f00000006c0)=@sco, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000580)="50e040c74d29d0b98c640a4cf043f5cfe7cbe98f3607f6321ea5a70ca9bb1db1e2da598a319c5e87a9a63c", 0x2b}, {&(0x7f0000000740)="5985958fd58b917cc5e04b3a68f68a517dacf7152e1b774b32f4e468e02b80b0595b42e86b49a6a610be1bb96a498840dc287f7721f9137c6d55940aff4f24d8976497d5d3e005dd91158e0211c236a604ceeb86167cd8727a8d871875cea210352dd53e33ae51857453a7a3ef9bae17fcad48f4275a4912205e43d17816528269ffc10f2713f6d21f2d278ca9ffdc2ad01b8033ef3b90c2f015314871c520eb640ef75178d35506ad", 0xa9}, {&(0x7f0000000800)="acd01d13b80d9e2e47dd29637c7ce408", 0x10}, {&(0x7f0000000840)="dce97e8d3699cad4f7955e3c641f57024f48bf67a567ec542e748ace290ba2ee729aa68156864113d0f8b123419b88b436cb44436ea587a0638b12bf8cd66ceaaa300d6f94588c8022842495a0881c8130981f5aecff3ef1615691ad8c6368fc290cb1220ba9df95213670f1da6f", 0x6e}, {&(0x7f00000008c0)="69a46a3153fadfad8a4c743afe70b8a1f49bec146834158996d09fa502132fc70ce05171e73593667a3864254b12a296558e8d095b1f89e48f06e8375c019ef79cd48a2feef732a3644361b35227865dc36c5dd678a8df3231767871d36282be9be77244a60cec616d308111696bff0811", 0x71}, {&(0x7f0000000940)="15ed6498af513d84f2420364b9e9ed5a2f832b21721eff4fcf2dcdc8e6f41fb57ea7ffd1bad24240b97d994bc54218464e4e3d24110267ed614dc01463760599d99b8651c3b1796912c76ad2b7a84c9e2dbc0827009178407bbbf92bfb39aa87185413370b075eb320c145e5cdeaee46ec12c25151d1026497c79fec3a2b4cc70944e1c2b4f85a27ca840520555c92", 0x8f}], 0x6, &(0x7f0000000a80)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x18}}], 0x3, 0x8801)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000005c0)=@ipmr_getroute={0x1c, 0x1a, 0x0, 0x70bd2d, 0x25dfdbfc, {0x80, 0x0, 0x94, 0x80, 0x0, 0x4, 0x0, 0x3, 0x1900}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x0)

115.014148ms ago: executing program 4 (id=1393):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf251000000008000100", @ANYRES32=0x0, @ANYBLOB="060011003adf51177b80f8b28a52f104f88572c7d454fae13b577e25f55fc2dda09d64e236bf3d3976acc9bbcaa4ca395ff1a413d7bdd2e4ac24a4e66f7ba3091c5400599e2c1f5e45333db092bb4a4917032945a70bf7d6fd7a3308b9181fa3d1a66503e7388a4a07ebb223dc6c756808dae393c6c43c03f6b89bba41935e27543c3f88fb4665b2c6"], 0x24}, 0x1, 0x0, 0x0, 0x850}, 0x20040880)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x2, 0x2, 0x1, 0x1, 0x0, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, 0xf}, 0x94) (async)
r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000180)=0xe, 0x800)
getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)

3.250836ms ago: executing program 0 (id=1394):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x1, 0x0, 0xfffffffc, {0xe}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2)
sendmsg$NFC_CMD_LLC_SDREQ(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4801}, 0x20001880)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x20, 0x2c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\xd8'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r8, 0x1, 0x8000000, 0x0, {}, [@SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7ffffffd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40801}, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r8, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_SECRET={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8001)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r10=>0x0)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12)
sendmsg$NFC_CMD_FW_DOWNLOAD(r12, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x14, r13, 0xba960a2220112c19, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x100040c0}, 0x80)
sendmsg$NFC_CMD_FW_DOWNLOAD(r11, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r13, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, '-\xed&-'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r10], 0x1c}}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=<r14=>0x0)
sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '*'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x48000)
r15 = socket$packet(0x11, 0x2, 0x300)
getsockname$packet(r15, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0)

0s ago: executing program 4 (id=1395):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x4b, 0x0, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000004050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000c08000240000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, 0xf0ffffff}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.185' (ED25519) to the list of known hosts.
[   87.183794][ T5814] cgroup: Unknown subsys name 'net'
[   87.303672][ T5814] cgroup: Unknown subsys name 'cpuset'
[   87.313540][ T5814] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   89.113665][ T5814] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   93.896404][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   93.904440][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   93.915689][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   93.923633][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   93.931754][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   93.943792][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   93.946799][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   93.960082][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   93.961520][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   93.976207][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   93.976234][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   93.986151][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   93.998412][   T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   94.024834][   T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   94.033739][   T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   94.049141][   T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   94.061473][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   94.069109][   T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   94.071896][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   94.085226][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   94.153884][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   94.163675][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   94.173581][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   94.182253][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   94.212433][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   94.715036][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   94.963003][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   94.998101][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   95.105071][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   95.211917][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.220203][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.227745][ T5835] bridge_slave_0: entered allmulticast mode
[   95.235806][ T5835] bridge_slave_0: entered promiscuous mode
[   95.296917][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.304293][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.311623][ T5835] bridge_slave_1: entered allmulticast mode
[   95.319604][ T5835] bridge_slave_1: entered promiscuous mode
[   95.351889][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.359277][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.366628][ T5825] bridge_slave_0: entered allmulticast mode
[   95.374383][ T5825] bridge_slave_0: entered promiscuous mode
[   95.435693][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.443074][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.450384][ T5825] bridge_slave_1: entered allmulticast mode
[   95.457800][ T5825] bridge_slave_1: entered promiscuous mode
[   95.480086][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   95.537275][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.567739][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.575288][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.582849][ T5827] bridge_slave_0: entered allmulticast mode
[   95.590742][ T5827] bridge_slave_0: entered promiscuous mode
[   95.615476][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.651115][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.658255][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.665739][ T5834] bridge_slave_0: entered allmulticast mode
[   95.673316][ T5834] bridge_slave_0: entered promiscuous mode
[   95.681888][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.690309][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.697519][ T5827] bridge_slave_1: entered allmulticast mode
[   95.705517][ T5827] bridge_slave_1: entered promiscuous mode
[   95.715633][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.746535][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.754239][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.761606][ T5834] bridge_slave_1: entered allmulticast mode
[   95.770058][ T5834] bridge_slave_1: entered promiscuous mode
[   95.795637][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.867146][ T5835] team0: Port device team_slave_0 added
[   95.897954][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.922885][ T5835] team0: Port device team_slave_1 added
[   95.943826][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.956535][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.969482][ T5825] team0: Port device team_slave_0 added
[   96.005011][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.030348][ T5825] team0: Port device team_slave_1 added
[   96.051286][ T5839] Bluetooth: hci1: command tx timeout
[   96.072911][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.080691][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.088101][ T5842] bridge_slave_0: entered allmulticast mode
[   96.095891][ T5842] bridge_slave_0: entered promiscuous mode
[   96.119490][ T5839] Bluetooth: hci2: command tx timeout
[   96.125524][ T5833] Bluetooth: hci3: command tx timeout
[   96.125534][ T5830] Bluetooth: hci0: command tx timeout
[   96.147052][ T5827] team0: Port device team_slave_0 added
[   96.154254][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.161852][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.188807][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.201174][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.209200][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.216480][ T5842] bridge_slave_1: entered allmulticast mode
[   96.224534][ T5842] bridge_slave_1: entered promiscuous mode
[   96.266872][ T5827] team0: Port device team_slave_1 added
[   96.274465][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.281640][ T5839] Bluetooth: hci4: command tx timeout
[   96.287429][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.315759][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.341925][ T5834] team0: Port device team_slave_0 added
[   96.348463][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.355561][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.381563][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.429247][ T5834] team0: Port device team_slave_1 added
[   96.435653][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.442934][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.469288][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.499815][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.506854][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.533177][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.550216][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.578770][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.585907][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.612116][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.626799][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.652112][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.659398][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.685567][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.753151][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.760431][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   96.788176][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.861733][ T5835] hsr_slave_0: entered promiscuous mode
[   96.868530][ T5835] hsr_slave_1: entered promiscuous mode
[   96.877271][ T5842] team0: Port device team_slave_0 added
[   96.914584][ T5842] team0: Port device team_slave_1 added
[   96.925916][ T5825] hsr_slave_0: entered promiscuous mode
[   96.932946][ T5825] hsr_slave_1: entered promiscuous mode
[   96.940142][ T5825] debugfs: 'hsr0' already exists in 'hsr'
[   96.945982][ T5825] Cannot create hsr debugfs directory
[   97.004293][ T5827] hsr_slave_0: entered promiscuous mode
[   97.011309][ T5827] hsr_slave_1: entered promiscuous mode
[   97.017612][ T5827] debugfs: 'hsr0' already exists in 'hsr'
[   97.024174][ T5827] Cannot create hsr debugfs directory
[   97.086251][ T5834] hsr_slave_0: entered promiscuous mode
[   97.093231][ T5834] hsr_slave_1: entered promiscuous mode
[   97.099874][ T5834] debugfs: 'hsr0' already exists in 'hsr'
[   97.105653][ T5834] Cannot create hsr debugfs directory
[   97.112973][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   97.120300][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   97.146364][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.198351][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.205513][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   97.232255][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   97.517453][ T5842] hsr_slave_0: entered promiscuous mode
[   97.524678][ T5842] hsr_slave_1: entered promiscuous mode
[   97.531225][ T5842] debugfs: 'hsr0' already exists in 'hsr'
[   97.536987][ T5842] Cannot create hsr debugfs directory
[   97.564172][  T794] cfg80211: failed to load regulatory.db
[   97.902961][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   97.932186][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   97.951719][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   97.973514][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   98.046247][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   98.061467][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   98.092757][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   98.106308][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   98.119332][ T5839] Bluetooth: hci1: command tx timeout
[   98.191529][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   98.200103][ T5833] Bluetooth: hci2: command tx timeout
[   98.200112][ T5830] Bluetooth: hci3: command tx timeout
[   98.211327][ T5839] Bluetooth: hci0: command tx timeout
[   98.224433][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   98.235806][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   98.247756][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   98.359443][ T5833] Bluetooth: hci4: command tx timeout
[   98.377543][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   98.393719][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   98.413067][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   98.444497][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   98.531712][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.564641][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   98.588358][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   98.606843][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   98.635230][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   98.670284][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   98.684905][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.723307][  T192] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.730650][  T192] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.773612][  T192] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.780840][  T192] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.807614][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   98.846344][ T3520] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.853557][ T3520] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.880311][ T3520] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.887482][ T3520] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.918563][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.974638][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.034843][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   99.049517][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   99.093894][ T3520] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.101173][ T3520] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.114072][ T3520] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.121318][ T3520] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.161884][ T3520] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.169227][ T3520] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.185042][ T3520] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.192428][ T3520] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.324460][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.464619][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   99.506840][ T1004] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.514113][ T1004] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.600780][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.608000][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.646875][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.941660][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.982473][ T5825] veth0_vlan: entered promiscuous mode
[  100.002387][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.045199][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.096739][ T5825] veth1_vlan: entered promiscuous mode
[  100.203259][ T5833] Bluetooth: hci1: command tx timeout
[  100.258836][ T5827] veth0_vlan: entered promiscuous mode
[  100.279567][ T5839] Bluetooth: hci0: command tx timeout
[  100.285640][ T5833] Bluetooth: hci2: command tx timeout
[  100.291918][ T5839] Bluetooth: hci3: command tx timeout
[  100.321041][ T5825] veth0_macvtap: entered promiscuous mode
[  100.353082][ T5825] veth1_macvtap: entered promiscuous mode
[  100.376179][ T5827] veth1_vlan: entered promiscuous mode
[  100.403104][ T5834] veth0_vlan: entered promiscuous mode
[  100.415510][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.439502][ T5833] Bluetooth: hci4: command tx timeout
[  100.475347][ T5834] veth1_vlan: entered promiscuous mode
[  100.495098][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.515964][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.555415][ T1004] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.567065][ T5827] veth0_macvtap: entered promiscuous mode
[  100.585448][ T1004] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.594467][ T1004] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.606470][ T1004] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.639085][ T5827] veth1_macvtap: entered promiscuous mode
[  100.691249][ T5842] veth0_vlan: entered promiscuous mode
[  100.724646][ T5835] veth0_vlan: entered promiscuous mode
[  100.743044][ T5842] veth1_vlan: entered promiscuous mode
[  100.752464][ T5834] veth0_macvtap: entered promiscuous mode
[  100.763716][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.798357][ T5835] veth1_vlan: entered promiscuous mode
[  100.806968][ T5834] veth1_macvtap: entered promiscuous mode
[  100.825314][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.878413][  T192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.907969][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.916615][  T192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.942062][  T192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.954260][  T192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.963992][ T1004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.975048][ T1004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.007444][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.060249][ T5842] veth0_macvtap: entered promiscuous mode
[  101.089830][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.122610][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.133562][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.143562][ T5842] veth1_macvtap: entered promiscuous mode
[  101.154686][ T1004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.164846][ T1004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.180672][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.203018][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.212339][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.242861][ T5835] veth0_macvtap: entered promiscuous mode
[  101.282744][ T5835] veth1_macvtap: entered promiscuous mode
[  101.327206][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.333334][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  101.368737][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.401326][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.467080][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.488700][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.509460][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.547041][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.619754][ T1152] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.637545][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.651552][ T1152] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.661248][ T1152] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.925036][ T1152] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.938595][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.948797][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.971369][ T1152] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.986786][ T1152] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.002680][ T1152] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.035615][ T1152] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.279745][ T5833] Bluetooth: hci1: command tx timeout
[  102.361195][ T5839] Bluetooth: hci3: command tx timeout
[  102.361211][ T5830] Bluetooth: hci0: command tx timeout
[  102.372169][ T5833] Bluetooth: hci2: command tx timeout
[  102.393839][ T5966] vlan2: entered promiscuous mode
[  102.436457][ T5966] vlan2: entered allmulticast mode
[  102.443736][ T5966] hsr_slave_1: entered allmulticast mode
[  102.469580][  T192] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.486307][  T192] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.519580][ T5839] Bluetooth: hci4: command tx timeout
[  102.586879][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.639996][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.670220][ T5971] syz.3.10 uses obsolete (PF_INET,SOCK_PACKET)
[  102.706109][ T5971] syzkaller1: entered promiscuous mode
[  102.715877][ T5971] syzkaller1: entered allmulticast mode
[  102.747175][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.788456][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.963978][ T5985] netlink: 'syz.0.13': attribute type 1 has an invalid length.
[  102.985908][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.998790][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.007563][ T5985] netlink: 'syz.0.13': attribute type 2 has an invalid length.
[  103.055826][ T5990] netlink: 'syz.1.14': attribute type 11 has an invalid length.
[  103.123247][ T5990] netlink: 224 bytes leftover after parsing attributes in process `syz.1.14'.
[  103.461400][ T6001] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  103.486205][ T6001] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  103.523119][ T6001] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  103.540299][ T6001] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  103.572720][ T6001] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  103.758501][ T6001] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  103.777972][ T6013] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20'.
[  103.834801][ T6020] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20'.
[  103.963199][ T6001] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  103.991959][ T6001] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  104.076081][ T6001] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  104.176764][ T6001] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  104.295824][ T6030] x_tables: unsorted underflow at hook 4
[  104.308768][ T6032] xt_CT: You must specify a L4 protocol and not use inversions on it
[  104.345114][ T6030] Driver unsupported XDP return value 0 on prog  (id 9) dev N/A, expect packet loss!
[  104.465103][ T6036] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  104.504742][ T6030] netlink: 28 bytes leftover after parsing attributes in process `syz.3.23'.
[  104.586267][ T6040] netlink: 108 bytes leftover after parsing attributes in process `syz.2.26'.
[  104.728941][ T6043] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  104.957228][ T6049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29'.
[  105.077313][ T6056] netlink: 'syz.0.31': attribute type 1 has an invalid length.
[  105.118737][ T6056] netlink: 228 bytes leftover after parsing attributes in process `syz.0.31'.
[  105.439951][ T6064] netlink: 20 bytes leftover after parsing attributes in process `syz.2.34'.
[  105.598940][ T6080] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.39'.
[  105.793469][ T6087] netlink: 36 bytes leftover after parsing attributes in process `syz.4.40'.
[  105.858489][ T6094] netlink: 'syz.1.42': attribute type 21 has an invalid length.
[  106.174285][ T6103] netlink: 'syz.0.47': attribute type 3 has an invalid length.
[  106.271152][ T6106] netlink: 'syz.1.48': attribute type 1 has an invalid length.
[  106.428994][ T6103] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.437735][ T6103] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.555268][ T6103] bridge_slave_0: left allmulticast mode
[  106.561897][ T6103] bridge_slave_0: left promiscuous mode
[  106.568113][ T6103] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.594849][ T6103] bridge_slave_1: left allmulticast mode
[  106.602251][ T6103] bridge_slave_1: left promiscuous mode
[  106.608415][ T6103] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.632665][ T6103] bond0: (slave bond_slave_0): Releasing backup interface
[  106.650403][ T6103] bond0: (slave bond_slave_1): Releasing backup interface
[  106.673848][ T6103] team0: Port device team_slave_0 removed
[  106.712357][ T6103] team0: Port device team_slave_1 removed
[  106.736562][ T6103] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  106.758737][ T6103] batman_adv: batadv0: Removing interface: batadv_slave_0
[  106.775406][ T6103] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  106.801475][ T6103] batman_adv: batadv0: Removing interface: batadv_slave_1
[  106.933747][ T6120] bond1: option lp_interval: invalid value (0)
[  106.980821][ T6120] bond1: option lp_interval: allowed values 1 - 2147483647
[  107.035288][ T6120] bond1 (unregistering): Released all slaves
[  107.124897][ T6131] netlink: 'syz.1.54': attribute type 11 has an invalid length.
[  107.150761][ T6131] netlink: 'syz.1.54': attribute type 11 has an invalid length.
[  107.198019][ T6129] syzkaller1: entered promiscuous mode
[  107.207368][ T6129] syzkaller1: entered allmulticast mode
[  107.436265][ T6138] Zero length message leads to an empty skb
[  108.399934][ T6185] netlink: 'syz.2.67': attribute type 1 has an invalid length.
[  108.610447][ T6191] netlink: 'syz.1.70': attribute type 33 has an invalid length.
[  108.618189][ T6191] __nla_validate_parse: 9 callbacks suppressed
[  108.618207][ T6191] netlink: 152 bytes leftover after parsing attributes in process `syz.1.70'.
[  108.857544][ T6198] netlink: 32 bytes leftover after parsing attributes in process `syz.0.72'.
[  108.929393][ T6206] netlink: 40 bytes leftover after parsing attributes in process `syz.4.75'.
[  109.029571][ T6213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.77'.
[  109.039533][ T6210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.77'.
[  109.137933][ T6213] bond1: Invalid ad_actor_system MAC address.
[  109.157073][ T6213] bond1: option ad_actor_system: invalid value (1)
[  109.190112][ T6213] bond1 (unregistering): Released all slaves
[  109.291149][ T6223] netlink: 32 bytes leftover after parsing attributes in process `syz.3.81'.
[  109.405550][ T6210] bond1: Invalid ad_actor_system MAC address.
[  109.428731][ T6210] bond1: option ad_actor_system: invalid value (1)
[  109.467354][ T6210] bond1 (unregistering): Released all slaves
[  109.508189][ T6229] netlink: 128 bytes leftover after parsing attributes in process `syz.2.83'.
[  109.555041][ T6231] netlink: 44 bytes leftover after parsing attributes in process `syz.4.84'.
[  109.773780][ T6237] Cannot find add_set index 0 as target
[  110.220022][ T6264] netlink: 24 bytes leftover after parsing attributes in process `syz.1.94'.
[  110.566924][ T6273] Bluetooth: MGMT ver 1.23
[  110.715161][ T6280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.816423][ T6280] netlink: 64 bytes leftover after parsing attributes in process `syz.3.98'.
[  110.872782][ T6286] netlink: 'syz.0.101': attribute type 12 has an invalid length.
[  110.981899][ T6291] netlink: 'syz.2.102': attribute type 5 has an invalid length.
[  111.092949][ T6293] net_ratelimit: 5 callbacks suppressed
[  111.092971][ T6293] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048)
[  111.690624][ T6319] x_tables: ip6_tables: mh match: only valid for protocol 135
[  112.047729][ T6332] netlink: 'syz.4.116': attribute type 10 has an invalid length.
[  112.076608][ T6332] veth0_virt_wifi: entered allmulticast mode
[  112.182721][ T6332] team0: Port device veth0_virt_wifi added
[  112.213105][ T6338] warning: `syz.2.118' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  112.227568][ T5900] IPVS: starting estimator thread 0...
[  112.349353][ T6342] IPVS: using max 27 ests per chain, 64800 per kthread
[  112.470125][ T6349] netlink: 'syz.1.121': attribute type 21 has an invalid length.
[  112.849920][ T6363] syzkaller1: entered promiscuous mode
[  112.857120][ T6363] syzkaller1: entered allmulticast mode
[  113.048441][ T6371] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.123252][ T6377] vlan2: entered allmulticast mode
[  113.185666][ T6371] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.353767][ T6383] xt_CT: You must specify a L4 protocol and not use inversions on it
[  113.427077][ T6371] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.597139][ T6393] delete_channel: no stack
[  113.608040][ T6371] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.890921][ T1004] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.948181][ T1152] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.019299][ T1152] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.088472][ T1152] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.104249][ T6409] __nla_validate_parse: 8 callbacks suppressed
[  114.104270][ T6409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.145'.
[  114.284035][ T6417] netlink: 32 bytes leftover after parsing attributes in process `syz.4.147'.
[  114.510474][ T6427] netlink: 20 bytes leftover after parsing attributes in process `syz.2.149'.
[  114.527536][ T6426] netlink: 'syz.1.151': attribute type 1 has an invalid length.
[  114.539470][ T6426] netlink: 'syz.1.151': attribute type 2 has an invalid length.
[  114.549861][ T6426] netlink: 'syz.1.151': attribute type 1 has an invalid length.
[  114.571853][ T6428] xt_nfacct: accounting object `\�$�9Z�M#���mU�|�^c�\F9YⳈ���' does not exist
[  114.572637][ T6426] netlink: 'syz.1.151': attribute type 2 has an invalid length.
[  114.667740][ T6434] netlink: 140 bytes leftover after parsing attributes in process `syz.4.152'.
[  114.691489][ T6419] team0 (unregistering): Port device team_slave_0 removed
[  114.703994][ T6419] team0 (unregistering): Port device team_slave_1 removed
[  114.991558][ T6442] gtp0: entered promiscuous mode
[  115.045533][ T6447] Cannot find add_set index 0 as target
[  115.232369][ T6455] netlink: 'syz.4.157': attribute type 1 has an invalid length.
[  115.350448][ T6464] bond1: (slave bridge1): making interface the new active one
[  115.361701][ T6464] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  115.660251][ T6475] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  116.095319][ T6494] bond3 (unregistering): Released all slaves
[  116.509762][ T6512] netlink: 28 bytes leftover after parsing attributes in process `syz.2.175'.
[  116.557535][ T6512] netlink: 256 bytes leftover after parsing attributes in process `syz.2.175'.
[  116.596380][ T6515] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  116.860661][ T6516] syzkaller0: entered promiscuous mode
[  116.876578][ T6516] syzkaller0: entered allmulticast mode
[  117.640003][ T5839] Bluetooth: hci0: command 0x0401 tx timeout
[  118.621619][ T6552] Cannot find add_set index 0 as target
[  118.712678][ T6560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.185'.
[  118.805440][ T6560] netlink: 56 bytes leftover after parsing attributes in process `syz.3.185'.
[  119.183283][ T6579] netlink: 'syz.3.191': attribute type 10 has an invalid length.
[  119.314278][ T6589] netlink: 'syz.2.192': attribute type 1 has an invalid length.
[  119.383399][ T6592] openvswitch: netlink: IP tunnel TTL not specified.
[  119.662032][ T6601] netlink: 52 bytes leftover after parsing attributes in process `syz.2.192'.
[  119.929569][ T6594] macvtap0: Device is already in use.
[  119.961907][ T6601] netlink: 52 bytes leftover after parsing attributes in process `syz.2.192'.
[  120.333966][ T6629] netlink: 'syz.2.201': attribute type 1 has an invalid length.
[  120.401123][ T6631] netlink: 28 bytes leftover after parsing attributes in process `syz.2.201'.
[  120.487907][ T6629] bond4: entered promiscuous mode
[  120.494018][ T6629] 8021q: adding VLAN 0 to HW filter on device bond4
[  120.502327][ T6631] bond4: entered allmulticast mode
[  120.513990][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.200'.
[  120.541284][ T6638] netlink: 20 bytes leftover after parsing attributes in process `syz.1.200'.
[  120.583562][ T6637] bond4: (slave bridge1): making interface the new active one
[  120.609925][ T6637] bridge1: entered promiscuous mode
[  120.637036][ T6637] bridge1: entered allmulticast mode
[  120.665679][ T6637] bond4: (slave bridge1): Enslaving as an active interface with an up link
[  120.718528][ T6638] geneve2: entered promiscuous mode
[  120.741697][ T6638] geneve2: entered allmulticast mode
[  121.059707][ T6658] netlink: 28 bytes leftover after parsing attributes in process `syz.3.210'.
[  121.095724][ T6658] netlink: 28 bytes leftover after parsing attributes in process `syz.3.210'.
[  121.133850][ T6665] netlink: 'syz.4.211': attribute type 3 has an invalid length.
[  121.325244][ T6673] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  121.593327][ T6679] xt_recent: Unsupported userspace flags (000000b1)
[  121.737984][ T6685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.217'.
[  121.852238][ T6691] netlink: 'syz.4.218': attribute type 10 has an invalid length.
[  122.062768][ T6700] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  122.290935][ T6713] netlink: 'syz.4.225': attribute type 1 has an invalid length.
[  122.327215][ T6713] netlink: 'syz.4.225': attribute type 2 has an invalid length.
[  122.337182][ T6710] netlink: 'syz.2.224': attribute type 13 has an invalid length.
[  122.382072][ T6714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.225'.
[  122.512699][ T6713] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  122.543518][ T6366] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  122.597887][ T6405] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  122.622503][ T6405] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  122.642974][ T6405] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  122.728203][ T6728] netlink: 'syz.2.229': attribute type 28 has an invalid length.
[  122.753068][ T6728] netlink: 'syz.2.229': attribute type 3 has an invalid length.
[  122.777845][ T6728] netlink: 132 bytes leftover after parsing attributes in process `syz.2.229'.
[  123.040982][ T6739] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.986158][ T6785] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.081390][ T6789] netlink: 'syz.3.247': attribute type 1 has an invalid length.
[  124.334065][ T6798] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  124.358979][ T6798] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  124.426592][ T6802] netlink: 'syz.1.251': attribute type 13 has an invalid length.
[  124.467761][ T6802] veth0_macvtap: left promiscuous mode
[  124.513835][ T6802] macvtap0: entered allmulticast mode
[  124.537770][ T6802] macvtap0: refused to change device tx_queue_len
[  124.753723][ T6817] __nla_validate_parse: 5 callbacks suppressed
[  124.753749][ T6817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.256'.
[  124.861679][ T6829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.257'.
[  124.998305][ T6834] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  125.005339][ T6834] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  125.141594][ T6839] netlink: 48 bytes leftover after parsing attributes in process `syz.4.261'.
[  125.230170][ T6846] netlink: 16 bytes leftover after parsing attributes in process `syz.3.263'.
[  125.316572][ T6834] bridge1: entered promiscuous mode
[  125.354630][ T6851] netlink: 60 bytes leftover after parsing attributes in process `syz.2.266'.
[  125.355542][ T6834] bridge1: entered allmulticast mode
[  125.375257][ T6853] validate_nla: 2 callbacks suppressed
[  125.375276][ T6853] netlink: 'syz.0.265': attribute type 21 has an invalid length.
[  125.711121][ T6863] netlink: 'syz.2.270': attribute type 21 has an invalid length.
[  125.718976][ T6863] netlink: 156 bytes leftover after parsing attributes in process `syz.2.270'.
[  125.781813][ T6866] netlink: 120 bytes leftover after parsing attributes in process `syz.0.271'.
[  126.208867][ T6888] netlink: 2108 bytes leftover after parsing attributes in process `syz.4.277'.
[  126.291091][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.277'.
[  126.401288][ T6894] netlink: 28 bytes leftover after parsing attributes in process `syz.4.277'.
[  126.810292][ T6912] trusted_key: syz.0.283 sent an empty control message without MSG_MORE.
[  127.027495][ T6920] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  127.326136][ T6776] udevd[6776]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory
[  127.752478][ T6945] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.057937][ T6956] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  128.140847][ T6956] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  128.726104][ T6987] team_slave_0: entered promiscuous mode
[  128.732087][ T6987] team_slave_1: entered promiscuous mode
[  128.741713][ T6987] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  128.750956][ T6987] team0: Device macvtap1 is already an upper device of the team interface
[  128.805095][ T6987] team_slave_0: left promiscuous mode
[  128.810697][ T6987] team_slave_1: left promiscuous mode
[  128.907078][ T6993] netlink: 'syz.3.305': attribute type 23 has an invalid length.
[  129.169782][ T6997] netlink: 'syz.3.307': attribute type 24 has an invalid length.
[  129.776154][ T7024] netlink: 'syz.0.314': attribute type 4 has an invalid length.
[  129.794214][ T7024] __nla_validate_parse: 9 callbacks suppressed
[  129.794236][ T7024] netlink: 152 bytes leftover after parsing attributes in process `syz.0.314'.
[  129.843754][ T7024] `: renamed from bond0
[  129.925770][ T7031] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  129.953906][ T6366] nci: nci_ntf_packet: unsupported ntf opcode 0xf03
[  130.282310][ T7042] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  130.303213][ T7042] bond1 (unregistering): Released all slaves
[  130.323553][ T7053] sctp: [Deprecated]: syz.4.322 (pid 7053) Use of struct sctp_assoc_value in delayed_ack socket option.
[  130.323553][ T7053] Use struct sctp_sack_info instead
[  130.413195][ T7046] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  130.431237][ T7046] bond1 (unregistering): Released all slaves
[  130.531713][ T7062] lo: entered promiscuous mode
[  130.563859][ T7062] tunl0: entered promiscuous mode
[  130.572984][ T7062] gre0: entered promiscuous mode
[  130.638411][ T7062] gretap0: entered promiscuous mode
[  130.708679][ T7062] erspan0: entered promiscuous mode
[  130.746961][ T7062] ip_vti0: entered promiscuous mode
[  130.899412][ T7075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.328'.
[  131.003842][ T7078] netlink: 36 bytes leftover after parsing attributes in process `syz.0.328'.
[  131.232520][ T7084] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.395859][ T7090] netlink: 'syz.1.332': attribute type 18 has an invalid length.
[  131.432723][ T7090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.332'.
[  131.475808][ T1004] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  131.486071][ T7090] netlink: 'syz.1.332': attribute type 18 has an invalid length.
[  131.494467][ T1004] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  131.534751][ T1004] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  131.552660][ T7090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.332'.
[  131.584071][ T1004] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  131.615759][ T7101] netlink: 48 bytes leftover after parsing attributes in process `syz.2.336'.
[  131.637783][  T891] hid-generic 0005:0002:5508.0001: item fetching failed at offset 0/1
[  131.650400][  T891] hid-generic 0005:0002:5508.0001: probe with driver hid-generic failed with error -22
[  131.793845][ T7105] netlink: 36 bytes leftover after parsing attributes in process `syz.1.337'.
[  131.878320][ T7109] netlink: 'syz.2.338': attribute type 10 has an invalid length.
[  131.953690][ T7109] team0: Port device dummy0 added
[  132.501158][ T7144] x_tables: duplicate underflow at hook 3
[  132.523469][ T7144] netlink: 'syz.2.345': attribute type 13 has an invalid length.
[  132.703821][ T7150] sock: sock_timestamping_bind_phc: sock not bind to device
[  133.142617][ T7172] netlink: 'syz.0.354': attribute type 3 has an invalid length.
[  133.152154][ T7172] netlink: 20 bytes leftover after parsing attributes in process `syz.0.354'.
[  133.244781][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.356'.
[  133.549481][ T7188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.358'.
[  133.621975][ T6776] udevd[6776]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  133.726969][ T6776] udevd[6776]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  133.795401][ T7188] bond3: option xmit_hash_policy: invalid value (64)
[  133.825569][ T7188] bond3 (unregistering): Released all slaves
[  135.042261][ T7191] infiniband syz1: set down
[  135.048648][ T7191] infiniband syz1: added ipvlan0
[  135.085151][ T7191] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  135.113813][ T7191] infiniband syz1: Couldn't open port 1
[  135.256496][ T7191] RDS/IB: syz1: added
[  135.272517][ T7191] smc: adding ib device syz1 with port count 1
[  135.310379][ T7191] smc:    ib device syz1 port 1 has no pnetid
[  135.536221][ T7272] __nla_validate_parse: 1 callbacks suppressed
[  135.536244][ T7272] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.379'.
[  135.583139][ T7284] vlan2: entered promiscuous mode
[  135.588681][ T7284] vlan2: entered allmulticast mode
[  135.628359][ T7284] hsr_slave_1: entered allmulticast mode
[  135.734852][ T7284] pim6reg: entered allmulticast mode
[  136.389607][ T7309] netlink: 20 bytes leftover after parsing attributes in process `syz.4.389'.
[  136.422190][ T7309] netlink: 20 bytes leftover after parsing attributes in process `syz.4.389'.
[  136.611121][ T7314] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode
[  136.634791][ T7314] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode
[  136.951630][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.396'.
[  136.985302][ T7332] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  136.999830][ T7330] netlink: 60 bytes leftover after parsing attributes in process `syz.4.396'.
[  137.363131][ T7347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.402'.
[  137.556300][ T7355] netlink: 'syz.4.407': attribute type 15 has an invalid length.
[  137.771311][ T7351] bridge1: entered promiscuous mode
[  137.776613][ T7351] bridge1: entered allmulticast mode
[  137.833170][ T7364] netlink: 'syz.0.404': attribute type 3 has an invalid length.
[  137.894989][ T7368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.410'.
[  137.910826][ T7365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.409'.
[  138.327354][ T7374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.411'.
[  138.413895][ T7386] netlink: 'syz.3.415': attribute type 1 has an invalid length.
[  138.528487][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  138.666350][ T7395] IPVS: length: 170 != 24
[  138.809974][ T7400] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  138.931064][ T7408] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.147413][ T7416] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.423'.
[  140.467752][ T7470] netlink: 'syz.2.443': attribute type 1 has an invalid length.
[  140.888656][ T7486] netlink: 'syz.3.449': attribute type 7 has an invalid length.
[  141.597068][ T7526] lo: entered allmulticast mode
[  141.604976][ T7526] tunl0: entered allmulticast mode
[  141.611635][ T7526] gre0: entered allmulticast mode
[  141.616872][ T7526] gretap0: entered allmulticast mode
[  141.639557][ T7526] erspan0: entered allmulticast mode
[  141.670081][ T7526] ip_vti0: entered allmulticast mode
[  141.691409][ T7526] ip6_vti0: entered allmulticast mode
[  141.697075][ T7526] sit0: entered allmulticast mode
[  141.702621][ T7526] ip6tnl0: entered allmulticast mode
[  141.708216][ T7526] ip6gre0: entered allmulticast mode
[  141.724011][ T7526] syz_tun: entered allmulticast mode
[  141.738286][ T7526] ip6gretap0: entered allmulticast mode
[  141.785757][ T7526] bridge0: entered allmulticast mode
[  141.795660][ T7526] vcan0: entered allmulticast mode
[  141.808588][ T7526] `: entered allmulticast mode
[  141.818160][ T7526] team0: entered allmulticast mode
[  141.824967][ T7526] nlmon0: entered allmulticast mode
[  141.830842][ T7526] caif0: entered allmulticast mode
[  141.836417][ T7526] batadv0: entered allmulticast mode
[  141.842400][ T7526] vxcan0: entered allmulticast mode
[  141.849894][ T7526] vxcan1: entered allmulticast mode
[  141.855611][ T7526] veth0: entered allmulticast mode
[  141.877155][ T7526] veth1: entered allmulticast mode
[  141.889742][ T7526] wg0: entered allmulticast mode
[  141.929416][ T7526] wg1: entered allmulticast mode
[  141.934631][ T7526] wg2: entered allmulticast mode
[  141.959697][ T7526] veth0_to_bridge: entered allmulticast mode
[  141.969213][ T7526] bridge_slave_0: entered allmulticast mode
[  141.975883][ T7526] veth1_to_bridge: entered allmulticast mode
[  141.989983][ T7526] bridge_slave_1: entered allmulticast mode
[  141.996435][ T7526] veth0_to_bond: entered allmulticast mode
[  142.004747][ T7526] bond_slave_0: entered allmulticast mode
[  142.012347][ T7526] veth1_to_bond: entered allmulticast mode
[  142.027413][ T7526] bond_slave_1: entered allmulticast mode
[  142.036907][ T7526] veth0_to_team: entered allmulticast mode
[  142.044968][ T7526] team_slave_0: entered allmulticast mode
[  142.052801][ T7526] veth1_to_team: entered allmulticast mode
[  142.059260][ T7526] team_slave_1: entered allmulticast mode
[  142.065616][ T7526] veth0_to_batadv: entered allmulticast mode
[  142.074975][ T7526] batadv_slave_0: entered allmulticast mode
[  142.081887][ T7526] veth1_to_batadv: entered allmulticast mode
[  142.088729][ T7526] batadv_slave_1: entered allmulticast mode
[  142.097888][ T7526] xfrm0: entered allmulticast mode
[  142.105080][ T7526] veth0_to_hsr: entered allmulticast mode
[  142.116484][ T7526] hsr_slave_0: entered allmulticast mode
[  142.128380][ T7526] veth1_to_hsr: entered allmulticast mode
[  142.174808][ T7526] hsr0: entered allmulticast mode
[  142.205600][ T7526] veth1_vlan: entered allmulticast mode
[  142.243981][ T7526] veth0_vlan: entered allmulticast mode
[  142.422694][ T7526] vlan0: entered allmulticast mode
[  142.436917][ T7526] vlan1: entered allmulticast mode
[  142.457226][ T7526] macvlan0: entered allmulticast mode
[  142.484267][ T7526] macvlan1: entered allmulticast mode
[  142.513587][ T7526] ipvlan0: entered allmulticast mode
[  142.528683][ T7526] ipvlan1: entered allmulticast mode
[  142.546618][ T7526] veth1_macvtap: entered allmulticast mode
[  142.567944][ T7526] veth0_macvtap: entered allmulticast mode
[  142.627679][ T7526] macvtap0: entered allmulticast mode
[  142.645790][ T7526] macsec0: entered allmulticast mode
[  142.666445][ T7526] geneve0: entered allmulticast mode
[  142.690595][ T7526] geneve1: entered allmulticast mode
[  142.704796][ T7526] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  142.726499][ T7526] netdevsim netdevsim0 netdevsim1: entered allmulticast mode
[  142.742001][ T7526] netdevsim netdevsim0 netdevsim2: entered allmulticast mode
[  142.755757][ T7526] netdevsim netdevsim0 netdevsim3: entered allmulticast mode
[  142.798272][ T7526] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  142.819766][ T7526] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  142.831384][ T7526] gtp0: left promiscuous mode
[  142.836162][ T7526] gtp0: entered allmulticast mode
[  142.857056][ T7526] macsec1: entered allmulticast mode
[  142.877935][ T7526] ipvlan2: entered allmulticast mode
[  142.887660][ T7526] macsec2: entered allmulticast mode
[  142.895845][ T7526] erspan1: entered allmulticast mode
[  142.902920][ T7526] vlan2: left promiscuous mode
[  142.912327][ T7526] bridge1: left promiscuous mode
[  142.959779][ T7547] macvtap1: entered allmulticast mode
[  142.977709][ T7547] veth0_macvtap: entered allmulticast mode
[  143.025206][ T7555] geneve3: entered promiscuous mode
[  143.049811][ T1338] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.083218][ T1338] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.178285][ T7563] __nla_validate_parse: 3 callbacks suppressed
[  143.178309][ T7563] netlink: 32 bytes leftover after parsing attributes in process `syz.0.470'.
[  143.244050][ T1338] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.286232][ T1338] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.312760][ T7568] netlink: 5948 bytes leftover after parsing attributes in process `syz.3.471'.
[  143.405952][ T7561] macsec0: left allmulticast mode
[  143.425227][ T7568] syzkaller1: entered promiscuous mode
[  143.466217][ T7568] syzkaller1: entered allmulticast mode
[  143.854909][ T7588] syzkaller0: entered promiscuous mode
[  143.889203][ T7588] syzkaller0: entered allmulticast mode
[  144.054207][ T7601] netlink: 48 bytes leftover after parsing attributes in process `syz.1.484'.
[  144.378144][ T7611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.488'.
[  144.421922][ T7615] xt_TCPMSS: Only works on TCP SYN packets
[  144.467778][ T7616] netlink: 'syz.3.490': attribute type 15 has an invalid length.
[  144.610214][ T7618] netlink: 24 bytes leftover after parsing attributes in process `syz.4.491'.
[  144.635915][ T7618] netlink: 'syz.4.491': attribute type 21 has an invalid length.
[  144.660311][ T7618] netlink: 156 bytes leftover after parsing attributes in process `syz.4.491'.
[  144.692376][ T7629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.493'.
[  145.015097][ T7642] netlink: 64 bytes leftover after parsing attributes in process `syz.0.499'.
[  145.190662][ T7648] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  145.216133][ T7650] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  145.260938][ T7650] netlink: 24 bytes leftover after parsing attributes in process `syz.3.502'.
[  145.364631][ T7656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.505'.
[  145.683354][ T7667] netlink: 'syz.2.507': attribute type 3 has an invalid length.
[  146.175258][ T7686] ieee802154 phy0 wpan0: encryption failed: -22
[  146.474261][ T7697] syzkaller0: entered promiscuous mode
[  146.491347][ T7697] syzkaller0: entered allmulticast mode
[  146.515665][ T7697] 0: reclassify loop, rule prio 0, protocol 800
[  146.752136][ T7706] scsi_nl_rcv_msg: discarding partial skb
[  146.781841][ T7706] netlink: 'syz.0.519': attribute type 1 has an invalid length.
[  147.060770][ T7706] bond1: entered promiscuous mode
[  147.161700][ T7706] 8021q: adding VLAN 0 to HW filter on device bond1
[  147.233893][ T7726] bond1: (slave bridge0): making interface the new active one
[  147.250983][ T7740] netlink: 'syz.2.527': attribute type 10 has an invalid length.
[  147.259372][ T7726] bridge0: entered promiscuous mode
[  147.266841][ T7726] bond1: (slave bridge0): Enslaving as an active interface with an up link
[  147.295992][ T7734] netlink: 'syz.3.525': attribute type 3 has an invalid length.
[  148.103352][ T7775] syzkaller0: entered promiscuous mode
[  148.113448][ T7775] syzkaller0: entered allmulticast mode
[  148.140291][ T7775] 0: reclassify loop, rule prio 0, protocol 800
[  148.467629][ T7790] netlink: 'syz.3.539': attribute type 10 has an invalid length.
[  148.624366][ T7790] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  148.959812][ T7811] netlink: 'syz.4.544': attribute type 3 has an invalid length.
[  148.971048][ T7811] __nla_validate_parse: 3 callbacks suppressed
[  148.971073][ T7811] netlink: 32 bytes leftover after parsing attributes in process `syz.4.544'.
[  149.011282][ T7815] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  149.051521][ T7822] tipc: Started in network mode
[  149.087257][ T7822] tipc: Node identity aec58ee26425, cluster identity 4711
[  149.112890][ T7822] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  149.170011][ T7814] syzkaller0: entered promiscuous mode
[  149.191351][ T7814] syzkaller0: entered allmulticast mode
[  149.270812][ T7814] tipc: Resetting bearer <eth:syzkaller0>
[  149.378763][ T7814] tipc: Disabling bearer <eth:syzkaller0>
[  149.614824][ T7831] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  149.636527][ T7843] netlink: 'syz.4.552': attribute type 17 has an invalid length.
[  149.689119][ T7843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.552'.
[  149.749228][ T7843] netlink: 28 bytes leftover after parsing attributes in process `syz.4.552'.
[  149.802927][ T7851] netlink: 16 bytes leftover after parsing attributes in process `syz.0.554'.
[  150.118917][ T7853] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.152892][ T7853] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  150.393386][ T7853] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.417105][ T7878] netlink: 20 bytes leftover after parsing attributes in process `syz.1.561'.
[  150.426280][ T7878] netlink: 24 bytes leftover after parsing attributes in process `syz.1.561'.
[  150.437982][ T7853] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  150.672260][ T7853] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.709256][ T7853] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  150.792114][ T7892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.566'.
[  150.812899][ T7892] netlink: 'syz.0.566': attribute type 1 has an invalid length.
[  151.063117][ T7853] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.129341][ T7853] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  151.212652][ T7907] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  151.286697][ T7916] netlink: 14 bytes leftover after parsing attributes in process `syz.0.571'.
[  151.471480][ T7926] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.572'.
[  151.538247][ T1152] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  151.573919][ T1152] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  151.661072][ T1152] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  151.685964][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.573'.
[  151.700098][ T1152] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  151.749501][ T7932] netlink: 'syz.0.574': attribute type 2 has an invalid length.
[  151.797289][ T7929] SET target dimension over the limit!
[  151.827142][ T7929] netlink: 'syz.2.573': attribute type 39 has an invalid length.
[  151.858107][   T61] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  151.887824][   T61] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  152.071918][   T61] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  152.112923][   T61] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  152.382341][ T7956] bond3: Unable to set up delay as MII monitoring is disabled
[  152.394536][ T7956] bond3 (unregistering): Released all slaves
[  153.089585][ T7998] workqueue: name exceeds WQ_NAME_LEN. Truncating to: �&��%����Q�0@æj��ʫ�����}
[  153.667692][ T8020] team_slave_0: entered promiscuous mode
[  153.673629][ T8020] team_slave_1: entered promiscuous mode
[  153.715847][ T8020] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  153.767117][ T8023] netlink: 'syz.2.599': attribute type 1 has an invalid length.
[  154.701683][ T8073] netlink: 'syz.2.612': attribute type 1 has an invalid length.
[  154.880853][ T8081] __nla_validate_parse: 12 callbacks suppressed
[  154.880876][ T8081] netlink: 16 bytes leftover after parsing attributes in process `syz.4.615'.
[  154.932501][ T8077] tipc: Started in network mode
[  154.953029][ T8077] tipc: Node identity fa70b4321358, cluster identity 4711
[  154.984991][ T8077] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  154.994690][ T8083] syzkaller0: entered promiscuous mode
[  155.000805][ T8083] syzkaller0: entered allmulticast mode
[  155.028705][ T8089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.613'.
[  155.088376][ T8083] tipc: Resetting bearer <eth:syzkaller0>
[  155.209626][ T8075] tipc: Resetting bearer <eth:syzkaller0>
[  155.322282][ T8075] tipc: Disabling bearer <eth:syzkaller0>
[  155.616961][ T8111] netlink: 16 bytes leftover after parsing attributes in process `syz.3.621'.
[  155.967537][ T8126] netlink: 24 bytes leftover after parsing attributes in process `syz.0.625'.
[  156.654986][ T8140] netlink: 'syz.4.631': attribute type 4 has an invalid length.
[  156.740600][ T8142] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.632'.
[  156.803654][ T8121] netlink: 37 bytes leftover after parsing attributes in process `syz.2.624'.
[  156.823436][ T8145] netlink: 224 bytes leftover after parsing attributes in process `syz.0.633'.
[  156.858133][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.633'.
[  156.902129][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.633'.
[  156.983248][ T8145] netlink: 20 bytes leftover after parsing attributes in process `syz.0.633'.
[  157.118980][ T8159] netlink: 'syz.1.636': attribute type 3 has an invalid length.
[  157.643210][ T8181] netlink: 'syz.3.644': attribute type 1 has an invalid length.
[  157.698306][ T8181] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  157.723869][ T8184] syzkaller0: entered promiscuous mode
[  157.738315][ T8188] nftables ruleset with unbound set
[  157.745704][ T8184] syzkaller0: entered allmulticast mode
[  157.759779][ T8184] netlink: 'syz.2.645': attribute type 21 has an invalid length.
[  157.780653][ T8184] sctp: [Deprecated]: syz.2.645 (pid 8184) Use of int in max_burst socket option deprecated.
[  157.780653][ T8184] Use struct sctp_assoc_value instead
[  158.737702][ T8233] netlink: 'syz.3.657': attribute type 1 has an invalid length.
[  158.746729][ T8236] netlink: 'syz.2.658': attribute type 2 has an invalid length.
[  158.913897][ T8241] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  158.951056][ T8243] netlink: 'syz.2.660': attribute type 3 has an invalid length.
[  159.213471][ T8249] netlink: 'syz.2.662': attribute type 3 has an invalid length.
[  159.276195][ T8248] netlink: 'syz.4.663': attribute type 2 has an invalid length.
[  159.715952][ T8271] IPVS: ip_vs_edit_dest(): server weight less than zero
[  159.723734][ T5893] IPVS: starting estimator thread 0...
[  159.731744][ T8270] IPVS: ip_vs_edit_dest(): server weight less than zero
[  159.753967][  T891] hid-generic 0005:0002:5508.0002: item fetching failed at offset 0/1
[  159.771774][  T891] hid-generic 0005:0002:5508.0002: probe with driver hid-generic failed with error -22
[  159.839118][ T8274] IPVS: using max 24 ests per chain, 57600 per kthread
[  160.013651][ T8282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  160.089957][ T8288] __nla_validate_parse: 7 callbacks suppressed
[  160.089978][ T8288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.673'.
[  160.156172][ T8281] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  160.202954][ T8290] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.224480][ T8294] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.951437][ T8310] vcan0: entered allmulticast mode
[  161.182356][ T8325] tipc: Started in network mode
[  161.201901][ T8325] tipc: Node identity ac14140f, cluster identity 4711
[  161.214333][ T8325] tipc: New replicast peer: 255.255.255.255
[  161.226881][ T8325] tipc: Enabled bearer <udp:syz2>, priority 10
[  161.396951][ T8337] xt_hashlimit: size too large, truncated to 1048576
[  161.424126][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.687'.
[  161.490241][ T8340] vlan2: entered promiscuous mode
[  161.495361][ T8340] bridge0: entered promiscuous mode
[  161.503712][ T8343] netlink: 212 bytes leftover after parsing attributes in process `syz.4.687'.
[  161.616506][ T8351] netlink: 16 bytes leftover after parsing attributes in process `syz.1.689'.
[  161.896321][ T8359] netlink: 100 bytes leftover after parsing attributes in process `syz.2.693'.
[  162.010972][   T30] audit: type=1804 audit(1766685721.200:2): pid=8367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.694" name="/newroot/132/cgroup.controllers" dev="tmpfs" ino=685 res=1 errno=0
[  162.051043][   T30] audit: type=1800 audit(1766685721.240:3): pid=8367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.694" name="cgroup.controllers" dev="tmpfs" ino=685 res=0 errno=0
[  162.351505][  T891] tipc: Node number set to 2886997007
[  162.671722][ T8360] netlink: 'syz.4.692': attribute type 11 has an invalid length.
[  162.680609][ T8360] netlink: 224 bytes leftover after parsing attributes in process `syz.4.692'.
[  162.963565][ T8390] syzkaller0: entered promiscuous mode
[  162.969818][ T8390] syzkaller0: entered allmulticast mode
[  163.267212][ T8405] lo speed is unknown, defaulting to 1000
[  163.424216][ T8405] lo speed is unknown, defaulting to 1000
[  163.447411][ T8405] lo speed is unknown, defaulting to 1000
[  163.618814][ T8412] team0: Device gtp0 is up. Set it down before adding it as a team port
[  163.835500][ T6010] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.041740][ T6010] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.052977][ T8405] infiniband syz2: set down
[  164.059525][ T8405] infiniband syz2: added lo
[  164.089752][  T891] lo speed is unknown, defaulting to 1000
[  164.171767][ T8405] RDS/IB: syz2: added
[  164.202016][ T8405] smc: adding ib device syz2 with port count 1
[  164.208276][ T8405] smc:    ib device syz2 port 1 has no pnetid
[  164.246736][ T6010] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.346958][   T24] lo speed is unknown, defaulting to 1000
[  164.447600][ T8405] lo speed is unknown, defaulting to 1000
[  164.506797][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  164.516491][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  164.525155][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  164.533332][ T6010] bond0: (slave netdevsim0): Releasing backup interface
[  164.535202][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  164.577996][ T8444] netlink: 'syz.1.718': attribute type 11 has an invalid length.
[  164.589180][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  164.619427][ T8444] netlink: 224 bytes leftover after parsing attributes in process `syz.1.718'.
[  164.629586][ T6010] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.902407][ T8451] netlink: 'syz.1.721': attribute type 4 has an invalid length.
[  164.976392][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.720'.
[  165.019677][ T8453] netlink: 16 bytes leftover after parsing attributes in process `syz.0.720'.
[  165.089500][ T6010] bridge_slave_1: left allmulticast mode
[  165.095500][ T6010] bridge_slave_1: left promiscuous mode
[  165.133266][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.226750][ T6010] bridge_slave_0: left promiscuous mode
[  165.259387][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.313263][ T8467] openvswitch: netlink: Actions may not be safe on all matching packets
[  165.505799][ T8472] netlink: 28 bytes leftover after parsing attributes in process `syz.1.725'.
[  166.631307][ T6010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  166.643365][ T6010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  166.653873][ T6010] bond0 (unregistering): Released all slaves
[  166.680499][ T5833] Bluetooth: hci1: command tx timeout
[  166.795159][ T8480] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.803040][ T8480] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.824819][ T8480] team_slave_0: left promiscuous mode
[  166.831319][ T8480] team_slave_1: left promiscuous mode
[  166.877804][ T8480] bridge_slave_0: left allmulticast mode
[  166.884327][ T8480] bridge_slave_0: left promiscuous mode
[  166.890854][ T8480] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.912700][ T8480] bridge_slave_1: left allmulticast mode
[  166.918606][ T8480] bridge_slave_1: left promiscuous mode
[  166.925247][ T8480] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.942318][ T8480] bond0: (slave bond_slave_0): Releasing backup interface
[  166.956673][ T8480] bond0: (slave bond_slave_1): Releasing backup interface
[  166.974633][ T8480] team0: Port device team_slave_0 removed
[  166.990291][ T8480] team0: Port device team_slave_1 removed
[  167.004075][ T8480] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  167.017841][ T8480] batman_adv: batadv0: Removing interface: batadv_slave_0
[  167.031933][ T8480] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  167.043867][ T8480] batman_adv: batadv0: Removing interface: batadv_slave_1
[  167.060534][ T8480] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  167.077002][ T8405] lo speed is unknown, defaulting to 1000
[  167.086973][ T6010] tipc: Left network mode
[  168.104113][ T8534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.736'.
[  168.174545][ T8540] netlink: 'syz.1.737': attribute type 14 has an invalid length.
[  168.220929][ T8405] lo speed is unknown, defaulting to 1000
[  168.265569][ T8539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.737'.
[  168.341140][ T8539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.737'.
[  168.486746][ T8547] netlink: 'syz.2.738': attribute type 9 has an invalid length.
[  168.494764][ T8547] netlink: 'syz.2.738': attribute type 11 has an invalid length.
[  168.502941][ T8547] netlink: 'syz.2.738': attribute type 12 has an invalid length.
[  168.512643][ T8547] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.738'.
[  168.535876][ T8547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.738'.
[  168.759718][ T5833] Bluetooth: hci1: command tx timeout
[  168.869702][ T8563] netlink: 'syz.2.743': attribute type 13 has an invalid length.
[  168.875872][ T8566] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  168.893723][ T8566] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  168.903388][ T8566] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  168.911994][ T8563] netlink: 'syz.2.743': attribute type 58 has an invalid length.
[  168.925630][ T8563] netlink: 152 bytes leftover after parsing attributes in process `syz.2.743'.
[  169.102341][ T8442] lo speed is unknown, defaulting to 1000
[  169.441779][ T8405] lo speed is unknown, defaulting to 1000
[  169.945366][ T8599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.748'.
[  170.223346][ T8405] lo speed is unknown, defaulting to 1000
[  170.450428][ T8442] chnl_net:caif_netlink_parms(): no params data found
[  170.839117][ T5833] Bluetooth: hci1: command tx timeout
[  170.852728][ T8628] netlink: 28 bytes leftover after parsing attributes in process `syz.2.754'.
[  171.419404][ T8442] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.437389][ T8442] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.466775][ T8442] bridge_slave_0: entered allmulticast mode
[  171.509726][ T8442] bridge_slave_0: entered promiscuous mode
[  171.599830][ T8442] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.607074][ T8442] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.656734][ T8442] bridge_slave_1: entered allmulticast mode
[  171.711524][ T8671] netlink: 'syz.2.760': attribute type 10 has an invalid length.
[  171.712558][ T8442] bridge_slave_1: entered promiscuous mode
[  171.785831][ T8674] netlink: 68 bytes leftover after parsing attributes in process `syz.1.762'.
[  171.826472][ T8674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.762'.
[  171.876838][ T8676] netlink: 52 bytes leftover after parsing attributes in process `syz.1.762'.
[  171.964938][ T8671] team0: Device veth1_macvtap failed to register rx_handler
[  172.098495][ T8682] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.765'.
[  172.131712][ T8682] openvswitch: netlink: Port 167772160 exceeds max allowable 65535
[  172.194327][ T8686] netlink: 'syz.2.766': attribute type 1 has an invalid length.
[  172.215687][ T8686] netlink: 212 bytes leftover after parsing attributes in process `syz.2.766'.
[  172.249493][ T8686] netlink: 5 bytes leftover after parsing attributes in process `syz.2.766'.
[  172.258405][ T6010] hsr_slave_0: left promiscuous mode
[  172.274758][ T6010] hsr_slave_1: left promiscuous mode
[  172.290719][ T6010] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  172.322082][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_0
[  172.364826][ T6010] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  172.372487][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_1
[  172.393791][ T8690] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.768'.
[  172.462938][ T6010] veth1_macvtap: left promiscuous mode
[  172.476100][ T6010] veth0_macvtap: left promiscuous mode
[  172.491033][ T6010] veth1_vlan: left promiscuous mode
[  172.507710][ T6010] veth0_vlan: left promiscuous mode
[  172.765447][ T8701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.772'.
[  172.919139][ T5833] Bluetooth: hci1: command tx timeout
[  173.130623][ T8705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.773'.
[  173.474589][ T6010] vcan0 (unregistering): left allmulticast mode
[  173.505496][ T8442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  173.686072][ T8442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  174.026970][ T8711] gtp0: entered promiscuous mode
[  174.032210][ T8711] gtp0: entered allmulticast mode
[  174.088950][ T8442] team0: Port device team_slave_0 added
[  174.110863][ T8442] team0: Port device team_slave_1 added
[  174.474322][ T8442] batman_adv: batadv0: Adding interface: batadv_slave_0
[  174.495823][ T8442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  174.525419][ T8442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  174.632714][ T8442] batman_adv: batadv0: Adding interface: batadv_slave_1
[  174.709176][ T8442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  174.763181][ T8757] delete_channel: no stack
[  174.772492][ T8442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  174.837996][ T8762] netlink: 'syz.0.788': attribute type 3 has an invalid length.
[  175.091313][ T8442] hsr_slave_0: entered promiscuous mode
[  175.100895][ T8442] hsr_slave_1: entered promiscuous mode
[  175.110349][ T8442] debugfs: 'hsr0' already exists in 'hsr'
[  175.116269][ T8442] Cannot create hsr debugfs directory
[  176.083593][ T8442] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  176.139446][ T8442] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  176.174374][ T8442] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  176.485769][ T8830] __nla_validate_parse: 3 callbacks suppressed
[  176.485790][ T8830] netlink: 20 bytes leftover after parsing attributes in process `syz.2.802'.
[  176.572015][ T8442] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  176.795186][ T8844] xt_TCPMSS: Only works on TCP SYN packets
[  176.872252][ T8845] pimreg3: entered allmulticast mode
[  177.226120][ T8442] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.260916][ T8868] lo: left promiscuous mode
[  177.284252][ T8868] tunl0: left promiscuous mode
[  177.300998][ T8868] gre0: left promiscuous mode
[  177.313691][ T8868] gretap0: left promiscuous mode
[  177.331210][ T8868] erspan0: left promiscuous mode
[  177.352720][ T8868] ip_vti0: left promiscuous mode
[  177.454421][ T8868] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.567650][ T8881] netlink: 'syz.1.813': attribute type 1 has an invalid length.
[  177.628753][ T8868] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  177.701510][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.809'.
[  177.832574][ T8442] 8021q: adding VLAN 0 to HW filter on device team0
[  177.876086][ T1004] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.883392][ T1004] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.951595][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.958926][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.056510][ T8898] ipvlan1: left allmulticast mode
[  178.524827][ T8914] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  178.586391][ T8914] netlink: 16 bytes leftover after parsing attributes in process `syz.4.822'.
[  178.725207][ T8919] netlink: 64 bytes leftover after parsing attributes in process `syz.0.823'.
[  178.973998][ T8442] 8021q: adding VLAN 0 to HW filter on device batadv0
[  179.145733][ T8939] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  179.306146][ T8945] netlink: 'syz.4.829': attribute type 1 has an invalid length.
[  179.373104][ T8947] netlink: 24 bytes leftover after parsing attributes in process `syz.1.826'.
[  179.711056][ T8968] netlink: 20 bytes leftover after parsing attributes in process `syz.0.834'.
[  179.820159][ T8968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.834'.
[  180.174890][ T8990] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.838'.
[  180.205375][ T8990] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  180.298151][ T8442] veth0_vlan: entered promiscuous mode
[  180.382220][ T8442] veth1_vlan: entered promiscuous mode
[  180.536518][ T8442] veth0_macvtap: entered promiscuous mode
[  180.564415][ T8442] veth1_macvtap: entered promiscuous mode
[  180.655008][ T8442] batman_adv: batadv0: Interface activated: batadv_slave_0
[  180.687344][ T8442] batman_adv: batadv0: Interface activated: batadv_slave_1
[  180.769603][   T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  180.796969][   T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  180.833334][   T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  180.877041][   T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  181.024353][ T9019] netlink: 28 bytes leftover after parsing attributes in process `syz.4.848'.
[  181.097949][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.124493][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.277073][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.312367][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.321338][ T9027] netlink: 'syz.4.849': attribute type 1 has an invalid length.
[  181.586314][ T9028] 8021q: adding VLAN 0 to HW filter on device bond5
[  181.596058][ T9028] bond4: (slave bond5): making interface the new active one
[  181.604377][ T9028] bond4: (slave bond5): Enslaving as an active interface with an up link
[  181.725698][ T9036] x_tables: unsorted underflow at hook 3
[  181.742772][ T9036] x_tables: duplicate underflow at hook 1
[  182.146303][ T9070] netlink: 88 bytes leftover after parsing attributes in process `syz.5.857'.
[  182.292589][ T9075] netlink: 'syz.4.858': attribute type 1 has an invalid length.
[  182.328365][ T9076] netlink: 'syz.4.858': attribute type 21 has an invalid length.
[  182.382474][ T9076] netlink: 128 bytes leftover after parsing attributes in process `syz.4.858'.
[  182.403589][ T9076] netlink: 3 bytes leftover after parsing attributes in process `syz.4.858'.
[  183.096467][ T9117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.871'.
[  183.231067][ T9117] netlink: 16 bytes leftover after parsing attributes in process `syz.0.871'.
[  183.549879][ T9139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.878'.
[  183.577794][ T9139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.878'.
[  183.637730][ T9145] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.878'.
[  183.670821][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.880'.
[  183.680400][ T9144] netlink: 88 bytes leftover after parsing attributes in process `syz.4.880'.
[  183.780077][ T9149] tipc: Started in network mode
[  183.790813][ T9149] tipc: Node identity c22b9e010f9b, cluster identity 4711
[  183.838156][ T9149] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  183.940228][ T9153] tipc: Resetting bearer <eth:syzkaller0>
[  184.209468][ T9169] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  184.301471][ T9147] tipc: Disabling bearer <eth:syzkaller0>
[  184.378231][ T9177] netlink: 'syz.1.891': attribute type 2 has an invalid length.
[  184.483005][ T9173] syz.2.889 (9173) used greatest stack depth: 15968 bytes left
[  184.746388][ T9192] ip6tnl2: entered promiscuous mode
[  184.814094][ T7727] udevd[7727]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  184.938283][ T7727] udevd[7727]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  185.196642][ T9221] IPv6: NLM_F_CREATE should be specified when creating new route
[  185.844285][ T9260] netlink: 'syz.2.909': attribute type 15 has an invalid length.
[  186.328071][ T9281] netlink: 'syz.4.916': attribute type 7 has an invalid length.
[  186.704469][ T9300] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  186.763044][ T9296] bond0: Invalid ad_actor_system MAC address.
[  186.780486][ T9296] bond0: option ad_actor_system: invalid value (1)
[  186.827530][ T9296] bond0 (unregistering): Released all slaves
[  186.990999][ T9316] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  187.118779][ T9307] netlink: 'syz.4.926': attribute type 18 has an invalid length.
[  187.169642][ T9307] __nla_validate_parse: 18 callbacks suppressed
[  187.169665][ T9307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.926'.
[  187.284683][ T9307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.926'.
[  187.284961][   T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  187.326496][ T9307] netlink: 'syz.4.926': attribute type 18 has an invalid length.
[  187.358868][ T9307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.926'.
[  187.373772][   T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  187.417918][   T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  187.452258][   T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  187.493144][ T9328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.929'.
[  187.820969][ T9335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.931'.
[  187.830208][ T9332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.928'.
[  187.852175][ T9335] netlink: 24 bytes leftover after parsing attributes in process `syz.1.931'.
[  187.872327][ T9335] netlink: 24 bytes leftover after parsing attributes in process `syz.1.931'.
[  187.885207][ T9344] netlink: 277 bytes leftover after parsing attributes in process `syz.0.933'.
[  188.093856][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.934'.
[  188.883887][ T9379] tunl0: entered promiscuous mode
[  188.909907][ T9379] netlink: 'syz.1.942': attribute type 3 has an invalid length.
[  188.963107][ T9381] ksmbd: Unknown IPC event: 3, ignore.
[  189.373306][ T9399] netlink: 'syz.0.949': attribute type 1 has an invalid length.
[  189.383602][ T9399] netlink: 'syz.0.949': attribute type 4 has an invalid length.
[  189.770270][ T9418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  190.061919][ T9426] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.299825][ T9431] IPVS: set_ctl: invalid protocol: 98 10.1.1.2:20004
[  190.550097][ T9448] vcan0: entered allmulticast mode
[  190.635364][ T9449] netlink: 'syz.5.964': attribute type 1 has an invalid length.
[  190.974008][ T9468] sock: sock_set_timeout: `syz.0.970' (pid 9468) tries to set negative timeout
[  191.292760][ T9475] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  191.884365][ T9483] team0 (unregistering): Port device team_slave_0 removed
[  191.913196][ T9483] team0 (unregistering): Port device team_slave_1 removed
[  192.286996][ T9516] netlink: 'syz.2.985': attribute type 3 has an invalid length.
[  192.297148][ T9515] __nla_validate_parse: 20 callbacks suppressed
[  192.297167][ T9515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.984'.
[  192.342705][ T9515] macsec3: entered promiscuous mode
[  192.712031][ T9531] xt_bpf: check failed: parse error
[  192.836844][ T9535] : entered promiscuous mode
[  193.534765][ T9566] : entered promiscuous mode
[  193.716272][ T9572] netlink: 'syz.5.1002': attribute type 4 has an invalid length.
[  193.915030][ T9580] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  193.955166][ T9580] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1004'.
[  194.144888][ T9589] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1006'.
[  194.467601][ T9604] netlink: 'syz.0.1010': attribute type 22 has an invalid length.
[  194.510009][ T9604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1010'.
[  194.635313][   T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  194.651843][ T9617] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1013'.
[  194.685844][   T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  194.727593][   T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  194.744091][ T9622] netlink: 'syz.4.1014': attribute type 1 has an invalid length.
[  195.007694][ T9633] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1014'.
[  195.020282][   T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  195.095349][ T9620] 8021q: adding VLAN 0 to HW filter on device bond7
[  195.115137][ T9620] bond6: (slave bond7): making interface the new active one
[  195.124103][ T9620] bond6: (slave bond7): Enslaving as an active interface with an up link
[  195.229640][ T9630] bond6: (slave gretap1): Enslaving as a backup interface with an up link
[  195.399207][ T9633] 8021q: adding VLAN 0 to HW filter on device bond6
[  195.702890][ T9652] tipc: Enabling of bearer <u˩:s> rejected, media not registered
[  195.745941][ T9652] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1021'.
[  195.770436][ T9647] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1020'.
[  195.790736][ T9652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1021'.
[  195.858193][ T9658] sit0: entered promiscuous mode
[  195.877279][ T9658] sit0: left allmulticast mode
[  195.892005][ T9658] netlink: 'syz.0.1022': attribute type 1 has an invalid length.
[  195.950018][ T9658] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1022'.
[  196.466457][ T9679] syzkaller0: entered promiscuous mode
[  196.491841][ T9679] syzkaller0: entered allmulticast mode
[  196.843776][ T9701] openvswitch: netlink: Tunnel attr 195 out of range max 16
[  197.388232][ T9729] xt_NFQUEUE: number of queues (27568) out of range (got 68779)
[  197.469350][ T9735] netlink: 'syz.4.1040': attribute type 21 has an invalid length.
[  197.496742][ T9735] __nla_validate_parse: 2 callbacks suppressed
[  197.496763][ T9735] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1040'.
[  197.934864][ T9751] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1042'.
[  199.530170][ T7467] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  199.541857][ T7467] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  199.551292][ T7467] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  199.560115][ T7467] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0
[  217.399218][ T5830] Bluetooth: hci3: command 0x0406 tx timeout
[  217.399226][ T5828] Bluetooth: hci2: command 0x0406 tx timeout
[  224.330023][ T5833] Bluetooth: hci1: link tx timeout
[  224.335583][ T5833] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  226.359321][ T5839] Bluetooth: hci1: command 0x0406 tx timeout
[  265.379340][ T9920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1049'.
[  265.389862][ T9920] openvswitch: netlink: Missing key (keys=40, expected=80)
[  265.441887][ T9922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1048'.
[  265.613334][ T9925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1052'.
[  265.638324][ T9925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1052'.
[  265.658534][ T9935] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1050'.
[  265.675682][ T9939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1053'.
[  265.935105][ T9957] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1056'.
[  265.949708][ T9960] netlink: 'syz.1.1054': attribute type 1 has an invalid length.
[  266.019619][ T9960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1054'.
[  266.133621][ T9960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1054'.
[  266.624010][ T9985] team0 (unregistering): Port device team_slave_0 removed
[  266.643082][ T9985] team0 (unregistering): Port device team_slave_1 removed
[  266.700879][ T9985] team0 (unregistering): Port device dummy0 removed
[  266.852543][ T9998] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  266.960108][T10007] netlink: 516 bytes leftover after parsing attributes in process `syz.4.1065'.
[  267.003543][ T9999] syzkaller0: entered promiscuous mode
[  267.013217][T10007] IPVS: set_ctl: invalid protocol: 46 0.0.0.0:20004
[  267.020692][ T9999] syzkaller0: entered allmulticast mode
[  267.051290][ T9989] tipc: Resetting bearer <eth:syzkaller0>
[  267.161773][ T9989] tipc: Disabling bearer <eth:syzkaller0>
[  267.680254][T10036] macvtap1: entered promiscuous mode
[  267.685651][T10036] vlan0: entered promiscuous mode
[  267.729986][T10036] bridge0: entered promiscuous mode
[  267.756516][T10036] macvtap1: entered allmulticast mode
[  267.778477][T10036] vlan0: entered allmulticast mode
[  267.820057][T10036] bridge0: entered allmulticast mode
[  267.826952][T10035] netlink: 'syz.4.1076': attribute type 3 has an invalid length.
[  267.846125][T10041] netlink: 'syz.4.1076': attribute type 12 has an invalid length.
[  268.211668][T10070] syzkaller1: entered promiscuous mode
[  268.231128][T10070] syzkaller1: entered allmulticast mode
[  268.695119][T10090] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  270.240184][T10152] syzkaller0: entered promiscuous mode
[  270.245792][T10152] syzkaller0: entered allmulticast mode
[  270.304129][T10166] netlink: 'syz.1.1113': attribute type 1 has an invalid length.
[  270.668631][T10183] __nla_validate_parse: 7 callbacks suppressed
[  270.668653][T10183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1116'.
[  270.740801][T10184] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1116'.
[  271.164341][ T5839] Bluetooth: hci1: command 0x0406 tx timeout
[  272.283433][T10183] team0: entered promiscuous mode
[  272.294527][T10183] team0: entered allmulticast mode
[  272.310816][T10194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1118'.
[  272.341083][T10194] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1118'.
[  272.375268][T10194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1118'.
[  272.417076][T10194] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1118'.
[  272.456419][T10194] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1118'.
[  272.492597][T10197] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0
[  272.568578][T10205] ipvlan1: entered promiscuous mode
[  272.575616][T10205] ipvlan1: entered allmulticast mode
[  272.583876][T10205] veth0_vlan: entered allmulticast mode
[  272.697553][T10211] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1123'.
[  272.862006][T10218] xt_hashlimit: max too large, truncated to 1048576
[  272.870668][T10219] netlink: 'syz.4.1125': attribute type 12 has an invalid length.
[  272.942297][T10219] bond8: option primary_reselect: invalid value (255)
[  272.984316][T10219] bond8 (unregistering): Released all slaves
[  273.214649][T10234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1128'.
[  273.316596][T10236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1129'.
[  273.682129][T10246] syzkaller0: entered promiscuous mode
[  273.687916][T10246] syzkaller0: entered allmulticast mode
[  275.680196][T10270] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  275.784323][T10294] __nla_validate_parse: 2 callbacks suppressed
[  275.784341][T10294] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1148'.
[  275.920656][T10305] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1149'.
[  276.132980][T10312] netlink: 212144 bytes leftover after parsing attributes in process `syz.2.1153'.
[  276.353784][T10327] xt_hashlimit: invalid rate
[  276.382091][T10328] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1157'.
[  276.462417][T10331] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1159'.
[  276.640898][T10342] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1162'.
[  276.768189][T10352] SET target dimension over the limit!
[  276.872438][T10352] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1162'.
[  276.893010][T10352] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1162'.
[  276.961281][T10352] veth1_to_bridge: entered promiscuous mode
[  277.009847][T10352] veth1_to_bridge: left promiscuous mode
[  277.248594][T10369] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1167'.
[  277.293491][T10369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1167'.
[  277.815970][T10386] netlink: 'syz.4.1172': attribute type 3 has an invalid length.
[  279.010976][T10439] bond1 (unregistering): Released all slaves
[  279.157973][T10434] bond1 (unregistering): Released all slaves
[  279.280591][T10451] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode
[  279.329552][T10451] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode
[  279.931311][T10478] bond0 (unregistering): Released all slaves
[  280.214356][T10497] netlink: 'syz.0.1211': attribute type 3 has an invalid length.
[  280.243422][T10499] bridge0: port 3(syz_tun) entered blocking state
[  280.252844][T10499] bridge0: port 3(syz_tun) entered disabled state
[  280.269745][T10499] syz_tun: entered allmulticast mode
[  280.290886][T10499] syz_tun: entered promiscuous mode
[  280.443272][T10507] netlink: 'syz.2.1215': attribute type 11 has an invalid length.
[  280.541296][T10513] netlink: 'syz.4.1216': attribute type 10 has an invalid length.
[  280.558533][T10513] bridge_slave_1: left allmulticast mode
[  280.571508][T10513] bridge_slave_1: left promiscuous mode
[  280.581068][T10513] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.624207][T10513] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  280.687755][T10521] syzkaller1: entered promiscuous mode
[  280.694047][T10521] syzkaller1: entered allmulticast mode
[  280.857336][T10526] __nla_validate_parse: 14 callbacks suppressed
[  280.857366][T10526] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1219'.
[  280.877851][T10526] netlink: 'syz.5.1219': attribute type 5 has an invalid length.
[  280.885927][T10526] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1219'.
[  280.946563][T10526] geneve2: entered promiscuous mode
[  280.965000][T10526] geneve2: entered allmulticast mode
[  280.988300][T10529] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1219'.
[  281.017371][T10529] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1219'.
[  281.064204][ T3520] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  281.110392][ T3520] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  281.143670][ T3520] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  281.157255][ T3520] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  281.159898][T10533] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1221'.
[  281.339735][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1226'.
[  281.419451][T10546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1227'.
[  281.531167][T10541] raw_sendmsg: syz.5.1226 forgot to set AF_INET. Fix it!
[  281.550318][T10538] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1224'.
[  281.774720][T10553] netlink: 576 bytes leftover after parsing attributes in process `syz.2.1231'.
[  281.804751][T10560] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ0
[  281.821257][T10557] geneve4: entered promiscuous mode
[  281.829970][T10557] geneve4: entered allmulticast mode
[  281.862584][  T192] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 19999 - 0
[  281.901576][  T192] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 19999 - 0
[  281.919105][  T192] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 19999 - 0
[  281.927565][  T192] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 19999 - 0
[  281.964952][T10569] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1232'.
[  282.235575][T10574] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  282.273174][T10574] bond5 (unregistering): Released all slaves
[  282.935311][T10605] netlink: 'syz.2.1243': attribute type 11 has an invalid length.
[  282.954049][T10606] syzkaller1: entered promiscuous mode
[  282.976640][T10606] syzkaller1: entered allmulticast mode
[  283.961448][ T5839] Bluetooth: hci4: command 0x0406 tx timeout
[  283.973044][T10656] netlink: 'syz.0.1260': attribute type 11 has an invalid length.
[  284.059604][T10656] netlink: 'syz.0.1260': attribute type 2 has an invalid length.
[  284.169304][T10664] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode
[  284.199171][T10664] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode
[  284.310206][T10672] netlink: 'syz.0.1266': attribute type 3 has an invalid length.
[  284.413037][T10673] syzkaller1: entered promiscuous mode
[  284.438169][T10673] syzkaller1: entered allmulticast mode
[  284.791043][T10695] netlink: 'syz.4.1272': attribute type 1 has an invalid length.
[  284.860316][T10697] netlink: 'syz.2.1270': attribute type 16 has an invalid length.
[  284.870015][T10697] netlink: 'syz.2.1270': attribute type 3 has an invalid length.
[  286.130228][T10744] netlink: 'syz.5.1283': attribute type 9 has an invalid length.
[  286.189324][T10749] netlink: 'syz.5.1283': attribute type 25 has an invalid length.
[  286.209846][T10749] __nla_validate_parse: 17 callbacks suppressed
[  286.209867][T10749] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1283'.
[  286.372652][ T7467] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  286.379770][T10749] netlink: 'syz.5.1283': attribute type 25 has an invalid length.
[  286.424771][ T7467] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  286.449519][T10749] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1283'.
[  286.475496][ T7467] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  286.490312][T10772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1288'.
[  286.537768][ T7467] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  286.733450][T10778] bond9: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  286.756290][T10785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1291'.
[  286.799307][T10785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1291'.
[  286.846840][T10778] bond9: (slave lo): Enslaving as a backup interface with an up link
[  286.860077][T10778] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  286.949006][   T43] lo speed is unknown, defaulting to 1000
[  286.982603][T10785] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1291'.
[  286.995392][   T43] syz2: Port: 1 Link ACTIVE
[  287.010365][ T7558] lo speed is unknown, defaulting to 1000
[  287.057167][T10796] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1294'.
[  287.299145][T10808] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1296'.
[  287.748876][T10826] netlink: zone id is out of range
[  287.777008][T10826] netlink: get zone limit has 4 unknown bytes
[  288.120640][T10840] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1307'.
[  288.181937][T10841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1305'.
[  288.237827][T10847] netlink: 'syz.1.1308': attribute type 10 has an invalid length.
[  288.255233][T10841] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  288.295720][T10850] netlink: 'syz.5.1309': attribute type 14 has an invalid length.
[  288.360953][T10847] bond0: (slave dummy0): Enslaving as an active interface with a down link
[  288.488141][T10850] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  288.497007][ T6005] IPVS: starting estimator thread 0...
[  288.510156][T10853] vlan2: entered promiscuous mode
[  288.515279][T10853] bridge0: entered promiscuous mode
[  288.609915][T10855] IPVS: using max 28 ests per chain, 67200 per kthread
[  289.180619][T10884] netlink: 'syz.5.1319': attribute type 2 has an invalid length.
[  289.713818][T10901] netlink: 'syz.1.1325': attribute type 16 has an invalid length.
[  289.992200][T10912] netlink: 'syz.2.1327': attribute type 1 has an invalid length.
[  290.001356][T10912] netlink: 'syz.2.1327': attribute type 2 has an invalid length.
[  290.012329][T10912] netlink: 'syz.2.1327': attribute type 1 has an invalid length.
[  291.085399][T10945] vlan2: entered promiscuous mode
[  291.107310][T10945] geneve1: entered promiscuous mode
[  291.122511][T10945] vlan2: entered allmulticast mode
[  291.147215][T10945] geneve1: entered allmulticast mode
[  291.262750][T10954] netlink: 'syz.1.1338': attribute type 1 has an invalid length.
[  291.270753][T10954] netlink: 'syz.1.1338': attribute type 4 has an invalid length.
[  291.284031][T10954] __nla_validate_parse: 8 callbacks suppressed
[  291.284053][T10954] netlink: 9422 bytes leftover after parsing attributes in process `syz.1.1338'.
[  291.471549][T10965] netlink: 'syz.2.1343': attribute type 1 has an invalid length.
[  291.534399][T10972] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1343'.
[  291.636017][T10977] Bluetooth: MGMT ver 1.23
[  291.648326][T10965] bond5: entered promiscuous mode
[  291.700997][T10965] 8021q: adding VLAN 0 to HW filter on device bond5
[  291.761487][T10984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1347'.
[  291.787382][T10976] bond5: (slave bridge2): making interface the new active one
[  291.796702][T10976] bridge2: entered promiscuous mode
[  291.802379][T10985] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1348'.
[  291.813440][T10976] bond5: (slave bridge2): Enslaving as an active interface with an up link
[  292.014913][T10998] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1350'.
[  292.053161][T11000] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1350'.
[  292.241556][T11006] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1353'.
[  292.273002][T11007] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1353'.
[  292.301107][T11013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1357'.
[  292.382888][T11021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1357'.
[  292.498773][T11013] 8021q: adding VLAN 0 to HW filter on device bond6
[  292.557947][T11021] 8021q: adding VLAN 0 to HW filter on device bond0
[  292.600083][T11021] bond6: (slave bond0): making interface the new active one
[  292.626859][T11021] bond6: (slave bond0): Enslaving as an active interface with an up link
[  292.818444][T11041] bridge: RTM_NEWNEIGH with invalid state 0x8
[  292.872947][T11044] xt_l2tp: v2 tid > 0xffff: 1114244
[  292.900982][T11049] xt_l2tp: v2 tid > 0xffff: 1114244
[  292.943244][T11050] Bluetooth: MGMT ver 1.23
[  292.998722][T11052] netlink: 'syz.5.1366': attribute type 5 has an invalid length.
[  293.578767][T11084] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  293.630898][T11088] xt_TCPMSS: Only works on TCP SYN packets
[  293.637464][T11088] openvswitch: netlink: Flow key attr not present in new flow.
[  293.647630][T11088] 8021q: VLANs not supported on wg2
[  293.724032][T11090] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  294.691405][ T3520] smc: removing ib device syz1
[  294.712280][T11125] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  294.786201][ T7558] ==================================================================
[  294.794430][ T7558] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x5e/0x170
[  294.803279][ T7558] Read of size 8 at addr ffff88807e0022e8 by task kworker/1:8/7558
[  294.811314][ T7558] 
[  294.813727][ T7558] CPU: 1 UID: 0 PID: 7558 Comm: kworker/1:8 Not tainted syzkaller #0 PREEMPT(full) 
[  294.813757][ T7558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  294.813778][ T7558] Workqueue: events smc_ib_port_event_work
[  294.813826][ T7558] Call Trace:
[  294.813835][ T7558]  <TASK>
[  294.813845][ T7558]  dump_stack_lvl+0x189/0x250
[  294.813872][ T7558]  ? rcu_is_watching+0x15/0xb0
[  294.813897][ T7558]  ? __kasan_check_byte+0x12/0x40
[  294.813925][ T7558]  ? __pfx_dump_stack_lvl+0x10/0x10
[  294.813949][ T7558]  ? rcu_is_watching+0x15/0xb0
[  294.813975][ T7558]  ? lock_release+0x4b/0x3b0
[  294.813998][ T7558]  ? __virt_addr_valid+0x1c8/0x5c0
[  294.814028][ T7558]  ? __virt_addr_valid+0x4a5/0x5c0
[  294.814058][ T7558]  print_report+0xca/0x240
[  294.814080][ T7558]  ? __ethtool_get_link_ksettings+0x5e/0x170
[  294.814111][ T7558]  kasan_report+0x118/0x150
[  294.814137][ T7558]  ? __ethtool_get_link_ksettings+0x5e/0x170
[  294.814173][ T7558]  __ethtool_get_link_ksettings+0x5e/0x170
[  294.814208][ T7558]  ib_get_eth_speed+0x15e/0x7b0
[  294.814236][ T7558]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  294.814268][ T7558]  ? do_raw_spin_unlock+0x122/0x240
[  294.814302][ T7558]  rxe_query_port+0x93/0x3d0
[  294.814330][ T7558]  ib_query_port+0x170/0x830
[  294.814361][ T7558]  smc_ib_port_event_work+0x15a/0x940
[  294.814397][ T7558]  ? _raw_spin_unlock_irq+0x23/0x50
[  294.814429][ T7558]  ? process_scheduled_works+0x9ef/0x1770
[  294.814449][ T7558]  ? process_scheduled_works+0x9ef/0x1770
[  294.814471][ T7558]  process_scheduled_works+0xad1/0x1770
[  294.814510][ T7558]  ? __pfx_process_scheduled_works+0x10/0x10
[  294.814541][ T7558]  worker_thread+0x8a0/0xda0
[  294.814572][ T7558]  ? __kthread_parkme+0x7b/0x200
[  294.814601][ T7558]  kthread+0x711/0x8a0
[  294.814629][ T7558]  ? __pfx_worker_thread+0x10/0x10
[  294.814651][ T7558]  ? __pfx_kthread+0x10/0x10
[  294.814678][ T7558]  ? _raw_spin_unlock_irq+0x23/0x50
[  294.814709][ T7558]  ? lockdep_hardirqs_on+0x98/0x140
[  294.814729][ T7558]  ? __pfx_kthread+0x10/0x10
[  294.814756][ T7558]  ret_from_fork+0x599/0xb30
[  294.814892][ T7558]  ? __pfx_ret_from_fork+0x10/0x10
[  294.814917][ T7558]  ? __switch_to_asm+0x39/0x70
[  294.814945][ T7558]  ? __switch_to_asm+0x33/0x70
[  294.814971][ T7558]  ? __pfx_kthread+0x10/0x10
[  294.814999][ T7558]  ret_from_fork_asm+0x1a/0x30
[  294.815036][ T7558]  </TASK>
[  294.815044][ T7558] 
[  295.045303][ T7558] Allocated by task 5842:
[  295.049711][ T7558]  kasan_save_track+0x3e/0x80
[  295.054525][ T7558]  __kasan_kmalloc+0x93/0xb0
[  295.059156][ T7558]  __kvmalloc_node_noprof+0x5d5/0x920
[  295.064560][ T7558]  alloc_netdev_mqs+0xa6/0x11b0
[  295.069480][ T7558]  rtnl_create_link+0x31f/0xcf0
[  295.074366][ T7558]  rtnl_newlink_create+0x25c/0xb00
[  295.079509][ T7558]  rtnl_newlink+0x16e7/0x1c90
[  295.084209][ T7558]  rtnetlink_rcv_msg+0x7cf/0xb70
[  295.089173][ T7558]  netlink_rcv_skb+0x208/0x470
[  295.093971][ T7558]  netlink_unicast+0x82f/0x9e0
[  295.098763][ T7558]  netlink_sendmsg+0x805/0xb30
[  295.103553][ T7558]  __sock_sendmsg+0x21c/0x270
[  295.108346][ T7558]  __sys_sendto+0x3bd/0x520
[  295.112874][ T7558]  __x64_sys_sendto+0xde/0x100
[  295.117664][ T7558]  do_syscall_64+0xfa/0xf80
[  295.122201][ T7558]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.128126][ T7558] 
[  295.130470][ T7558] Freed by task 11120:
[  295.134641][ T7558]  kasan_save_track+0x3e/0x80
[  295.139385][ T7558]  kasan_save_free_info+0x46/0x50
[  295.144441][ T7558]  __kasan_slab_free+0x5c/0x80
[  295.149228][ T7558]  kfree+0x1c0/0x660
[  295.153177][ T7558]  device_release+0x9e/0x1d0
[  295.157829][ T7558]  kobject_put+0x228/0x570
[  295.162278][ T7558]  netdev_run_todo+0xd2c/0xea0
[  295.167087][ T7558]  rtnl_dellink+0x5b5/0x720
[  295.171659][ T7558]  rtnetlink_rcv_msg+0x7cf/0xb70
[  295.176660][ T7558]  netlink_rcv_skb+0x208/0x470
[  295.181456][ T7558]  netlink_unicast+0x82f/0x9e0
[  295.186262][ T7558]  netlink_sendmsg+0x805/0xb30
[  295.191253][ T7558]  __sock_sendmsg+0x21c/0x270
[  295.196050][ T7558]  ____sys_sendmsg+0x505/0x820
[  295.200923][ T7558]  ___sys_sendmsg+0x21f/0x2a0
[  295.205627][ T7558]  __x64_sys_sendmsg+0x19b/0x260
[  295.210680][ T7558]  do_syscall_64+0xfa/0xf80
[  295.215215][ T7558]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.221218][ T7558] 
[  295.223580][ T7558] The buggy address belongs to the object at ffff88807e002000
[  295.223580][ T7558]  which belongs to the cache kmalloc-cg-4k of size 4096
[  295.238089][ T7558] The buggy address is located 744 bytes inside of
[  295.238089][ T7558]  freed 4096-byte region [ffff88807e002000, ffff88807e003000)
[  295.252001][ T7558] 
[  295.254360][ T7558] The buggy address belongs to the physical page:
[  295.260822][ T7558] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e000
[  295.269628][ T7558] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  295.278160][ T7558] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  295.286178][ T7558] page_type: f5(slab)
[  295.290281][ T7558] raw: 00fff00000000040 ffff88813ffb0500 0000000000000000 0000000000000001
[  295.298895][ T7558] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  295.307773][ T7558] head: 00fff00000000040 ffff88813ffb0500 0000000000000000 0000000000000001
[  295.316473][ T7558] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  295.325179][ T7558] head: 00fff00000000003 ffffea0001f80001 00000000ffffffff 00000000ffffffff
[  295.333881][ T7558] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  295.342574][ T7558] page dumped because: kasan: bad access detected
[  295.349044][ T7558] page_owner tracks the page as allocated
[  295.354964][ T7558] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5197, tgid 5197 (udevd), ts 58716245834, free_ts 58695589873
[  295.375947][ T7558]  post_alloc_hook+0x234/0x290
[  295.380773][ T7558]  get_page_from_freelist+0x2365/0x2440
[  295.386359][ T7558]  __alloc_frozen_pages_noprof+0x181/0x370
[  295.392286][ T7558]  alloc_pages_mpol+0x232/0x4a0
[  295.397169][ T7558]  allocate_slab+0x86/0x3b0
[  295.401701][ T7558]  ___slab_alloc+0xf2b/0x1960
[  295.406500][ T7558]  __slab_alloc+0x65/0x100
[  295.411032][ T7558]  __kvmalloc_node_noprof+0x6b6/0x920
[  295.416433][ T7558]  seq_read_iter+0x202/0xe20
[  295.421079][ T7558]  vfs_read+0x55a/0xa30
[  295.425258][ T7558]  ksys_read+0x145/0x250
[  295.429612][ T7558]  do_syscall_64+0xfa/0xf80
[  295.434144][ T7558]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.440147][ T7558] page last free pid 5208 tgid 5208 stack trace:
[  295.446495][ T7558]  __free_frozen_pages+0xbc8/0xd30
[  295.451640][ T7558]  __put_partials+0x146/0x170
[  295.456343][ T7558]  put_cpu_partial+0x1f2/0x2d0
[  295.461221][ T7558]  __slab_free+0x288/0x2a0
[  295.465664][ T7558]  qlist_free_all+0x97/0x100
[  295.470288][ T7558]  kasan_quarantine_reduce+0x148/0x160
[  295.475774][ T7558]  __kasan_slab_alloc+0x22/0x80
[  295.480652][ T7558]  kmem_cache_alloc_noprof+0x37d/0x710
[  295.486179][ T7558]  getname_flags+0xb8/0x540
[  295.490813][ T7558]  do_sys_openat2+0xbc/0x200
[  295.495432][ T7558]  __x64_sys_openat+0x138/0x170
[  295.500318][ T7558]  do_syscall_64+0xfa/0xf80
[  295.504846][ T7558]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.510764][ T7558] 
[  295.513139][ T7558] Memory state around the buggy address:
[  295.518907][ T7558]  ffff88807e002180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  295.527088][ T7558]  ffff88807e002200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  295.535176][ T7558] >ffff88807e002280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  295.543349][ T7558]                                                           ^
[  295.550825][ T7558]  ffff88807e002300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  295.558925][ T7558]  ffff88807e002380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  295.567214][ T7558] ==================================================================
[  295.596140][ T5833] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  295.610746][ T5833] Bluetooth: hci2: command 0x0406 tx timeout
[  295.627493][ T7558] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  295.634910][ T7558] CPU: 1 UID: 0 PID: 7558 Comm: kworker/1:8 Not tainted syzkaller #0 PREEMPT(full) 
[  295.644553][ T7558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  295.654655][ T7558] Workqueue: events smc_ib_port_event_work
[  295.660557][ T7558] Call Trace:
[  295.663909][ T7558]  <TASK>
[  295.666958][ T7558]  dump_stack_lvl+0x99/0x250
[  295.671693][ T7558]  ? __asan_memcpy+0x40/0x70
[  295.676329][ T7558]  ? __pfx_dump_stack_lvl+0x10/0x10
[  295.681572][ T7558]  ? __pfx__printk+0x10/0x10
[  295.686255][ T7558]  vpanic+0x237/0x6d0
[  295.690374][ T7558]  ? __pfx_vpanic+0x10/0x10
[  295.695004][ T7558]  ? preempt_schedule+0xae/0xc0
[  295.699961][ T7558]  ? __pfx_preempt_schedule+0x10/0x10
[  295.705536][ T7558]  panic+0xb9/0xc0
[  295.709284][ T7558]  ? __pfx_panic+0x10/0x10
[  295.713749][ T7558]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  295.719799][ T7558]  ? __ethtool_get_link_ksettings+0x5e/0x170
[  295.725931][ T7558]  check_panic_on_warn+0x89/0xb0
[  295.730934][ T7558]  ? __ethtool_get_link_ksettings+0x5e/0x170
[  295.736978][ T7558]  end_report+0x6f/0x140
[  295.741274][ T7558]  kasan_report+0x129/0x150
[  295.745922][ T7558]  ? __ethtool_get_link_ksettings+0x5e/0x170
[  295.751968][ T7558]  __ethtool_get_link_ksettings+0x5e/0x170
[  295.757844][ T7558]  ib_get_eth_speed+0x15e/0x7b0
[  295.763024][ T7558]  ? __pfx_ib_get_eth_speed+0x10/0x10
[  295.768560][ T7558]  ? do_raw_spin_unlock+0x122/0x240
[  295.773830][ T7558]  rxe_query_port+0x93/0x3d0
[  295.778481][ T7558]  ib_query_port+0x170/0x830
[  295.783116][ T7558]  smc_ib_port_event_work+0x15a/0x940
[  295.788528][ T7558]  ? _raw_spin_unlock_irq+0x23/0x50
[  295.793784][ T7558]  ? process_scheduled_works+0x9ef/0x1770
[  295.799669][ T7558]  ? process_scheduled_works+0x9ef/0x1770
[  295.805442][ T7558]  process_scheduled_works+0xad1/0x1770
[  295.811207][ T7558]  ? __pfx_process_scheduled_works+0x10/0x10
[  295.817223][ T7558]  worker_thread+0x8a0/0xda0
[  295.821844][ T7558]  ? __kthread_parkme+0x7b/0x200
[  295.826812][ T7558]  kthread+0x711/0x8a0
[  295.831011][ T7558]  ? __pfx_worker_thread+0x10/0x10
[  295.836446][ T7558]  ? __pfx_kthread+0x10/0x10
[  295.841113][ T7558]  ? _raw_spin_unlock_irq+0x23/0x50
[  295.846386][ T7558]  ? lockdep_hardirqs_on+0x98/0x140
[  295.851632][ T7558]  ? __pfx_kthread+0x10/0x10
[  295.856260][ T7558]  ret_from_fork+0x599/0xb30
[  295.860886][ T7558]  ? __pfx_ret_from_fork+0x10/0x10
[  295.866104][ T7558]  ? __switch_to_asm+0x39/0x70
[  295.870938][ T7558]  ? __switch_to_asm+0x33/0x70
[  295.875760][ T7558]  ? __pfx_kthread+0x10/0x10
[  295.880393][ T7558]  ret_from_fork_asm+0x1a/0x30
[  295.885238][ T7558]  </TASK>
[  295.888988][ T7558] Kernel Offset: disabled
[  295.893381][ T7558] Rebooting in 86400 seconds..