last executing test programs:

28.848723235s ago: executing program 3 (id=1798):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f00000002c0)) (async)
r1 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r1, 0x107, 0xe, 0x0, &(0x7f0000000040)) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2523543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_BURST={0x8, 0x6, 0x1}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x58}}, 0x4000080) (async)
bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) (async)
syz_emit_ethernet(0x32, &(0x7f0000000500)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) (rerun: 32)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r6, @ANYBLOB="01002dbd7000fbdbdf250100000014000200776731000000000000000000000000007400088070"], 0x9c}, 0x1, 0x0, 0x0, 0x4004}, 0x20000010) (async)
sendto$inet6(r2, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000040000000800000000000000e5b143de440b8c066f7af546a9df4a6b85fe4e744efde67212787c88fd00675414df050afcbfad013667abe1c907d857c22e26f3e4c24863a95139d8cd58c14c0d7d729e97aeab995cb489dc445d031beb310af87d63939aa76d6a5e1304cc7339acbf606fc1594e37f6944183ff6aa6b472eda6a132c214591b6cd305c5b6556b4097a3d990ce3dce570b46ae4b8953d0d6f4068b5e877d19f62273a22a39d702cfea6d0b7367ff17552b19510b4f652bbede0b741013ea33f86ae11e91c147503f2bc90f00"/232, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@delnexthop={0x18, 0x69, 0x10a, 0x0, 0x25dfdbfe}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async)
sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000740)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}]}]}, 0x70}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000000000000000000000000000018200000", @ANYRES32=r7, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0xc, 0x26, &(0x7f00000001c0)=""/226}, 0x21) (async)
socketpair(0x1d, 0x80000, 0x2, &(0x7f0000000080)) (async)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0xcc, 0x2, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_NAT={0x94, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x35}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private1}}}]}]}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x81}, 0x800) (async)
r9 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)={0x18, 0x24, 0x301, 0x0, 0x0, {0x1}, [@nested={0x4, 0xae}]}, 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394110424fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x2e}], 0x1}, 0x4004105)

28.609986465s ago: executing program 3 (id=1803):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x21, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800})
bind$rose(r0, &(0x7f0000000080)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c)

28.412299347s ago: executing program 3 (id=1808):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r1=>0x0})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000006c000480540001800a0001006d617463680000004400028008000240000000002c000300ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d6974000100140001800a0001006c696d6974000000040002800900010073797a30000000000900020073797a32"], 0xc0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r1, 0x18f40, 0x22008}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x2c0000}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}]}, 0x48}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet(0xa, 0x801, 0x84)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="02"], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={<r8=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
listen(r4, 0x8)
r9 = accept4(r4, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000200)=@assoc_value, &(0x7f0000000180)=0x8)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r9, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x140b, 0x400, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x48080}, 0x8800)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x80, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000)

28.175340351s ago: executing program 3 (id=1813):
r0 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)='memory.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r0, &(0x7f00000000c0)={'some', 0x20, 0x1000, 0x20, 0x4}, 0x2f) (async)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000004, 0x50, r0, 0xb0fb1000) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "3f25378bca"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x17c, r3, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xa6}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x154, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x426121d0}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xc4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x147d}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x62}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1ff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x58e9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x400}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x10001}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xe}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x400}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x66}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7d42}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xeeb}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xd10}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8001}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xc0000}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x40}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x10001}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xe5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x81}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20008000}, 0x280048c0)

27.758917737s ago: executing program 3 (id=1820):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)={0x4c, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x0, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x5}, {0x7, 0x13}, {0x5, 0x3}, {0x3, 0x4}, {0x5, 0x7}]}]}]}]}]}]}, 0x4c}}, 0x0)
bpf$MAP_CREATE(0x24, &(0x7f0000000080)=@bloom_filter, 0xa1)

18.763474707s ago: executing program 2 (id=1899):
r0 = socket$inet6(0xa, 0x2, 0x3a)
sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba189", 0x8, 0xfa068fc268af028d, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x683, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}}, 0x0) (async)
r3 = socket$igmp6(0xa, 0x3, 0x2)
sendmmsg$inet6(r3, &(0x7f00000066c0)=[{{&(0x7f00000019c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x5efe)

18.59064696s ago: executing program 2 (id=1903):
syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x9)
ppoll(&(0x7f0000000a40)=[{r0}], 0x1, 0x0, 0x0, 0x0)
socket$kcm(0x2, 0xa, 0x73)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r9}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000003c0)={'vcan0\x00', <r10=>0x0})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'vlan1\x00', <r11=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=@newtaction={0x2d88, 0x30, 0x48b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}, {0x668, 0x1, [@m_ct={0x70, 0x16, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_ZONE={0x6, 0x4, 0x5}]}, {0x36, 0x6, "426a8a9d86324a7720a5265ea6e1262011c5c5c397d3d0af1a54ca4975c4e2da3617d4ed6f54e4e0c95ecc5eb29f792dab74"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7, 0x1}}}}, @m_mirred={0xdc, 0x4, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0xf, 0x8, 0x1}, 0x2, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffff, 0x401, 0x7, 0x7, 0x8001}, 0x4, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa, 0x5, 0x98261c42a0ad1252, 0xfffff001, 0x5}, 0x0, r10}}]}, {0x4d, 0x6, "27f2016a7293d2f878e5eee42da847d000c35a6d86b63aeaaff9269e96bdf2f085159af4c5a0de0aab75afe665c0c8256426bb9a08dbd3c2360215216ebdca54dff3bf2610937a7718"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0x35c, 0xc, 0x0, 0x0, {{0x7}, {0x238, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x4dd0}, @TCA_IPT_TARG={0x105, 0x6, {0x1, 'nat\x00', 0x81, 0x3, "42a54cacd6a28e517da848ffad1807917aba7a8ae6c10cd90f805051aa287ca45a2089d1283c93e1390631c816a31218968da15c3b3f3761a056f9950d5f3bfe4658c1cb343469a6e81c384b8f90b788b476ea8ea2c4ca28efcbb5d0fe03b7b5a39b5b2e123b4d7a58f265f61b8539299f0747fc674879147fd0e051e49e31327a13ce583c274aa1172774acd8d447b063277d1f54e199c99d97630aca2096a53f274c9e1f749cbe4b129bc46c81bc22127a84b1a4a09463f3000d2082b0e2b101cb4fe6382244372b12ab0af14258eef4fd5c1dafc5e71b744683"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0xd7, 0x6, {0x35, 'security\x00', 0x6, 0x0, "f780319d99d5203340535d3cbd3162bba034097f0042604f2f921bcd6202f09fc26927ec919e52b51334640a28d8b153724051f5b5e62713f9e7ab36b1f18011a5895b53e6dd1213e7e23a8ad8cc85374e3e869502704541206404e83f9440a0830cffa792925b8aa35e17247facb7b23d2dbc5857b816d5c1b5ae7b851a20489ca97ea1b4e53d51f6f7df72af98344ecde980f969c456900ee4f2b4733011a96e81c1d2dac79de4022cb8480e"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x100, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_xt={0xdc, 0x1c, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x5a, 0x6, {0xa1e8, 'nat\x00', 0x4, 0x8, "8f3805db208e68249ec1d16743d611d0a5463f1e119e9b9bc3b4d65c493a717f2090e49aa7509cffcc0d406c058e7e07"}}]}, {0x56, 0x6, "20307a693b15a5817d884e7d69992d4b4dc6e9343d358f43d0e29a7281b1fd3f56e452044c4cd726a631c8d71305eea4e15747cf48205c9bdf0e6a59112452565fa9d45726e04158af6d7b2d4081d55b1f37"}, {0xc}, {0xc, 0x8, {0x1, 0x7}}}}, @m_ct={0xe0, 0x1b, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "5dc82b70001af21091dd4324591a683e"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast2}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}]}, {0x86, 0x6, "49b0f6f424e81781dade30ae768d84921609032be17570d737bd62ed1dc1648bbf885117ef102cb13986c8a740c2ee68ffc69d96573a496f796f6c25e932318598197572b8a9dff35ce818159689f4f2615fa8ee559194d686a5541d3db5e43e2c579073a118e9e8bb73de242a41eda38b29b3fc9fc35df8248223a552d5fa2f7aea"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}, {0x15f0, 0x1, [@m_sample={0xa0, 0x1a, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x8000, 0x2, 0x626eb9cef52ca907, 0x3, 0x1fc}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x296}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x715}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8a}]}, {0x39, 0x6, "04b876c229e3b4486bf11f732059ca04d39b4952c581a9b46ce903d78300858c2b1706d7aaae9ec91e12d3967d9576a047356f8288"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbedit={0x134, 0x11, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x235f}]}, {0xfe, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0xb0, 0x16, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2a, 0x0, 0x0, 0x0, 0x3}}]}, {0x6a, 0x6, "1aecb3ae27e116b825731afd783126756f344aebd1b8e5bbb9e077fce6ff291cc8bf532faec949bacd8f7225e55bba21000d641c7655a7960635448f7ff96f7e24956c0ff1109f007bf43cb69d146ba23b9e4d7e175b88f60ed9bd7339426ea8e7cb0ab0f9cd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_vlan={0xdc, 0x12, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x456}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x10001, 0x2, 0x7, 0xfff, 0x6}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x6, 0x2, 0x6, 0xfffffffa}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x101, 0x13, 0x4, 0x8, 0x9}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xbfa}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}]}, {0x42, 0x6, "46c9f604450971cf286fc4c86385bdbea085159160275c0a737d19be476d9b303bcd88dac44de2725102881b37afaf17fb50af069730d9e9eb5a896e26d5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_vlan={0x1070, 0x9, 0x0, 0x0, {{0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb7a}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x6d6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x83a}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x140, 0x9, 0x0, 0x0, {{0x7}, {0x88, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x20}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_PARMS={0x18, 0x1, {0x9, 0x10000, 0x5, 0x1, 0x3ff}}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_ACTION={0x6, 0x3, 0x28}, @TCA_CT_LABELS={0x14, 0x7, "dfbb5e6d51a19e88fdbb2c6a7c389a5f"}, @TCA_CT_MARK={0x8, 0x5, 0x4}, @TCA_CT_LABELS_MASK={0x14, 0x8, "59a0e6e1aaceb89dfbe5b85dcbf0e8b3"}, @TCA_CT_LABELS={0x14, 0x7, "df563e6941fe98b30131cd117c9cae7a"}, @TCA_CT_MARK_MASK={0x8}]}, {0x94, 0x6, "f57d8a8b37b78c5c60b9f0bed3d69115f849532bfbf216e6cb65cad2291bb33d97209a46c39bb20938b1368f267e33262e09ce91d772016a3aff0c8e9b5f49dbbd8e2facb4d7befeec39c8e77ff6d6b3078f380d52a5eb39b3590d2e19caaf27cb607ed65613423782e14c98ac8fa76ee501dc51be6f820f4ad175f9fb9eb932ee97e13f703e7a1765edad4f3e46a554"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbmod={0xdc, 0x7, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}]}, {0xa2, 0x6, "0937a20204893ed46e7fba2659658e8334549d12209549be3f59244fb82c83b0f801cc2bef946f4a481ddc7b0d64534dc7bf340b831c07d764e31c59c0dd3468245bea537f1a0f6d1b657a004cc4192ebad726e165b286f303b0215ec228d9ec9024c8fb3d4ada124aed2d34fc1f7e2117b0467fa43270cf7fa844379b6892450ace0ac0bb6a759beead14ee7193575faddf91cf88cc6d1941a32d773eb8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x1094, 0x1, [@m_mirred={0x1090, 0x16, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1000, 0x4, 0x0, 0x2, 0xe00000}, 0x2, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x4b, 0x0, 0x100, 0x30b6}, 0x4, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x100, 0xffffffffffffffff, 0x2, 0x6}, 0x1, r6}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x2d88}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x111, 0x4b4, 0x0, 0x700, 0x2d8, 0x278, 0x278, 0x2d8, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [], [], 'vlan0\x00', 'team_slave_0\x00', {}, {}, 0x88}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@connmark={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0)
write$cgroup_subtree(r12, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0)
getsockopt$bt_BT_SECURITY(r12, 0x112, 0x4, &(0x7f0000000040), 0x2)

17.955629348s ago: executing program 2 (id=1909):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x20000000000000ee, &(0x7f00000008c0)=ANY=[@ANYRES8=r2], &(0x7f0000000100)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0200000002"], 0x10)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r4, 0x2, 0x0, 0x5, &(0x7f0000000180)=[0x0], 0x400000c0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r6=>0x0})
r7 = socket(0x10, 0x80003, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, 0x0)
r13 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r13, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r13, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
pwrite64(r2, &(0x7f0000000380)="c109fb88a6a11813209300ead25076d35ef4a89668f188dd7ba08fbd16c78e1c2cb2a58545095b3c24d741751a7d6d5ae950f9d7e05fb2317382b66e9a4e517f96162a5554f3f8e69836482cd9360d21dfc299af5b38cbb69008ebf8d8b3ff", 0x5f, 0x4)
r14 = accept4(r13, 0x0, 0x0, 0x0)
sendmsg$AUDIT_SIGNAL_INFO(r14, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3f2, 0x2, 0x70bd25, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004011}, 0x20040000)
sendmsg$TIPC_NL_MEDIA_SET(r14, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0)
recvmsg$unix(r14, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/19, 0x13}], 0x1}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}]}, 0x28}}, 0x0)

17.001461473s ago: executing program 2 (id=1921):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) (async, rerun: 32)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000062010b0000000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (rerun: 32)

16.811683145s ago: executing program 2 (id=1924):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
writev(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b00a3878a791f64bd79d1d7cc97eed1cb0ad91426115a3b3bf2738347b0acfb01a5aeb09818f35ba6f394fcc023050ec0fab5b7405e7ce33e50e3efb3f9373ce37", 0x79}], 0x2)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14)
unshare(0x4000400)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
ppoll(&(0x7f0000000080)=[{r3, 0x2000}], 0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000001c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r4 = accept$nfc_llcp(r1, &(0x7f0000000000), &(0x7f0000000080)=0x60)
sendmmsg(r4, &(0x7f00000007c0), 0x45, 0x404c8d0)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, &(0x7f0000000140))

15.048810682s ago: executing program 3 (id=1820):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)={0x4c, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x0, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x5}, {0x7, 0x13}, {0x5, 0x3}, {0x3, 0x4}, {0x5, 0x7}]}]}]}]}]}]}, 0x4c}}, 0x0)
bpf$MAP_CREATE(0x24, &(0x7f0000000080)=@bloom_filter, 0xa1)

2.248354619s ago: executing program 1 (id=2014):
r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000300)={{0x3, @null}, [@rose, @bcast, @netrom, @bcast, @bcast, @rose, @default]}, &(0x7f0000000380)=0x48)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'syztnl1\x00', <r1=>0x0, 0x4, 0x8, 0xf7, 0x8, 0x12, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x700, 0x20, 0x2}}) (async)
r2 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r3, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0xfff1}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r5=>0x0}) (async, rerun: 32)
r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xed27c9fa5277b9b7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0xd}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xfffffff8}]}}]}, 0x44}}, 0x20008000)
r7 = socket$phonet(0x23, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', <r8=>0x0})
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_add_memb(r9, 0x107, 0x18, &(0x7f0000000800)={r8, 0x1, 0x6}, 0x10) (async, rerun: 32)
sendto$packet(r9, &(0x7f0000000040)="02030007ffff0000000045", 0xff4b, 0x4000050, &(0x7f0000000000)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) (async, rerun: 32)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000001840)={@empty, @initdev, <r10=>0x0}, &(0x7f0000001880)=0xc) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0) (async)
r12 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000c80)={'lo\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xfffff001}]}}]}, 0x38}}, 0x0) (async)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002000)={<r14=>0x0, @remote, @loopback}, &(0x7f0000002040)=0xc)
sendmmsg$inet(r0, &(0x7f0000002440)=[{{&(0x7f00000003c0)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000400)="8431c4781e6e6d4b0e6a48450ecc3fd983691a2188edbfe4b91c20c40692690e67a45b9e2e519eca3dc48f0b038ef0e990b58c37d747986feb2b8a84a445f25f097512fab8f32a", 0x47}, {&(0x7f00000004c0)="48c02b5f", 0x4}, {&(0x7f00000006c0)="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", 0x1000}], 0x3, &(0x7f00000016c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @remote, @rand_addr=0x64010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1e}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6650}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe}}], 0xb8}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001780)="30bc5b92344ee5cbd20d43f514f9e33fcc07f038bdb3d6fb10877f784242e9d0abf996c97502e97f0b33bd6d025cb193ca68b93165ea2785937197b6e31cef3200c198e3a8b451bb8e50ee326cd3ca95eda3be27754f7909d5b551c637946eb555baddc8250c6569f8afe5b15276242781e9c85052107607ef3c4fe55590f59f", 0x80}], 0x1, &(0x7f00000018c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @private=0xa010102, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @multicast1, @multicast2}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@end, @noop, @timestamp_prespec={0x44, 0x14, 0xf4, 0x3, 0x4, [{@multicast1, 0x8}, {@broadcast, 0x3}]}, @noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0xe}, @loopback}}}, @ip_retopts={{0x54, 0x0, 0x7, {[@end, @generic={0x82, 0x5, "d2d750"}, @timestamp_prespec={0x44, 0x3c, 0x25, 0x3, 0x0, [{@broadcast, 0xf}, {@multicast2, 0x8}, {@remote, 0x378000}, {@dev={0xac, 0x14, 0x14, 0xc}, 0xc0000000}, {@broadcast, 0x2}, {@private=0xa010100, 0x8}, {@remote}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_retopts={{0xb8, 0x0, 0x7, {[@timestamp_addr={0x44, 0x34, 0xee, 0x1, 0x1, [{@private=0xa010100, 0x8}, {@rand_addr=0x64010102, 0x3}, {@multicast1, 0x974}, {@private=0xa010100, 0x6}, {@multicast1, 0x4}, {@private=0xa010102}]}, @timestamp_prespec={0x44, 0x4c, 0x20, 0x3, 0xa, [{@remote, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@remote, 0x1}, {@local, 0x5}, {@rand_addr=0x64010100, 0x8}, {@private=0xa010102}, {@local, 0x5}, {@rand_addr=0x64010102, 0xfffffff7}, {@multicast1, 0xffff8a39}]}, @timestamp={0x44, 0xc, 0xc5, 0x0, 0xd, [0x6, 0x9]}, @timestamp_addr={0x44, 0x1c, 0x1c, 0x1, 0x8, [{@empty, 0x7}, {@dev={0xac, 0x14, 0x14, 0xd}, 0xfffffffd}, {@local, 0x4}]}]}}}], 0x1b0}}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001a80)="738597f7689f56d5b40a045c4666f767cd35d810", 0x14}, {&(0x7f0000001ac0)="25aa1f5e2c3152f49922472ff7fd0acffa5c746f5f6d65a94af335a7f65487bd8dc879f1e85af11f8ed903b98000d53f4abca9bd294ee529960fe3e4107c1e1627925e0c2e077a963f88cdc70857a070dcd9ce221717ea988258549da679786226e339161be63b20a541a4adef92f82de67db6a41408f6f0fe01b1b16848716a546f78e17ec3", 0x86}, {&(0x7f0000001b80)="99be6d22d9ec80bd8f10cc69122ad3f0092818a443f22e733621c47f2f88bd833fa9eeb42ec05fadd30b9141076991ab2db23b7dd7c7d055c4420d1c4da8437f6c2b3976d115ae7b0565da367c214c2745e10256bb771580f513c40b94de4a52e97378c07e9bef3109dd4cf7d045d506e74ad67a29", 0x75}, {&(0x7f0000001c00)="b2378db36462a166c04a784b22a77b4f2e1603a803b313832cc85ff9da9d99aa482763b8b0749f1fb897b86e72910bf92dfa205a988be5a3075df4d4bccb1afadcd10eae5b50f503efe1136c251a0dd524a10269b9fc5066291f3bc59ff27c093af095c57206f70044734d6797aaa94f5b67", 0x72}, {&(0x7f0000001c80)="0d9ebe829c15502757150cba4fb3df6f21", 0x11}, {&(0x7f0000001cc0)="cf5f8284834971b4846552da3c7cbb9d0cf0fc955386a65edc3a5a83bae7c24c8543da82109a", 0x26}, {&(0x7f0000001d00)="b0e75049b53d577c8950153604edb71b73c0291911e113c19d75174e1fcfa89ed2dadc4fab6da1d87830652ce856530eee91dc52ac7c9a9b55b07a8fbc7afafc978552f5b9357c0fbb2882ed7ce95ab1c2a4916a70700f5d7dd93cbbfc406542c1ae93db215ad9a803ca2c1b11962ed97861c7badc664c66a05ab32b3021e8f9de11204b25a25de7790217b6c2e9362d78c829aea059299e555d7312a0ce05e12d541552b7c238c8f10037ac40b8f582cd33bbae9672ae581738cf6fecd87daa50022a1b51eb36eb6aa2ee543772", 0xce}, {&(0x7f0000001e00)="5f24319b77c13c1d162567a2d2b5777902c598b7b7fd0ae0dca09baadbcfc1b26ccd707b04896415489c052f607581f351441b3d4017ea2bbc52e5367d4c1be9962370eff7e1056b1c48421c81a35b", 0x4f}, {&(0x7f0000001e80)="19181393c52ae5e781a38f488a1c9581b6c5452b0efa511ce5e97866207700bcb042b5a4b24098a2a903f29bbf7bc60e0f78f9df6ac3e9e8e29a50f5ecf3ca0d22169d234ada54a00c10c083735f0e57d75a8e86131fd4dfdb9617fc080ff48314e121484ebc5cd2c8ab2535ac0572ef6b9d0f16d6a7f89e07e7ccc78324480dfeb587a4ff187e64ab855305929492b7b6b9780db11314a7b2fc6ecff82ad1e6cf31c33a0d52f1d669193500e0620077c93a0a82ee59", 0xb6}], 0x9, &(0x7f0000002080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @dev={0xac, 0x14, 0x14, 0x2f}, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @broadcast, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7f}}], 0x58}}, {{&(0x7f0000002100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f00000023c0)=[{&(0x7f0000002140)}, {&(0x7f0000002180)="b3d2f75c35", 0x5}, {&(0x7f00000021c0)="e0f61a1eb4ad446f55e41339f6c26876b74f428fd4ac9b731e252bfeedacbc1680c4c705d715f858c3171c5229240cf98491fea6a35539a521ad", 0x3a}, {&(0x7f0000002200)="febd55c385c77e60de6e6f60e51145df25527e341644730d6bdb506a833ddefe676fa84ed0cf431627b1db2cee629349f60a4273f5f48f1588dcf201df891578e0dbf022435622d2ee7a758ca036e38c55c40e0660fea1926ce7a2af0cbf658fb3b0504a7df35a9bb5ca823b6ec9a0c9e1f99afee59dfb73daeb2965a85ba34e25f7b3c28919a80b1f06b73b17aaf471", 0x90}, {&(0x7f00000022c0)="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", 0xfd}], 0x5}}], 0x4, 0x4000800) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711053000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) (async)
r15 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x36dc}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x6e}}]}, &(0x7f0000000180)='GPL\x00'}, 0x90)
sendmsg$IPSET_CMD_GET_BYNAME(r15, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0xe, 0x6, 0x103, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x801) (async, rerun: 32)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002900)={0x1c, 0x2a, 0x1, 0x0, 0x25dfdbfc, {0x1, 0x0, 0x2c00}, [@typed={0x8, 0x1, 0x0, 0x0, @str=')$-\x00'}]}, 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) (async, rerun: 32)
r16 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r16, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="58000000100001042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="030100002088020024001280110018016272696467655f736c617665000000000c0005800500190008000000140003006272696467655f736c6176655f30"], 0x58}, 0x1, 0x0, 0x0, 0x44801}, 0x48000)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5d96f475586bf53f, &(0x7f00000002c0)=0x5, 0x4)

1.900107919s ago: executing program 0 (id=2017):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000000000000000500060001fe000005000200e4000000"], 0x3c}}, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={<r3=>0x0, @broadcast, @dev}, &(0x7f0000000100)=0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r5)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000003040)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r7, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', <r8=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000240)={'ip6_vti0\x00', <r9=>0x0, 0x4, 0x7, 0x1, 0xfffff2bf, 0x8, @mcast2, @mcast1, 0x7, 0x10, 0x3, 0x6}})
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0xd8, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000001)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', <r11=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8)
r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r12, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r12, &(0x7f0000000340)="07000000010000", 0x7)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0xd, 0x2, {0x10, "00000010000000001000000000001010"}}}]}, 0x48}}, 0x0)

1.844119232s ago: executing program 1 (id=2018):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x61}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}}, 0x4)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r2=>0x0})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x1f0, 0x98, 0x158, 0x98, 0x2e0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x41}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TTL={0x28}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'pim6reg1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'hsr0\x00', 'ip6tnl0\x00'}, 0x0, 0xc8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@addrtype={{0x30}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000007540), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000007580)={0x14, r6, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x40080)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="800000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010010000000280005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000009010994423fd8232aa00000008000300000000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r2], 0x80}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r7, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
socket$inet6(0xa, 0x3, 0x87) (async)
r8 = socket$inet6(0xa, 0x3, 0x87)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
r9 = accept4(r0, &(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x80, 0x80000)
getsockname$packet(r9, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async)
getsockname$packet(r9, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@empty, 0x4e24, 0x0, 0x4e23, 0x0, 0xa}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, {0xcb29, 0x1000000000, 0x53e5, 0xc9d7}, 0x0, 0x1, 0x1, 0x0, 0x2, 0x3}, {{@in=@remote, 0x0, 0x6c}, 0x2, @in=@broadcast, 0x1502, 0x3, 0x2, 0x0, 0x0, 0xfffffffd}}, 0xe8)
connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet(r3, &(0x7f0000000040)="77b0c64345c52a02d8cd87844e6d4b3e9d9b52bb68dd452c21042c0fca713e7b5c2ab2a1e368f75ab86c43a8", 0x2c, 0x40810, &(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073119900000000008510000002000000850004000000000095000810000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)

1.617003886s ago: executing program 0 (id=2020):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x8, 0x5, 0x2, 0x6185, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4, 0xe}, 0x50)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
accept(r3, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup/syz0\x00', 0x1ff)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000080)="fd20a8f901a7891204f4498c2fc005a5029b04b263e745026f2c8682c1f164a2325c0f771cb153be561a6d7dc47ffdaedd1b623185c28089c620e0a5303a44cc9993ac1fefa8ddabc7797f103a6b6928368e6d7b1e9e09c541b0704630889fbe279053a6f5fb709b601d39859ef304fcd1c96dc90f", &(0x7f0000000100)=@udp=r2, 0x4}, 0x20)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_newnexthop={0x0, 0x68, 0x8, 0x70bd2a, 0x25dfdbfb, {0x2, 0x0, 0x2, 0x0, 0x877713b6f35bcf3e}, [@NHA_RES_GROUP={0x0, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x0, 0x1, 0xe87}, @NHA_RES_GROUP_IDLE_TIMER={0x0, 0x2, 0x2}]}, @NHA_ENCAP={0x0, 0x8, 0x0, 0x1, @LWTUNNEL_IP_DST={0x0, 0x2, @loopback}}, @NHA_ENCAP={0x0, 0x8, 0x0, 0x1, @SEG6_LOCAL_NH4={0x0, 0x4, @private=0xa010102}}, @NHA_FDB, @NHA_ID={0x0, 0x1, 0x1}, @NHA_BLACKHOLE, @NHA_ENCAP={0x0, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x0, 0x1, {{0x2, {0x2e, 0x0, 0x4, 0x0, 0x59, 0x0, 0x8001, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @loopback, @loopback, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}]}}, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @broadcast}, @dev={0xfe, 0x80, '\x00', 0x42}, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, @dev={0xfe, 0x80, '\x00', 0x3d}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0x42}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @empty, @remote, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x20}, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, @mcast2, @rand_addr=' \x01\x00', @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @mcast2, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @mcast1, @loopback, @local, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @empty, @empty, @private1, @private2, @local, @local, @dev={0xfe, 0x80, '\x00', 0x2b}, @private0, @mcast2, @private0, @empty, @local, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}, @local, @loopback, @remote, @remote, @private2, @empty, @mcast1, @private2, @mcast2, @empty, @loopback, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xf}, @private0, @remote, @local, @private1, @rand_addr=' \x01\x00', @mcast1, @mcast2, @mcast1, @mcast2, @mcast1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @remote, @dev={0xfe, 0x80, '\x00', 0x44}, @dev={0xfe, 0x80, '\x00', 0x36}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}]}}}, @NHA_GROUP_TYPE={0x0, 0x3, 0x1}, @NHA_RES_GROUP={0x0, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x0, 0x1, 0x89}, @NHA_RES_GROUP_IDLE_TIMER={0x0, 0x2, 0x7}, @NHA_RES_GROUP_BUCKETS={0x0, 0x1, 0xfffd}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x0, 0x3, 0xab4}]}, @NHA_ENCAP_TYPE={0x0, 0x7, 0x1}]}, 0xc}}, 0x800)

1.436124576s ago: executing program 4 (id=2021):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r1=>0x0})
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0)
sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x7c, r2, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4020}, 0x4000)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000800000018110000", @ANYRES32=r3, @ANYBLOB="000000000000d9fb03450000b702000014000000b703000000000100000000005509010000000000d500000000000000bf91000000000000b7020000010000008500000085000000b700583c485cb73d73970000000000001d21bbc91045265a408703b3315d6214a22632a161f3fe31ca855fc25fb320f187371dcb1f148bd12738099ffee82a8ac59dc69f33e169e33d8a0804f6e7e83b61bbdd32e28b90a83bd708e8273ff4cee5e224d88159507abf85b5c6ef8fc5c95d7e9f0aa39bc5d0bfdb6907a48be850335ff40a2fbbe9d5ada43dc9f61a713b654787e68167b2da70b02bc182fad0392edb4382562f9756d146c6407ce0d48a0291a8575e287050fd7a7477ee9d6c4bb1b7d347c6fd24194a8c77b9dcea9a5e5f847d047f"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94)

1.39384937s ago: executing program 1 (id=2022):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10)
bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'gretap0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x3c}}, 0x0)
bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
bind$tipc(r0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x12, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000007b0108000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)

1.356057288s ago: executing program 0 (id=2023):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) (async)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {}, {0x2, 0xffff}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x7}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40014}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0)
sendmmsg$inet(r4, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)="cf9c4ba23584a6b6bcd48e22dd91630ee09d264a9986ae556af13420f9ecac58509511bc32bfdd472997ca7f03a2928a2409e845aa08940afb37347a30a7556760", 0x41, 0x4040000, &(0x7f0000000340)={0xa, 0x4e20, 0x6, @local, 0x7}, 0x1c)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x0, 0x4, 0x2, 0x1}}, 0x2e)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) (async)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0) (async)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r9, &(0x7f0000000200)='rdma.current\x00', 0x0, 0x0) (async)
r10 = openat$cgroup_ro(r9, &(0x7f0000000200)='rdma.current\x00', 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r10) (async)
r11 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r10)
sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0xf8, r11, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd6f}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xe798}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1}}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xf}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1000}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20004000}, 0x40001) (async)
sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0xf8, r11, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd6f}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xe798}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1}}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xf}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1000}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20004000}, 0x40001)
r12 = socket(0x23, 0x2, 0x0)
bind$packet(r12, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="2503000003000000000008"], 0x14}}, 0x0)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', <r13=>0x0})
sendto$packet(r2, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r13}, 0x14)
ioctl$AUTOFS_IOC_READY(r0, 0x800442d3, 0x200000f3)

1.204330113s ago: executing program 4 (id=2024):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async)
r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000640)='./file0\x00', r0, 0x4000, r1}, 0x18)

1.201822216s ago: executing program 1 (id=2025):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x3, 0xffffffff}, 0x10)
r1 = socket$inet(0x2, 0x3, 0x6)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x541b, &(0x7f0000000240)={'sit0\x00', 0x0})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001140)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={0x0}, 0x1, 0x0, 0x0, 0x4008800}, 0x20004010) (async)
socket(0x1e, 0x4, 0x0) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x4}, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
r5 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) (async)
listen(r5, 0x0) (async)
listen(r5, 0x0) (async)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0xffffffffffffffad, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.171709646s ago: executing program 4 (id=2026):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10)
setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080), 0x8)
sendmmsg$sock(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@txtime={{0x18, 0x1, 0x3d, 0x20}}], 0x18}}], 0x1, 0x20000844)
socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f0000000200))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x2f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000001080)=0x8)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000000)={r4, 0x5, 0x7}, 0x8)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r6 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6, 0x0, 0x1, 0xb], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}}]}, 0x8c}}, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000240)={r4, 0x6}, &(0x7f00000001c0)=0x8)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$pppoe(0x18, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000040)={0xa0000004})
epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r9, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0)
epoll_pwait(r10, &(0x7f0000000180)=[{}], 0x1, 0xc, 0x0, 0x0)

977.455494ms ago: executing program 2 (id=1924):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
writev(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b00a3878a791f64bd79d1d7cc97eed1cb0ad91426115a3b3bf2738347b0acfb01a5aeb09818f35ba6f394fcc023050ec0fab5b7405e7ce33e50e3efb3f9373ce37", 0x79}], 0x2)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14)
unshare(0x4000400)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
ppoll(&(0x7f0000000080)=[{r3, 0x2000}], 0x1, 0x0, 0x0, 0x0)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000001c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r4 = accept$nfc_llcp(r1, &(0x7f0000000000), &(0x7f0000000080)=0x60)
sendmmsg(r4, &(0x7f00000007c0), 0x45, 0x404c8d0)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, &(0x7f0000000140))

512.423822ms ago: executing program 0 (id=2027):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0xfffffffe)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x4)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0)
pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000300)="00214717a70700000000030600710a5e31163ceb9d0471200000000500000000000000ffff0342844d50e7182ce0ab6d00000846df930d0ab9cc127d0dc450de49c204a803166580ac899c081cb49f1930e7d07fbdf3", 0x56}], 0x1, 0x8, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001a80), r2)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001b00)={0x34, r4, 0x1, 0x1000000, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0x34}}, 0x20004000)
syz_emit_ethernet(0x4e, &(0x7f00000007c0)=ANY=[@ANYBLOB="2f5b02cb75dbaaaaaaaaaaaa86dd6001810042090000000000000000000000000000000000bbfeb04f548b18e1f562509d8000000000000000000000000000aa2c000000000000004e200e220010"], 0x0)

510.94724ms ago: executing program 1 (id=2028):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000010003704feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128008000100736974000c000280080003"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000007000000000018117a3e59018000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f886dac11506e0f645a78215cd4bffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a1c000000000a010200000000000000000100ffff08000240000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073017a320000000014000000060a0104000000000000000001"], 0x84}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10)
r5 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10)
r6 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be)
bind$tipc(r5, 0x0, 0x0)
sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x18}}, 0x10, 0x0}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fdffffffffffffffffffffffffffffff00000000000000004fc4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000020000000000000000000000000000000000000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c0000000a0000007f0000010000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000004d63200000000000000200100000000000000000000000000000000000000000000000000000700000000000000fc020000000000000000000000000001000000003c00000002000000ac141425000000000000000000000000043500000100000000000000000000000000000000000000000000000000000000000000000000003300000002"], 0x23c}}, 0x4004000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000000008010100000000000000000000000005000300840000000900480073797a3000000000140004810800024000000000080003400000000006000240060000009ff6a9b3c74dffd130ad569f81073da827344ec16dfa16d8996b5cb4deec0056c232"], 0x44}}, 0x0)
r8 = socket(0x11, 0x800000003, 0x0)
accept4$packet(r8, 0x0, 0x0, 0x800)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0, 0x3d, &(0x7f00000004c0), 0x0, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x13, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000c000000060000000000000c04000000040000000300000604000000000000000000000008000000d8820000040000000700000000612e302e30305f2e3000004df274"], &(0x7f0000000840)=""/211, 0x54, 0xd3}, 0x28)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000980)={0xd8}, 0x8)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[], 0x50)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="040000000000000000000000000000000000000050b041b805ead88cd25f54a273062938e1db370b5748311555f77985eb74f84126cd976a538a5d3fc73bd744ee3fdc0bed3a0b6539f61ba7158a8ce3f2637ae728e2bc5accf5abd07f7516d7fcfee68b81aff2f40844444f36c8d7f081bd38748b7d474764829cbdf92baa4523eea728f3c1b7853d6bd1653b3bf681b88ddf009e2b7299eb040000000000000075898f6dc4394f1cecd43bfa528c1be3953f54f55e", @ANYRES32=r9, @ANYRES32, @ANYBLOB="04000000030000000400"/28], 0x50)

508.966964ms ago: executing program 4 (id=2029):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xbad689febb22c699, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x9ed}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x41}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

324.144656ms ago: executing program 1 (id=2030):
r0 = socket(0x10, 0x803, 0x0)
r1 = accept$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=<r3=>0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014"], 0x44}}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x4, &(0x7f00000009c0)=ANY=[@ANYRES16=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0xfffffffffffffe9a, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000100)=r5, 0x4) (async)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080303000000e8fe03a1180015000600142603600e1208000f0000810401a80016040400014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) (async)
r6 = socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000420002002abd02000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x8001) (async)
r7 = socket(0x10, 0x3, 0x0) (async)
r8 = socket$packet(0x11, 0x2, 0x300)
r9 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0xc4, 0x14, 0x301, 0xfffffffe, 0x0, {0x1e, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xaf, 0x1, "21fff6c4ea98014af41bcbbf3c9f580ae64b71f11392875cdd25411d86a2be25a0b8ff62f8279763d219db0c5f9f82d75d5cf652ac77a427d18321b6db0b8098d6ef06aa40576b81732bc23aa60cf5ff9d9694996508a6425032db871acdb076de97f51791254270e1b2ef895a0ec3f746c745916bee5efcbeca8ac8d10ec6c507773722a79382dab36d88321968cbfbf815f86377a9fa29d23e97500af80c57dead348a6308f21d44772c"}]}, 0xc4}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x6}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x2}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x70}}, 0x0)
sendmmsg(r6, &(0x7f0000000000), 0x400000000000235, 0x0)

268.852765ms ago: executing program 4 (id=2031):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r2, &(0x7f0000007100)="19", 0x1, 0x0, &(0x7f0000000340)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
shutdown(r2, 0x1)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x6}, &(0x7f0000000240)=0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071104f000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
setsockopt$sock_void(r1, 0x29, 0x0, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000054000000030a01030000000000000000050000000900010073797a30000000000900030073797a30000000002800048008000240000000001400030073797a5f74756e000000000000000000080001400000000014000000110001"], 0x9c}}, 0x0)
syz_emit_ethernet(0x26a, &(0x7f0000000600)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0xfffffffffffffe5a, 0x6, 0x1, @remote, @local, {[@hopopts={0x5c, 0xd, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @ra={0x5, 0x2, 0xdca7}, @hao={0xc9, 0x10, @mcast1}, @generic={0xac, 0x0, "66f1dc9f8a4c6dc89ec04c6b8a62170bb72c77d82e5e92a165cb8cb2928e2f46b9a279d8a143df1bfb0c2297800b9d7a669503de42dd86eea14c1d25136d14c15fd567a5ab9588a889f4afe7e3f49f8f2836b24f498dbea12da7f304c4147113d1dbc6b3055eecbc9bb4473a15c0cc4671bf902c59dd7b8fdb1953d1e99a75e60540c64a18476fccab5a78c792b62cd57252cc8f2a37c516ee9cd794dddd405858c9cd029466f20ea366670964ffed2a41"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xffffffff}, @hao={0xc9, 0x10, @loopback}]}, @hopopts={0x21, 0x10, '\x00', [@generic={0x93, 0x77, "fc22a2a1b41b83f5626736b942d3e77750f31dcfe3e9612fc420ae584e1a3f38ac8632c89f2bb5a6efe68da2489560e9cadc39de3d4deeefe7954f83faa2c75d0920c770e0109c6d6742e8733c79a71b4f21b727b45269a36564cf350fa5b9d282c0de230c35e94751900b58d6c06c3ea7808edca633f7"}, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0x80000001}]}, @dstopts={0x0, 0x1f, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x0, [0x0]}, @hao={0xc9, 0xff77, @mcast2}, @jumbo={0xc2, 0x4, 0x2}, @jumbo={0xc2, 0x4, 0x4}, @jumbo={0xc2, 0x4, 0x6}, @generic={0x8, 0x90, "f77e64f9fe1e87414c92e0bae638c945f5e74ceb9c86e7bb4b4c7444551dbe967f484fc3082c327b3b50c49aaca5e5f4f4f61e144248f04a42396c7fb2bba03f775cebfe7c5b7ffdc68b01c63bdfb828388265157f397d8d59a721a30592dcc3831a4e51be43cfe5fdb62144926a562845f55dc38406b50d5cb0cbe9a88a96dfa5aa8a74e4043f7ce473b41efd7a2a64"}, @calipso={0x7, 0x38, {0x3, 0xc, 0x7, 0x9, [0x1000000000000, 0x8, 0x4, 0x5, 0x8, 0x9]}}]}, @hopopts={0x33, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @enc_lim]}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

195.475747ms ago: executing program 0 (id=2032):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r1, 0x0, 0x1}, 0x18)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x4}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r2, &(0x7f0000000200)="af1c97daf0088edbf36dcbd9deaaa7ca6860bcf7c6ce39bc0e881e8d1b8c9e98c65f272b5abd8564af1a447bf08b62c322cc0cc067364e14a6482b27ebe888373ccf91d85e4fdb9bca4774ba20deee85f8241bec84b71c91d4723be00a8f417880059cdc349eab46ee513a0ad7afa09e0a94aa5fcbfe1b94487b7ed86b217a8bb5", &(0x7f00000002c0)=""/4096}, 0x20)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000001ec0)='cgroup.kill\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000731139000000000020000000000000009500200000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
preadv(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/26, 0x1a}], 0x1, 0x55f, 0x0)

77.179386ms ago: executing program 4 (id=2033):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="01000000080800"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="4100f60001000000000000000001"], 0x80}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x108}}, 0x4)

0s ago: executing program 0 (id=2034):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f00)=@ipv6_newaddrlabel={0x30, 0x1e, 0x1, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @mcast2}]}, 0x30}}, 0x0)
listen(r0, 0xfffffffe)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={<r4=>0x0, 0x2}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x4}, &(0x7f0000000140)=0x8)
socket$vsock_stream(0x28, 0x1, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
setsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f00000000c0)={0x0, 0x2710}, 0x10)
recvmsg(r6, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0)
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)={0x14, r9, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x20000000)
sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000006080)=ANY=[@ANYBLOB="2800000014001102000000000000000028"], 0x28}}, 0x0)

kernel console output (not intermixed with test programs):

 `syz.2.144'.
[  107.896995][ T6412] bond0: (slave batadv0): Releasing backup interface
[  107.920192][ T6412] bridge_slave_0: left allmulticast mode
[  107.934204][ T6412] bridge_slave_0: left promiscuous mode
[  107.943176][ T6412] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.985247][ T6412] bridge_slave_1: left allmulticast mode
[  108.003121][ T6412] bridge_slave_1: left promiscuous mode
[  108.019929][ T6412] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.120505][ T6412] bond0: (slave bond_slave_0): Releasing backup interface
[  108.152412][ T6412] bond0: (slave bond_slave_1): Releasing backup interface
[  108.178188][ T6412] team0: Port device team_slave_0 removed
[  108.195468][ T6412] team0: Port device team_slave_1 removed
[  108.203412][ T6412] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  108.211366][ T6412] batman_adv: batadv0: Removing interface: batadv_slave_0
[  108.221417][ T6412] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  108.229961][ T6412] batman_adv: batadv0: Removing interface: batadv_slave_1
[  108.466354][ T6433] netlink: 'syz.2.151': attribute type 4 has an invalid length.
[  108.510432][ T6436] vlan1: entered allmulticast mode
[  108.515725][ T6436] veth0_vlan: entered allmulticast mode
[  108.679607][ T6444] netlink: 'syz.0.155': attribute type 1 has an invalid length.
[  108.780822][ T6444] 8021q: adding VLAN 0 to HW filter on device bond1
[  108.807119][ T6448] gretap1: entered promiscuous mode
[  108.907746][ T6454] netlink: 'syz.2.159': attribute type 1 has an invalid length.
[  108.915767][ T6454] netlink: 'syz.2.159': attribute type 1 has an invalid length.
[  108.937160][ T6454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.159'.
[  109.172749][ T6461] netlink: 232 bytes leftover after parsing attributes in process `syz.0.162'.
[  109.349486][ T6472] gtp0: entered promiscuous mode
[  109.377576][ T6472] gtp0: entered allmulticast mode
[  109.624313][ T6493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.170'.
[  109.719078][ T6498] bond2: (slave vcan1): The slave device specified does not support setting the MAC address
[  109.740255][ T6498] bond2: (slave vcan1): Error -95 calling set_mac_address
[  109.995025][ T6515] netlink: 32 bytes leftover after parsing attributes in process `syz.0.177'.
[  110.053027][ T6509] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.061166][ T6509] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.209419][ T6509] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  110.245507][ T6502] geneve2: entered promiscuous mode
[  110.256047][ T6502] geneve2: entered allmulticast mode
[  110.443049][ T6535] !€ÿ: renamed from bond_slave_0 (while UP)
[  110.666259][ T6565] netlink: 'syz.3.182': attribute type 32 has an invalid length.
[  110.674074][ T6565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.182'.
[  110.723171][ T6565] (unnamed net_device) (uninitialized): option coupled_control: invalid value (128)
[  110.827197][ T6579] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  110.839770][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'.
[  110.865524][ T6579] macsec0: entered promiscuous mode
[  110.891169][ T6579] Illegal XDP return value 16128 on prog  (id 68) dev syz_tun, expect packet loss!
[  111.036718][ T6591] netlink: 'syz.4.192': attribute type 83 has an invalid length.
[  111.240781][ T6608] netlink: 20 bytes leftover after parsing attributes in process `syz.0.199'.
[  111.268367][ T6606] netlink: 24 bytes leftover after parsing attributes in process `syz.1.196'.
[  111.332943][ T6603] netlink: 'syz.2.198': attribute type 4 has an invalid length.
[  111.391753][ T6603] netlink: 'syz.2.198': attribute type 4 has an invalid length.
[  111.500772][ T6615] GUP no longer grows the stack in syz.0.201 (6615): 200000003000-200000005000 (200000001000)
[  111.512370][ T6615] CPU: 1 UID: 0 PID: 6615 Comm: syz.0.201 Not tainted 6.16.0-rc2-syzkaller-00185-g010c40c1f50e #0 PREEMPT(full) 
[  111.512402][ T6615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  111.512424][ T6615] Call Trace:
[  111.512434][ T6615]  <TASK>
[  111.512443][ T6615]  dump_stack_lvl+0x189/0x250
[  111.512487][ T6615]  ? __pfx_dump_stack_lvl+0x10/0x10
[  111.512520][ T6615]  ? __pfx__printk+0x10/0x10
[  111.512540][ T6615]  ? find_vma+0xe7/0x160
[  111.512576][ T6615]  __get_user_pages+0x2a60/0x30b0
[  111.512647][ T6615]  ? __pfx___get_user_pages+0x10/0x10
[  111.512676][ T6615]  ? __gup_longterm_locked+0xbf7/0x15b0
[  111.512706][ T6615]  ? down_read_killable+0x1d1/0x350
[  111.512727][ T6615]  ? try_get_folio+0x633/0x660
[  111.512750][ T6615]  __gup_longterm_locked+0xd66/0x15b0
[  111.512787][ T6615]  ? try_grab_folio_fast+0x1be/0x4f0
[  111.512819][ T6615]  ? gup_fast_fallback+0x1afc/0x2260
[  111.512854][ T6615]  gup_fast_fallback+0x1cd4/0x2260
[  111.512927][ T6615]  ? __pfx_gup_fast_fallback+0x10/0x10
[  111.512966][ T6615]  ? __pfx_get_page_from_freelist+0x10/0x10
[  111.512992][ T6615]  ? is_valid_gup_args+0x11f/0x200
[  111.513025][ T6615]  ? get_user_pages_fast+0x4d/0xb0
[  111.513059][ T6615]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  111.513083][ T6615]  ? vfs_writev+0x31a/0x960
[  111.513110][ T6615]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  111.513142][ T6615]  iov_iter_get_pages2+0x5e/0xa0
[  111.513167][ T6615]  sk_msg_zerocopy_from_iter+0x1f6/0x830
[  111.513211][ T6615]  ? __pfx_sk_msg_zerocopy_from_iter+0x10/0x10
[  111.513276][ T6615]  tls_sw_sendmsg+0x989/0x23d0
[  111.513352][ T6615]  ? __pfx_tls_sw_sendmsg+0x10/0x10
[  111.513387][ T6615]  ? __pfx_aa_sk_perm+0x10/0x10
[  111.513417][ T6615]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  111.513447][ T6615]  ? sock_rps_record_flow+0x19/0x410
[  111.513471][ T6615]  ? inet_getname+0x527/0x530
[  111.513494][ T6615]  ? inet6_sendmsg+0x101/0x120
[  111.513519][ T6615]  __sock_sendmsg+0xe5/0x270
[  111.513556][ T6615]  sock_write_iter+0x258/0x330
[  111.513584][ T6615]  ? futex_unqueue+0x211/0x240
[  111.513609][ T6615]  ? __pfx_sock_write_iter+0x10/0x10
[  111.513651][ T6615]  ? __pfx___futex_wait+0x10/0x10
[  111.513680][ T6615]  ? __pfx_aa_file_perm+0x10/0x10
[  111.513719][ T6615]  do_iter_readv_writev+0x56e/0x7f0
[  111.513744][ T6615]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  111.513772][ T6615]  ? bpf_lsm_file_permission+0x9/0x20
[  111.513800][ T6615]  ? security_file_permission+0x75/0x290
[  111.513825][ T6615]  ? rw_verify_area+0x258/0x650
[  111.513861][ T6615]  vfs_writev+0x31a/0x960
[  111.513892][ T6615]  ? __lock_acquire+0xab9/0xd20
[  111.513923][ T6615]  ? __pfx_vfs_writev+0x10/0x10
[  111.513967][ T6615]  ? __fget_files+0x2a/0x420
[  111.513995][ T6615]  ? __fget_files+0x3a0/0x420
[  111.514017][ T6615]  ? __fget_files+0x2a/0x420
[  111.514051][ T6615]  do_writev+0x14d/0x2d0
[  111.514079][ T6615]  ? __pfx_do_writev+0x10/0x10
[  111.514101][ T6615]  ? rcu_is_watching+0x15/0xb0
[  111.514140][ T6615]  ? do_syscall_64+0xbe/0x3b0
[  111.514165][ T6615]  do_syscall_64+0xfa/0x3b0
[  111.514183][ T6615]  ? lockdep_hardirqs_on+0x9c/0x150
[  111.514213][ T6615]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.514234][ T6615]  ? clear_bhb_loop+0x60/0xb0
[  111.514260][ T6615]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.514280][ T6615] RIP: 0033:0x7fbe3638e929
[  111.514299][ T6615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  111.514317][ T6615] RSP: 002b:00007fbe37186038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  111.514340][ T6615] RAX: ffffffffffffffda RBX: 00007fbe365b5fa0 RCX: 00007fbe3638e929
[  111.514355][ T6615] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003
[  111.514368][ T6615] RBP: 00007fbe36410b39 R08: 0000000000000000 R09: 0000000000000000
[  111.514380][ T6615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  111.514392][ T6615] R13: 0000000000000000 R14: 00007fbe365b5fa0 R15: 00007ffe1b9a4eb8
[  111.514434][ T6615]  </TASK>
[  111.942186][ T6620] netlink: 'syz.3.203': attribute type 23 has an invalid length.
[  112.095776][ T6628] Bluetooth: MGMT ver 1.23
[  112.128530][ T6633] xt_l2tp: v2 doesn't support IP mode
[  112.406481][ T6650] __nla_validate_parse: 3 callbacks suppressed
[  112.406506][ T6650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.211'.
[  112.470384][ T6650] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  112.479467][ T6650] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  112.489334][ T6650] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  112.498714][ T6650] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  112.594257][ T6650] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  112.604112][ T6650] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  112.613521][ T6650] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  112.622542][ T6650] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  112.695239][ T6666] Cannot find add_set index 0 as target
[  112.705694][ T6667] netlink: 'syz.1.215': attribute type 4 has an invalid length.
[  112.756690][ T6661] netlink: 'syz.1.215': attribute type 4 has an invalid length.
[  112.780254][ T6669] netlink: 108 bytes leftover after parsing attributes in process `syz.4.216'.
[  112.823987][ T6669] netlink: 'syz.4.216': attribute type 2 has an invalid length.
[  113.102560][ T6684] netlink: 32 bytes leftover after parsing attributes in process `syz.0.221'.
[  113.193543][ T6687] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  113.217785][ T6690] netlink: 104 bytes leftover after parsing attributes in process `syz.3.223'.
[  113.344086][ T6687] syzkaller1: entered promiscuous mode
[  113.377010][ T6687] syzkaller1: entered allmulticast mode
[  113.626838][ T6709] netlink: 'syz.0.227': attribute type 33 has an invalid length.
[  113.635875][ T6709] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.227'.
[  113.882593][ T6726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.231'.
[  114.106355][   T51] Bluetooth: hci4: command 0x0405 tx timeout
[  114.534412][ T6756] team0: entered promiscuous mode
[  114.565408][ T6758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  114.583056][ T6756] team_slave_0: entered promiscuous mode
[  114.599559][ T6756] team_slave_1: entered promiscuous mode
[  114.624280][ T6755] team0: left promiscuous mode
[  114.631737][ T6755] team_slave_0: left promiscuous mode
[  114.646755][ T6755] team_slave_1: left promiscuous mode
[  114.705598][ T6765] tunl0: entered promiscuous mode
[  114.748992][ T6765] netlink: 'syz.4.241': attribute type 3 has an invalid length.
[  114.767925][ T6765] netlink: 9 bytes leftover after parsing attributes in process `syz.4.241'.
[  115.721002][ T6815] RDS: rds_bind could not find a transport for ::1c52:0:6:ffff:ffff, load rds_tcp or rds_rdma?
[  115.733655][ T6809] sctp: [Deprecated]: syz.3.254 (pid 6809) Use of int in max_burst socket option.
[  115.733655][ T6809] Use struct sctp_assoc_value instead
[  115.969631][ T6825] netlink: 'syz.1.258': attribute type 13 has an invalid length.
[  115.985996][ T6829] netlink: 'syz.3.260': attribute type 1 has an invalid length.
[  115.993723][ T6829] netlink: 228 bytes leftover after parsing attributes in process `syz.3.260'.
[  116.202709][ T6825] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  116.389663][ T6851] netlink: 'syz.3.267': attribute type 1 has an invalid length.
[  116.406096][ T6851] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  116.413708][ T6851] IPv6: NLM_F_CREATE should be set when creating new route
[  116.426800][ T6852] tipc: Started in network mode
[  116.476270][ T6852] tipc: Node identity 62da9fe863cd, cluster identity 4711
[  116.516603][ T6852] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.547205][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.269'.
[  116.597048][ T6859] netlink: 'syz.1.271': attribute type 9 has an invalid length.
[  116.640577][ T6860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.270'.
[  116.680910][ T6855] syzkaller0: entered promiscuous mode
[  116.711110][ T6855] syzkaller0: entered allmulticast mode
[  116.718768][ T6855] tipc: Resetting bearer <eth:syzkaller0>
[  116.824338][ T6852] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) !
[  116.903830][ T1339] tipc: Resetting bearer <eth:syzkaller0>
[  116.923008][ T6873] vlan2: entered promiscuous mode
[  116.928597][ T6873] vlan2: entered allmulticast mode
[  116.933861][ T6873] hsr_slave_1: entered allmulticast mode
[  116.945248][ T6849] tipc: Resetting bearer <eth:syzkaller0>
[  117.414775][ T6900] xt_CT: No such helper "pptp"
[  117.517617][    T9] tipc: Node number set to 18325480
[  118.545555][ T6849] tipc: Disabling bearer <eth:syzkaller0>
[  118.752577][ T6914] netlink: 'syz.1.283': attribute type 1 has an invalid length.
[  118.766669][ T6914] netlink: 'syz.1.283': attribute type 4 has an invalid length.
[  118.791018][ T6914] __nla_validate_parse: 1 callbacks suppressed
[  118.791039][ T6914] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.283'.
[  118.820406][ T6916] netlink: 104 bytes leftover after parsing attributes in process `syz.2.284'.
[  118.864540][ T6925] netlink: 'syz.0.287': attribute type 1 has an invalid length.
[  118.882663][ T6925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.287'.
[  118.924972][ T6928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.287'.
[  118.950632][ T6933] netlink: 312 bytes leftover after parsing attributes in process `syz.3.286'.
[  119.168129][ T6939] netlink: 72 bytes leftover after parsing attributes in process `syz.3.286'.
[  119.207433][ T6939] netlink: 72 bytes leftover after parsing attributes in process `syz.3.286'.
[  119.239029][ T6941] netlink: 20 bytes leftover after parsing attributes in process `syz.4.288'.
[  119.331809][ T6950] IPVS: set_ctl: invalid protocol: 41 100.1.1.2:20000
[  119.514217][ T6961] netlink: 28 bytes leftover after parsing attributes in process `syz.0.296'.
[  119.524268][   T30] audit: type=1800 audit(1750907862.884:2): pid=6956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.294" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=339 res=0 errno=0
[  120.090415][ T6988] netlink: 'syz.1.307': attribute type 10 has an invalid length.
[  120.121584][ T6988] netlink: 40 bytes leftover after parsing attributes in process `syz.1.307'.
[  120.183715][ T6988] dummy0: entered promiscuous mode
[  120.233112][ T6988] bridge0: port 3(dummy0) entered blocking state
[  120.240834][ T6988] bridge0: port 3(dummy0) entered disabled state
[  120.247990][ T6988] dummy0: entered allmulticast mode
[  120.257714][ T6988] bridge0: port 3(dummy0) entered blocking state
[  120.264367][ T6988] bridge0: port 3(dummy0) entered forwarding state
[  122.042371][ T7067] C: renamed from team_slave_0
[  122.062268][ T7067] netlink: 'syz.3.334': attribute type 1 has an invalid length.
[  122.080536][ T7067] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  122.088368][ T7072] trusted_key: syz.1.335 sent an empty control message without MSG_MORE.
[  122.325271][ T7085] netlink: 'syz.0.339': attribute type 21 has an invalid length.
[  122.333620][ T7087] sctp: [Deprecated]: syz.2.338 (pid 7087) Use of int in max_burst socket option.
[  122.333620][ T7087] Use struct sctp_assoc_value instead
[  122.419255][ T7097] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  122.447161][ T7097] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20003
[  122.553742][ T7101] netlink: 'syz.0.344': attribute type 29 has an invalid length.
[  122.575000][ T7101] netlink: 'syz.0.344': attribute type 29 has an invalid length.
[  123.100097][ T7134] netlink: 'syz.1.355': attribute type 1 has an invalid length.
[  123.290328][ T7149] netlink: 'syz.1.360': attribute type 1 has an invalid length.
[  123.359903][ T7156] openvswitch: netlink: ERSPAN option length err (len 306, max 255).
[  124.271381][ T7207] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  124.405450][ T7214] netlink: 'syz.0.381': attribute type 1 has an invalid length.
[  124.436179][ T7214] __nla_validate_parse: 17 callbacks suppressed
[  124.436202][ T7214] netlink: 224 bytes leftover after parsing attributes in process `syz.0.381'.
[  124.528179][ T7223] No such timeout policy "syz0"
[  124.781232][ T7239] netlink: 'syz.0.389': attribute type 1 has an invalid length.
[  124.795159][ T7239] netlink: 224 bytes leftover after parsing attributes in process `syz.0.389'.
[  125.012651][ T7247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.391'.
[  125.110775][ T7247] netlink: 72 bytes leftover after parsing attributes in process `syz.2.391'.
[  125.253671][ T7261] netlink: 28 bytes leftover after parsing attributes in process `syz.3.396'.
[  125.345009][ T7266] netdevsim netdevsim0: Direct firmware load for /.€ failed with error -2
[  125.395005][ T7266] netdevsim netdevsim0: Falling back to sysfs fallback for: /.€
[  126.066821][ T7305] sctp: [Deprecated]: syz.2.407 (pid 7305) Use of int in maxseg socket option.
[  126.066821][ T7305] Use struct sctp_assoc_value instead
[  126.228861][ T7303] netlink: 84 bytes leftover after parsing attributes in process `syz.4.405'.
[  126.749331][ T7380] netlink: 16 bytes leftover after parsing attributes in process `syz.3.416'.
[  126.803280][ T7386] veth3: entered allmulticast mode
[  127.153016][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.423'.
[  127.181371][ T7408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.423'.
[  127.239174][ T7416] netlink: 104 bytes leftover after parsing attributes in process `syz.2.427'.
[  127.386067][    T9] IPVS: starting estimator thread 0...
[  127.397724][ T7420] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  127.538106][ T7423] IPVS: using max 24 ests per chain, 57600 per kthread
[  128.057377][ T7446] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  128.100403][ T7446] netlink: 'syz.2.435': attribute type 6 has an invalid length.
[  128.500802][ T7472] netlink: 'syz.1.444': attribute type 1 has an invalid length.
[  128.567430][ T7477] openvswitch: netlink: Missing key (keys=40, expected=100)
[  128.655571][ T7483] netlink: 'syz.4.447': attribute type 1 has an invalid length.
[  128.750620][ T7486] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32
[  129.612534][ T7493] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.623056][ T7493] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.633129][ T7493] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.651787][ T7493] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.764327][ T7529] veth0_macvtap: entered allmulticast mode
[  129.854575][ T7537] pim6reg: entered allmulticast mode
[  130.544072][ T7583] __nla_validate_parse: 10 callbacks suppressed
[  130.544094][ T7583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.473'.
[  130.580107][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.473'.
[  130.756217][ T7589] netlink: 40 bytes leftover after parsing attributes in process `syz.2.475'.
[  130.923244][ T7613] bond0: (slave macvlan2): Error -98 calling set_mac_address
[  131.030586][ T7613] bond0: (slave macvlan2): Error -98 calling set_mac_address
[  131.215265][ T7632] netlink: 'syz.1.490': attribute type 10 has an invalid length.
[  131.225142][ T7632] veth1_vlan: entered allmulticast mode
[  131.239989][ T7632] team0: Device veth1_vlan failed to register rx_handler
[  131.641819][ T7655] netlink: 'syz.1.495': attribute type 9 has an invalid length.
[  131.730186][ T7615] syz.0.482 (7615) used greatest stack depth: 19992 bytes left
[  131.778669][ T7662] netlink: 'syz.3.497': attribute type 5 has an invalid length.
[  131.795111][ T7662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.497'.
[  131.816169][ T7662] netlink: 20 bytes leftover after parsing attributes in process `syz.3.497'.
[  131.904876][ T7668] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  131.948983][ T7666] netlink: 16 bytes leftover after parsing attributes in process `syz.2.499'.
[  132.254202][ T7685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.506'.
[  132.394051][ T7690] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  132.478636][ T7693] netlink: 180 bytes leftover after parsing attributes in process `syz.0.510'.
[  132.612996][ T7702] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  132.672566][ T7706] netlink: 'syz.0.513': attribute type 16 has an invalid length.
[  132.701738][ T7706] netlink: 'syz.0.513': attribute type 17 has an invalid length.
[  132.908323][ T7716] bridge1: entered promiscuous mode
[  132.913634][ T7716] bridge1: entered allmulticast mode
[  132.956635][ T7719] netlink: 20 bytes leftover after parsing attributes in process `syz.3.518'.
[  132.992502][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  133.000414][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  133.438441][ T7745] bridge0: port 3(vlan2) entered blocking state
[  133.450844][ T7745] bridge0: port 3(vlan2) entered disabled state
[  133.486317][ T7745] vlan2: entered allmulticast mode
[  133.501800][ T7745] bond0: entered allmulticast mode
[  133.507235][ T7745] bond_slave_0: entered allmulticast mode
[  133.516809][ T7745] bond_slave_1: entered allmulticast mode
[  133.544800][ T7745] vlan2: entered promiscuous mode
[  133.561881][ T7745] bond0: entered promiscuous mode
[  133.572027][ T7745] bond_slave_0: entered promiscuous mode
[  133.592540][ T7745] bond_slave_1: entered promiscuous mode
[  133.643975][ T7758] netlink: 'syz.3.528': attribute type 4 has an invalid length.
[  133.652135][ T7714] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  133.665056][ T7752] delete_channel: no stack
[  133.694291][ T7750] netlink: 'syz.3.528': attribute type 4 has an invalid length.
[  134.168130][ T7773] netlink: 20 bytes leftover after parsing attributes in process `syz.3.534'.
[  134.416969][ T7792] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) !
[  134.877506][ T7818] netlink: 'syz.4.544': attribute type 4 has an invalid length.
[  134.928064][ T7812] netlink: 'syz.4.544': attribute type 4 has an invalid length.
[  135.729064][ T7865] __nla_validate_parse: 2 callbacks suppressed
[  135.729087][ T7865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.557'.
[  135.762021][ T7865] netlink: 50 bytes leftover after parsing attributes in process `syz.0.557'.
[  135.771625][ T7865] netlink: 50 bytes leftover after parsing attributes in process `syz.0.557'.
[  136.003725][ T7876] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.562'.
[  136.233326][ T7897] netlink: 40 bytes leftover after parsing attributes in process `syz.0.568'.
[  136.271037][ T7895] tls_set_device_offload: netdev not found
[  136.412595][ T7908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.572'.
[  136.471158][ T7908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.572'.
[  136.511979][ T7908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.572'.
[  136.544121][ T7916] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  136.761557][ T7927] RDS: rds_bind could not find a transport for 400:0:1200:100:1030:0:ffff:ffff, load rds_tcp or rds_rdma?
[  136.820412][ T7925] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  136.840720][ T7889] infiniband syz2: set down
[  136.852813][ T7889] infiniband syz2: added veth1_vlan
[  136.944375][ T7889] RDS/IB: syz2: added
[  137.036567][ T7889] smc: adding ib device syz2 with port count 1
[  137.054664][ T7889] smc:    ib device syz2 port 1 has pnetid 
[  137.243115][ T7964] netlink: 'syz.4.585': attribute type 4 has an invalid length.
[  137.314384][ T7968] netlink: 'syz.4.585': attribute type 4 has an invalid length.
[  137.723669][ T7986] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.591'.
[  139.531265][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.595'.
[  139.737559][ T8008] x_tables: ip_tables: osf match: only valid for protocol 6
[  139.750568][ T8011] x_tables: ip_tables: osf match: only valid for protocol 6
[  139.829526][ T8005] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  139.861447][ T8010] openvswitch: netlink: Key type 15120 is out of range max 32
[  140.025062][ T8018] xt_CT: You must specify a L4 protocol and not use inversions on it
[  140.160442][ T8024] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  140.180622][ T8024] Cannot find add_set index 0 as target
[  140.189453][ T8026] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  140.638877][ T8045] netlink: 'syz.0.612': attribute type 11 has an invalid length.
[  140.713994][   T51] Bluetooth: hci4: link tx timeout
[  140.719752][   T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  140.993050][ T8052] ieee802154 phy0 wpan0: encryption failed: -22
[  141.151836][ T8059] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  141.161084][ T8059] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  141.170175][ T8059] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  141.178991][ T8059] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  141.190668][ T8059] vxlan1: entered promiscuous mode
[  141.197542][ T8059] vxlan1: entered allmulticast mode
[  141.414955][ T8070] __nla_validate_parse: 1 callbacks suppressed
[  141.414976][ T8070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.621'.
[  141.573724][ T8071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  141.772455][ T8082] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.125193][ T8111] tipc: Failed to obtain node identity
[  142.151332][ T8111] tipc: Enabling of bearer <ib:veth0_to_team> rejected, failed to enable media
[  142.234861][ T8119] netlink: 16 bytes leftover after parsing attributes in process `syz.1.634'.
[  142.395074][ T8132] netlink: 20 bytes leftover after parsing attributes in process `syz.2.637'.
[  142.423670][ T8130] netlink: 20 bytes leftover after parsing attributes in process `syz.2.637'.
[  142.746372][ T5843] Bluetooth: hci4: command 0x0405 tx timeout
[  142.976808][ T8155] netlink: 15 bytes leftover after parsing attributes in process `syz.4.647'.
[  143.038676][ T8155] netlink: 'syz.4.647': attribute type 1 has an invalid length.
[  143.055910][ T8155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.647'.
[  143.099369][ T8158] netlink: 'syz.2.645': attribute type 4 has an invalid length.
[  143.149989][ T8165] netlink: 'syz.2.645': attribute type 4 has an invalid length.
[  143.405498][ T8173] netlink: 11 bytes leftover after parsing attributes in process `syz.4.650'.
[  143.417604][ T8176] netlink: 'syz.1.651': attribute type 1 has an invalid length.
[  143.425425][ T8173] netlink: 11 bytes leftover after parsing attributes in process `syz.4.650'.
[  143.435627][ T8177] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  143.448945][ T8177] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  143.469635][ T8179] netlink: 'syz.1.651': attribute type 2 has an invalid length.
[  143.508127][ T8177] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  143.518473][ T8177] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  143.566490][ T8179] bond3: (slave gretap1): making interface the new active one
[  143.580298][ T8179] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  143.732937][ T8187] netlink: 256 bytes leftover after parsing attributes in process `syz.3.653'.
[  143.766435][ T8187] netlink: 'syz.3.653': attribute type 9 has an invalid length.
[  144.295104][ T8206] netlink: 64 bytes leftover after parsing attributes in process `syz.1.663'.
[  144.661447][ T8215] gtp0: entered promiscuous mode
[  144.683877][ T8215] gtp0: entered allmulticast mode
[  144.753335][ T8222] batadv_slave_1: entered promiscuous mode
[  144.778552][ T8222] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  144.797328][ T8220] batadv_slave_1: left promiscuous mode
[  144.803612][ T8226] xt_policy: output policy not valid in PREROUTING and INPUT
[  144.953072][ T8234] netlink: 'syz.4.673': attribute type 21 has an invalid length.
[  145.381179][ T7527] IPVS: starting estimator thread 0...
[  145.497854][ T8258] IPVS: using max 27 ests per chain, 64800 per kthread
[  145.592574][ T8272] netlink: 'syz.3.686': attribute type 2 has an invalid length.
[  145.793177][ T8275] netlink: 'syz.1.690': attribute type 4 has an invalid length.
[  145.859241][ T8293] netlink: 'syz.1.690': attribute type 4 has an invalid length.
[  146.028419][ T8300] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  146.249388][ T8312] Cannot find set identified by id 0 to match
[  146.734578][ T8340] __nla_validate_parse: 13 callbacks suppressed
[  146.734598][ T8340] netlink: 232 bytes leftover after parsing attributes in process `syz.4.710'.
[  146.762905][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.710'.
[  147.138966][ T8359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.713'.
[  147.164066][ T8359] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  147.172594][ T8359] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  147.351188][ T8370] netlink: 288 bytes leftover after parsing attributes in process `syz.2.718'.
[  147.410075][ T8366] can: request_module (can-proto-0) failed.
[  147.453425][ T8378] team0: entered promiscuous mode
[  147.472314][ T8378] team_slave_0: entered promiscuous mode
[  147.489099][ T8378] team_slave_1: entered promiscuous mode
[  147.751299][ T8368] team0: left promiscuous mode
[  147.756934][ T8368] team_slave_0: left promiscuous mode
[  147.765665][ T8368] team_slave_1: left promiscuous mode
[  148.019981][   T30] audit: type=1800 audit(1750907891.394:3): pid=8404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.728" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=747 res=0 errno=0
[  148.182864][ T8405] validate_nla: 2 callbacks suppressed
[  148.182886][ T8405] netlink: 'syz.4.727': attribute type 4 has an invalid length.
[  148.233181][ T8415] netdevsim netdevsim1 
€Â: renamed from netdevsim0
[  148.234433][ T8416] netlink: 'syz.2.731': attribute type 4 has an invalid length.
[  148.254886][ T8411] netlink: 'syz.4.727': attribute type 4 has an invalid length.
[  148.999523][ T8429] netlink: 'syz.1.734': attribute type 62 has an invalid length.
[  149.203376][ T8442] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  149.272350][ T8427] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  149.290514][ T8427] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.420726][ T8427] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  149.434452][ T8427] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.469667][ T8455] x_tables: duplicate underflow at hook 1
[  149.539855][ T8457] netlink: 'syz.4.743': attribute type 4 has an invalid length.
[  149.582482][ T8427] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  149.596469][ T8468] netlink: 'syz.4.743': attribute type 4 has an invalid length.
[  149.605026][ T8427] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.628798][ T8466] netlink: 'syz.2.745': attribute type 4 has an invalid length.
[  149.759341][ T8427] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  149.775130][ T8427] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.988918][ T8475] netlink: 'syz.1.747': attribute type 2 has an invalid length.
[  150.011226][ T8476] netlink: 'syz.1.747': attribute type 2 has an invalid length.
[  150.085417][ T8427] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  150.098997][ T8427] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.259865][ T8427] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  150.278520][ T8427] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.327865][ T8427] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  150.351173][ T8427] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.441506][ T8427] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  150.496037][ T8427] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  151.163779][ T8530] netlink: 'syz.2.762': attribute type 1 has an invalid length.
[  151.263772][ T8530] 8021q: adding VLAN 0 to HW filter on device bond1
[  151.286719][ T8532] bond1: (slave geneve2): making interface the new active one
[  151.297455][ T8532] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  151.316399][ T8530] bond1: entered promiscuous mode
[  151.321623][ T8530] geneve2: entered promiscuous mode
[  151.665226][ T8543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.768'.
[  151.773467][ T8549] netlink: 96 bytes leftover after parsing attributes in process `syz.2.770'.
[  151.783429][ T8549] 8021q: VLANs not supported on ip6_vti0
[  151.912488][ T8564] netlink: 32 bytes leftover after parsing attributes in process `syz.4.773'.
[  152.427474][ T8604] netlink: 212364 bytes leftover after parsing attributes in process `syz.3.785'.
[  152.463644][ T8604] openvswitch: netlink: Message has 5 unknown bytes.
[  152.563797][ T8604] netlink: 88 bytes leftover after parsing attributes in process `syz.3.785'.
[  153.070851][ T8638] netlink: 64 bytes leftover after parsing attributes in process `syz.1.797'.
[  153.140583][ T8643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.799'.
[  153.197812][ T8643] netlink: 32 bytes leftover after parsing attributes in process `syz.4.799'.
[  153.221566][ T8643] netlink: 192 bytes leftover after parsing attributes in process `syz.4.799'.
[  153.279313][ T8649] bond0: entered promiscuous mode
[  153.285638][ T8649] bond_slave_0: entered promiscuous mode
[  153.309618][ T8649] bond_slave_1: entered promiscuous mode
[  153.332171][ T8649] batadv0: entered promiscuous mode
[  153.365494][ T8649] 8021q: adding VLAN 0 to HW filter on device hsr1
[  153.452547][ T8652] af_packet: tpacket_rcv: packet too big, clamped from 56584 to 4. macoff=68
[  153.489277][ T8656] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  153.619303][ T8663] x_tables: duplicate underflow at hook 3
[  153.640061][ T8660] netlink: 'syz.2.805': attribute type 21 has an invalid length.
[  153.782372][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.809'.
[  153.807570][ T8673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.809'.
[  154.015217][ T8687] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  194.430267][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  194.437099][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  211.871152][ T5157] Bluetooth: hci1: command 0x0401 tx timeout
[  211.877385][ T5852] Bluetooth: hci2: command 0x0406 tx timeout
[  211.883518][   T51] Bluetooth: hci3: command 0x0406 tx timeout
[  221.038024][ T8699] 8021q: adding VLAN 0 to HW filter on device bond3
[  221.047358][ T8699] bond3: entered promiscuous mode
[  221.052735][ T8699] bond3: entered allmulticast mode
[  221.059120][ T8699] bond0: (slave bond3): Enslaving as an active interface with an up link
[  221.131695][ T8709] netlink: 36 bytes leftover after parsing attributes in process `syz.1.814'.
[  221.614133][ T8740] netlink: 'syz.2.825': attribute type 83 has an invalid length.
[  221.668483][ T8739] netlink: 'syz.4.824': attribute type 1 has an invalid length.
[  221.850849][ T8739] gretap1: entered promiscuous mode
[  221.907913][ T8753] tipc: Started in network mode
[  221.917985][ T8753] tipc: Node identity ac14140f, cluster identity 4711
[  221.931929][ T8753] tipc: New replicast peer: 255.64.203.57
[  221.964356][ T8753] tipc: Enabled bearer <udp:syz2>, priority 10
[  222.380437][ T8753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.828'.
[  222.447232][ T8769] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  222.472895][ T8753] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  222.473275][ T8779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.832'.
[  222.552364][ T8753] batman_adv: batadv0: Removing interface: batadv_slave_1
[  222.572039][ T8780] netlink: 148 bytes leftover after parsing attributes in process `syz.1.835'.
[  222.607587][ T8782] xt_l2tp: v2 sid > 0xffff: 262144
[  222.785045][ T8785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.839'.
[  222.794801][ T8785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.839'.
[  222.809874][ T8786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.839'.
[  222.901081][ T8791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.837'.
[  222.953133][ T8794] netlink: 'syz.3.840': attribute type 1 has an invalid length.
[  223.076071][ T7527] tipc: Node number set to 2886997007
[  223.184772][ T8796] bond3: (slave bridge1): making interface the new active one
[  223.195314][ T8796] bond3: (slave bridge1): Enslaving as an active interface with an up link
[  223.285876][ T8810] bond0: option mode: unable to set because the bond device has slaves
[  223.727062][ T8835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.852'.
[  223.767996][ T8836] netlink: 28 bytes leftover after parsing attributes in process `syz.0.853'.
[  223.790708][ T8832] netlink: 'syz.0.853': attribute type 26 has an invalid length.
[  224.169058][ T8852] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  224.401072][ T8858] openvswitch: netlink: IP tunnel TTL not specified.
[  225.178369][ T8887] netlink: 'syz.2.868': attribute type 5 has an invalid length.
[  225.550448][ T8909] xt_l2tp: invalid flags combination: 4
[  225.832389][ T8920] netdevsim netdevsim3: Direct firmware load for  failed with error -2
[  225.853049][ T8920] netdevsim netdevsim3: Falling back to sysfs fallback for: 
[  226.202344][ T8949] __nla_validate_parse: 12 callbacks suppressed
[  226.202366][ T8949] netlink: 252 bytes leftover after parsing attributes in process `syz.0.890'.
[  226.334334][   T24] IPVS: starting estimator thread 0...
[  226.426139][ T8955] IPVS: using max 34 ests per chain, 81600 per kthread
[  226.437797][ T8958] netlink: 20 bytes leftover after parsing attributes in process `syz.4.894'.
[  226.589678][ T8963] netlink: 'syz.0.895': attribute type 39 has an invalid length.
[  226.793340][ T8970] netlink: 256 bytes leftover after parsing attributes in process `syz.4.898'.
[  226.877755][ T8972] netlink: 28 bytes leftover after parsing attributes in process `syz.0.899'.
[  227.003701][ T8978] netlink: 256 bytes leftover after parsing attributes in process `syz.2.901'.
[  227.028551][ T8979] xt_connbytes: Forcing CT accounting to be enabled
[  227.035292][ T8979] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  227.055309][ T8978] netlink: 'syz.2.901': attribute type 9 has an invalid length.
[  227.189624][ T8979] netlink: 'syz.4.902': attribute type 83 has an invalid length.
[  227.252458][ T8979] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  227.281314][ T8979] netlink: 'syz.4.902': attribute type 33 has an invalid length.
[  227.289501][ T8979] netlink: 152 bytes leftover after parsing attributes in process `syz.4.902'.
[  227.290193][ T8994] tipc: Started in network mode
[  227.339998][ T8995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.902'.
[  227.340085][ T8994] tipc: Node identity d2ddbe8722e6, cluster identity 4711
[  227.375073][ T8994] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  227.465070][ T8988] tipc: Disabling bearer <eth:syzkaller0>
[  227.533596][ T9004] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4
[  227.798365][ T9019] netlink: 32 bytes leftover after parsing attributes in process `syz.3.914'.
[  227.915352][ T9030] IPVS: length: 69 != 8
[  227.961651][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.915'.
[  228.033452][ T9040] syzkaller0: entered promiscuous mode
[  228.050866][ T9040] syzkaller0: entered allmulticast mode
[  228.117770][ T9041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.917'.
[  228.395393][ T9048] sock: sock_timestamping_bind_phc: sock not bind to device
[  228.541469][ T9052] batadv_slave_1: entered promiscuous mode
[  228.556964][ T9052] macsec1: entered promiscuous mode
[  228.562908][ T9052] macsec1: entered allmulticast mode
[  228.568441][ T9052] batadv_slave_1: entered allmulticast mode
[  228.582621][ T9052] batadv_slave_1: left allmulticast mode
[  228.612182][ T9052] batadv_slave_1: left promiscuous mode
[  228.633066][ T9055] Bluetooth: MGMT ver 1.23
[  228.955390][   T30] audit: type=1800 audit(1750907972.324:4): pid=9072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.929" name="bpf-map" dev="anon_inodefs" ino=1066 res=0 errno=0
[  229.132838][ T9086] x_tables: duplicate entry at hook 3
[  229.290228][ T9092] tipc: Enabled bearer <eth:xfrm0>, priority 10
[  229.941228][ T9124] hsr0 speed is unknown, defaulting to 1000
[  229.954197][ T9124] hsr0 speed is unknown, defaulting to 1000
[  229.985006][ T9124] hsr0 speed is unknown, defaulting to 1000
[  230.029949][ T9124] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  230.099313][ T9124] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  230.104819][ T9131] openvswitch: netlink: Flow key attribute not present in set flow.
[  230.211075][ T9124] hsr0 speed is unknown, defaulting to 1000
[  230.243660][ T9124] hsr0 speed is unknown, defaulting to 1000
[  230.294263][ T9124] hsr0 speed is unknown, defaulting to 1000
[  230.318676][ T9124] hsr0 speed is unknown, defaulting to 1000
[  230.341815][ T9124] hsr0 speed is unknown, defaulting to 1000
[  230.373206][ T9158] netlink: 'syz.3.954': attribute type 3 has an invalid length.
[  230.416517][   T24] tipc: Node number set to 4030447239
[  230.433649][ T9160] x_tables: duplicate underflow at hook 1
[  230.561698][ T9164] netlink: 'syz.1.959': attribute type 14 has an invalid length.
[  230.625915][ T9169] syzkaller1: entered promiscuous mode
[  230.632520][ T9170] netlink: 'syz.3.958': attribute type 1 has an invalid length.
[  230.642858][ T9169] syzkaller1: entered allmulticast mode
[  230.653765][ T9170] netlink: 'syz.3.958': attribute type 2 has an invalid length.
[  230.669561][ T5843] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  230.678014][ T5849] Bluetooth: hci2: command 0x0406 tx timeout
[  231.674312][ T9215] __nla_validate_parse: 3 callbacks suppressed
[  231.674335][ T9215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.975'.
[  232.057322][ T9234] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  232.059034][ T9233] syzkaller0: entered allmulticast mode
[  232.118369][ T9236] syzkaller0 (unregistering): left allmulticast mode
[  232.160475][ T9233] netlink: 56 bytes leftover after parsing attributes in process `syz.3.980'.
[  232.248849][ T9245] netlink: 44 bytes leftover after parsing attributes in process `syz.1.984'.
[  232.460552][ T9258] xfrm0: entered promiscuous mode
[  232.485602][ T9258] xfrm0: entered allmulticast mode
[  232.653368][ T9268] sctp: [Deprecated]: syz.4.992 (pid 9268) Use of int in max_burst socket option deprecated.
[  232.653368][ T9268] Use struct sctp_assoc_value instead
[  232.819268][ T9278] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4
[  232.895111][ T9282] syzkaller1: entered promiscuous mode
[  232.903693][ T9282] syzkaller1: entered allmulticast mode
[  232.960680][ T9289] netlink: 248 bytes leftover after parsing attributes in process `syz.0.999'.
[  233.115336][ T9293] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767)
[  233.125429][ T9293] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  233.148431][ T9295] x_tables: unsorted underflow at hook 4
[  233.279952][ T9303] xt_l2tp: v2 tid > 0xffff: 150994944
[  233.581916][ T9328] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1010'.
[  233.727878][ T9339] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1012'.
[  233.992385][ T9352] IPVS: set_ctl: invalid protocol: 112 172.20.20.187:20001
[  234.007228][ T9352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1019'.
[  234.267875][ T9376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1025'.
[  234.546764][ T9389] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1032'.
[  234.574732][ T9389] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  234.582202][ T9391] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1033'.
[  234.621773][ T9391] siw: device registration error -23
[  235.812913][ T9461] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  235.850754][ T9460] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  235.932125][ T9460] batman_adv: batadv0: Removing interface: batadv_slave_1
[  236.911618][ T9489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  236.936569][ T9493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  237.120328][ T9503] __nla_validate_parse: 5 callbacks suppressed
[  237.120349][ T9503] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1063'.
[  237.170010][ T9503] netlink: 'syz.1.1063': attribute type 21 has an invalid length.
[  237.427884][ T9529] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1071'.
[  237.465457][ T9530] netlink: 'syz.1.1071': attribute type 1 has an invalid length.
[  237.484323][ T9530] netlink: 15 bytes leftover after parsing attributes in process `syz.1.1071'.
[  237.638318][ T9545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1075'.
[  237.679373][ T9546] netlink: 'syz.4.1073': attribute type 4 has an invalid length.
[  237.734195][ T9538] netlink: 'syz.4.1073': attribute type 4 has an invalid length.
[  237.818157][ T9550] xt_ecn: cannot match TCP bits for non-tcp packets
[  237.868182][ T9550] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1076'.
[  237.891908][ T9552] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1077'.
[  238.094696][ T9543] hsr0 speed is unknown, defaulting to 1000
[  238.596730][ T9567] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1082'.
[  238.596767][ T9566] x_tables: duplicate underflow at hook 2
[  238.658979][ T9566] x_tables: duplicate underflow at hook 2
[  238.824966][ T9574] sit0: entered promiscuous mode
[  238.876120][ T9574] netlink: 'syz.1.1085': attribute type 1 has an invalid length.
[  238.897964][ T9580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1084'.
[  238.924566][ T9574] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1085'.
[  238.941896][ T9579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1087'.
[  239.075198][ T9587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  239.088705][ T9583] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  239.099041][ T9582] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  239.115397][ T9589] netlink: 'syz.3.1088': attribute type 15 has an invalid length.
[  239.284583][ T9593] nbd: illegal input index 61504
[  239.342595][ T9563] hsr0 speed is unknown, defaulting to 1000
[  239.595434][ T9607] xt_cgroup: path and classid specified
[  240.057115][ T9626] team0: entered promiscuous mode
[  240.062250][ T9626] team_slave_0: entered promiscuous mode
[  240.086930][ T9626] team_slave_1: entered promiscuous mode
[  240.121668][ T9625] team0: left promiscuous mode
[  240.132356][ T9625] team_slave_0: left promiscuous mode
[  240.144243][ T9625] team_slave_1: left promiscuous mode
[  240.303107][ T9635] netlink: 'syz.1.1106': attribute type 1 has an invalid length.
[  240.483199][ T9645] netlink: 'syz.1.1110': attribute type 23 has an invalid length.
[  240.534935][ T9651] openvswitch: netlink: VXLAN extension 173 out of range max 1
[  240.580276][ T9655] netlink: 'syz.3.1114': attribute type 1 has an invalid length.
[  241.176093][ T9684] netlink: 'syz.0.1123': attribute type 1 has an invalid length.
[  241.393210][ T9698] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  241.401698][ T9698] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  241.412375][ T9698] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  241.713959][ T9728] nbd: must specify a device to reconfigure
[  241.875717][ T9734] xt_l2tp: missing protocol rule (udp|l2tpip)
[  242.329737][ T9751] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  243.924206][ T9760] validate_nla: 2 callbacks suppressed
[  243.924227][ T9760] netlink: 'syz.4.1145': attribute type 10 has an invalid length.
[  243.954717][ T9763] netlink: 'syz.2.1146': attribute type 1 has an invalid length.
[  243.973549][ T9763] netlink: 'syz.2.1146': attribute type 2 has an invalid length.
[  243.994684][ T9760] team0: Device veth1_macvtap failed to register rx_handler
[  244.021653][ T9763] __nla_validate_parse: 23 callbacks suppressed
[  244.021677][ T9763] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1146'.
[  244.084871][ T9770] netlink: 'syz.0.1148': attribute type 1 has an invalid length.
[  244.111469][ T9770] ip6gre2: entered allmulticast mode
[  244.138705][ T9766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  244.199627][ T9773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  244.460025][ T9788] xt_HMARK: spi-set and port-set can't be combined
[  244.653264][ T9798] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  244.674972][ T9801] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.1160'.
[  244.706630][ T9801] netlink: 'syz.3.1160': attribute type 1 has an invalid length.
[  244.707089][ T9799] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1159'.
[  245.330295][ T9839] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1174'.
[  245.369044][ T9839] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1174'.
[  245.943065][ T9865] syzkaller1: entered promiscuous mode
[  245.949333][ T9865] syzkaller1: entered allmulticast mode
[  246.242168][ T9882] !
: renamed from dummy0
[  246.310402][ T9883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1184'.
[  246.328005][ T9883] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1184'.
[  246.436904][ T9891] veth0: entered promiscuous mode
[  246.459733][ T9891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1188'.
[  246.568867][ T9891] veth0 (unregistering): left promiscuous mode
[  246.644156][ T9907] netlink: 'syz.0.1192': attribute type 10 has an invalid length.
[  246.690739][ T9907] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1192'.
[  246.775017][ T9907] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  246.789243][ T9907] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  246.798086][ T9907] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  246.822124][ T9907] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  246.851851][ T9907] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  246.872054][ T9907] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  246.878964][ T9920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1198'.
[  246.892333][ T9907] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  246.915877][ T9907] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  246.938517][ T9907] team0: Port device geneve0 added
[  247.091413][ T9929] netlink: 'syz.2.1200': attribute type 3 has an invalid length.
[  247.276718][ T9931] syz.1.1199 (9931) used greatest stack depth: 17992 bytes left
[  247.886716][ T9982] netlink: 'syz.4.1219': attribute type 64 has an invalid length.
[  247.933126][ T9978] xt_policy: too many policy elements
[  248.230079][T10005] batman_adv: batadv0: Adding interface: ipvlan2
[  248.240308][T10005] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  248.276133][T10005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  248.293020][T10005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.325600][T10005] batman_adv: batadv0: Interface activated: ipvlan2
[  248.896702][T10029] tap0: tun_chr_ioctl cmd 1074025678
[  248.902109][T10029] tap0: group set to 0
[  248.909917][T10035] netlink: 'syz.3.1239': attribute type 1 has an invalid length.
[  248.924756][T10036] netlink: 'syz.1.1237': attribute type 23 has an invalid length.
[  248.990927][T10035] 8021q: adding VLAN 0 to HW filter on device bond4
[  249.444134][T10059] xt_policy: too many policy elements
[  249.541841][T10068] __nla_validate_parse: 15 callbacks suppressed
[  249.541862][T10068] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1249'.
[  249.576070][T10068] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1249'.
[  249.605593][T10070] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢
…D£øUDŒw˜}�z
[  249.764659][T10083] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1253'.
[  249.787284][T10083] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1253'.
[  249.802140][T10083] ksmbd: Unknown IPC event: 0, ignore.
[  250.029332][   T49] wlan0: Trigger new scan to find an IBSS to join
[  250.190559][T10102] netlink: 'syz.1.1262': attribute type 1 has an invalid length.
[  250.199117][T10102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1262'.
[  250.285676][T10112] net veth1_virt_wifi .: renamed from virt_wifi0
[  250.661481][T10132] openvswitch: netlink: Missing key (keys=40, expected=100)
[  250.704970][T10132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1271'.
[  250.717024][T10137] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  250.745248][T10137] batadv_slave_0: entered promiscuous mode
[  250.769575][T10139] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1273'.
[  250.801108][T10137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1273'.
[  250.974184][T10147] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1277'.
[  251.496795][T10188] netlink: 'syz.4.1286': attribute type 4 has an invalid length.
[  251.546429][T10176] netlink: 'syz.4.1286': attribute type 4 has an invalid length.
[  251.638720][T10193] netlink: 'syz.1.1290': attribute type 3 has an invalid length.
[  251.662088][T10193] netlink: 766 bytes leftover after parsing attributes in process `syz.1.1290'.
[  251.685483][T10193] raw_sendmsg: syz.1.1290 forgot to set AF_INET. Fix it!
[  251.710403][ T7528] hid-generic 0005:16C0:05DF.0001: item fetching failed at offset 0/1
[  251.720947][ T7528] hid-generic 0005:16C0:05DF.0001: probe with driver hid-generic failed with error -22
[  252.469136][T10185] hsr0 speed is unknown, defaulting to 1000
[  252.811986][T10243] openvswitch: netlink: nsh attr 8196 is out of range max 3
[  252.832639][T10243] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  252.853027][T10246] netlink: 'syz.3.1305': attribute type 8 has an invalid length.
[  252.981700][T10252] xfrm0: left promiscuous mode
[  252.997429][T10252] xfrm0: left allmulticast mode
[  253.047821][T10252] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  253.070635][ T1339] wlan0: Trigger new scan to find an IBSS to join
[  253.130086][T10261] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  253.482755][T10273] syzkaller1: entered promiscuous mode
[  253.494969][T10273] syzkaller1: entered allmulticast mode
[  253.510973][T10273] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  253.664823][T10281] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  253.807831][T10285] 
: renamed from veth0_vlan (while UP)
[  253.860106][T10260] hsr0 speed is unknown, defaulting to 1000
[  254.004867][T10294] netlink: 'syz.2.1319': attribute type 4 has an invalid length.
[  254.151147][T10302] openvswitch: netlink: Missing key (keys=40, expected=80)
[  254.619014][T10315] netlink: 'syz.2.1326': attribute type 6 has an invalid length.
[  254.696614][T10316] netlink: 'syz.4.1324': attribute type 4 has an invalid length.
[  254.712947][T10316] netlink: 'syz.4.1324': attribute type 4 has an invalid length.
[  254.796106][T10320] __nla_validate_parse: 6 callbacks suppressed
[  254.796127][T10320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1327'.
[  254.936797][T10327] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1328'.
[  254.950232][T10329] netlink: 'syz.3.1329': attribute type 7 has an invalid length.
[  254.965480][T10327] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1328'.
[  255.029983][T10331] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1330'.
[  255.189628][T10339] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  255.191435][T10341] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  255.224930][T10339] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1334'.
[  255.443955][T10319] hsr0 speed is unknown, defaulting to 1000
[  255.566776][T10355] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  255.578178][T10361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1337'.
[  255.631900][T10361] vlan2: left allmulticast mode
[  255.664328][T10361] bond0: left allmulticast mode
[  255.673076][T10361] bond_slave_0: left allmulticast mode
[  255.683111][T10361] bond_slave_1: left allmulticast mode
[  255.691836][T10361] bond3: left allmulticast mode
[  255.699387][T10361] vlan2: left promiscuous mode
[  255.704247][T10361] bond0: left promiscuous mode
[  255.718609][T10361] bond_slave_0: left promiscuous mode
[  255.724513][T10361] bond_slave_1: left promiscuous mode
[  255.731614][T10361] bond3: left promiscuous mode
[  255.737483][T10361] bridge0: port 3(vlan2) entered disabled state
[  255.750955][T10361] bridge_slave_1: left allmulticast mode
[  255.757181][T10361] bridge_slave_1: left promiscuous mode
[  255.763130][T10361] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.772610][T10361] bridge_slave_0: left allmulticast mode
[  255.779348][T10361] bridge_slave_0: left promiscuous mode
[  255.785485][T10361] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.869457][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  255.876457][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  256.047483][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  256.170875][T10380] unknown channel width for channel at 909000KHz?
[  256.190592][T10380] xt_l2tp: missing protocol rule (udp|l2tpip)
[  256.224524][T10380] bridge0: entered allmulticast mode
[  256.238521][T10380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1347'.
[  256.395382][T10380] bridge0 (unregistering): left allmulticast mode
[  256.628889][T10398] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1352'.
[  256.663567][T10398] validate_nla: 1 callbacks suppressed
[  256.663586][T10398] netlink: 'syz.0.1352': attribute type 4 has an invalid length.
[  256.714923][T10402] netlink: 'syz.0.1352': attribute type 4 has an invalid length.
[  256.948784][T10408] netlink: 'syz.3.1355': attribute type 26 has an invalid length.
[  257.083031][T10419] netlink: 'syz.3.1355': attribute type 26 has an invalid length.
[  257.296652][T10432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1360'.
[  257.342325][T10388] hsr0 speed is unknown, defaulting to 1000
[  257.349765][T10432] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1360'.
[  257.793074][T10456] netlink: 'syz.1.1368': attribute type 83 has an invalid length.
[  257.822038][T10456] netlink: 'syz.1.1368': attribute type 18 has an invalid length.
[  258.632457][T10502] syzkaller1: entered promiscuous mode
[  258.652703][T10502] syzkaller1: entered allmulticast mode
[  258.887152][T10523] Bluetooth: MGMT ver 1.23
[  258.892789][T10523] netlink: 'syz.2.1388': attribute type 3 has an invalid length.
[  258.975358][T10525] openvswitch: netlink: Flow actions attr not present in new flow.
[  259.008526][T10527] openvswitch: netlink: Flow actions attr not present in new flow.
[  259.934687][T10572] __nla_validate_parse: 5 callbacks suppressed
[  259.934710][T10572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1401'.
[  260.027309][T10575] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1403'.
[  260.294372][T10591] netlink: 2160 bytes leftover after parsing attributes in process `syz.1.1410'.
[  260.322754][T10591] netlink: 2160 bytes leftover after parsing attributes in process `syz.1.1410'.
[  260.379978][T10601] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1412'.
[  260.559559][T10612] netlink: 'syz.3.1416': attribute type 1 has an invalid length.
[  260.579178][T10612] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1416'.
[  260.711408][T10617] netlink: 'syz.0.1418': attribute type 4 has an invalid length.
[  260.733974][T10621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1419'.
[  260.766956][T10623] netlink: 'syz.0.1418': attribute type 4 has an invalid length.
[  260.859147][T10624] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  260.911019][T10628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1421'.
[  260.963356][T10628] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1421'.
[  260.972782][T10630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1423'.
[  260.985640][T10630] macvlan3: entered promiscuous mode
[  260.995730][T10630] macvlan3: entered allmulticast mode
[  261.018886][T10630] batadv0: entered promiscuous mode
[  261.029162][T10633] IPv6: NLM_F_CREATE should be specified when creating new route
[  261.037484][T10630] batadv0: entered allmulticast mode
[  261.059432][T10630] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  261.092246][T10630] bond0: (slave macvlan3): Enslaving as an active interface with an up link
[  261.402407][T10651] erspan0: entered promiscuous mode
[  261.418927][T10651] gretap0: entered promiscuous mode
[  261.430670][T10651] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  261.456411][T10651] Cannot create hsr debugfs directory
[  261.470738][T10651] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network
[  261.509782][T10651] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[  261.820135][T10663] validate_nla: 3 callbacks suppressed
[  261.820155][T10663] netlink: 'syz.0.1433': attribute type 21 has an invalid length.
[  261.938264][T10677] Bluetooth: MGMT ver 1.23
[  262.464975][T10695] netlink: 'syz.2.1441': attribute type 2 has an invalid length.
[  263.250061][T10734] netlink: 'syz.0.1456': attribute type 13 has an invalid length.
[  263.390832][T10734] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  263.667663][T10762] openvswitch: netlink: Port 10289156 exceeds max allowable 65535
[  263.721088][T10764] netlink: 'syz.1.1462': attribute type 8 has an invalid length.
[  264.909718][T10806] tc_dump_action: action bad kind
[  265.093876][T10821] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  265.128380][T10818] __nla_validate_parse: 8 callbacks suppressed
[  265.128400][T10818] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1480'.
[  265.362699][T10839] netlink: 'syz.0.1486': attribute type 1 has an invalid length.
[  265.375576][T10839] netlink: 'syz.0.1486': attribute type 13 has an invalid length.
[  265.504488][T10839] lo: entered promiscuous mode
[  265.524754][T10839] lo: entered allmulticast mode
[  265.571626][T10839] tunl0: entered promiscuous mode
[  265.602160][T10839] tunl0: entered allmulticast mode
[  265.625147][T10839] gre0: entered promiscuous mode
[  265.643858][T10839] gre0: entered allmulticast mode
[  265.681725][T10839] gretap0: entered promiscuous mode
[  265.687658][T10839] gretap0: entered allmulticast mode
[  265.823170][T10839] erspan0: entered promiscuous mode
[  265.832133][T10839] erspan0: entered allmulticast mode
[  265.880592][T10839] erspan0: refused to change device tx_queue_len
[  265.906131][T10839] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  265.953937][T10859] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[  265.976983][T10859] mac80211_hwsim hwsim10 wlan0: left promiscuous mode
[  266.086289][T10866] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1492'.
[  266.129218][T10871] xt_SECMARK: invalid mode: 0
[  266.279793][T10878] bond0: (slave bond_slave_0): Releasing backup interface
[  266.346826][T10884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1497'.
[  266.368639][T10878] bond0: (slave bond_slave_1): Releasing backup interface
[  266.385603][T10884] netlink: 'syz.1.1497': attribute type 1 has an invalid length.
[  266.464073][T10878] team0: Port device team_slave_0 removed
[  266.504106][T10878] team0: Port device team_slave_1 removed
[  266.513066][T10878] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  266.521041][T10878] batman_adv: batadv0: Removing interface: batadv_slave_0
[  266.533238][T10878] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  266.542391][T10878] batman_adv: batadv0: Removing interface: batadv_slave_1
[  266.561409][T10878] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  266.570525][T10878] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  266.588129][T10878] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  266.601333][T10878] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  266.638861][T10878] team0: Port device geneve0 removed
[  266.657781][T10878] bond0: (slave bond3): Releasing backup interface
[  266.688135][T10878] bond0: (slave macvlan3): Releasing backup interface
[  266.704038][T10878] batadv0: left allmulticast mode
[  266.710840][T10878] batadv0: left promiscuous mode
[  266.754958][T10885] team0: Mode changed to "activebackup"
[  266.803032][   T24] hsr0 speed is unknown, defaulting to 1000
[  266.945645][T10907] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1500'.
[  266.951389][T10911] IPVS: set_ctl: invalid protocol: 41 100.1.1.0:20000
[  266.964282][T10910] netlink: 'syz.3.1501': attribute type 6 has an invalid length.
[  267.114861][T10924] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  267.391850][T10932] bond4: entered promiscuous mode
[  267.417940][T10932] bond4: entered allmulticast mode
[  267.450382][T10932] 8021q: adding VLAN 0 to HW filter on device bond4
[  267.482847][T10938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1510'.
[  267.608906][T10944] netlink: 'syz.0.1511': attribute type 1 has an invalid length.
[  267.624374][T10944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1511'.
[  267.647855][T10946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1512'.
[  267.804558][T10948] syzkaller1: entered promiscuous mode
[  267.810385][T10948] syzkaller1: entered allmulticast mode
[  267.828646][T10922] hsr0 speed is unknown, defaulting to 1000
[  268.659696][T10963] netlink: 'syz.3.1516': attribute type 8 has an invalid length.
[  268.685843][T10963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1516'.
[  269.072774][T10980] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1521'.
[  269.473375][T10999] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1529'.
[  269.584433][T11001] netlink: 'syz.4.1530': attribute type 1 has an invalid length.
[  269.649669][T11009] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  270.039563][T11026] x_tables: duplicate underflow at hook 1
[  270.139619][T11031] ieee802154 phy0 wpan0: encryption failed: -22
[  270.655411][T11048] __nla_validate_parse: 3 callbacks suppressed
[  270.655435][T11048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1542'.
[  272.384232][T11049] veth0: entered promiscuous mode
[  272.505690][T11066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1546'.
[  272.595293][T11068] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  272.605148][T11068] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  272.750756][T11070] bond4: entered promiscuous mode
[  272.756098][T11070] bond4: entered allmulticast mode
[  272.761850][T11070] 8021q: adding VLAN 0 to HW filter on device bond4
[  272.929962][T11070] bond4 (unregistering): Released all slaves
[  273.263493][T11104] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1556'.
[  273.374136][T11110] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1558'.
[  273.478633][T11114] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1561'.
[  273.518052][T11118] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1560'.
[  273.519038][T11110] dvmrp0: entered allmulticast mode
[  273.915460][T11143] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  274.074848][T11143] batman_adv: batadv0: Removing interface: batadv_slave_0
[  274.294937][T11151] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  275.013326][T11201] netlink: 'syz.1.1582': attribute type 29 has an invalid length.
[  275.034710][T11201] netlink: 'syz.1.1582': attribute type 29 has an invalid length.
[  275.126715][T11212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1586'.
[  275.275283][T11219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1587'.
[  275.549203][T11231] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  275.564749][T11231] mac80211_hwsim hwsim8 wlan0: left promiscuous mode
[  275.810263][T11245] netlink: 'syz.2.1596': attribute type 1 has an invalid length.
[  275.819471][T11245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1596'.
[  275.888551][T11250] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1598'.
[  275.911654][T11245] netlink: 'syz.2.1596': attribute type 1 has an invalid length.
[  275.932646][T11245] netlink: 'syz.2.1596': attribute type 4 has an invalid length.
[  275.968855][T11245] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1596'.
[  276.102927][T11259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  276.162547][T11263] x_tables: duplicate underflow at hook 1
[  276.195973][T11259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  276.294218][T11259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  276.866977][T11292] veth0_to_bond: entered allmulticast mode
[  277.043168][T11303] netem: change failed
[  277.076432][T11303] netem: change failed
[  277.100283][T11303] netem: change failed
[  277.153775][T11303] netem: change failed
[  277.186477][T11303] netem: change failed
[  277.236313][T11303] netem: change failed
[  277.278793][T11303] netem: change failed
[  277.320584][T11303] netem: change failed
[  277.346272][T11303] netem: change failed
[  277.377588][T11303] netem: change failed
[  277.419292][T11303] netem: change failed
[  277.425668][T11303] netem: change failed
[  277.457302][T11303] netem: change failed
[  277.472960][T11303] netem: change failed
[  277.479159][T11327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1618'.
[  277.493594][T11303] netem: change failed
[  277.499640][T11303] netem: change failed
[  277.517135][T11303] netem: change failed
[  277.523241][T11303] netem: change failed
[  277.551742][T11303] netem: change failed
[  277.580228][T11303] netem: change failed
[  277.597535][T11303] netem: change failed
[  277.617368][T11303] netem: change failed
[  277.622238][T11303] netem: change failed
[  277.642974][T11338] IPv6: sit1: Disabled Multicast RS
[  277.660402][T11338] sit1: entered allmulticast mode
[  277.734974][T11303] netem: change failed
[  277.741491][T11303] netem: change failed
[  277.760311][T11303] netem: change failed
[  277.775532][T11303] netem: change failed
[  277.796416][T11303] netem: change failed
[  277.961026][T11357] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1626'.
[  277.982447][T11358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1624'.
[  277.991154][T11355] netlink: 'syz.2.1626': attribute type 1 has an invalid length.
[  278.085290][T11355] 8021q: adding VLAN 0 to HW filter on device bond2
[  278.448380][T11383] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  278.506242][T11384] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1634'.
[  278.538060][T11395] sctp: [Deprecated]: syz.0.1638 (pid 11395) Use of int in max_burst socket option deprecated.
[  278.538060][T11395] Use struct sctp_assoc_value instead
[  279.561364][T11431] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1648'.
[  279.627646][T11435] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1648'.
[  281.171121][T11451] nbd: illegal input index -1
[  281.217076][T11456] netlink: 'syz.0.1651': attribute type 4 has an invalid length.
[  281.291265][T11458] netlink: 'syz.0.1651': attribute type 4 has an invalid length.
[  281.383573][T11464] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1655'.
[  281.879548][T11446] hsr0 speed is unknown, defaulting to 1000
[  282.158285][T11495] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1664'.
[  282.458076][T11500] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1667'.
[  282.848696][T11484] xt_TCPMSS: Only works on TCP SYN packets
[  282.871266][T11483] hsr0 speed is unknown, defaulting to 1000
[  283.345046][T11533] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1675'.
[  283.444636][T11536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1676'.
[  284.235577][T11561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1684'.
[  284.465216][T11576] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  284.472623][T11576] IPv6: NLM_F_CREATE should be set when creating new route
[  284.480918][T11576] IPv6: NLM_F_CREATE should be set when creating new route
[  284.488257][T11576] IPv6: NLM_F_CREATE should be set when creating new route
[  284.501820][T11570] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  284.536362][T11578] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  284.628512][T11574] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1688'.
[  284.671818][T11586] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1691'.
[  284.973370][T11604] netlink: 'syz.0.1697': attribute type 12 has an invalid length.
[  285.166726][T11618] netlink: 'syz.4.1702': attribute type 1 has an invalid length.
[  285.221712][T11621] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1702'.
[  285.342529][T11618] 8021q: adding VLAN 0 to HW filter on device bond2
[  285.355487][T11628] vlan1: left allmulticast mode
[  285.369093][T11628] veth0_vlan: left allmulticast mode
[  285.501117][T11630] netlink: 'syz.0.1705': attribute type 4 has an invalid length.
[  285.573470][T11630] netlink: 'syz.0.1705': attribute type 4 has an invalid length.
[  285.648379][T11638] netlink: 'syz.4.1708': attribute type 1 has an invalid length.
[  285.663733][T11638] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1708'.
[  285.698670][T11642] netlink: 'syz.2.1710': attribute type 3 has an invalid length.
[  285.719339][T11643] netlink: 'syz.3.1709': attribute type 4 has an invalid length.
[  285.720164][T11642] netlink: 'syz.2.1710': attribute type 2 has an invalid length.
[  286.094836][T11656] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.124332][T11632] hsr0 speed is unknown, defaulting to 1000
[  286.194494][T11656] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.313910][T11656] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.413453][T11656] netdevsim netdevsim1 
€Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.561771][T11669] ieee802154 phy0 wpan0: encryption failed: -22
[  286.635593][T11671] bridge_slave_0: invalid flags given to default FDB implementation
[  286.707651][T11676] __nla_validate_parse: 5 callbacks suppressed
[  286.707673][T11676] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1723'.
[  286.755658][T11676] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1723'.
[  286.914258][T11656] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  286.952806][T11682] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  287.056989][T11656] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  287.127391][T11656] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  287.172142][T11656] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  287.282967][T11700] netlink: 'syz.2.1729': attribute type 16 has an invalid length.
[  287.319375][T11700] netlink: 'syz.2.1729': attribute type 17 has an invalid length.
[  287.515455][T11712] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  287.586710][T11717] xt_CT: You must specify a L4 protocol and not use inversions on it
[  287.662038][T11722] netlink: 'syz.4.1734': attribute type 1 has an invalid length.
[  287.674468][T11722] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1734'.
[  287.692318][T11722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1734'.
[  287.779552][T11727] x_tables: duplicate underflow at hook 3
[  287.790699][T11725] netlink: 15 bytes leftover after parsing attributes in process `syz.0.1738'.
[  288.118824][T11749] netlink: 'syz.2.1742': attribute type 4 has an invalid length.
[  288.151149][T11741] netlink: 'syz.2.1742': attribute type 4 has an invalid length.
[  288.253581][T11753] syz_tun: entered allmulticast mode
[  288.360702][T11758] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  288.506058][ T2985] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  288.786450][T11752] syz_tun: left allmulticast mode
[  288.985553][T11771] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1750'.
[  289.014866][T11771] ip6gretap0: entered promiscuous mode
[  289.048485][T11748] hsr0 speed is unknown, defaulting to 1000
[  289.048656][T11771] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1750'.
[  289.076882][T11773] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1751'.
[  289.240743][T11782] veth0: entered promiscuous mode
[  289.335444][T11780] veth0: left promiscuous mode
[  289.396145][T11787] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1753'.
[  289.417462][T11787] nbd: illegal input index 61504
[  289.510311][T11787] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1753'.
[  289.575416][T11787] openvswitch: netlink: Flow actions attr not present in new flow.
[  289.944351][T11808] bond0: option mode: unable to set because the bond device has slaves
[  290.969643][T11853] x_tables: duplicate underflow at hook 1
[  290.977956][T11854] xfrm0: entered promiscuous mode
[  290.983083][T11854] xfrm0: entered allmulticast mode
[  291.600443][T11892] netlink: 'syz.2.1792': attribute type 1 has an invalid length.
[  291.861335][T11909] __nla_validate_parse: 7 callbacks suppressed
[  291.861359][T11909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1798'.
[  291.941083][T11913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1799'.
[  291.965054][T11913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1799'.
[  292.037916][T11919] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1801'.
[  292.292676][T11941] xfrm0: entered promiscuous mode
[  292.304447][T11941] xfrm0: entered allmulticast mode
[  292.323761][T11941] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1809'.
[  292.363583][T11941] tipc: Invalid UDP bearer configuration
[  292.363665][T11941] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  292.455285][T11951] netlink: 'syz.4.1811': attribute type 1 has an invalid length.
[  292.733381][T11961] No such timeout policy "syz0"
[  292.982519][T11969] netlink: 'syz.4.1817': attribute type 4 has an invalid length.
[  293.033869][T11974] netlink: 'syz.4.1817': attribute type 4 has an invalid length.
[  293.423092][T11973] hsr0 speed is unknown, defaulting to 1000
[  293.562604][T11987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1824'.
[  293.629604][T11988] netlink: 'syz.0.1821': attribute type 10 has an invalid length.
[  293.734865][T11993] x_tables: duplicate underflow at hook 3
[  293.936585][T11996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1827'.
[  294.147207][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  294.164360][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  294.174735][T12006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1831'.
[  294.184663][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  294.202729][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  294.212413][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  294.258798][T12013] delete_channel: no stack
[  294.536351][T12018] netlink: 'syz.1.1834': attribute type 4 has an invalid length.
[  294.570424][ T1339] dvmrp0 (unregistering): left allmulticast mode
[  294.594675][T12030] netlink: 'syz.1.1834': attribute type 4 has an invalid length.
[  294.655478][ T1339] bond3 (unregistering): (slave bridge1): Releasing active interface
[  294.845070][ T1339] bond0 (unregistering): Released all slaves
[  294.863930][ T1339] bond1 (unregistering): Released all slaves
[  294.883196][ T1339] bond2 (unregistering): Released all slaves
[  294.901957][ T1339] bond3 (unregistering): Released all slaves
[  295.053304][ T1339] bond4 (unregistering): Released all slaves
[  295.623157][T12023] hsr0 speed is unknown, defaulting to 1000
[  295.642269][T12044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1841'.
[  295.907610][T12047] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1843'.
[  296.095843][T12007] hsr0 speed is unknown, defaulting to 1000
[  296.266613][ T5849] Bluetooth: hci1: command tx timeout
[  296.833797][T12077] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT
[  296.992665][T12083] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  297.001440][ T1339] hsr_slave_0: left promiscuous mode
[  297.010891][ T1339] hsr_slave_1: left promiscuous mode
[  297.106066][T12088] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  297.361908][T12094] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  297.639584][T12099] netlink: 'syz.4.1856': attribute type 142 has an invalid length.
[  298.178636][T12110] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1859'.
[  298.225841][T12110] NCSI netlink: No device for ifindex 0
[  298.250157][T12113] FAULT_INJECTION: forcing a failure.
[  298.250157][T12113] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  298.271944][T12113] CPU: 0 UID: 0 PID: 12113 Comm: syz.0.1860 Not tainted 6.16.0-rc2-syzkaller-00185-g010c40c1f50e #0 PREEMPT(full) 
[  298.271975][T12113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  298.271993][T12113] Call Trace:
[  298.272005][T12113]  <TASK>
[  298.272016][T12113]  dump_stack_lvl+0x189/0x250
[  298.272053][T12113]  ? __pfx____ratelimit+0x10/0x10
[  298.272102][T12113]  ? __pfx_dump_stack_lvl+0x10/0x10
[  298.272133][T12113]  ? __pfx__printk+0x10/0x10
[  298.272156][T12113]  ? __might_fault+0xb0/0x130
[  298.272188][T12113]  should_fail_ex+0x414/0x560
[  298.272219][T12113]  _copy_from_iter+0x1db/0x16f0
[  298.272255][T12113]  ? rcu_is_watching+0x15/0xb0
[  298.272287][T12113]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  298.272309][T12113]  ? __pfx__copy_from_iter+0x10/0x10
[  298.272341][T12113]  ? __build_skb_around+0x257/0x3e0
[  298.272370][T12113]  ? netlink_sendmsg+0x642/0xb30
[  298.272393][T12113]  ? skb_put+0x11b/0x210
[  298.272418][T12113]  netlink_sendmsg+0x6b2/0xb30
[  298.272449][T12113]  ? __pfx_netlink_sendmsg+0x10/0x10
[  298.272477][T12113]  ? aa_sock_msg_perm+0x94/0x160
[  298.272506][T12113]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  298.272532][T12113]  ? __pfx_netlink_sendmsg+0x10/0x10
[  298.272558][T12113]  __sock_sendmsg+0x219/0x270
[  298.272593][T12113]  ____sys_sendmsg+0x505/0x830
[  298.272623][T12113]  ? __pfx_____sys_sendmsg+0x10/0x10
[  298.272659][T12113]  ? import_iovec+0x74/0xa0
[  298.272682][T12113]  ___sys_sendmsg+0x21f/0x2a0
[  298.272710][T12113]  ? __pfx____sys_sendmsg+0x10/0x10
[  298.272777][T12113]  ? __fget_files+0x2a/0x420
[  298.272798][T12113]  ? __fget_files+0x3a0/0x420
[  298.272843][T12113]  __x64_sys_sendmsg+0x19b/0x260
[  298.272871][T12113]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  298.272907][T12113]  ? __pfx_ksys_write+0x10/0x10
[  298.272924][T12113]  ? rcu_is_watching+0x15/0xb0
[  298.272960][T12113]  ? do_syscall_64+0xbe/0x3b0
[  298.272981][T12113]  do_syscall_64+0xfa/0x3b0
[  298.272999][T12113]  ? lockdep_hardirqs_on+0x9c/0x150
[  298.273028][T12113]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.273048][T12113]  ? clear_bhb_loop+0x60/0xb0
[  298.273072][T12113]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.273092][T12113] RIP: 0033:0x7fbe3638e929
[  298.273117][T12113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  298.273135][T12113] RSP: 002b:00007fbe37186038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  298.273151][T12007] chnl_net:caif_netlink_parms(): no params data found
[  298.273161][T12113] RAX: ffffffffffffffda RBX: 00007fbe365b5fa0 RCX: 00007fbe3638e929
[  298.273177][T12113] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  298.273189][T12113] RBP: 00007fbe37186090 R08: 0000000000000000 R09: 0000000000000000
[  298.273199][T12113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  298.273209][T12113] R13: 0000000000000000 R14: 00007fbe365b5fa0 R15: 00007ffe1b9a4eb8
[  298.273241][T12113]  </TASK>
[  298.358331][ T5849] Bluetooth: hci1: command tx timeout
[  298.633768][T12120] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7
[  298.649575][T12121] netlink: 'syz.0.1861': attribute type 10 has an invalid length.
[  298.974558][T12007] bridge0: port 1(bridge_slave_0) entered blocking state
[  299.008476][T12007] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.029326][T12007] bridge_slave_0: entered allmulticast mode
[  299.051196][T12007] bridge_slave_0: entered promiscuous mode
[  299.071551][T12007] bridge0: port 2(bridge_slave_1) entered blocking state
[  299.085356][T12007] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.096598][T12007] bridge_slave_1: entered allmulticast mode
[  299.104567][T12007] bridge_slave_1: entered promiscuous mode
[  299.284344][T12150] FAULT_INJECTION: forcing a failure.
[  299.284344][T12150] name failslab, interval 1, probability 0, space 0, times 0
[  299.336167][T12007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  299.345885][T12150] CPU: 0 UID: 0 PID: 12150 Comm: syz.1.1871 Not tainted 6.16.0-rc2-syzkaller-00185-g010c40c1f50e #0 PREEMPT(full) 
[  299.345919][T12150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  299.345931][T12150] Call Trace:
[  299.345939][T12150]  <TASK>
[  299.345947][T12150]  dump_stack_lvl+0x189/0x250
[  299.345984][T12150]  ? __pfx____ratelimit+0x10/0x10
[  299.346023][T12150]  ? __pfx_dump_stack_lvl+0x10/0x10
[  299.346055][T12150]  ? __pfx__printk+0x10/0x10
[  299.346081][T12150]  ? ref_tracker_alloc+0x318/0x460
[  299.346108][T12150]  should_fail_ex+0x414/0x560
[  299.346134][T12150]  should_failslab+0xa8/0x100
[  299.346154][T12150]  kmem_cache_alloc_noprof+0x73/0x3c0
[  299.346181][T12150]  ? skb_clone+0x212/0x3a0
[  299.346208][T12150]  skb_clone+0x212/0x3a0
[  299.346234][T12150]  __netlink_deliver_tap+0x404/0x850
[  299.346266][T12150]  ? netlink_deliver_tap+0x2e/0x1b0
[  299.346288][T12150]  netlink_deliver_tap+0x19c/0x1b0
[  299.346312][T12150]  netlink_unicast+0x72f/0x8d0
[  299.346340][T12150]  netlink_sendmsg+0x805/0xb30
[  299.346372][T12150]  ? __pfx_netlink_sendmsg+0x10/0x10
[  299.346399][T12150]  ? aa_sock_msg_perm+0x94/0x160
[  299.346425][T12150]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  299.346448][T12150]  ? __pfx_netlink_sendmsg+0x10/0x10
[  299.346471][T12150]  __sock_sendmsg+0x219/0x270
[  299.346502][T12150]  ____sys_sendmsg+0x505/0x830
[  299.346529][T12150]  ? __pfx_____sys_sendmsg+0x10/0x10
[  299.346565][T12150]  ? import_iovec+0x74/0xa0
[  299.346591][T12150]  ___sys_sendmsg+0x21f/0x2a0
[  299.346620][T12150]  ? __pfx____sys_sendmsg+0x10/0x10
[  299.346690][T12150]  ? __fget_files+0x2a/0x420
[  299.346711][T12150]  ? __fget_files+0x3a0/0x420
[  299.346745][T12150]  __x64_sys_sendmsg+0x19b/0x260
[  299.346776][T12150]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  299.346814][T12150]  ? __pfx_ksys_write+0x10/0x10
[  299.346830][T12150]  ? rcu_is_watching+0x15/0xb0
[  299.346868][T12150]  ? do_syscall_64+0xbe/0x3b0
[  299.346892][T12150]  do_syscall_64+0xfa/0x3b0
[  299.346909][T12150]  ? lockdep_hardirqs_on+0x9c/0x150
[  299.346939][T12150]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.346959][T12150]  ? clear_bhb_loop+0x60/0xb0
[  299.346984][T12150]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.347009][T12150] RIP: 0033:0x7f555858e929
[  299.347028][T12150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  299.347045][T12150] RSP: 002b:00007f555942a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  299.347066][T12150] RAX: ffffffffffffffda RBX: 00007f55587b5fa0 RCX: 00007f555858e929
[  299.347081][T12150] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  299.347093][T12150] RBP: 00007f555942a090 R08: 0000000000000000 R09: 0000000000000000
[  299.347105][T12150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  299.347116][T12150] R13: 0000000000000000 R14: 00007f55587b5fa0 R15: 00007ffefca1c9b8
[  299.347149][T12150]  </TASK>
[  299.347382][T12150] xfrm0: entered promiscuous mode
[  299.549429][T12159] netlink: 'syz.0.1873': attribute type 4 has an invalid length.
[  299.555191][T12150] xfrm0: entered allmulticast mode
[  299.661353][T12153] netlink: 'syz.0.1873': attribute type 4 has an invalid length.
[  299.678455][T12007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  299.783983][T12007] team0: Port device team_slave_0 added
[  299.830435][T12007] team0: Port device team_slave_1 added
[  299.930679][T12007] batman_adv: batadv0: Adding interface: batadv_slave_0
[  299.979719][T12007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  300.037247][T12007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  300.078536][T12007] batman_adv: batadv0: Adding interface: batadv_slave_1
[  300.098590][T12007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  300.130238][T12007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  300.401374][T12190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1884'.
[  300.460159][T12007] hsr_slave_0: entered promiscuous mode
[  300.481317][T12007] hsr_slave_1: entered promiscuous mode
[  300.488487][T12007] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  300.503608][T12007] Cannot create hsr debugfs directory
[  300.540557][T12195] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.1886'.
[  300.562565][T12195] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.1886'.
[  300.671650][ T5843] Bluetooth: hci1: command tx timeout
[  300.682571][T12156] hsr0 speed is unknown, defaulting to 1000
[  301.340953][T12219] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1892'.
[  301.735196][T12230] xt_bpf: check failed: parse error
[  301.993377][T12243] nbd: must specify at least one socket
[  302.052687][T12243] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1901'.
[  302.102582][T12245] sch_tbf: burst 0 is lower than device lo mtu (81) !
[  302.140067][T12249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1903'.
[  302.199358][T12007] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  302.233041][T12007] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  302.315597][T12251] xt_CT: No such helper "netbios-ns"
[  302.503618][T12007] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  302.504566][T12262] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  302.544146][T12007] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  302.572179][T12262] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1905'.
[  302.757162][ T5849] Bluetooth: hci1: command tx timeout
[  302.816403][T12304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1910'.
[  302.945338][T12007] 8021q: adding VLAN 0 to HW filter on device bond0
[  302.967695][T12310] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1912'.
[  302.984446][T12007] 8021q: adding VLAN 0 to HW filter on device team0
[  303.024652][T12298] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.031909][T12298] bridge0: port 1(bridge_slave_0) entered forwarding state
[  303.079559][T12295] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.086802][T12295] bridge0: port 2(bridge_slave_1) entered forwarding state
[  303.283024][T12326] lo: entered promiscuous mode
[  303.311156][T12326] netlink: 'syz.1.1916': attribute type 2 has an invalid length.
[  303.326766][T12326] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  303.558353][T12007] 8021q: adding VLAN 0 to HW filter on device batadv0
[  303.773412][T12007] veth0_vlan: entered promiscuous mode
[  303.831606][T12007] veth1_vlan: entered promiscuous mode
[  303.955190][T12007] veth0_macvtap: entered promiscuous mode
[  303.989966][T12007] veth1_macvtap: entered promiscuous mode
[  304.100079][T12007] batman_adv: batadv0: Interface activated: batadv_slave_0
[  304.131470][T12007] batman_adv: batadv0: Interface activated: batadv_slave_1
[  304.175184][T12007] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  304.199501][T12007] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  304.220175][T12007] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  304.230264][T12007] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  304.370623][T12361] __nla_validate_parse: 1 callbacks suppressed
[  304.370643][T12361] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1929'.
[  304.422535][T12362] veth0: entered promiscuous mode
[  304.447301][T12359] veth0: left promiscuous mode
[  304.456186][T12298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  304.496207][T12298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  304.561946][T12298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  304.575376][T12298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  305.001236][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  305.011989][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  305.020777][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  305.029712][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  305.038060][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  305.048772][T12378] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  305.087345][T12385] netlink: 'syz.0.1933': attribute type 1 has an invalid length.
[  305.115817][T12385] netlink: 'syz.0.1933': attribute type 2 has an invalid length.
[  305.140634][T12385] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8
[  305.142942][T12384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1934'.
[  305.454784][T12381] hsr0 speed is unknown, defaulting to 1000
[  305.719043][T12298] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  306.059828][T12404] netlink: 'syz.4.1941': attribute type 4 has an invalid length.
[  306.074495][T12410] sctp: [Deprecated]: syz.0.1942 (pid 12410) Use of struct sctp_assoc_value in delayed_ack socket option.
[  306.074495][T12410] Use struct sctp_sack_info instead
[  306.117650][T12411] netlink: 'syz.4.1941': attribute type 4 has an invalid length.
[  306.431260][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  306.443106][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  306.457689][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  306.490959][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  306.514301][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  307.149745][ T5849] Bluetooth: hci1: command tx timeout
[  308.188205][T12298] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.311223][T12298] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.325381][T12381] chnl_net:caif_netlink_parms(): no params data found
[  308.354689][T12431] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1946'.
[  308.418315][T12298] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.594518][ T5849] Bluetooth: hci3: command tx timeout
[  308.612610][T12439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1948'.
[  308.675134][T12443] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1949'.
[  308.714143][T12443] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1949'.
[  308.827650][T12381] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.845252][T12381] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.867458][T12381] bridge_slave_0: entered allmulticast mode
[  308.894557][T12381] bridge_slave_0: entered promiscuous mode
[  308.929322][T12381] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.960904][T12381] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.976718][T12381] bridge_slave_1: entered allmulticast mode
[  308.984986][T12381] bridge_slave_1: entered promiscuous mode
[  308.994472][T12455] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1952'.
[  309.048990][T12460] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1953'.
[  309.237030][ T5849] Bluetooth: hci1: command tx timeout
[  309.283339][T12455] bond0 (unregistering): Released all slaves
[  309.354484][T12422] hsr0 speed is unknown, defaulting to 1000
[  309.739101][T12381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  309.752273][T12381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  309.833164][T12484] netlink: 'syz.0.1960': attribute type 4 has an invalid length.
[  309.885101][T12488] netlink: 'syz.0.1960': attribute type 4 has an invalid length.
[  309.961811][T12381] team0: Port device team_slave_0 added
[  309.989471][T12298] bridge_slave_1: left allmulticast mode
[  309.995196][T12298] bridge_slave_1: left promiscuous mode
[  310.007721][T12298] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.049551][T12298] bridge_slave_0: left allmulticast mode
[  310.055367][T12298] bridge_slave_0: left promiscuous mode
[  310.067447][T12298] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.539388][T12298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  310.551749][T12298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  310.563162][T12298] bond0 (unregistering): Released all slaves
[  310.587980][T12381] team0: Port device team_slave_1 added
[  310.665894][ T5849] Bluetooth: hci3: command tx timeout
[  310.801965][T12516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1967'.
[  310.815423][T12515] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  310.824531][T12516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1967'.
[  310.824565][T12516] netlink: 'syz.1.1967': attribute type 20 has an invalid length.
[  310.898356][T12381] batman_adv: batadv0: Adding interface: batadv_slave_0
[  310.912529][T12381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  310.940085][T12381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  310.953284][T12381] batman_adv: batadv0: Adding interface: batadv_slave_1
[  310.960445][T12381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  310.987310][T12381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  311.283626][T12381] hsr_slave_0: entered promiscuous mode
[  311.297411][T12381] hsr_slave_1: entered promiscuous mode
[  311.303909][T12381] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  311.328821][ T5849] Bluetooth: hci1: command tx timeout
[  311.354857][T12381] Cannot create hsr debugfs directory
[  311.584213][T12422] chnl_net:caif_netlink_parms(): no params data found
[  311.610803][T12535] Set syz0 is full, maxelem 0 reached
[  311.654030][T12298] hsr_slave_0: left promiscuous mode
[  311.692492][T12298] hsr_slave_1: left promiscuous mode
[  311.698826][T12298] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  311.713134][T12298] batman_adv: batadv0: Removing interface: batadv_slave_0
[  311.724221][T12298] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  311.737032][T12298] batman_adv: batadv0: Removing interface: batadv_slave_1
[  311.791330][T12298] veth1_macvtap: left promiscuous mode
[  311.799516][T12298] veth0_macvtap: left promiscuous mode
[  311.811864][T12298] veth1_vlan: left promiscuous mode
[  311.819077][T12298] veth0_vlan: left promiscuous mode
[  311.841365][T12546] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1975'.
[  312.085328][T12552] xt_limit: Overflow, try lower: 2147483649/128
[  312.485017][T12298] team0 (unregistering): Port device team_slave_1 removed
[  312.532504][T12298] team0 (unregistering): Port device team_slave_0 removed
[  312.748978][ T5849] Bluetooth: hci3: command tx timeout
[  313.150863][T12552] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  313.216250][T12552] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  313.244779][T12552] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  313.386510][ T5849] Bluetooth: hci1: command tx timeout
[  313.452105][T12422] bridge0: port 1(bridge_slave_0) entered blocking state
[  313.460690][T12422] bridge0: port 1(bridge_slave_0) entered disabled state
[  313.468950][T12422] bridge_slave_0: entered allmulticast mode
[  313.477615][T12422] bridge_slave_0: entered promiscuous mode
[  313.530642][T12570] xt_CT: No such helper "netbios-ns"
[  313.579466][T12422] bridge0: port 2(bridge_slave_1) entered blocking state
[  313.587657][T12422] bridge0: port 2(bridge_slave_1) entered disabled state
[  313.594945][T12422] bridge_slave_1: entered allmulticast mode
[  313.611244][T12422] bridge_slave_1: entered promiscuous mode
[  313.698702][T12422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  313.731137][T12422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  313.749831][T12577] netlink: 'syz.1.1983': attribute type 1 has an invalid length.
[  313.805281][T12381] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.864320][T12577] 8021q: adding VLAN 0 to HW filter on device bond4
[  313.974271][T12381] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.003404][T12422] team0: Port device team_slave_0 added
[  314.020545][T12422] team0: Port device team_slave_1 added
[  314.163766][T12381] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.208614][T12422] batman_adv: batadv0: Adding interface: batadv_slave_0
[  314.217221][T12422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  314.244432][T12422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  314.256656][T12587] netlink: 'syz.0.1986': attribute type 29 has an invalid length.
[  314.361767][T12422] batman_adv: batadv0: Adding interface: batadv_slave_1
[  314.374794][T12422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  314.401755][T12422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  314.413107][T12590] netlink: 'syz.0.1986': attribute type 29 has an invalid length.
[  314.434546][T12595] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  314.443575][T12595] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  314.452624][T12595] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  314.461542][T12595] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  314.492392][T12587] netlink: 'syz.0.1986': attribute type 29 has an invalid length.
[  314.501654][T12587] netlink: 'syz.0.1986': attribute type 29 has an invalid length.
[  314.512829][T12595] netlink: 'syz.4.1988': attribute type 13 has an invalid length.
[  314.526397][T12595] netlink: 'syz.4.1988': attribute type 58 has an invalid length.
[  314.534292][T12595] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1988'.
[  314.591884][T12598] bridge1: entered promiscuous mode
[  314.600017][T12598] bridge1: entered allmulticast mode
[  314.738380][T12422] hsr_slave_0: entered promiscuous mode
[  314.745231][T12422] hsr_slave_1: entered promiscuous mode
[  314.768392][T12422] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  314.776842][T12422] Cannot create hsr debugfs directory
[  314.832738][ T5849] Bluetooth: hci3: command tx timeout
[  314.842805][T12605] netlink: 'syz.0.1990': attribute type 4 has an invalid length.
[  314.894104][T12612] netlink: 'syz.0.1990': attribute type 4 has an invalid length.
[  314.938490][T12617] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT
[  315.014896][T12619] syz.1.1993: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/
[  315.032277][T12611] netlink: 'syz.4.1991': attribute type 12 has an invalid length.
[  315.036647][T12619] ,mems_allowed=0-1
[  315.055568][T12611] netlink: 'syz.4.1991': attribute type 29 has an invalid length.
[  315.069431][T12611] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1991'.
[  315.072093][T12622] netlink: 'syz.1.1993': attribute type 24 has an invalid length.
[  315.079298][T12619] 
[  315.089862][T12611] netlink: 'syz.4.1991': attribute type 1 has an invalid length.
[  315.098578][T12611] netlink: 'syz.4.1991': attribute type 2 has an invalid length.
[  315.107564][T12619] CPU: 1 UID: 0 PID: 12619 Comm: syz.1.1993 Not tainted 6.16.0-rc2-syzkaller-00185-g010c40c1f50e #0 PREEMPT(full) 
[  315.107593][T12619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  315.107606][T12619] Call Trace:
[  315.107614][T12619]  <TASK>
[  315.107623][T12619]  dump_stack_lvl+0x189/0x250
[  315.107662][T12619]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  315.107691][T12619]  ? __pfx_dump_stack_lvl+0x10/0x10
[  315.107724][T12619]  ? __pfx__printk+0x10/0x10
[  315.107747][T12619]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  315.107769][T12619]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  315.107799][T12619]  warn_alloc+0x214/0x310
[  315.107824][T12619]  ? stack_depot_save_flags+0x40/0x900
[  315.107856][T12619]  ? __pfx_warn_alloc+0x10/0x10
[  315.107882][T12619]  ? kasan_save_track+0x4f/0x80
[  315.107914][T12619]  ? xskq_create+0x56/0x170
[  315.107941][T12619]  ? xsk_init_queue+0xb0/0x110
[  315.107967][T12619]  ? xsk_setsockopt+0x43f/0x710
[  315.107992][T12619]  ? do_sock_setsockopt+0x257/0x3e0
[  315.108015][T12619]  ? __x64_sys_setsockopt+0x18b/0x220
[  315.108038][T12619]  ? do_syscall_64+0xfa/0x3b0
[  315.108055][T12619]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  315.108084][T12619]  __vmalloc_node_range_noprof+0x125/0x12f0
[  315.108142][T12619]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  315.108172][T12619]  ? __kasan_kmalloc+0x93/0xb0
[  315.108196][T12619]  vmalloc_user_noprof+0xad/0xf0
[  315.108219][T12619]  ? xskq_create+0xbf/0x170
[  315.108250][T12619]  xskq_create+0xbf/0x170
[  315.108283][T12619]  xsk_init_queue+0xb0/0x110
[  315.108316][T12619]  xsk_setsockopt+0x43f/0x710
[  315.108353][T12619]  ? __pfx_xsk_setsockopt+0x10/0x10
[  315.108379][T12619]  ? __lock_acquire+0xab9/0xd20
[  315.108419][T12619]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  315.108445][T12619]  ? __pfx_xsk_setsockopt+0x10/0x10
[  315.108475][T12619]  do_sock_setsockopt+0x257/0x3e0
[  315.108510][T12619]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  315.108541][T12619]  ? __fget_files+0x2a/0x420
[  315.108574][T12619]  __x64_sys_setsockopt+0x18b/0x220
[  315.108605][T12619]  do_syscall_64+0xfa/0x3b0
[  315.108622][T12619]  ? lockdep_hardirqs_on+0x9c/0x150
[  315.108652][T12619]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  315.108672][T12619]  ? clear_bhb_loop+0x60/0xb0
[  315.108698][T12619]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  315.108718][T12619] RIP: 0033:0x7f555858e929
[  315.108736][T12619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  315.108753][T12619] RSP: 002b:00007f555942a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  315.108775][T12619] RAX: ffffffffffffffda RBX: 00007f55587b5fa0 RCX: 00007f555858e929
[  315.108789][T12619] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[  315.108801][T12619] RBP: 00007f5558610b39 R08: 0000000000000004 R09: 0000000000000000
[  315.108813][T12619] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  315.108826][T12619] R13: 0000000000000000 R14: 00007f55587b5fa0 R15: 00007ffefca1c9b8
[  315.108859][T12619]  </TASK>
[  315.108942][T12619] Mem-Info:
[  315.159656][T12611] netlink: 39 bytes leftover after parsing attributes in process `syz.4.1991'.
[  315.173353][T12619] active_anon:4372 inactive_anon:0 isolated_anon:0
[  315.173353][T12619]  active_file:1329 inactive_file:39894 isolated_file:0
[  315.173353][T12619]  unevictable:768 dirty:118 writeback:0
[  315.173353][T12619]  slab_reclaimable:11481 slab_unreclaimable:126456
[  315.173353][T12619]  mapped:28942 shmem:1361 pagetables:1076
[  315.173353][T12619]  sec_pagetables:0 bounce:0
[  315.173353][T12619]  kernel_misc_reclaimable:0
[  315.173353][T12619]  free:1303041 free_pcp:12831 free_cma:0
[  315.383742][T12381] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  315.489544][T12619] Node 0 active_anon:17388kB inactive_anon:0kB active_file:5316kB inactive_file:159376kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115768kB dirty:468kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13768kB pagetables:4168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  315.523476][T12619] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  315.580385][T12381] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  315.602417][T12381] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  315.619572][T12619] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  315.663154][T12381] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  315.670528][T12619] lowmem_reserve[]: 0 2500 2502 2502 2502
[  315.676597][T12619] Node 0 DMA32 free:1296340kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17244kB inactive_anon:0kB active_file:5316kB inactive_file:157552kB unevictable:1536kB writepending:464kB present:3129332kB managed:2561020kB mlocked:0kB bounce:0kB free_pcp:30760kB local_pcp:18856kB free_cma:0kB
[  315.710334][T12619] lowmem_reserve[]: 0 0 1 1 1
[  315.715349][T12619] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1824kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB
[  315.752237][T12619] lowmem_reserve[]: 0 0 0 0 0
[  315.768770][T12619] Node 1 Normal free:3899824kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20608kB local_pcp:7168kB free_cma:0kB
[  315.810610][T12619] lowmem_reserve[]: 0 0 0 0 0
[  315.826528][T12619] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  315.843820][T12619] Node 0 DMA32: 180*4kB (ME) 331*8kB (UME) 201*16kB (M) 121*32kB (UME) 58*64kB (UME) 23*128kB (UME) 16*256kB (UM) 8*512kB (UM) 17*1024kB (UME) 4*2048kB (M) 304*4096kB (UM) = 1296088kB
[  315.848010][T12608] hsr0 speed is unknown, defaulting to 1000
[  315.888900][T12619] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB
[  315.908516][T12619] Node 1 Normal: 144*4kB (UME) 50*8kB (UME) 46*16kB (UME) 144*32kB (UME) 36*64kB (UME) 8*128kB (UME) 4*256kB (UME) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3899824kB
[  315.929048][T12619] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  315.960534][T12619] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  315.980481][T12619] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  315.997899][T12636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1995'.
[  316.007308][T12619] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  316.016867][T12619] 42580 total pagecache pages
[  316.026281][T12619] 0 pages in swap cache
[  316.030560][T12619] Free swap  = 124996kB
[  316.034839][T12619] Total swap = 124996kB
[  316.039897][T12619] 2097051 pages RAM
[  316.044960][T12619] 0 pages HighMem/MovableOnly
[  316.050244][T12619] 424690 pages reserved
[  316.055044][T12619] 0 pages cma reserved
[  316.080349][T12636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1995'.
[  316.200157][T12644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1997'.
[  316.503583][T12651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1999'.
[  316.515717][T12651] netlink: 'syz.1.1999': attribute type 30 has an invalid length.
[  316.533154][T12652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1999'.
[  316.544753][T12653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1999'.
[  316.557982][T12652] netlink: 'syz.1.1999': attribute type 30 has an invalid length.
[  316.567385][T12653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1999'.
[  316.569418][T12381] 8021q: adding VLAN 0 to HW filter on device bond0
[  316.584105][T12653] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1999'.
[  316.621902][T12381] 8021q: adding VLAN 0 to HW filter on device team0
[  316.635398][T12651] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  316.644533][T12651] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  316.653540][T12651] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  316.662299][T12651] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  316.707784][T12290] bridge0: port 1(bridge_slave_0) entered blocking state
[  316.714986][T12290] bridge0: port 1(bridge_slave_0) entered forwarding state
[  316.755716][T12295] bridge0: port 2(bridge_slave_1) entered blocking state
[  316.763024][T12295] bridge0: port 2(bridge_slave_1) entered forwarding state
[  316.940461][T12422] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  316.959109][T12422] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  316.977379][T12422] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  317.044621][T12422] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  317.136571][T12663] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  317.243642][T12381] 8021q: adding VLAN 0 to HW filter on device batadv0
[  317.322576][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  317.331473][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  317.644932][T12422] 8021q: adding VLAN 0 to HW filter on device bond0
[  317.663061][T12690] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  317.697885][T12381] veth0_vlan: entered promiscuous mode
[  317.732209][T12381] veth1_vlan: entered promiscuous mode
[  317.753363][T12690] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  317.792766][T12422] 8021q: adding VLAN 0 to HW filter on device team0
[  317.813868][T12690] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  317.910049][T12690] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  317.944453][T12294] bridge0: port 1(bridge_slave_0) entered blocking state
[  317.951770][T12294] bridge0: port 1(bridge_slave_0) entered forwarding state
[  317.993464][T12290] bridge0: port 2(bridge_slave_1) entered blocking state
[  318.000727][T12290] bridge0: port 2(bridge_slave_1) entered forwarding state
[  318.082797][T12690] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  318.109792][T12381] veth0_macvtap: entered promiscuous mode
[  318.130357][T12690] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  318.179069][T12690] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  318.214335][T12690] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  318.232214][T12381] veth1_macvtap: entered promiscuous mode
[  318.340531][T12381] batman_adv: batadv0: Interface activated: batadv_slave_0
[  318.405668][T12381] batman_adv: batadv0: Interface activated: batadv_slave_1
[  318.451238][T12381] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  318.480325][T12381] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  318.491640][T12381] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  318.509127][T12381] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  318.668121][T12728] sctp: [Deprecated]: syz.4.2016 (pid 12728) Use of struct sctp_assoc_value in delayed_ack socket option.
[  318.668121][T12728] Use struct sctp_sack_info instead
[  318.777720][T12295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  318.795538][T12295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  318.925225][T12733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2017'.
[  318.950242][T12422] 8021q: adding VLAN 0 to HW filter on device batadv0
[  318.994556][T12295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  319.011863][T12740] pimreg: entered allmulticast mode
[  319.030520][T12295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  319.195151][T12422] veth0_vlan: entered promiscuous mode
[  319.220162][T12422] veth1_vlan: entered promiscuous mode
[  319.323572][T12422] veth0_macvtap: entered promiscuous mode
[  319.409690][T12753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2023'.
[  319.484318][T12422] veth1_macvtap: entered promiscuous mode
[  319.534275][T12422] batman_adv: batadv0: Interface activated: batadv_slave_0
[  319.604823][T12422] batman_adv: batadv0: Interface activated: batadv_slave_1
[  319.842305][T12293] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  319.887570][T12422] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  319.897560][T12422] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  319.906473][T12422] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  319.915215][T12422] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  320.001690][T12293] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.179332][T12293] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.412958][T12783] netlink: 'syz.1.2030': attribute type 2 has an invalid length.
[  320.443314][T12293] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.508809][T12290] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  320.524570][T12295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  320.543604][T12290] ------------[ cut here ]------------
[  320.555913][T12295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  320.563922][T12290] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1223:5
[  320.581593][T12290] index 11 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]')
[  320.599344][T12290] CPU: 0 UID: 0 PID: 12290 Comm: kworker/u8:32 Not tainted 6.16.0-rc2-syzkaller-00185-g010c40c1f50e #0 PREEMPT(full) 
[  320.599376][T12290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  320.599390][T12290] Workqueue: events_unbound cfg80211_wiphy_work
[  320.599419][T12290] Call Trace:
[  320.599427][T12290]  <TASK>
[  320.599436][T12290]  dump_stack_lvl+0x189/0x250
[  320.599474][T12290]  ? __pfx_dump_stack_lvl+0x10/0x10
[  320.599507][T12290]  ? __pfx__printk+0x10/0x10
[  320.599544][T12290]  ubsan_epilogue+0xa/0x40
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  320.599567][T12290]  __ubsan_handle_out_of_bounds+0xe9/0xf0
[  320.599607][T12290]  ieee80211_request_ibss_scan+0x600/0x8b0
[  320.599655][T12290]  ieee80211_ibss_work+0xd85/0x1060
[  320.599684][T12290]  ? lockdep_hardirqs_on+0x9c/0x150
[  320.599716][T12290]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  320.599745][T12290]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  320.599775][T12290]  ? __pfx_ieee80211_ibss_work+0x10/0x10
[  320.599811][T12290]  ? skb_dequeue+0x10e/0x150
[  320.599829][T12290]  ? ieee80211_iface_work+0xcdb/0xfe0
[  320.599863][T12290]  ? ieee80211_iface_work+0xf39/0xfe0
[  320.599897][T12290]  ? rcu_is_watching+0x15/0xb0
[  320.599936][T12290]  cfg80211_wiphy_work+0x2df/0x460
[  320.599959][T12290]  ? process_scheduled_works+0x9ef/0x17b0
[  320.599993][T12290]  process_scheduled_works+0xae1/0x17b0
[  320.600067][T12290]  ? __pfx_process_scheduled_works+0x10/0x10
[  320.600119][T12290]  worker_thread+0x8a0/0xda0
[  320.600170][T12290]  kthread+0x70e/0x8a0
[  320.600198][T12290]  ? __pfx_worker_thread+0x10/0x10
[  320.600228][T12290]  ? __pfx_kthread+0x10/0x10
[  320.600254][T12290]  ? _raw_spin_unlock_irq+0x23/0x50
[  320.600281][T12290]  ? lockdep_hardirqs_on+0x9c/0x150
[  320.600309][T12290]  ? __pfx_kthread+0x10/0x10
[  320.600333][T12290]  ret_from_fork+0x3f9/0x770
[  320.600366][T12290]  ? __pfx_ret_from_fork+0x10/0x10
[  320.600402][T12290]  ? __switch_to_asm+0x39/0x70
[  320.600422][T12290]  ? __switch_to_asm+0x33/0x70
[  320.600440][T12290]  ? __pfx_kthread+0x10/0x10
[  320.600465][T12290]  ret_from_fork_asm+0x1a/0x30
[  320.600506][T12290]  </TASK>
[  320.600514][T12290] ---[ end trace ]---
[  320.892604][T12290] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[  320.899894][T12290] CPU: 0 UID: 0 PID: 12290 Comm: kworker/u8:32 Not tainted 6.16.0-rc2-syzkaller-00185-g010c40c1f50e #0 PREEMPT(full) 
[  320.912269][T12290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  320.922372][T12290] Workqueue: events_unbound cfg80211_wiphy_work
[  320.928682][T12290] Call Trace:
[  320.932006][T12290]  <TASK>
[  320.934982][T12290]  dump_stack_lvl+0x99/0x250
[  320.939621][T12290]  ? __asan_memcpy+0x40/0x70
[  320.944269][T12290]  ? __pfx_dump_stack_lvl+0x10/0x10
[  320.949534][T12290]  ? __pfx__printk+0x10/0x10
[  320.954444][T12290]  panic+0x2db/0x790
[  320.958375][T12290]  ? __pfx_panic+0x10/0x10
[  320.962817][T12290]  ? _printk+0xcf/0x120
[  320.967028][T12290]  ? __pfx__printk+0x10/0x10
[  320.971649][T12290]  check_panic_on_warn+0x89/0xb0
[  320.976614][T12290]  __ubsan_handle_out_of_bounds+0xe9/0xf0
[  320.982375][T12290]  ieee80211_request_ibss_scan+0x600/0x8b0
[  320.988226][T12290]  ieee80211_ibss_work+0xd85/0x1060
[  320.993447][T12290]  ? lockdep_hardirqs_on+0x9c/0x150
[  320.998682][T12290]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  321.004601][T12290]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  321.010956][T12290]  ? __pfx_ieee80211_ibss_work+0x10/0x10
[  321.016625][T12290]  ? skb_dequeue+0x10e/0x150
[  321.021257][T12290]  ? ieee80211_iface_work+0xcdb/0xfe0
[  321.026664][T12290]  ? ieee80211_iface_work+0xf39/0xfe0
[  321.032068][T12290]  ? rcu_is_watching+0x15/0xb0
[  321.036951][T12290]  cfg80211_wiphy_work+0x2df/0x460
[  321.042178][T12290]  ? process_scheduled_works+0x9ef/0x17b0
[  321.047936][T12290]  process_scheduled_works+0xae1/0x17b0
[  321.053539][T12290]  ? __pfx_process_scheduled_works+0x10/0x10
[  321.059580][T12290]  worker_thread+0x8a0/0xda0
[  321.064210][T12290]  kthread+0x70e/0x8a0
[  321.068300][T12290]  ? __pfx_worker_thread+0x10/0x10
[  321.073449][T12290]  ? __pfx_kthread+0x10/0x10
[  321.078106][T12290]  ? _raw_spin_unlock_irq+0x23/0x50
[  321.083330][T12290]  ? lockdep_hardirqs_on+0x9c/0x150
[  321.088592][T12290]  ? __pfx_kthread+0x10/0x10
[  321.093205][T12290]  ret_from_fork+0x3f9/0x770
[  321.097827][T12290]  ? __pfx_ret_from_fork+0x10/0x10
[  321.102976][T12290]  ? __switch_to_asm+0x39/0x70
[  321.107756][T12290]  ? __switch_to_asm+0x33/0x70
[  321.112533][T12290]  ? __pfx_kthread+0x10/0x10
[  321.117144][T12290]  ret_from_fork_asm+0x1a/0x30
[  321.121939][T12290]  </TASK>
[  321.125152][T12290] Kernel Offset: disabled
[  321.129541][T12290] Rebooting in 86400 seconds..