last executing test programs:

5.362909361s ago: executing program 0 (id=3225):
r0 = socket$kcm(0x10, 0x2, 0x10)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x1b}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_OVERHEAD={0x8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0)
recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
recvmsg$kcm(r0, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002c80)}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x2, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
r7 = socket$netlink(0x10, 0x3, 0xf)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000080)=0x2, 0x4)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4)
getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x8004}, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r9 = socket(0x15, 0x5, 0x0)
r10 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r10, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r10, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg$xdp(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
getsockopt(r9, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9)

4.803930537s ago: executing program 2 (id=3231):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'wlan1\x00', &(0x7f0000000140)=@ethtool_stats})
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
unshare(0x40600)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, 0x0, 0x1)
recvmmsg(r3, &(0x7f0000000340), 0x0, 0x3, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40010)
r5 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r5, 0x0, 0x0)
r6 = socket(0x10, 0x803, 0x0)
socket(0x200000100000011, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x54}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000a800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0xfffe, 0x0, 0x1}, 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r7}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f00000002c0), 0x1, r8}, 0x38)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))

4.705293743s ago: executing program 2 (id=3232):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x13, &(0x7f0000000380)=ANY=[@ANYRESDEC], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
unshare(0x0)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="90244f777edd0d886ef0674e18233fa5f68d1531360bde1e4235cf43e443d5c668e29dd177889f978195aa33ec2b4c0d8d2d893ab7eae1013e895c355bf92f1bf89e453bd40b3f336a4b4d322ef50dabaf41c6ac742b8052d3f6bf1eab9435617dc363b0bfac4dba130fe9737e32d070354511cf6ff3021a3a8ddbcc8b32c3038ffa59db99416727c68a8c8fda58ec8549f800d3d2825025ed03824e05b7cd97321e8d6c4a3370cb88ed354f9171bb31a1a31f201b1b269644", 0xb9}], 0x1)
unshare(0x20020400)
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
pipe(&(0x7f0000000040))
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x48)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "4e0e0ae967dbc6b4d4388e6fea26143c"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x23}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x36c16b24}]}, 0x40}}, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x2b8, 0xb0000010, 0x160, 0x5c8fca04, 0x270, 0x3a8, 0x3a8, 0x270, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'team_slave_0\x00', 'veth0_to_team\x00'}, 0x0, 0xf8, 0x160, 0x700, {}, [@common=@inet=@dscp={{0x28}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0xd}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "78ed9300032ce416ae19db66c8fb2158fbc487a284b992e42fef198c9f58"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x18, 0x1a, 0x1, 0x0, 0x0, {0x2}}, 0x18}}, 0x0)
unshare(0x68060200)
sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c)
pselect6(0x40, &(0x7f0000007e00)={0xffffffffffffff72, 0x1000000000, 0x60, 0x4, 0x1, 0x8001, 0x5, 0x5}, &(0x7f0000007e40)={0x0, 0xb9, 0x8, 0x1f, 0x242d, 0x2}, &(0x7f0000007e80)={0x3, 0x3, 0x3, 0x1, 0x2, 0x68e, 0x3004, 0x10000000000000}, &(0x7f0000007ec0)={0x0, 0x3938700}, &(0x7f0000007f40)={&(0x7f0000007f00)={[0x3]}, 0x8})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)

4.416370372s ago: executing program 0 (id=3234):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x3, 0x4, 0x7}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0xf, &(0x7f0000000780)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="2a003300d0d4fe00ffffffffffff080211000000505050505050"], 0x48}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r3, 0x8b2c, 0x0)
getsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000540)=0x4, &(0x7f0000000580)=0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
r5 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEYRING(r5, 0x110, 0x2, &(0x7f0000000300)='wlan1\v', 0x6)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r4, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be174ef9355b70719c712c5d15d2e7505a8696b50738ec", 0xbb}, {&(0x7f0000000180)="316f825a3d29f96a2093", 0xa}], 0x2}}], 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000004c0)={0x0, 'ipvlan1\x00'}, 0x18)
sendmsg$inet(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="14fafa37bf25f04bda99eefbbdd8d76b8136ee6cfdee25bdb2d1873ce347c7b623dd3140cfb2326fa1bf9f1dc2375eeba25df45aefdb3c49a4e7ffab4ed7181180bde98af644d11f", 0x48}, {&(0x7f0000000b80)="c3e361cabaa484b0c035139c64932a377f926342f6b052b6a3b273c187a5e0c26fe049092a54eb9b6be2ac2df69e6a36fad43d88851aa162b6aa0d475c5701c17866051e6a72fd9c635852af264213a47caa2cb5fb91a62d61417e32e8000890687d74ba2d1a8eaecaa169ef95f7347e7592e9283a9357185b1282ad068be2fcf88bcb", 0x83}, {&(0x7f0000000800)="8534f65f698d0200a3ee30459376efe5001dc546f93c6540e7a5215fa9f9469576e94b77cfaf3f76956c4c842247e2803e33335fa28b755829ea0000406333941d8989b0b8e304f307667026a45ceae6d184bd183144ad8f5ff9ec1ba74e97e641398ad65d31b74136c511ceac2c555398fa9239e54eb9df18d1d06fa5", 0x7d}, {&(0x7f0000000980)="dfc56286b56ecc486c04bc14504d983be1f4ef618879be74e47bb41ea0ec8db85da5cfdb43e07b8cc7860bc152943651075c35a9e715afc516b3c84a77236602539578c21fa41ba1a52740bba9669431751337c09fb0f778ede72a7ea175b5a4b75731f099", 0x65}], 0x4}, 0xc0)
sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

3.970673385s ago: executing program 2 (id=3236):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff})
close(r2)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r3, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000340)={0x0, 0x1}, 0xe)
shutdown(r5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f00000001c0)={r6, @in6={{0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}}}, 0x84)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
unshare(0x2000400)
r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r9, &(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14)
writev(0xffffffffffffffff, &(0x7f0000000140), 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
shutdown(r8, 0x1)
recvmmsg(r8, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000000680)=""/4, 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000003a00)=""/190, 0xbe}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000121, 0x0)
listen(r7, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x0, 0xfffffffd, 0x9, 0x394000, 0x2000, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x48)

3.775753215s ago: executing program 2 (id=3238):
r0 = socket(0x200000000000011, 0x2, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_script(r2, 0x0, 0x4e)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
pipe(&(0x7f00000002c0))
close(r2)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', <r4=>0x0})
bind$packet(r3, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14)
sendmmsg$sock(r3, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@mark={{0xf}}], 0x18}}], 0x1, 0x0)
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCDELRT(r5, 0x8919, 0x0)
tee(r1, 0xffffffffffffffff, 0x3, 0x0)
vmsplice(r1, 0x0, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x0, 0x5, 0x400, 0x0, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3}, 0x48)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1805000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x9, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90)
bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, r4, 0x1, 0x41}, 0x14)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x9004}, 0x4)
syz_emit_ethernet(0xe80, &(0x7f00000000c0)=ANY=[], 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000080))
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={<r9=>r7})
getsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000180), &(0x7f00000001c0)=0x4)

3.677422783s ago: executing program 1 (id=3239):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140))
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x0, {0x6}}, 0x14}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4010744d, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x90)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, &(0x7f0000000240))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000020701010050fa5d28000000"], 0x20}, 0x1, 0x0, 0x0, 0xa8f7ff600318703c}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004000)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x0, 0x0, [0x101, 0x6, 0xe8c, 0x0, 0xa84, 0x8], 0x1, &(0x7f0000000080), 0x0, [{}]}, 0x88)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0xffffffffffffff74}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vlan1\x00'})

3.469976548s ago: executing program 0 (id=3240):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r0, 0x7, 0x0, 0x2, @prog_id}, 0x20)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c)
sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
shutdown(r5, 0x1)
unshare(0x24020400)
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$rose(r6, 0x104, 0x0, &(0x7f0000000040), 0x4)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0), &(0x7f0000000180)=0x8)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)

3.469615224s ago: executing program 2 (id=3241):
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$igmp6(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8}]}], {0x14}}, 0x64}}, 0x0)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, 0x48)
sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0)
splice(r2, 0x0, r1, 0x0, 0x406f413, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380))
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r3, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000000c0))
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f00000002c0)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88)

3.44814864s ago: executing program 4 (id=3242):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'wlan1\x00', &(0x7f0000000140)=@ethtool_stats})
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
unshare(0x40600)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, 0x0, 0x1)
recvmmsg(r3, &(0x7f0000000340), 0x0, 0x3, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40010)
r5 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r5, 0x0, 0x0)
r6 = socket(0x10, 0x803, 0x0)
socket(0x200000100000011, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x54}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000a800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0xfffe, 0x0, 0x1}, 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r7}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f00000002c0), 0x1, r8}, 0x38)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))

3.110698463s ago: executing program 4 (id=3244):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="980300", @ANYRES16=r4, @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0d000ffffffffffff080211000001"], 0x398}}, 0x0)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3840000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="000125bd7000fedbdf25680000003400c700c2030907fa0007040507060602020a040904010707074103640703060e050102040402010804090181533dbd0d4f3e381400c700000104070602060401a340797fb11c522a00c70002068904000706046e008307070645007104030300000905040501077f00d5896072980d460e00002000c700550297050106df030a06040009010206100180062747d2cb17c1b3c12c00c700ff010104f706020304030701f701080305010603810305013304050675014805bece71a82563c02c2600c700700207060805b80607010f05030600ff0703070006"], 0xfc}, 0x1, 0x0, 0x0, 0x20040010}, 0x4044004)
socket$inet_sctp(0x2, 0x0, 0x84)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r6, &(0x7f00000014c0)={@val={0x0, 0x800}, @val={0x1}, @mpls={[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x88, 0x0, @dev, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x20}}}}}, 0x66)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000500)={@in={{0x2, 0x4e22, @multicast1}}, 0x0, 0x0, 0x44, 0x0, "15a74effb00e1f975ab3d2923d75febc0eb6b5de5897a590d6f534885c64533c435e507cf447d865a35dc7e90b0b36146be1e9d3e2526d75286113c093e875c645667d59de38d7eb8643ad5db3746b60"}, 0xd8)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000f, 0x28011, r8, 0x0)
syz_genetlink_get_family_id$team(&(0x7f00000027c0), 0xffffffffffffffff)
socket$alg(0x26, 0x5, 0x0)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000340)={0x0, 0x2}, 0xe)
shutdown(r9, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000006000)=[@in={0x2, 0x0, @local}]}, &(0x7f0000005ec0)=0x10)
r10 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, 0x0, &(0x7f0000000280))
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x8001}, &(0x7f0000000040)=0x14)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000480)={0x5, &(0x7f00000004c0)=[{0x25, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x6}]})

3.066806572s ago: executing program 0 (id=3245):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x3, 0x300)
r1 = socket$kcm(0x2b, 0x1, 0x0)
close(r1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x4000, 0x0)
ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000300)=0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000000000001410000001c001700000000000000006574683a73797a556a3bec507b7d826f"], 0x38}}, 0x0)
r6 = socket(0x21, 0x2, 0x10000000000002)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a0b040000380000000000020000003c0004803800018007000100637400002c000280150002400000000f08000240000000110800014000000014080001400000000d05000300030000000900010073797a30000000000900020073797a32"], 0x90}}, 0x0)
sendmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="10000000200c1c8ecd012781000000ff"], 0x10, 0xe000}, 0x5}], 0x1, 0x0)
close(r1)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x4}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000181a0000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100330000009500000000000000bf91000000000000b7020000d213939f8500000000000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x3b, &(0x7f00000001c0)=""/59}, 0x90)
r9 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x3}, 0x48)
ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x890b, &(0x7f0000000000))
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r10, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x0, @dev}], 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x890c, &(0x7f0000000000))

3.00382983s ago: executing program 1 (id=3247):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000c80)=ANY=[@ANYRES16=r2, @ANYRES16=r0, @ANYRES8=r1, @ANYBLOB="6ecfd0c387b5408ccc0c0fcd4425a104d64ac35e6ab7d9b3a91e998d3e8401844db8a3c31303cebccdfe82e915b3740b2be944feb284d4f256d0294a0cb8b93d33bf89a557316385663fc046c6ca50ea9aefbe2e4c8ce790eecacb5a691da213895cf806ba9f70f3ac465abb96224c5ef5dd9d3a91f0cba3b75fc817ed1a56a8c40d33bcaf9e47c978b84e24561d0126fc20a6a54ece7c030c98ab5b4a909c16d30e3b912f26fa078e74e4e8da74768714c48f9766c3c8af", @ANYRESHEX=r2, @ANYRESDEC=r0, @ANYBLOB="a13de842e02df1f12899226386631c1773dba02b3d7b1d9970ba7d7464d6ae81d09b06a48f807d1adfa68dc41d29750760b93a47a2baac7a529bb195beea7d1d54a3e817fb05458f7cb3b01133e38c61f1030bde5b6c928981206abf1dc3fb3df7ec96badcfb87dd75a5a29dc8407e5f282c67ce644cdf5bf825dd4400ec6806d7f5c876aff0fd5c33185668"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x10, &(0x7f0000000400), 0x4)
sendmsg$unix(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="ef", 0x1}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10)
bpf$PROG_LOAD(0x2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000003000000000000000600000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xdd49, 0xfffff000, 0x0, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, r7, 0x0, 0x2, 0x296c, 0x2}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf5, &(0x7f0000000500)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), &(0x7f00000004c0), 0x8, 0xce, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="18360000020000000000000000ae"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000740)=[r6, r8], &(0x7f0000000840)=[{0x0, 0x2, 0xd, 0x6}, {0x0, 0x3, 0x9, 0x1}, {0x0, 0x0, 0x4}, {0x0, 0x3, 0x6, 0x1}], 0x10, 0x6}, 0x90)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000c900f2ff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r11, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast})

2.321296852s ago: executing program 1 (id=3249):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$inet6_dccp(0xa, 0x6, 0x0)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c)
shutdown(r4, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x1c, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r5}, 0x10)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a40)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0x5, 0x0, 0x0, 0x2, 0x2, 0x3e, 0x3, 0x2de, 0x40, 0x3bd, 0x2, 0x0, 0x38, 0x2, 0x81, 0x4, 0x3}, [{}], "", ['\x00', '\x00', '\x00', '\x00']}, 0x478)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r7)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000040)=0x7, 0x4)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x80, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x54, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfee3}]}]}], {0x14}}, 0xa8}}, 0x4010)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x268040, 0x0)
unshare(0x24020400)
pwrite64(r10, 0x0, 0x0, 0x0)
ioctl$TUNSETNOCSUM(r6, 0x400454c8, 0x0)

2.100336249s ago: executing program 0 (id=3250):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000c80)=ANY=[@ANYRES16=r2, @ANYRES16=r0, @ANYRES8=r1, @ANYBLOB="6ecfd0c387b5408ccc0c0fcd4425a104d64ac35e6ab7d9b3a91e998d3e8401844db8a3c31303cebccdfe82e915b3740b2be944feb284d4f256d0294a0cb8b93d33bf89a557316385663fc046c6ca50ea9aefbe2e4c8ce790eecacb5a691da213895cf806ba9f70f3ac465abb96224c5ef5dd9d3a91f0cba3b75fc817ed1a56a8c40d33bcaf9e47c978b84e24561d0126fc20a6a54ece7c030c98ab5b4a909c16d30e3b912f26fa078e74e4e8da74768714c48f9766c3", @ANYRESHEX=r2, @ANYRESDEC=r0, @ANYBLOB="a13de842e02df1f12899226386631c1773dba02b3d7b1d9970ba7d7464d6ae81d09b06a48f807d1adfa68dc41d29750760b93a47a2baac7a529bb195beea7d1d54a3e817fb05458f7cb3b01133e38c61f1030bde5b6c928981206abf1dc3fb3df7ec96badcfb87dd75a5a29dc8407e5f282c67ce644cdf5bf825dd4400ec6806d7f5c876aff0fd5c33185668"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x10, &(0x7f0000000400), 0x4)
sendmsg$unix(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="ef", 0x1}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10)
bpf$PROG_LOAD(0x2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000003000000000000000600000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xdd49, 0xfffff000, 0x0, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, r7, 0x0, 0x2, 0x296c, 0x2}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf5, &(0x7f0000000500)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), &(0x7f00000004c0), 0x8, 0xce, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="18360000020000000000000000ae"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000740)=[r6, r8], &(0x7f0000000840)=[{0x0, 0x2, 0xd, 0x6}, {0x0, 0x3, 0x9, 0x1}, {0x0, 0x0, 0x4}, {0x0, 0x3, 0x6, 0x1}], 0x10, 0x6}, 0x90)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000c900f2ff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r11, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast})

2.0435804s ago: executing program 3 (id=3251):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0)
r1 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98)
sendmsg$inet(r1, &(0x7f00000006c0)={&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000000)="93", 0x34000}], 0x1}, 0x4040)
ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000180)="84b31ee703f6dada8e")
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair(0x3, 0x1, 0x8, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x891b, 0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x1e, 0x80005, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x1}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3573], &(0x7f0000000380)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x10, 0x803, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

1.927274959s ago: executing program 4 (id=3252):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000040)=""/32, &(0x7f0000000080)=0x20)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x9, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x2000000000000125, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x6}, [@map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8698}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x3}, @jmp={0x5, 0x0, 0x7, 0x8, 0xb, 0xffffffffffffffff, 0xffffffffffffffff}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e06bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23870140cde10e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b27663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3800000000000000009c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fba6f421145c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488a0200000000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e4a59414329a7c7f2fad6bc871f5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561fe589e0d12969bc982ff3f0000006c0c6c747d9a1cc500bb89283a16ff10feea20bdac0000000000000000ca06f256a55591019465f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ee40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a3dc4e97f7fda840bcdd3afaa0d7c3c229de4f0f4ac4d04f1a4e52e38325ca2e5f1f9caaa7234053eca09ec3c8c16940bc3edfb2e016f355391c0e7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100), 0xc, 0x0}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001cc0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000140), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, 0x0, &(0x7f00000000c0))
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x25, &(0x7f00000000c0)={r6, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r7)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r8, 0x0)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r10 = accept(r7, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0)
recvfrom(r9, &(0x7f0000000300)=""/60, 0x3c, 0x3e8, 0x0, 0x0)

1.850603784s ago: executing program 3 (id=3253):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r1=>0x0}, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x0)
r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r3)
sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x30, r4, 0x223, 0x0, 0x0, {0x3}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback={0xe0ffff00000000}}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={0x0}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
r5 = socket(0x1, 0x2, 0x0)
shutdown(r5, 0x1)
sendmmsg$unix(r5, &(0x7f0000002100)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r1}, &(0x7f0000000200)=0xc)
socket$inet6_udp(0xa, 0x2, 0x0)
unshare(0x22020400)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1b, 0x1001d61, 0x457, 0x2, 0x28d4, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x48)
getsockopt$nfc_llcp(r5, 0x118, 0x4, &(0x7f0000000180)=""/32, 0x20)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x2c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x2c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x2, 0x3, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_CFG_PARAMS={0x9}]}, 0x20}}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x3, &(0x7f00000003c0)={{r6}, 0x0, 0x0}, 0x20)
socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = socket$inet(0x2, 0x80001, 0x84)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d4755bf5", 0x4}], 0x1}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, 0x0, &(0x7f0000000040))
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, 0x8)

1.555762091s ago: executing program 3 (id=3254):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'wlan1\x00', &(0x7f0000000140)=@ethtool_stats})
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
unshare(0x40600)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, 0x0, 0x1)
recvmmsg(r3, &(0x7f0000000340), 0x0, 0x3, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40010)
r5 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r5, 0x0, 0x0)
r6 = socket(0x10, 0x803, 0x0)
socket(0x200000100000011, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x54}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000a800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0xfffe, 0x0, 0x1}, 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r7}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f00000002c0), 0x1, r8}, 0x38)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, 0x0)

1.130927543s ago: executing program 0 (id=3255):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="460a000000000000791058000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$kcm(0x10, 0x2, 0x4)
close(0xffffffffffffffff)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001640)=ANY=[@ANYBLOB="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"], 0x1184}, 0x1, 0x0, 0x0, 0x20000000}, 0x240440c0)
sendmsg$inet(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x80}, 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@common=@rt={{0x138}, {0x1, [], 0x0, 0xf2f0540c6a304b27, 0x0, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @dev, @private0, @local, @loopback, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast2, @ipv4, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local]}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRES32=r6, @ANYRES64=r2], 0x34}}, 0x0)
ioctl$TUNSETTXFILTER(r4, 0x400454d1, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b)
r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r9, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000580)={'bridge0\x00', 0x1000})
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4809a}, 0x81)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}}], {0x14}}, 0x3c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r10 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r10, &(0x7f0000000580), 0x0}, 0x20)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={&(0x7f0000000180)="dd7f145564e0d1c379aafd7a6261c38bb4c5bd9e9ed3bd7aa0f2d60e1f26d3bd690eeb6bea66824faf350ac2764e", 0x0, 0x0, &(0x7f0000000280), 0x9, r1}, 0x38)

1.112013976s ago: executing program 3 (id=3256):
socket$kcm(0x21, 0x0, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002400018014000180080001000000000008000200ac1414000c0002800500010000000000240002800c00028005a60100000000001400018008000100e0000002080002000000000008000740000000001c0018800800014000000000080002400000000008000340000000000800084000000000"], 0x88}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x20, &(0x7f0000000200)={&(0x7f0000000040)=""/253, 0xfd, 0x0, &(0x7f0000000140)=""/141, 0x8d}}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2b, 0x801, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r4=>0x0})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000280), 0xa7c, r5}, 0x38)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000002000000002000000200004801c0001"], 0x74}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="bc01000010000300"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012800b00010067656e657665"], 0x1bc}, 0x1, 0x2}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @meta={{0x9}, @void}}]}], {0x14, 0x10}}, 0xb0}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}}, 0x0)
pipe(&(0x7f0000000080)={<r8=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x9, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000600001801000020786c2500000000002020207b1af8ff00000000bf2100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x21, &(0x7f00000002c0)=""/33, 0x0, 0x0, '\x00', 0x0, 0x0, r8}, 0x90)
getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f00000003c0)={'NETMAP\x00'}, &(0x7f0000000400)=0x1e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f00000002c0)=ANY=[@ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0xfffffffc}, 0x90)
syz_emit_ethernet(0x62, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a0100002c2b0000000000000000000000000000000000fe8000000000000000000000000000aa06020201"], 0x0)
socket$kcm(0x10, 0x2, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r9, 0xc0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)

1.103496991s ago: executing program 1 (id=3257):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140))
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x0, {0x6}}, 0x14}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4010744d, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x90)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, &(0x7f0000000240))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000020701010050fa5d28000000"], 0x20}, 0x1, 0x0, 0x0, 0xa8f7ff600318703c}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004000)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x0, 0x0, [0x101, 0x6, 0xe8c, 0x0, 0xa84, 0x8], 0x1, &(0x7f0000000080), 0x0, [{}]}, 0x88)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0xffffffffffffff74}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vlan1\x00'})

919.759601ms ago: executing program 4 (id=3258):
pipe(&(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_MEMORY={0x8}]}}]}, 0x44}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)
r3 = socket(0x2, 0x3, 0x6)
sendto$inet(r3, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000002c40)=0x212, 0x4)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x11, r5, 0xa8cfb000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90)
recvmmsg(r3, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/152, 0x98}], 0x1}}], 0x1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5}]}}, 0x0, 0x2a}, 0x20)
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r4, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0}}, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
ioctl$EXT4_IOC_SWAP_BOOT(r8, 0x6611)
getsockopt$inet_mreqn(r8, 0x0, 0x0, &(0x7f0000001440)={@empty, @remote}, &(0x7f0000001480)=0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x5, 0x80, 0x1, 0x0, 0xffffffffffffffff, 0xe92, '\x00', r7, r8, 0x0, 0x2, 0x5, 0xd}, 0x48)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x14, 0x1, 0x0, 0x0, "", [@nested={0x3}]}, 0x14}], 0x1}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'erspan0\x00'})
socket$packet(0x11, 0x2, 0x300)
socket$nl_xfrm(0x10, 0x3, 0x6)

801.39581ms ago: executing program 1 (id=3259):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800c0001006d6163766c616e00100002800a"], 0x40}}, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r3 = socket$inet(0x10, 0x3, 0x0)
socket(0xb, 0x800, 0xfffffffa)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket(0x200000100000011, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00'})
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x48}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', <r6=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14)
r7 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCSARP(r7, 0x8953, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @random="32b2c9c6645a"}, 0x2f, {0x2, 0x0, @empty}})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r8, &(0x7f0000000140)={0x0, 0x41, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000000000000c410000000c3c0c62726f616463617374466c696e6b0000c7fe35677b1ca8681b9ebb964357b38690fb77225c377ca18588e035c40343583277758ae9b103879cd024969daf4ced41f624b42d2d56cf8e6ebdda94614b4cd91072c4aacf01522328cd16aaa6a32e359b750a7f0b6f8c6dc42052c42a5e389c8c0bffe3b8d5ef94e2ee0abca60b1020df2e061da56066462acfef5f614feb455abc5fd81bfd137000"/195], 0x28}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x1, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipmr_newroute={0x64, 0x18, 0x700, 0x70bd26, 0x25dfdbfe, {0x80, 0x80, 0x80, 0x40, 0x0, 0x3, 0xfe, 0x7, 0x1200}, [@RTA_SRC={0x8, 0x2, @private=0xa010101}, @RTA_PREFSRC={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x20}}, @RTA_IP_PROTO={0x5, 0x1b, 0x6}, @RTA_TABLE={0x8, 0xf, 0xffff}, @RTA_IIF={0x8, 0x3, r6}, @RTA_PRIORITY={0x8, 0x6, 0x75}, @RTA_OIF={0x8}, @RTA_OIF={0x8}]}, 0x64}}, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'pim6reg0\x00'}, 0x18)
socket(0x10, 0x803, 0x0)

493.016191ms ago: executing program 4 (id=3260):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x2a)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @timestamp, @window, @mss, @timestamp, @window], 0x21a5)

357.094089ms ago: executing program 2 (id=3261):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000006e40)=[{&(0x7f0000006b00)="90", 0x39c33f082c641d23}], 0x1}}, {{0x0, 0x0, &(0x7f0000009380)=[{&(0x7f0000006f40)="d529f28981dc56d34e626ec70afef5ac85cccd3d5b5ad8d0375a3737f4d551faf0a67e16de35a73020042c87332d38b46e9a004c0bb7b645796845f3b133dcb3649407130478d319045927f892f48c69e1ed970cc8922bf91373ffcf73ec1d9f80b6967a617794e089effba2f8b19398ddf3138a66bb9d574d8f4bce9c4b7f21a6e4ee47f935c76cf05dbd4fb7e6e0864781baaae864a11ff1e719afd4014155f61987eb350b4d7ac791f4", 0xab}, {&(0x7f0000007000)="5824e9e1de71619e3571eed8033a4d7c370f40e706", 0x15}], 0x2}}], 0x2, 0x0)
recvmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000040)=[{0x0}], 0x1}, 0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
recvmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/145, 0x91}, {&(0x7f0000000480)=""/247, 0xf7}], 0x2}, 0x10102)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
write$cgroup_int(r3, &(0x7f0000000200), 0x43400)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket(0x10, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, &(0x7f0000000100)={0x7, 'nr0\x00', {0x1}, 0x5})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x0, 0x8}})
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$key(0xf, 0x3, 0x2)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x9}]}, 0x24}}, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r9=>0x0}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000180)={0x0, 0x8004, 0xfffffffe, 0x2, r9}, 0x10)
connect$l2tp6(r4, &(0x7f0000000280)={0xa, 0x0, 0x4, @private0, 0x9, 0x3}, 0x20)
setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f00000003c0)=0x5, 0x4)

314.085291ms ago: executing program 4 (id=3262):
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x0, 0x1}, 0x20)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xe}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x3, <r3=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x0, 0x37}, 0x10, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1c, &(0x7f0000000640)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9f7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc9d4}, @map_val={0x18, 0xb, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x11}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r6, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r5, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r9=>0x0})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r9], 0x20}}, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x7, 0x4, 0x100, 0xffffffff, 0x24, 0x1}, 0x48)
ioctl(r13, 0x5, &(0x7f00000002c0)="55644899aaff090970c77f3258214aa29213eb8733a9310264277bd544992ab05905e95228b5496a808e0de1487efb1a60252e97c2fe33bc84e48b113d897b4b0dc3765e5062b41da83499413ff973fe0955cc090bbb316032c8da70597fce730dc732860422bf5820587eb2260947f427932c20748b87ce5671c60a62dfccdcb14ab2b4bab3cdbd130126f1950e11a18c61760000000000000000")
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b703000000000000620000000000000040000000000000009500000000000000136ae5ae144f508e36810269be9507c66fdade6c7f6733c13450f7a89708f4efcda71ec3839a6d0d4ec5181b1e7c372d6d786995a6b3fe66f1a5be04f0962d4144c082ed33ea5d62716530681b9e01801816d80c36ceb345ef8d9f4ec532213c2627314fd2982e7ba66b4e505018564a371b83141ecd6a68d3378fd192b8b8328449a134b34b8346e4b549db0540a07bc649d77a3d22b040728be864f7c4d55c8bbeadc7367e10cdd582dca6fb1758269cfc905d37b1c7fe04166401309d6e7ef34af549daf9bae0a29d50398849867d97464016f17df0671bfc4d4ecb8e22d4b31c0003b93ad5dace91eb8e9a2fbd6077dce475660add7a73"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4}, 0x90)

147.756995ms ago: executing program 3 (id=3263):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x4, 0x590, [0x200001c0, 0x0, 0x0, 0x20000500, 0x20000530], 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000190000000a00000000156e727000000000000000000000000000626f6e643000000000000000000000007465616d5f736c6176655f310000000062637366300000000000000000000000ffffffffffffffff00ffffff0180c2000000ffffffffff650000e000000050010000880100007374700000000000000000000000000000000000000000000000000000000000480000000000000002000000020000000000ffffffffffffffffffbc00000000000000003b0a000002000900efb5b7059b3fffffdfff00004e234e21040071ac0600ff7f3828030005005b060000f4f200000000000000000000000000000000000000000000000000000000000000001000000000000000d1f9c15dee9e0000ffffffff000000006172707265706c7900000000dc000000000000000000000000000000000000001000000000000e00aaaaaaaaaa0f0000feffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa1a0000feffffff00000000030000004000000000117465616d3000000000000000000000006772657461703000000000000000000076657468315f746f5f626f6e64000000626f6e6430000000000000000000000052a1927247eaffff470000006a72dd4b319d0000ffffffff0000e8000000500100008801000069703600000000000000000000000000000000000000000000000000000000005000000000000000fe8000000000000000000000000000bbfe8000000000000000000000e7ff00aa000000ff00000000ffffffff00000000ffffffffff000000ffffffff00000000093b14044e204e234e214e24000000006172707265706c7900000000000000000000000000000000000000000000000010000000000000000180c20000010000feffffff0000000072656469726563740000000000000000000000000000000000000000000000000800000000000000fcffffff00000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa0000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff02000000090000004a00000000020000000000000000000000000000000073797a5f747581000000000000000000626f6e6430000000000000000000000069705f767469300000000000000000009f7f83bddffa0000ffffffffffffffffffffff0000ffffff0000c0000000c00000000801000068656c70657200000000000000000004000000000000000000000000000000002800000000000000010000006674702d32303030300000000000000000000000000000000000000000000000000000004552524f520000000000000000000000000000000000000000000000000000002000000000000000c3331f141f48b36a6e8a93c4f2796fab65c75e2fdab6f98342ae6b68a6b900000500000002000000e90d69705f76746930000000000000000000627269646765300000000000000000006966623000000000000000000000000076657468305f746f5f626f6e64000000aaaaaaaaaa11ff0000ffffffffffffffffffffff00ffffff0000b0000000b0000000e800000071756f7461000000000000000000000000000000000000000000000000000000180000000000000000000000307b0000010000000000000007000000000000006172707265706c790008000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000feffffff0000adcc"]}, 0x608)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
socket(0x10, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x3, 0xda7f, 0x10000, 0x3f, 0x202, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x80000001}, 0x10)
r2 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000d10ffc)=0x3f, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080), 0x3f)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1d, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x50, '\x00', 0x0, 0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000780)='veth1_macvtap\x00'})
connect$vsock_stream(r4, &(0x7f0000000000), 0x10)
connect$vsock_stream(r4, &(0x7f0000000040), 0x10)
syz_emit_ethernet(0x0, 0x0, &(0x7f00000007c0)={0x0, 0x2, [0xf87, 0x0, 0xe77, 0x4e0]})
setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3f0, 0x0, 0x0, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@random="09f9e309f8bb"}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac, @rand_addr, @multicast2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xa15}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$packet(0x11, 0x2, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'})

147.240013ms ago: executing program 1 (id=3264):
sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x15}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "4015492dcbbb13e7d762cf30a7797988"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000404}, 0x8000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={0x0}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$tipc(0x1e, 0x0, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
bind$tipc(r0, 0x0, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@name, 0x10)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40002001, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000380)=ANY=[@ANYRES16=r2, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400007f0000008500000082000000850000000500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x0, 0x0)
preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0xc00, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r5)
sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000030000000800010004"], 0x50}}, 0x0)
sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x1d, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0})

0s ago: executing program 3 (id=3265):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x4, 0x84)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00'})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001f0071113a000000000006000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x80}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x98, 0x8, 0xfa04, 0x98, 0x6c02, 0x1e0, 0x194, 0x194, 0x1e0, 0x194, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlabel={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x19, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0200000000000000b705e10008000000850000feb500000018110014", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x79)
setsockopt$sock_int(r4, 0x1, 0x3, &(0x7f0000000040), 0x4)
r8 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r8, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r8, &(0x7f0000001e40)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001cc0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f00000014c0)=""/54, 0x36}, &(0x7f0000001540)=[{&(0x7f0000000040)=""/25, 0x19}], 0x1, 0x20}}], 0x48}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000680)=ANY=[@ANYRESDEC=r8, @ANYRESOCT=r5, @ANYBLOB="2a2572d31e6ce398abd2a524afaf13f4649de183aeaee646154cd6be583157884be133b51a6628f6069829"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r1, @ANYRES16=r10, @ANYBLOB="aff7000000000006000000000000000000001069c34bdcd9b7b481220bb26f8733e7a712fa987e3c063f749ad76129d14c1f556097ce136a531cd0a9086932911ccb1ec3d4321917df9d80a0053d5f556d28667d", @ANYRES32=r8, @ANYRES64], 0x18}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r12=>0x0})
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_KEY(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r13, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}}, 0x0)

kernel console output (not intermixed with test programs):

-98
[  236.337281][ T9091] 8021q: adding VLAN 0 to HW filter on device batadv0
[  236.910868][ T9091] veth0_vlan: entered promiscuous mode
[  236.944986][ T9286] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.952634][ T9286] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.002588][ T9091] veth1_vlan: entered promiscuous mode
[  237.017012][ T9286] bridge_slave_1: left allmulticast mode
[  237.023448][ T9286] bridge_slave_1: left promiscuous mode
[  237.031240][ T9286] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.059962][ T9286] bridge_slave_0: left allmulticast mode
[  237.071171][ T9286] bridge_slave_0: left promiscuous mode
[  237.097781][ T9286] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.230867][ T9091] veth0_macvtap: entered promiscuous mode
[  237.256679][ T9091] veth1_macvtap: entered promiscuous mode
[  237.345910][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.369162][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.599506][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.611733][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.626827][ T5226] Bluetooth: hci9: command 0x041b tx timeout
[  237.647173][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.657902][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.669323][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.680034][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.691869][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.702644][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.712769][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.723431][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.736094][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.746747][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.756847][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.768199][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.796666][ T9091] batman_adv: batadv0: Interface activated: batadv_slave_0
[  237.812922][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.823628][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.835093][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.868884][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.887435][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.907679][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.928060][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.948592][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.971481][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  238.017653][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  238.037497][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  238.069351][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  238.106490][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  238.127466][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  238.147494][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  238.167763][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  238.189668][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  238.207427][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  238.221259][ T9091] batman_adv: batadv0: Interface activated: batadv_slave_1
[  238.235434][ T9304] lo speed is unknown, defaulting to 1000
[  238.284024][ T9091] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  238.308411][ T9091] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  238.317145][ T9091] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  238.347675][ T9091] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  238.588240][ T6347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  238.623683][ T6347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  238.689415][ T9307] wg2: entered promiscuous mode
[  238.702374][ T9307] wg2: entered allmulticast mode
[  238.733455][ T6347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  238.752236][ T6347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  238.960088][ T9313] raw_sendmsg: syz.1.1045 forgot to set AF_INET. Fix it!
[  239.007340][ T9315] netlink: 'syz.4.981': attribute type 1 has an invalid length.
[  239.037324][ T9315] __nla_validate_parse: 2 callbacks suppressed
[  239.037340][ T9315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.981'.
[  239.348339][ T9320] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1047'.
[  239.371508][ T9321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1046'.
[  239.687825][ T5226] Bluetooth: hci9: command 0x041b tx timeout
[  239.696961][ T9325] netlink: 'syz.4.1048': attribute type 7 has an invalid length.
[  239.803450][ T9329] af_packet: tpacket_rcv: packet too big, clamped from 32840 to 3952. macoff=96
[  240.092880][ T9332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1051'.
[  240.367198][ T9341] tap0: tun_chr_ioctl cmd 1074025677
[  240.383043][ T9341] tap0: linktype set to 825
[  240.497763][ T9348] netlink: 'syz.4.1058': attribute type 1 has an invalid length.
[  240.506778][ T9350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1059'.
[  240.520576][ T9348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1058'.
[  240.694135][ T9356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1061'.
[  240.754354][ T9356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1061'.
[  240.773313][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1062'.
[  240.990472][ T9367] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1063'.
[  241.248225][ T9372] block nbd0: not configured, cannot reconfigure
[  241.402971][ T9374] bridge: RTM_DELNEIGH with unconfigured vlan 2 on bridge_slave_0
[  241.614627][ T9385] xt_hashlimit: invalid rate
[  241.622853][ T9383] netlink: 'syz.4.1071': attribute type 1 has an invalid length.
[  242.151305][ T9401] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.158953][ T9401] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.258397][ T9407] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  242.270321][ T9401] bridge_slave_1: left allmulticast mode
[  242.277559][ T9401] bridge_slave_1: left promiscuous mode
[  242.296151][ T9401] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.314231][ T9405] x_tables: unsorted underflow at hook 2
[  242.331799][ T9401] bridge_slave_0: left allmulticast mode
[  242.352416][ T9401] bridge_slave_0: left promiscuous mode
[  242.379077][ T9401] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.770648][ T9418] xt_policy: neither incoming nor outgoing policy selected
[  243.444718][ T9431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  244.196655][ T9446] __nla_validate_parse: 9 callbacks suppressed
[  244.196675][ T9446] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1092'.
[  244.244664][ T9447] netlink: 'syz.4.1090': attribute type 1 has an invalid length.
[  244.403491][ T4620] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  244.414675][ T4620] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  244.424690][ T4620] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  244.439600][ T4620] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  244.441517][ T9459] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1095'.
[  244.456697][ T4620] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  244.458613][ T9457] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1094'.
[  244.473109][ T4620] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  244.515300][ T9459] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1095'.
[  244.552725][ T9459] caif0: entered allmulticast mode
[  244.595586][ T9453] lo speed is unknown, defaulting to 1000
[  244.796496][ T9471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1099'.
[  245.311284][ T9483] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1103'.
[  245.619999][ T9453] chnl_net:caif_netlink_parms(): no params data found
[  246.098023][ T9453] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.105556][ T9453] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.112933][ T9453] bridge_slave_0: entered allmulticast mode
[  246.120926][ T9453] bridge_slave_0: entered promiscuous mode
[  246.130015][ T9499] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1106'.
[  246.152228][ T9453] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.170210][ T9453] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.188191][ T9453] bridge_slave_1: entered allmulticast mode
[  246.202878][ T9453] bridge_slave_1: entered promiscuous mode
[  246.216762][ T9502] bridge_slave_1: left allmulticast mode
[  246.229825][ T9502] bridge_slave_1: left promiscuous mode
[  246.244919][ T9502] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.272632][ T9502] bridge2: port 1(bridge_slave_1) entered blocking state
[  246.286451][ T9502] bridge2: port 1(bridge_slave_1) entered disabled state
[  246.300216][ T9502] bridge_slave_1: entered allmulticast mode
[  246.318563][ T9502] bridge_slave_1: entered promiscuous mode
[  246.565004][ T9453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  246.581397][ T5226] Bluetooth: hci10: command tx timeout
[  246.593712][ T9508] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1108'.
[  246.604893][ T9453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  246.659605][ T9511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1110'.
[  246.755278][ T9513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1109'.
[  246.898285][ T9516] netlink: 'syz.3.1111': attribute type 2 has an invalid length.
[  246.920351][ T9453] team0: Port device team_slave_0 added
[  246.954487][ T9453] team0: Port device team_slave_1 added
[  247.060397][ T9453] batman_adv: batadv0: Adding interface: batadv_slave_0
[  247.073550][ T9453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  247.106707][ T9453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  247.118194][ T9524] netlink: 'syz.4.1113': attribute type 1 has an invalid length.
[  247.120330][ T9453] batman_adv: batadv0: Adding interface: batadv_slave_1
[  247.134362][ T9453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  247.213487][ T9453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  247.344850][ T9453] hsr_slave_0: entered promiscuous mode
[  247.353435][ T9453] hsr_slave_1: entered promiscuous mode
[  247.359928][ T9453] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  247.370363][ T9453] Cannot create hsr debugfs directory
[  247.376062][ T9530] netlink: 'syz.4.1116': attribute type 1 has an invalid length.
[  247.587167][ T9534] lo speed is unknown, defaulting to 1000
[  247.860103][ T9453] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.930614][ T5226] Bluetooth: hci7: command 0x0406 tx timeout
[  247.930750][ T5232] Bluetooth: hci6: command 0x0406 tx timeout
[  247.943247][ T5241] Bluetooth: hci4: command 0x0406 tx timeout
[  248.115063][ T9453] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.181489][ T9544] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  248.216417][ T9544] batman_adv: batadv0: Removing interface: batadv_slave_0
[  248.263200][ T9544] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  248.271211][ T9544] batman_adv: batadv0: Removing interface: batadv_slave_1
[  248.415068][ T9453] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.647716][ T5231] Bluetooth: hci10: command tx timeout
[  248.691552][ T9453] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.766969][ T9560] ax25_connect(): syz.4.1122 uses autobind, please contact jreuter@yaina.de
[  248.916729][ T9453] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  249.006770][ T9567] netlink: 'syz.4.1125': attribute type 1 has an invalid length.
[  249.067219][ T9453] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  249.111739][ T9453] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  249.193295][ T9453] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  249.470405][ T9575] __nla_validate_parse: 12 callbacks suppressed
[  249.470425][ T9575] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1127'.
[  249.678549][ T9453] 8021q: adding VLAN 0 to HW filter on device bond0
[  249.779655][ T9453] 8021q: adding VLAN 0 to HW filter on device team0
[  249.812322][ T6347] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.819549][ T6347] bridge0: port 1(bridge_slave_0) entered forwarding state
[  249.835996][ T9586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1131'.
[  249.858677][ T2537] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.865861][ T2537] bridge0: port 2(bridge_slave_1) entered forwarding state
[  250.428079][ T9594] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1133'.
[  250.566752][ T9596] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1134'.
[  250.731952][ T5231] Bluetooth: hci10: command tx timeout
[  252.204771][ T9594] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1133'.
[  252.216070][ T9596] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1134'.
[  252.254776][ T9453] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  252.361924][ T9601] netlink: 'syz.3.1136': attribute type 1 has an invalid length.
[  252.383548][ T9598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1135'.
[  252.496868][ T9598] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1135'.
[  252.538774][ T9601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1136'.
[  252.634867][ T9613] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1139'.
[  252.696433][ T9619] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  252.733510][ T9619] batman_adv: batadv0: Removing interface: batadv_slave_0
[  252.763200][ T9619] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  252.778122][ T9619] batman_adv: batadv0: Removing interface: batadv_slave_1
[  252.787222][ T9617] netlink: 'syz.4.1139': attribute type 7 has an invalid length.
[  252.810083][ T5231] Bluetooth: hci10: command tx timeout
[  252.940491][ T9453] 8021q: adding VLAN 0 to HW filter on device batadv0
[  253.044348][ T9453] veth0_vlan: entered promiscuous mode
[  253.072889][ T9453] veth1_vlan: entered promiscuous mode
[  253.158999][ T9453] veth0_macvtap: entered promiscuous mode
[  253.184942][ T9453] veth1_macvtap: entered promiscuous mode
[  253.241989][ T9453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.269383][ T9453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.290261][ T9453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.317509][ T9453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.337060][ T9453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.369696][ T9453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.397676][ T9453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.437488][ T9453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.447353][ T9453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.480055][ T9453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.492868][ T9453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.504130][ T9453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.514655][ T9453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.525793][ T9453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.554067][ T9453] batman_adv: batadv0: Interface activated: batadv_slave_0
[  253.669541][ T9453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  253.696368][ T9453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.727589][ T9453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  253.747438][ T9453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.757306][ T9453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  253.778345][ T9453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.788587][ T9453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  253.799143][ T9453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.809097][ T9453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  253.822210][ T9453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.847640][ T9453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  253.877586][ T9453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.897471][ T9453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  253.917506][ T9453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.931098][ T9453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  253.941617][ T9453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.955189][ T9453] batman_adv: batadv0: Interface activated: batadv_slave_1
[  253.995369][ T9453] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  254.021379][ T9453] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  254.040207][ T9453] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  254.067799][ T9453] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  254.166958][ T9647] netlink: 'syz.4.1150': attribute type 1 has an invalid length.
[  254.306004][ T2529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.357510][ T2529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.455841][ T6347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.471675][ T6347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.620594][ T9659] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode
[  254.640965][ T9659] macvlan2: entered allmulticast mode
[  254.646400][ T9659] mac80211_hwsim hwsim28 wlan0: entered allmulticast mode
[  254.673386][ T9659] mac80211_hwsim hwsim28 wlan0: left promiscuous mode
[  254.948908][ T9671] __nla_validate_parse: 6 callbacks suppressed
[  254.948928][ T9671] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1154'.
[  255.031380][ T9675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1155'.
[  255.084816][ T9674] Unknown options in mask 1f4
[  255.142737][ T9679] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1158'.
[  255.162525][ T9679] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1158'.
[  255.201834][ T9675] bridge: RTM_NEWNEIGH with invalid ether address
[  255.498279][ T9693] sctp: [Deprecated]: syz.1.1163 (pid 9693) Use of int in max_burst socket option deprecated.
[  255.498279][ T9693] Use struct sctp_assoc_value instead
[  255.593834][ T9695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1163'.
[  256.101334][ T1259] ieee802154 phy1 wpan1: encryption failed: -22
[  256.350554][ T9710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1167'.
[  256.581725][ T9722] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1170'.
[  256.767586][ T9722] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1170'.
[  257.171222][ T9729] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1172'.
[  257.545471][ T9740] gretap0: refused to change device tx_queue_len
[  257.557976][ T9740] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  257.562242][ T9744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1176'.
[  257.726403][ T9744] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  260.569586][ T9794] __nla_validate_parse: 3 callbacks suppressed
[  260.569616][ T9794] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1188'.
[  260.622139][ T9791] IPVS: Scheduler module ip_vs_sip not found
[  260.662774][ T9800] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun!
[  260.663070][ T9794] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1188'.
[  261.047836][ T9817] wg2: entered promiscuous mode
[  261.055257][ T9817] wg2: entered allmulticast mode
[  261.123085][ T9823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1195'.
[  261.431578][ T9832] netlink: 'syz.1.1197': attribute type 9 has an invalid length.
[  261.472147][ T9832] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1197'.
[  262.370149][ T9839] netlink: 'syz.2.1199': attribute type 4 has an invalid length.
[  262.600652][ T9845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1203'.
[  262.619733][ T9848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1202'.
[  262.678009][ T9850] xt_policy: output policy not valid in PREROUTING and INPUT
[  263.201892][ T9866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1207'.
[  263.728217][ T9884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1214'.
[  263.854605][ T9888] bridge0: port 3(team0) entered disabled state
[  263.861165][ T9888] bridge0: port 1(bridge_slave_0) entered disabled state
[  263.876021][ T9888] bridge0: left promiscuous mode
[  263.881163][ T9888] bridge0: left allmulticast mode
[  263.908216][ T9888] team0: left allmulticast mode
[  263.916060][ T9888] team_slave_0: left allmulticast mode
[  263.922115][ T9888] team_slave_1: left allmulticast mode
[  263.929172][ T9888] macvlan3: left allmulticast mode
[  263.934317][ T9888] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[  263.945229][ T9888] bridge0: port 3(team0) entered disabled state
[  263.959189][ T9888] bridge_slave_0: left allmulticast mode
[  263.966123][ T9888] bridge_slave_0: left promiscuous mode
[  263.974636][ T9888] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.697023][ T9917] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  264.735378][ T9914] Cannot find add_set index 0 as target
[  264.851864][ T9921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1225'.
[  265.229480][ T9927] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1228'.
[  265.445968][ T9940] No such timeout policy "syz0"
[  266.196271][ T9971] IPVS: Scheduler module ip_vs_sip not found
[  266.200906][ T9974] __nla_validate_parse: 1 callbacks suppressed
[  266.200924][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1238'.
[  266.422960][ T9983] lo speed is unknown, defaulting to 1000
[  266.858774][ T9995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1243'.
[  267.147444][ T9992] lo speed is unknown, defaulting to 1000
[  267.708925][T10017] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  267.724579][T10015] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1248'.
[  268.393985][T10023] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  268.540102][T10026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1252'.
[  268.699402][ T4620] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  268.713024][ T4620] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  268.730706][ T4620] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  268.741131][ T4620] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  268.742614][T10031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1253'.
[  268.758407][ T4620] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  268.766058][ T4620] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  269.299244][T10037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1255'.
[  269.446359][T10041] IPVS: Scheduler module ip_vs_sip not found
[  270.811320][ T5231] Bluetooth: hci11: command tx timeout
[  271.315177][T10046] lo speed is unknown, defaulting to 1000
[  271.832781][T10027] lo speed is unknown, defaulting to 1000
[  271.839839][T10062] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1261'.
[  271.911448][T10064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1262'.
[  271.959861][T10066] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1263'.
[  272.320711][T10074] IPVS: Scheduler module ip_vs_sip not found
[  272.543349][T10085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1267'.
[  272.889050][ T5231] Bluetooth: hci11: command tx timeout
[  273.212625][T10027] chnl_net:caif_netlink_parms(): no params data found
[  273.781373][T10027] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.798138][T10027] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.818419][T10027] bridge_slave_0: entered allmulticast mode
[  273.825845][T10027] bridge_slave_0: entered promiscuous mode
[  273.873805][T10027] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.898956][T10027] bridge0: port 2(bridge_slave_1) entered disabled state
[  273.928282][T10027] bridge_slave_1: entered allmulticast mode
[  273.958100][T10027] bridge_slave_1: entered promiscuous mode
[  273.998348][T10114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1274'.
[  274.030684][T10115] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1273'.
[  274.148329][T10027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  274.180427][T10027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  274.292404][T10118] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1275'.
[  274.369645][T10027] team0: Port device team_slave_0 added
[  274.384111][T10122] netlink: 'syz.3.1276': attribute type 2 has an invalid length.
[  274.422606][T10122] ip6t_srh: unknown srh match flags  5294
[  274.440777][T10027] team0: Port device team_slave_1 added
[  274.620006][T10027] batman_adv: batadv0: Adding interface: batadv_slave_0
[  274.650872][T10027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.747600][T10027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  274.784609][T10027] batman_adv: batadv0: Adding interface: batadv_slave_1
[  274.810108][T10027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.860298][T10027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  274.902978][T10134] netlink: 'syz.3.1280': attribute type 21 has an invalid length.
[  274.938105][T10135] netlink: 'syz.0.1278': attribute type 4 has an invalid length.
[  274.977859][ T5231] Bluetooth: hci11: command tx timeout
[  275.083006][T10134] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1280'.
[  275.109297][T10136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1280'.
[  275.219319][T10146] ip6t_srh: unknown srh invflags 92A7
[  275.229327][T10027] hsr_slave_0: entered promiscuous mode
[  275.251757][T10027] hsr_slave_1: entered promiscuous mode
[  275.263533][T10027] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  275.281564][T10027] Cannot create hsr debugfs directory
[  275.553051][T10151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1284'.
[  275.670991][T10027] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.709050][T10152] netlink: 'syz.3.1283': attribute type 4 has an invalid length.
[  275.750730][T10156] (unnamed net_device) (uninitialized): down delay (37750) is not a multiple of miimon (7), value rounded to 37744 ms
[  275.920860][T10027] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.123992][T10027] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.299332][T10027] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.646693][T10027] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  276.681213][T10027] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  276.728536][T10027] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  276.794588][T10027] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  277.047939][ T4620] Bluetooth: hci11: command tx timeout
[  277.122321][T10027] 8021q: adding VLAN 0 to HW filter on device bond0
[  277.215789][T10027] 8021q: adding VLAN 0 to HW filter on device team0
[  277.266151][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  277.273369][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  277.333953][ T2529] bridge0: port 2(bridge_slave_1) entered blocking state
[  277.341191][ T2529] bridge0: port 2(bridge_slave_1) entered forwarding state
[  277.452683][T10182] __nla_validate_parse: 3 callbacks suppressed
[  277.452702][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1292'.
[  277.896815][T10027] 8021q: adding VLAN 0 to HW filter on device batadv0
[  277.919550][T10192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1294'.
[  278.107055][T10196] netlink: 'syz.1.1295': attribute type 4 has an invalid length.
[  278.447975][T10207] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1297'.
[  278.512202][T10027] veth0_vlan: entered promiscuous mode
[  278.570326][T10027] veth1_vlan: entered promiscuous mode
[  278.655385][ T4620] Bluetooth: hci2: command 0x0405 tx timeout
[  278.658719][T10027] veth0_macvtap: entered promiscuous mode
[  278.700291][T10027] veth1_macvtap: entered promiscuous mode
[  278.784891][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.840336][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.874098][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.901913][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.920930][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.953434][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  278.975948][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  278.998240][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.020062][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  279.046262][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.069873][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  279.100804][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.118801][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  279.131983][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.144944][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  279.158859][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.173486][T10027] batman_adv: batadv0: Interface activated: batadv_slave_0
[  279.184494][T10215] macvlan1: mtu less than device minimum
[  279.225770][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  279.259360][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.277490][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  279.300401][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.313373][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  279.346575][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.364302][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  279.386627][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.406997][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  279.430100][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.451582][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  279.462622][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.473002][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  279.485361][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.498262][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  279.512246][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.523295][T10027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  279.537188][T10027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.553854][T10027] batman_adv: batadv0: Interface activated: batadv_slave_1
[  279.604007][T10027] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  279.623544][T10027] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  279.642019][T10027] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  279.672431][T10027] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  279.747779][T10229] netlink: 'syz.0.1303': attribute type 4 has an invalid length.
[  279.842825][T10233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1304'.
[  279.935674][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  279.957568][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  280.034279][ T2529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  280.048077][ T2529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  280.065918][T10235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1305'.
[  280.341675][T10245] lo speed is unknown, defaulting to 1000
[  280.553519][T10252] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  280.822593][T10251] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1308'.
[  280.900051][T10261] netlink: 'syz.4.1310': attribute type 2 has an invalid length.
[  281.040188][T10263] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  281.083209][T10265] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1313'.
[  281.460183][T10268] netlink: 'syz.4.1314': attribute type 4 has an invalid length.
[  281.527273][T10273] netlink: 'syz.4.1314': attribute type 4 has an invalid length.
[  281.724685][T10275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1316'.
[  281.985638][T10281] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1318'.
[  282.143455][T10291] lo speed is unknown, defaulting to 1000
[  282.178445][T10296] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1324'.
[  282.185587][T10294] netlink: 'syz.0.1323': attribute type 75 has an invalid length.
[  282.237659][T10296] caif0: entered allmulticast mode
[  282.549794][T10305] netlink: 'syz.4.1326': attribute type 1 has an invalid length.
[  282.578688][T10305] __nla_validate_parse: 2 callbacks suppressed
[  282.578709][T10305] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1326'.
[  282.663127][T10308] IPv6: NLM_F_REPLACE set, but no existing node found!
[  282.918488][T10301] lo speed is unknown, defaulting to 1000
[  283.183091][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1330'.
[  283.413947][T10324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1332'.
[  283.590275][T10332] netlink: 'syz.4.1333': attribute type 4 has an invalid length.
[  283.622024][T10319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1325'.
[  284.041205][T10339] IPVS: Scheduler module ip_vs_sip not found
[  284.083297][T10346] team0: entered promiscuous mode
[  284.117460][T10346] team_slave_0: entered promiscuous mode
[  284.124487][T10344] xt_TCPMSS: Only works on TCP SYN packets
[  284.141259][T10346] team_slave_1: entered promiscuous mode
[  284.256234][T10340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1335'.
[  284.575266][T10355] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  284.662687][T10355] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  284.725461][T10345] team0: left promiscuous mode
[  284.743168][T10345] team_slave_0: left promiscuous mode
[  284.769055][T10345] team_slave_1: left promiscuous mode
[  285.111655][T10369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1344'.
[  285.156816][T10374] xt_TCPMSS: Only works on TCP SYN packets
[  285.359913][T10378] bridge0: port 2(bridge_slave_1) entered listening state
[  285.403041][T10383] x_tables: duplicate underflow at hook 2
[  285.413442][T10383] netlink: 'syz.3.1349': attribute type 9 has an invalid length.
[  285.746103][T10390] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1352'.
[  285.956780][T10393] IPVS: Scheduler module ip_vs_sip not found
[  285.980933][T10398] IPv6: NLM_F_REPLACE set, but no existing node found!
[  286.282158][T10412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1358'.
[  286.330292][T10410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1356'.
[  286.474504][T10417] netlink: 'syz.3.1360': attribute type 21 has an invalid length.
[  286.485204][T10417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1360'.
[  286.795036][T10422] x_tables: unsorted underflow at hook 3
[  287.743267][T10476] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  287.760383][T10469] netlink: 'syz.2.1372': attribute type 4 has an invalid length.
[  287.814832][T10479] Bluetooth: hci3: unsupported parameter 65535
[  287.844805][T10479] Bluetooth: hci3: unsupported parameter 65535
[  287.949329][T10482] __nla_validate_parse: 3 callbacks suppressed
[  287.949348][T10482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1376'.
[  287.987787][T10485] openvswitch: netlink: Port 8336768 exceeds max allowable 65535
[  288.065283][T10485] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1378'.
[  288.073199][T10492] netlink: 'syz.4.1377': attribute type 4 has an invalid length.
[  288.098588][T10485] block nbd0: not configured, cannot reconfigure
[  288.195565][T10494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1381'.
[  288.254299][T10494] netlink: 'syz.0.1381': attribute type 3 has an invalid length.
[  288.294094][T10499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1383'.
[  288.515871][T10496] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1382'.
[  288.563321][T10520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1388'.
[  288.568074][T10496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1382'.
[  288.598241][T10519] netlink: 208176 bytes leftover after parsing attributes in process `syz.4.1387'.
[  288.651565][T10519] openvswitch: netlink: ufid size 2296 bytes exceeds the range (1, 16)
[  288.678639][T10519] openvswitch: netlink: Message has 4 unknown bytes.
[  288.707295][T10529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1387'.
[  288.914035][T10519] lo speed is unknown, defaulting to 1000
[  288.948678][T10513] xt_TPROXY: Can be used only with -p tcp or -p udp
[  289.323488][T10552] netlink: 'syz.1.1395': attribute type 4 has an invalid length.
[  290.003937][T10564] bridge0: port 3(vlan2) entered blocking state
[  290.047913][T10564] bridge0: port 3(vlan2) entered disabled state
[  290.074856][T10564] vlan2: entered allmulticast mode
[  290.113758][T10564] vlan2: left allmulticast mode
[  290.288779][T10576] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1401'.
[  290.345542][T10576] caif0: entered allmulticast mode
[  290.673444][T10591] netlink: 'syz.1.1407': attribute type 4 has an invalid length.
[  290.862896][T10601] xt_hashlimit: invalid rate
[  290.973948][T10605] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  291.588439][T10635] netlink: 'syz.1.1421': attribute type 4 has an invalid length.
[  291.836330][T10648] netlink: 'syz.3.1426': attribute type 1 has an invalid length.
[  292.176810][T10656] bridge_slave_1: left allmulticast mode
[  292.195749][T10656] bridge_slave_1: left promiscuous mode
[  292.221840][T10656] bridge0: port 2(bridge_slave_1) entered disabled state
[  292.569685][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[  292.630038][T10656] bridge1: port 1(bridge_slave_1) entered blocking state
[  292.643493][T10656] bridge1: port 1(bridge_slave_1) entered disabled state
[  292.652136][T10656] bridge_slave_1: entered allmulticast mode
[  292.670039][T10656] bridge_slave_1: entered promiscuous mode
[  292.678531][T10656] bridge1: port 1(bridge_slave_1) entered blocking state
[  292.685728][T10656] bridge1: port 1(bridge_slave_1) entered forwarding state
[  292.695663][T10661] bridge1: port 2(veth1_to_bond) entered blocking state
[  292.704067][T10661] bridge1: port 2(veth1_to_bond) entered disabled state
[  292.711929][T10661] veth1_to_bond: entered allmulticast mode
[  292.722098][T10661] veth1_to_bond: entered promiscuous mode
[  292.735656][T10661] bridge1: port 2(veth1_to_bond) entered blocking state
[  292.742818][T10661] bridge1: port 2(veth1_to_bond) entered forwarding state
[  292.938625][T10679] netlink: 'syz.1.1434': attribute type 4 has an invalid length.
[  292.981861][T10686] __nla_validate_parse: 15 callbacks suppressed
[  292.981880][T10686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1437'.
[  293.039228][T10687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1436'.
[  293.259308][T10702] @�: renamed from veth0_vlan (while UP)
[  293.320639][T10704] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  293.327933][T10706] netlink: 'syz.3.1441': attribute type 1 has an invalid length.
[  293.338874][T10707] netlink: 'syz.0.1440': attribute type 4 has an invalid length.
[  293.358499][T10704] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  293.369285][T10707] netlink: 'syz.0.1440': attribute type 4 has an invalid length.
[  293.391709][T10706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1441'.
[  293.441782][T10710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1441'.
[  293.532060][T10713] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1444'.
[  293.729283][T10717] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1446'.
[  293.769773][T10717] netlink: 'syz.1.1446': attribute type 8 has an invalid length.
[  293.908884][T10727] xt_connbytes: Forcing CT accounting to be enabled
[  293.934014][T10728] netlink: 'syz.2.1449': attribute type 4 has an invalid length.
[  294.144997][T10733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1450'.
[  294.281678][T10737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1452'.
[  294.374793][T10738] IPVS: Scheduler module ip_vs_sip not found
[  294.564258][T10745] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1455'.
[  294.701620][T10751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1456'.
[  295.306067][T10778] IPVS: Scheduler module ip_vs_sip not found
[  295.642814][T10799] netlink: 'syz.2.1475': attribute type 1 has an invalid length.
[  296.516728][T10824] macvlan2: entered allmulticast mode
[  296.541595][T10824] team_slave_0: entered promiscuous mode
[  296.547469][T10824] team_slave_1: entered promiscuous mode
[  296.584312][T10824] team0: entered allmulticast mode
[  296.589727][T10824] team_slave_0: entered allmulticast mode
[  296.595699][T10824] team_slave_1: entered allmulticast mode
[  296.603401][T10824] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  296.613807][T10824] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[  296.632752][T10828] netlink: 'syz.2.1485': attribute type 4 has an invalid length.
[  297.146312][T10843] lo speed is unknown, defaulting to 1000
[  298.132885][T10868] netlink: 'syz.2.1500': attribute type 4 has an invalid length.
[  298.157767][T10868] __nla_validate_parse: 15 callbacks suppressed
[  298.157788][T10868] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1500'.
[  298.378608][T10873] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1502'.
[  298.459849][T10873] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1502'.
[  298.820366][T10886] netlink: 'syz.2.1503': attribute type 1 has an invalid length.
[  298.867568][T10886] netlink: 'syz.2.1503': attribute type 2 has an invalid length.
[  298.913824][T10886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1503'.
[  299.341733][T10895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1508'.
[  299.493609][T10904] netlink: 'syz.2.1510': attribute type 3 has an invalid length.
[  299.513629][T10904] netlink: 'syz.2.1510': attribute type 3 has an invalid length.
[  299.609752][T10904] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1510'.
[  299.837632][T10915] netlink: 'syz.2.1512': attribute type 4 has an invalid length.
[  299.845630][T10915] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1512'.
[  300.271097][T10928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1515'.
[  300.357023][T10930] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1518'.
[  300.382686][T10930] 0�X��D��: renamed from gretap0 (while UP)
[  300.451589][T10930] 0�X��D��: entered allmulticast mode
[  300.697066][T10939] siw: device registration error -23
[  300.781091][T10939] syz.2.1520 (10939) used obsolete PPPIOCDETACH ioctl
[  300.842803][T10945] netlink: 'syz.3.1522': attribute type 1 has an invalid length.
[  300.871861][T10945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1522'.
[  301.057124][T10949] IPVS: length: 215 != 6168
[  301.185943][T10952] netlink: 'syz.1.1524': attribute type 4 has an invalid length.
[  302.091775][T10980] netlink: 'syz.4.1535': attribute type 1 has an invalid length.
[  302.274944][T10982] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  302.282174][T10982] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  302.438406][T10990] netlink: 'syz.4.1537': attribute type 4 has an invalid length.
[  302.900068][T11003] netlink: 'syz.4.1542': attribute type 11 has an invalid length.
[  303.294753][T11019] __nla_validate_parse: 10 callbacks suppressed
[  303.294773][T11019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1546'.
[  303.488867][T11022] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  303.559954][T11022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1548'.
[  304.163495][T11034] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1553'.
[  304.309125][T11039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1554'.
[  304.690136][T11047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1557'.
[  304.847065][T11060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  304.919003][T11060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  304.920279][T11048] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1558'.
[  305.196352][T11065] IPVS: Scheduler module ip_vs_sip not found
[  305.220815][T11073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1564'.
[  305.266150][T11074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1565'.
[  305.401559][T11077] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.430834][T11077] bridge_slave_0: left allmulticast mode
[  305.442517][T11077] bridge_slave_0: left promiscuous mode
[  305.449371][T11077] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.671598][T11079] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1567'.
[  305.686889][T11079] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1567'.
[  306.413929][T11106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  306.511176][T11106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  306.740780][T11115] IPVS: Scheduler module ip_vs_sip not found
[  307.450981][T11129] netlink: 'syz.3.1586': attribute type 1 has an invalid length.
[  307.515032][T11135] pim6reg: entered allmulticast mode
[  307.745241][T11150] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  307.755069][T11150] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  307.910324][T11160] tipc: Failed to remove unknown binding: 66,1,1/0:700869631/700869633
[  307.923104][T11160] tipc: Failed to remove unknown binding: 66,1,1/0:700869631/700869633
[  307.932160][    C1] bridge0: port 2(bridge_slave_1) entered forwarding state
[  308.142470][T11170] tun0: tun_chr_ioctl cmd 2148553947
[  308.672555][T11177] __nla_validate_parse: 11 callbacks suppressed
[  308.672574][T11177] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1603'.
[  308.796684][T11181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1604'.
[  309.340034][T11201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1610'.
[  309.360177][T11199] netlink: 'syz.2.1609': attribute type 2 has an invalid length.
[  309.368841][ T5241] Bluetooth: hci3: command 0x0406 tx timeout
[  309.375090][ T5241] Bluetooth: hci5: command 0x040f tx timeout
[  309.486849][T11210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1613'.
[  309.680556][T11220] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1617'.
[  309.711822][T11220] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1617'.
[  309.792503][T11225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1616'.
[  310.025781][T11232] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1618'.
[  312.206111][T11221] pim6reg1: entered promiscuous mode
[  312.211652][T11221] pim6reg1: entered allmulticast mode
[  312.266858][T11232] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1618'.
[  312.325701][T11236] lo speed is unknown, defaulting to 1000
[  312.549270][T11256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1621'.
[  312.800992][T11265] netlink: 'syz.3.1625': attribute type 1 has an invalid length.
[  313.472947][T11274] netlink: 'syz.4.1628': attribute type 4 has an invalid length.
[  313.579716][T11282] x_tables: duplicate underflow at hook 3
[  313.865182][T11291] __nla_validate_parse: 2 callbacks suppressed
[  313.865202][T11291] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1634'.
[  313.869968][T11288] lo speed is unknown, defaulting to 1000
[  313.891350][T11291] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1634'.
[  313.904879][T11293] sctp: [Deprecated]: syz.1.1632 (pid 11293) Use of int in max_burst socket option deprecated.
[  313.904879][T11293] Use struct sctp_assoc_value instead
[  313.984968][T11293] netlink: 'syz.1.1632': attribute type 1 has an invalid length.
[  314.027448][T11293] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1632'.
[  314.075517][T11301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1633'.
[  314.137290][T11301] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1633'.
[  314.346046][T11292] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1633'.
[  314.514114][T11317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1639'.
[  314.769374][T11321] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1641'.
[  314.959016][T11326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1642'.
[  315.438746][T11334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1644'.
[  315.554474][T11336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  315.652253][T11336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  315.669612][T11340] team0: entered promiscuous mode
[  315.674694][T11340] bond0: entered promiscuous mode
[  315.781785][T11345] netlink: 'syz.1.1648': attribute type 4 has an invalid length.
[  316.129020][T11338] team0: left promiscuous mode
[  316.141818][T11338] bond0: left promiscuous mode
[  316.335329][T11360] netlink: 'syz.0.1652': attribute type 4 has an invalid length.
[  316.487689][ T4620] Bluetooth: hci11: command 0x0405 tx timeout
[  316.700156][T11367] netlink: 'syz.1.1654': attribute type 1 has an invalid length.
[  317.260602][T11381] IPVS: Scheduler module ip_vs_sip not found
[  317.596875][T11395] netlink: 'syz.2.1664': attribute type 4 has an invalid length.
[  318.000298][T11410] netlink: 'syz.0.1668': attribute type 1 has an invalid length.
[  318.311401][T11423] netlink: 'syz.0.1672': attribute type 4 has an invalid length.
[  318.850275][T11446] bridge0: port 2(bridge_slave_1) entered disabled state
[  318.857936][T11446] bridge0: port 1(bridge_slave_0) entered disabled state
[  318.952294][T11447] bridge_slave_1: left allmulticast mode
[  318.975004][T11447] bridge_slave_1: left promiscuous mode
[  318.987801][T11447] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.016500][T11447] bridge_slave_0: left allmulticast mode
[  319.025561][T11447] bridge_slave_0: left promiscuous mode
[  319.031786][T11447] bridge0: port 1(bridge_slave_0) entered disabled state
[  319.069905][T11454] __nla_validate_parse: 13 callbacks suppressed
[  319.069925][T11454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1680'.
[  319.286264][T11460] IPVS: Scheduler module ip_vs_sip not found
[  319.352751][T11465] netlink: 'syz.4.1684': attribute type 4 has an invalid length.
[  319.391435][T11468] netlink: 'syz.0.1685': attribute type 4 has an invalid length.
[  319.522312][T11470] netlink: 'syz.0.1686': attribute type 4 has an invalid length.
[  320.021082][T11495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1691'.
[  320.101962][T11498] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1693'.
[  320.775730][T11511] netlink: 'syz.4.1697': attribute type 4 has an invalid length.
[  320.800951][T11517] netlink: 'syz.0.1696': attribute type 4 has an invalid length.
[  320.835500][T11522] netlink: 'syz.3.1699': attribute type 4 has an invalid length.
[  321.238920][T11536] IPVS: Scheduler module ip_vs_sip not found
[  321.303654][T11540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1705'.
[  321.758562][T11560] netlink: 'syz.2.1710': attribute type 4 has an invalid length.
[  321.777852][T11560] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1710'.
[  321.921406][T11564] netlink: 'syz.4.1711': attribute type 4 has an invalid length.
[  322.248730][T11582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1714'.
[  322.276874][T11586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1716'.
[  322.465606][T11593] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1719'.
[  322.482448][T11593] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1719'.
[  322.750251][T11597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1720'.
[  322.886509][T11596] IPVS: Scheduler module ip_vs_sip not found
[  323.198133][T11617] validate_nla: 1 callbacks suppressed
[  323.198153][T11617] netlink: 'syz.4.1726': attribute type 4 has an invalid length.
[  324.572993][T11669] IPVS: Scheduler module ip_vs_sip not found
[  324.759342][T11679] __nla_validate_parse: 5 callbacks suppressed
[  324.759362][T11679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1747'.
[  324.802850][T11683] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1749'.
[  324.851592][T11682] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1748'.
[  324.856681][T11683] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1749'.
[  325.042403][T11691] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1752'.
[  325.079066][T11691] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1752'.
[  325.141976][T11696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1751'.
[  325.299498][T11698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1754'.
[  325.405215][T11702] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1756'.
[  325.466316][T11702] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1756'.
[  325.657075][T11714] netlink: 'syz.3.1760': attribute type 4 has an invalid length.
[  325.777779][T11713] IPVS: Scheduler module ip_vs_sip not found
[  327.080360][T11768] netlink: 'syz.2.1776': attribute type 4 has an invalid length.
[  328.201282][T11791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  329.362759][T11875] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  329.794611][T11899] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT
[  329.817569][T11903] __nla_validate_parse: 16 callbacks suppressed
[  329.817589][T11903] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1811'.
[  329.881906][T11907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1810'.
[  330.039217][T11915] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1814'.
[  330.059773][T11915] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1814'.
[  330.438308][T11931] netlink: 'syz.1.1820': attribute type 4 has an invalid length.
[  330.720006][T11945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1822'.
[  330.754547][T11948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1823'.
[  330.925678][T11951] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1827'.
[  330.959619][T11952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1825'.
[  330.971111][T11951] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1827'.
[  331.034000][T11954] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1826'.
[  331.353074][T11967] netlink: 'syz.1.1833': attribute type 4 has an invalid length.
[  332.547707][T12019] netlink: 'syz.0.1847': attribute type 4 has an invalid length.
[  334.049916][T12080] netlink: 'syz.3.1864': attribute type 4 has an invalid length.
[  334.068492][T12086] netlink: 'syz.0.1863': attribute type 4 has an invalid length.
[  334.150046][T12089] lo speed is unknown, defaulting to 1000
[  334.991282][T12113] __nla_validate_parse: 18 callbacks suppressed
[  334.991303][T12113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1869'.
[  335.059297][T12115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1871'.
[  335.160739][T12118] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1873'.
[  335.744395][T12134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1875'.
[  335.980341][T12141] netlink: 'syz.1.1878': attribute type 4 has an invalid length.
[  336.162479][T12147] netlink: 'syz.3.1880': attribute type 64 has an invalid length.
[  336.289766][T12152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1881'.
[  336.360989][T12154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1882'.
[  336.771398][T12166] IPVS: Scheduler module ip_vs_sip not found
[  336.783574][T12169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1884'.
[  336.817671][T12170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1886'.
[  337.373146][T12189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1891'.
[  337.715999][T12198] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1894'.
[  337.751565][T12192] netlink: 'syz.1.1892': attribute type 4 has an invalid length.
[  338.095955][T12217] rdma_rxe: rxe_newlink: failed to add lo
[  338.933226][T12241] netlink: 'syz.2.1905': attribute type 1 has an invalid length.
[  339.791590][T12281] bond0: entered promiscuous mode
[  339.815689][T12285] bond0: left promiscuous mode
[  340.086630][T12298] __nla_validate_parse: 11 callbacks suppressed
[  340.086649][T12298] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1922'.
[  340.104169][T12299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1918'.
[  340.146810][T12298] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1922'.
[  340.153373][T12300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1921'.
[  340.245972][T12304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1920'.
[  340.445631][T12301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1919'.
[  340.461354][T12301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1919'.
[  340.839024][T12312] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1925'.
[  340.924859][T12312] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1925'.
[  341.426219][T12347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1931'.
[  342.856402][T12394] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes.
[  342.873547][T12396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  343.067217][T12409] netlink: 'syz.0.1950': attribute type 4 has an invalid length.
[  343.112209][T12396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  343.911886][T12442] netpci0: tun_chr_ioctl cmd 2148553947
[  343.940535][T12442] veth1_macvtap: left promiscuous mode
[  343.950004][T12442] macsec0: entered allmulticast mode
[  343.975596][T12438] IPVS: Scheduler module ip_vs_sip not found
[  344.009774][T12442] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  344.250994][T12451] netlink: 'syz.3.1961': attribute type 12 has an invalid length.
[  344.316507][T12455] netlink: 'syz.2.1963': attribute type 4 has an invalid length.
[  344.793164][T12472] lo speed is unknown, defaulting to 1000
[  345.677195][T12506] __nla_validate_parse: 14 callbacks suppressed
[  345.677220][T12506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1974'.
[  345.768628][T12508] openvswitch: netlink: Duplicate key (type 0).
[  346.426902][T12520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1978'.
[  346.538276][T12526] netlink: 'syz.0.1979': attribute type 4 has an invalid length.
[  346.678261][T12528] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1980'.
[  346.761356][T12528] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1980'.
[  347.049237][T12547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1983'.
[  347.811635][T12576] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1992'.
[  348.077005][T12585] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1995'.
[  348.094204][T12585] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1995'.
[  348.294660][T12588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1997'.
[  348.445099][T12594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1996'.
[  349.625765][T12647] netlink: 'syz.0.2007': attribute type 10 has an invalid length.
[  349.890143][T12647] team0: Port device team_slave_0 removed
[  350.329163][ T5231] Bluetooth: hci8: command 0x0405 tx timeout
[  350.555771][T12691] netlink: 'syz.4.2015': attribute type 4 has an invalid length.
[  350.795316][T12710] __nla_validate_parse: 2 callbacks suppressed
[  350.795336][T12710] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2018'.
[  350.864253][T12710] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2018'.
[  351.034947][T12723] netlink: 'syz.0.2019': attribute type 3 has an invalid length.
[  351.055024][T12723] netlink: 'syz.0.2019': attribute type 3 has an invalid length.
[  351.261970][T12729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2022'.
[  351.311257][T12731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2023'.
[  351.545880][T12743] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2025'.
[  351.551419][T12741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2024'.
[  351.981011][T12753] netlink: 'syz.0.2028': attribute type 4 has an invalid length.
[  352.283910][T12773] xt_CT: You must specify a L4 protocol and not use inversions on it
[  352.425931][T12768] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2032'.
[  352.751999][T12788] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2035'.
[  352.802647][T12789] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2039'.
[  352.885056][T12795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2040'.
[  352.978058][T12784] netlink: 'syz.3.2037': attribute type 4 has an invalid length.
[  353.978638][T12840] batman_adv: batadv2: Adding interface: netdevsim0
[  353.992729][T12840] batman_adv: batadv2: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  354.116045][T12840] batman_adv: batadv2: Interface activated: netdevsim0
[  354.364460][T12840] batman_adv: batadv2: Interface deactivated: netdevsim0
[  354.376395][T12840] batman_adv: batadv2: Removing interface: netdevsim0
[  354.447652][T12862] netlink: 'syz.3.2055': attribute type 4 has an invalid length.
[  354.651692][T12864] netlink: 'syz.0.2057': attribute type 10 has an invalid length.
[  354.759612][T12864] team0: Port device netdevsim0 added
[  354.801593][T12869] lo speed is unknown, defaulting to 1000
[  355.454463][ T4620] Bluetooth: hci9: command 0x041b tx timeout
[  355.778664][T12905] lo speed is unknown, defaulting to 1000
[  356.593310][T12924] __nla_validate_parse: 10 callbacks suppressed
[  356.593333][T12924] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2072'.
[  356.680666][T12924] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2072'.
[  356.728556][T12924] tipc: Invalid UDP bearer configuration
[  356.728613][T12924] tipc: Enabling of bearer <udp:sy{�> rejected, failed to enable media
[  356.803438][T12935] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2074'.
[  356.888728][T12935] xt_CT: You must specify a L4 protocol and not use inversions on it
[  357.042103][T12943] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2076'.
[  357.055507][T12945] IPVS: set_ctl: invalid protocol: 33 100.1.1.2:20004
[  357.236537][T12953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2079'.
[  357.380396][T12949] netlink: 'syz.3.2080': attribute type 4 has an invalid length.
[  357.396094][T12949] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2080'.
[  357.406675][T12943] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2076'.
[  357.660809][T12960] netlink: 'syz.1.2083': attribute type 309 has an invalid length.
[  357.978537][T12974] macsec0: entered promiscuous mode
[  357.984903][T12974] macsec1: entered promiscuous mode
[  358.600830][T13001] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2090'.
[  358.680747][T13001] xt_CT: You must specify a L4 protocol and not use inversions on it
[  358.901335][T13008] netlink: 'syz.0.2094': attribute type 4 has an invalid length.
[  358.945133][T13008] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2094'.
[  359.098868][T13016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2093'.
[  359.568961][T13038] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8
[  359.921123][T13058] netlink: 'syz.0.2106': attribute type 4 has an invalid length.
[  360.398959][    C0] IPv4: Oversized IP packet from 127.0.0.1
[  361.450772][T13096] netlink: 'syz.2.2114': attribute type 4 has an invalid length.
[  361.734089][T13113] __nla_validate_parse: 7 callbacks suppressed
[  361.734109][T13113] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2120'.
[  361.781081][T13112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2119'.
[  361.803581][T13113] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2120'.
[  361.970113][T13122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2121'.
[  362.081403][T13117] netlink: 'syz.1.2122': attribute type 10 has an invalid length.
[  362.121763][T13127] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2123'.
[  362.196417][T13117] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  362.219373][T13117] team0: Port device netdevsim0 added
[  362.234500][T13127] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2123'.
[  362.545991][T13143] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2128'.
[  362.641387][T13147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2127'.
[  363.175263][T13158] smc: net device lo applied user defined pnetid SYZ2
[  363.388095][T13165] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2134'.
[  363.475956][T13165] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2134'.
[  364.570123][T13199] sch_fq: defrate 0 ignored.
[  364.983735][T13218] pim6reg: entered allmulticast mode
[  365.377189][T13240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  365.402258][T13243] netlink: 'syz.0.2159': attribute type 8 has an invalid length.
[  365.453814][T13240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  366.830019][T13294] __nla_validate_parse: 16 callbacks suppressed
[  366.830040][T13294] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2173'.
[  366.909437][T13294] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2173'.
[  366.928813][T13300] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2174'.
[  367.041918][T13300] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2174'.
[  367.098940][T13302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  367.173485][T13304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  367.219672][T13302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  367.304004][T13308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2178'.
[  367.730682][T13328] netlink: 'syz.3.2181': attribute type 309 has an invalid length.
[  367.793387][T13328] macsec0: entered promiscuous mode
[  367.811539][T13328] macsec2: entered promiscuous mode
[  368.289051][T13346] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2188'.
[  368.319705][T13346] netlink: 19 bytes leftover after parsing attributes in process `syz.3.2188'.
[  368.744482][T13362] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2191'.
[  369.098593][T13366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2194'.
[  369.532353][T13385] netlink: 'syz.4.2200': attribute type 309 has an invalid length.
[  369.594178][T13387] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2201'.
[  369.617353][T13387] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8
[  370.071865][T13407] team0: entered promiscuous mode
[  370.076956][T13407] team_slave_1: entered promiscuous mode
[  370.093443][T13407] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  370.652626][T13406] team0: left promiscuous mode
[  370.679682][T13406] team_slave_1: left promiscuous mode
[  370.696745][T13406] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  370.808577][ T4620] Bluetooth: hci10: command 0x0406 tx timeout
[  371.242500][T13431] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  371.266622][T13442] netlink: 'syz.4.2215': attribute type 4 has an invalid length.
[  371.296015][T13442] netlink: 'syz.4.2215': attribute type 4 has an invalid length.
[  371.580684][T13446] lo speed is unknown, defaulting to 1000
[  371.698051][T13449] IPVS: Scheduler module ip_vs_sip not found
[  372.023471][T13458] __nla_validate_parse: 8 callbacks suppressed
[  372.023494][T13458] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2222'.
[  372.712597][T13473] team0: entered promiscuous mode
[  372.730253][T13473] team_slave_0: entered promiscuous mode
[  372.740411][T13473] team_slave_1: entered promiscuous mode
[  372.785959][T13475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2228'.
[  373.200168][T13481] smc: net device lo applied user defined pnetid SYZ2
[  373.308906][T13486] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2230'.
[  373.428361][T13472] team0: left promiscuous mode
[  373.442449][T13472] team_slave_0: left promiscuous mode
[  373.456632][T13472] team_slave_1: left promiscuous mode
[  373.531522][T13494] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2233'.
[  373.602246][T13494] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2233'.
[  374.042488][T13517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2235'.
[  374.225514][T13522] IPVS: Scheduler module ip_vs_sip not found
[  374.431035][T13533] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2240'.
[  374.521445][T13537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2242'.
[  374.685985][T13542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2243'.
[  374.743969][T13544] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2242'.
[  374.825031][T13549] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  374.968810][T13554] netlink: 'syz.4.2245': attribute type 4 has an invalid length.
[  375.527157][T13573] IPVS: Scheduler module ip_vs_sip not found
[  376.572024][T13613] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  376.686862][T13613] team0: Port device netdevsim0 removed
[  376.706280][T13613] batman_adv: batadv0: Adding interface: netdevsim0
[  376.723117][T13613] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  376.793950][T13613] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  376.857543][T13613] batman_adv: batadv0: Removing interface: netdevsim0
[  377.099557][T13636] __nla_validate_parse: 10 callbacks suppressed
[  377.099580][T13636] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2266'.
[  377.160024][T13636] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2266'.
[  377.428634][T13646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2269'.
[  377.449119][T13648] IPVS: Scheduler module ip_vs_sip not found
[  377.491975][T13653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2271'.
[  377.658792][T13663] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2274'.
[  377.702146][T13663] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2274'.
[  378.042764][T13675] netlink: 'syz.4.2277': attribute type 21 has an invalid length.
[  378.070411][T13675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2277'.
[  378.739769][T13699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2283'.
[  378.777291][T13702] netlink: 'syz.3.2284': attribute type 10 has an invalid length.
[  378.883006][T13702] team0: Port device netdevsim0 added
[  378.917888][T13711] netlink: 'syz.1.2287': attribute type 2 has an invalid length.
[  378.966563][T13708] siw: device registration error -23
[  379.089668][T13717] netlink: 'syz.4.2288': attribute type 4 has an invalid length.
[  379.437156][T13728] IPVS: Scheduler module ip_vs_sip not found
[  379.468544][T13725] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2290'.
[  379.893141][T13748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2296'.
[  380.423752][T13773] netlink: 'syz.2.2302': attribute type 4 has an invalid length.
[  381.002028][T13791] tipc: Started in network mode
[  381.044067][T13791] tipc: Node identity 1, cluster identity 7
[  381.060030][T13791] tipc: Node number set to 1
[  381.129196][T13796] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  381.228337][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  381.266448][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  381.523523][T13805] netlink: 'syz.0.2315': attribute type 4 has an invalid length.
[  381.589329][T13805] pim6reg0: tun_chr_ioctl cmd 1074025677
[  381.605554][T13805] pim6reg0: linktype set to 805
[  381.664585][T13805] netlink: 'syz.0.2315': attribute type 38 has an invalid length.
[  381.711531][T13805] pim6reg0: tun_chr_ioctl cmd 1074025694
[  381.721724][T13805] pim6reg0: tun_chr_ioctl cmd 1074066701
[  382.239827][T13829] __nla_validate_parse: 15 callbacks suppressed
[  382.239848][T13829] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2322'.
[  382.242557][T13825] netlink: 'syz.2.2320': attribute type 4 has an invalid length.
[  382.269815][T13830] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2321'.
[  382.291296][T13830] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2321'.
[  382.417660][T13829] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2322'.
[  382.616895][T13836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2324'.
[  382.780142][T13852] tipc: Started in network mode
[  382.801380][T13852] tipc: Node identity 1, cluster identity 7
[  382.835239][T13852] tipc: Node number set to 1
[  382.896488][T13855] netlink: 'syz.0.2326': attribute type 64 has an invalid length.
[  382.913147][T13856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2329'.
[  383.131628][T13865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2330'.
[  383.253468][T13869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2331'.
[  383.756710][T13881] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2336'.
[  383.798257][T13881] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2336'.
[  384.310701][T13891] rdma_rxe: rxe_newlink: failed to add lo
[  385.499596][T13935] xt_policy: neither incoming nor outgoing policy selected
[  387.651612][T14025] pimreg: entered allmulticast mode
[  388.010446][T14044] __nla_validate_parse: 20 callbacks suppressed
[  388.010466][T14044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2376'.
[  388.053176][T14047] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2378'.
[  388.066217][T14047] netlink: 19 bytes leftover after parsing attributes in process `syz.3.2378'.
[  388.218797][T14049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2377'.
[  388.459530][T14051] netlink: 'syz.1.2379': attribute type 12 has an invalid length.
[  388.468213][T14053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2380'.
[  388.497146][T14051] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.2379'.
[  388.940040][T14075] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2387'.
[  388.995265][T14075] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2387'.
[  389.204050][T14084] IPVS: Scheduler module ip_vs_sip not found
[  389.210727][T14088] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2389'.
[  389.238110][T14088] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2389'.
[  390.776224][T14147] netlink: 'syz.4.2404': attribute type 23 has an invalid length.
[  391.481092][T14165] IPVS: Scheduler module ip_vs_sip not found
[  391.672967][T14177] lo speed is unknown, defaulting to 1000
[  392.752995][T14215] netlink: 'syz.4.2419': attribute type 12 has an invalid length.
[  393.389614][T14230] tun0: tun_chr_ioctl cmd 1074025675
[  393.394975][T14230] tun0: persist disabled
[  393.409613][T14232] __nla_validate_parse: 18 callbacks suppressed
[  393.409632][T14232] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2424'.
[  393.483775][T14232] netlink: 19 bytes leftover after parsing attributes in process `syz.3.2424'.
[  393.504234][T14234] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2425'.
[  393.580445][T14234] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2425'.
[  393.782096][T14239] IPVS: Scheduler module ip_vs_sip not found
[  393.821903][T14251] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2429'.
[  393.883366][T14251] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2429'.
[  394.164540][T14268] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2433'.
[  394.192752][T14268] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2433'.
[  394.214202][T14268] netlink: 'syz.3.2433': attribute type 6 has an invalid length.
[  394.247699][T14268] netlink: 'syz.3.2433': attribute type 5 has an invalid length.
[  394.290496][T14268] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2433'.
[  394.291649][T14270] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2433'.
[  394.505282][T14272] lo speed is unknown, defaulting to 1000
[  395.724338][T14322] IPVS: Scheduler module ip_vs_sip not found
[  396.037891][T14332] netlink: 'syz.0.2449': attribute type 4 has an invalid length.
[  396.834223][T14370] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[  397.180197][T14383] lo speed is unknown, defaulting to 1000
[  397.268309][T14388] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  398.372732][T14420] lo speed is unknown, defaulting to 1000
[  398.974529][T14442] __nla_validate_parse: 27 callbacks suppressed
[  398.974550][T14442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2475'.
[  399.036262][T14444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2476'.
[  399.518432][T14452] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2479'.
[  399.625858][T14460] netlink: 'syz.0.2478': attribute type 12 has an invalid length.
[  399.654426][T14452] netlink: 19 bytes leftover after parsing attributes in process `syz.3.2479'.
[  399.655443][T14460] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.2478'.
[  399.702266][T14466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2480'.
[  399.898341][T14469] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2482'.
[  399.926208][T14469] netlink: 19 bytes leftover after parsing attributes in process `syz.3.2482'.
[  400.084450][T14472] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2483'.
[  400.108945][T14472] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2483'.
[  400.377992][T14478] netlink: 'syz.1.2486': attribute type 32 has an invalid length.
[  401.454572][T14516] cannot load conntrack support for proto=3
[  401.563468][T14516] lo speed is unknown, defaulting to 1000
[  402.220552][T14513] dccp_close: ABORT with 329 bytes unread
[  402.953043][T14564] lo speed is unknown, defaulting to 1000
[  403.458842][T14583] netlink: 'syz.3.2511': attribute type 23 has an invalid length.
[  403.769790][T14598] netlink: 'syz.4.2512': attribute type 1 has an invalid length.
[  403.992542][T14605] netlink: 'syz.0.2514': attribute type 33 has an invalid length.
[  404.019574][T14605] __nla_validate_parse: 18 callbacks suppressed
[  404.019596][T14605] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2514'.
[  404.292344][T14621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2515'.
[  404.698599][T14635] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2519'.
[  404.744950][T14632] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2518'.
[  404.755917][T14635] netlink: 19 bytes leftover after parsing attributes in process `syz.3.2519'.
[  404.839123][T14642] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2517'.
[  405.040291][T14649] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2521'.
[  405.131399][T14653] netlink: 54 bytes leftover after parsing attributes in process `syz.0.2523'.
[  405.309712][T14663] netlink: 'syz.2.2524': attribute type 23 has an invalid length.
[  405.601062][T14664] lo speed is unknown, defaulting to 1000
[  406.114340][T14695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2528'.
[  406.322427][T14705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2530'.
[  406.841810][T14722] lo speed is unknown, defaulting to 1000
[  407.276113][T14727] 0�: renamed from hsr0 (while UP)
[  407.300195][T14727] 0�: entered allmulticast mode
[  407.337952][T14727] hsr_slave_0: entered allmulticast mode
[  407.379453][T14727] hsr_slave_1: entered allmulticast mode
[  407.396399][T14727] A link change request failed with some changes committed already. Interface 70� may have been left with an inconsistent configuration, please check.
[  407.444439][T14736] lo speed is unknown, defaulting to 1000
[  410.910004][T14798] __nla_validate_parse: 4 callbacks suppressed
[  410.910024][T14798] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2543'.
[  411.007518][T14798] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2543'.
[  411.208739][T14804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2544'.
[  411.338630][T14806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2545'.
[  411.834297][T14813] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2546'.
[  412.271004][T14821] ebtables: ebtables: counters copy to user failed while replacing table
[  412.884292][T14861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2555'.
[  412.954597][T14865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2559'.
[  412.980061][T14864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2558'.
[  413.317803][T14873] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2562'.
[  413.546994][T14878] syzkaller1: entered promiscuous mode
[  413.553169][T14878] syzkaller1: entered allmulticast mode
[  413.575754][T14878] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  413.611783][T14878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2564'.
[  414.766178][T14916] IPVS: Scheduler module ip_vs_sip not found
[  415.613038][ T5231] Bluetooth: hci0: command tx timeout
[  415.757786][T14952] syz.2.2589 (14952) used greatest stack depth: 18776 bytes left
[  415.944925][T14957] __nla_validate_parse: 13 callbacks suppressed
[  415.944944][T14957] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2591'.
[  416.003183][T14959] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2592'.
[  416.051992][T14959] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2592'.
[  416.109730][T14964] netlink: 'syz.1.2593': attribute type 4 has an invalid length.
[  416.196771][T14966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2595'.
[  416.409079][T14973] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2598'.
[  416.437797][T14973] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8
[  416.505947][T14981] netlink: 'syz.2.2600': attribute type 4 has an invalid length.
[  416.582282][T14984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2601'.
[  416.695591][T14986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2603'.
[  416.758366][T14992] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2605'.
[  416.785041][T14992] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2605'.
[  416.842663][T14995] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2606'.
[  417.091716][T15002] netlink: 'syz.1.2608': attribute type 4 has an invalid length.
[  417.532027][T15016] netdevsim netdevsim4 netdevsim0: Unsupported IPsec algorithm
[  417.555754][T15016] tls_set_device_offload: netdev not found
[  417.619792][T15025] netlink: 'syz.0.2615': attribute type 4 has an invalid length.
[  418.049189][T15040] netlink: 'syz.3.2620': attribute type 1 has an invalid length.
[  418.185048][T15043] netlink: 'syz.0.2621': attribute type 4 has an invalid length.
[  418.684236][T15056] batadv0: entered promiscuous mode
[  419.298659][T15086] netlink: 'syz.2.2634': attribute type 4 has an invalid length.
[  419.362925][T15090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  419.925729][ T6347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  419.953487][ T6347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  419.985119][T15117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  419.996205][T15116] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  420.005187][T15116] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  420.014274][T15116] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  420.023299][T15116] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  420.055767][T15117] sctp: [Deprecated]: syz.2.2643 (pid 15117) Use of int in maxseg socket option.
[  420.055767][T15117] Use struct sctp_assoc_value instead
[  420.076966][T15116] vxlan0: entered promiscuous mode
[  420.702730][T15138] xt_CT: You must specify a L4 protocol and not use inversions on it
[  420.789510][T15135] geneve2: entered promiscuous mode
[  420.794783][T15135] geneve2: entered allmulticast mode
[  420.992101][T15150] __nla_validate_parse: 23 callbacks suppressed
[  420.992120][T15150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2652'.
[  421.073193][T15146] netlink: 'syz.1.2653': attribute type 4 has an invalid length.
[  421.089158][T15154] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2654'.
[  421.215106][T15155] lo speed is unknown, defaulting to 1000
[  421.250006][T15161] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2659'.
[  421.288537][T15158] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2656'.
[  421.339093][T15161] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2659'.
[  421.381281][T15169] netlink: 'syz.2.2656': attribute type 21 has an invalid length.
[  421.412471][T15169] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2656'.
[  421.710237][T15183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2660'.
[  421.744964][T15184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2661'.
[  422.168149][T15194] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2667'.
[  422.209366][T15197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2668'.
[  422.895957][T15223] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  424.072767][T15274] gre0: entered allmulticast mode
[  427.075845][T15313] __nla_validate_parse: 19 callbacks suppressed
[  427.075864][T15313] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2694'.
[  427.128610][T15324] bond0: (slave bond_slave_0): Releasing backup interface
[  427.404422][T15340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2697'.
[  427.544900][T15334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2700'.
[  427.564539][T15334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2700'.
[  427.811843][T15351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2703'.
[  428.006411][T15360] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2705'.
[  428.193561][T15357] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2705'.
[  428.400992][T15377] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2709'.
[  428.443959][T15377] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2709'.
[  428.515991][T15373] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2707'.
[  429.144594][T15401] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:0
[  429.157947][ T5275] IPVS: starting estimator thread 0...
[  429.278716][T15403] IPVS: using max 21 ests per chain, 50400 per kthread
[  431.376073][T15475] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ1
[  432.110673][T15498] netlink: 'syz.3.2740': attribute type 1 has an invalid length.
[  432.660640][T15511] __nla_validate_parse: 6 callbacks suppressed
[  432.660659][T15511] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2744'.
[  432.745953][T15515] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2744'.
[  433.020942][T15524] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2748'.
[  433.106173][T15531] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2747'.
[  433.829204][T15558] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2754'.
[  433.858629][T15558] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2754'.
[  433.941085][T15559] IPVS: Scheduler module ip_vs_sip not found
[  434.110026][T15567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2756'.
[  434.531483][T15574] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2760'.
[  434.570563][T15574] No such timeout policy "syz1"
[  435.070083][T15596] ipt_rpfilter: unknown options
[  435.350106][T15608] openvswitch: netlink: Unknown nsh attribute 0
[  435.364787][T15598] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2766'.
[  435.524925][T15613] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2769'.
[  436.488525][ T4620] Bluetooth: hci3: command 0x0406 tx timeout
[  436.494621][ T5231] Bluetooth: hci3: Opcode 0x1407 failed: -110
[  436.810310][T15660] xt_CT: No such helper "netbios-ns"
[  437.111756][T15675] IPVS: length: 215 != 24
[  437.408934][T15679] lo speed is unknown, defaulting to 1000
[  437.432426][T15686] netlink: 'syz.1.2785': attribute type 4 has an invalid length.
[  437.728790][T15694] netlink: 'syz.0.2783': attribute type 2 has an invalid length.
[  437.736570][T15694] __nla_validate_parse: 5 callbacks suppressed
[  437.736585][T15694] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2783'.
[  437.873938][T15702] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2788'.
[  437.892934][T15704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2787'.
[  437.919337][T15695] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20003
[  437.986712][T15680] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2782'.
[  438.056497][T15680] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2782'.
[  438.143673][T15702] netlink: 19 bytes leftover after parsing attributes in process `syz.3.2788'.
[  438.373839][T15711] netlink: 'syz.4.2789': attribute type 4 has an invalid length.
[  438.671021][T15718] xt_l2tp: v2 doesn't support IP mode
[  439.033367][T15734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2796'.
[  439.120050][T15734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2796'.
[  439.214780][T15734] ipvlan3: entered allmulticast mode
[  439.235365][T15734] veth0_vlan: entered allmulticast mode
[  439.615347][T15757] netlink: 'syz.3.2802': attribute type 4 has an invalid length.
[  439.657029][T15759] netlink: 'syz.1.2801': attribute type 21 has an invalid length.
[  439.666870][T15759] IPv6: NLM_F_CREATE should be specified when creating new route
[  439.675173][T15759] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  439.682549][T15759] IPv6: NLM_F_CREATE should be set when creating new route
[  439.689879][T15759] IPv6: NLM_F_CREATE should be set when creating new route
[  439.697108][T15759] IPv6: NLM_F_CREATE should be set when creating new route
[  439.911238][T15767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2804'.
[  440.129337][T15775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2805'.
[  440.149654][T15777] xt_l2tp: missing protocol rule (udp|l2tpip)
[  440.255064][T15779] netlink: 'syz.2.2807': attribute type 11 has an invalid length.
[  440.285329][T15779] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) !
[  440.569784][T15796] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  440.809573][T15801] netlink: 'syz.2.2814': attribute type 1 has an invalid length.
[  440.854033][T15801] pim6reg: entered allmulticast mode
[  440.925960][T15801] pim6reg: left allmulticast mode
[  441.040557][T15813] netlink: 'syz.0.2818': attribute type 5 has an invalid length.
[  441.101489][T15813] : entered promiscuous mode
[  441.824261][ T5279] IPVS: starting estimator thread 0...
[  441.865891][T15844] netlink: 'syz.4.2825': attribute type 2 has an invalid length.
[  441.886992][T15844] netlink: 'syz.4.2825': attribute type 1 has an invalid length.
[  441.947779][T15845] IPVS: using max 19 ests per chain, 45600 per kthread
[  442.007835][T15852] 8021q: adding VLAN 0 to HW filter on device bond0
[  442.991039][T15893] netlink: 'syz.4.2838': attribute type 4 has an invalid length.
[  443.009487][T15894] netlink: 'syz.2.2840': attribute type 2 has an invalid length.
[  443.027910][T15894] __nla_validate_parse: 10 callbacks suppressed
[  443.027931][T15894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2840'.
[  443.347065][T15901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2842'.
[  443.499182][T15901] syzkaller0: entered promiscuous mode
[  443.505117][T15901] syzkaller0: entered allmulticast mode
[  443.521657][T15907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2843'.
[  443.522397][T15904] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2843'.
[  443.543680][T15904] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2843'.
[  443.560014][T15911] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2844'.
[  443.573224][T15909] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2845'.
[  447.287723][T15942] netlink: 'syz.1.2852': attribute type 4 has an invalid length.
[  447.550701][T15950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2856'.
[  447.624828][T15962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2854'.
[  447.748600][T15967] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2859'.
[  447.802087][T15969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  447.833633][T15969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  448.086008][T15978] team0: left promiscuous mode
[  448.089536][T15971] netlink: 'syz.3.2861': attribute type 1 has an invalid length.
[  448.107412][T15978] team_slave_0: left promiscuous mode
[  448.112978][T15978] team_slave_1: left promiscuous mode
[  448.119192][T15978] macvlan2: left promiscuous mode
[  448.136433][T15978] macvlan3: left promiscuous mode
[  448.144048][T15978] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  448.474679][T15995] netlink: 'syz.3.2866': attribute type 1 has an invalid length.
[  448.710071][T16000] netlink: 'syz.0.2867': attribute type 4 has an invalid length.
[  448.794535][T16004] __nla_validate_parse: 1 callbacks suppressed
[  448.794555][T16004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2870'.
[  448.986779][T16013] Cannot find del_set index 2048 as target
[  448.998258][T16015] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2873'.
[  449.035986][T16015] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2873'.
[  449.139555][T16023] netlink: 4156 bytes leftover after parsing attributes in process `syz.2.2876'.
[  449.159041][T16020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2872'.
[  449.291015][T16023] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2876'.
[  449.321082][T16029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2878'.
[  449.346232][T16029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2878'.
[  449.469039][T16037] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2880'.
[  449.519561][T16037] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  449.531835][T16037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2880'.
[  450.102955][T16051] SET target dimension over the limit!
[  450.332898][T16060] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  450.365077][T16060] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  451.022587][T16089] netlink: 'syz.0.2897': attribute type 1 has an invalid length.
[  451.430840][T16102] netdevsim netdevsim0 netdevsim0: Unsupported IPsec algorithm
[  451.464164][T16102] tls_set_device_offload: netdev not found
[  451.486579][T16105] vlan2: entered promiscuous mode
[  451.492113][T16105] bridge0: entered promiscuous mode
[  451.555767][ T5231] Bluetooth: hci11: link tx timeout
[  451.562877][ T5231] Bluetooth: hci11: killing stalled connection 11:aa:aa:aa:aa:aa
[  451.576769][ T5231] Bluetooth: hci11: link tx timeout
[  451.585080][ T5231] Bluetooth: hci11: killing stalled connection 11:aa:aa:aa:aa:aa
[  451.614608][ T5231] Bluetooth: hci11: link tx timeout
[  451.620111][ T5231] Bluetooth: hci11: killing stalled connection 11:aa:aa:aa:aa:aa
[  451.629796][ T5231] Bluetooth: hci11: link tx timeout
[  451.635375][ T5231] Bluetooth: hci11: killing stalled connection 11:aa:aa:aa:aa:aa
[  451.643296][ T5231] Bluetooth: hci11: link tx timeout
[  451.648697][ T5231] Bluetooth: hci11: killing stalled connection 11:aa:aa:aa:aa:aa
[  451.751699][T16109] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  452.816222][T16155] netlink: 'syz.3.2918': attribute type 4 has an invalid length.
[  453.035056][T16167] netlink: 'syz.0.2922': attribute type 3 has an invalid length.
[  453.607956][ T5231] Bluetooth: hci11: command 0x0405 tx timeout
[  453.644015][T16188] Bluetooth: hci3: service_discovery: too big uuid_count value 65535
[  453.683855][T16183] Dead loop on virtual device ipvlan1, fix it urgently!
[  453.723510][T16183] syz.2.2930 (16183) used greatest stack depth: 7960 bytes left
[  453.828670][T16197] netlink: 'syz.4.2934': attribute type 4 has an invalid length.
[  453.945923][T16204] vlan3: entered allmulticast mode
[  453.951365][T16204] mac80211_hwsim hwsim29 wlan1: entered allmulticast mode
[  453.963140][T16204] mac80211_hwsim hwsim29 wlan1: left allmulticast mode
[  454.202963][T16217] __nla_validate_parse: 20 callbacks suppressed
[  454.202983][T16217] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2939'.
[  454.282770][T16217] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2939'.
[  454.444790][T16227] netlink: 'syz.3.2940': attribute type 11 has an invalid length.
[  454.849293][T16245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2946'.
[  454.885653][T16245] netlink: 'syz.4.2946': attribute type 29 has an invalid length.
[  454.907770][T16251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2945'.
[  455.249322][T16258] lo speed is unknown, defaulting to 1000
[  455.751933][T16278] netlink: 'syz.3.2959': attribute type 4 has an invalid length.
[  456.122841][T16286] netlink: 'syz.2.2962': attribute type 2 has an invalid length.
[  456.150988][T16286] netlink: 'syz.2.2962': attribute type 8 has an invalid length.
[  456.177255][T16286] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2962'.
[  456.424665][T16302] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.2967'.
[  456.436194][T16298] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2966'.
[  456.610076][T16302] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  456.619899][T16302] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  456.629072][T16302] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  456.638247][T16302] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  456.835856][T16308] team0: Port device team_slave_1 removed
[  456.994813][T16331] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2973'.
[  457.040560][T16331] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2973'.
[  457.085433][T16333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2974'.
[  457.198709][T16335] netlink: 'syz.4.2975': attribute type 4 has an invalid length.
[  457.220543][T16333] netlink: 'syz.3.2974': attribute type 3 has an invalid length.
[  457.612087][T16349] tap0: tun_chr_ioctl cmd 1074025677
[  457.624904][T16349] tap0: linktype set to 6
[  457.778974][T16359] netlink: 'syz.0.2983': attribute type 1 has an invalid length.
[  457.793325][T16359] netlink: 'syz.0.2983': attribute type 21 has an invalid length.
[  457.950101][T16365] sctp: [Deprecated]: syz.4.2987 (pid 16365) Use of int in maxseg socket option.
[  457.950101][T16365] Use struct sctp_assoc_value instead
[  458.568224][T16383] IPVS: Error connecting to the multicast addr
[  459.089035][T16405] vxcan1: tx address claim with different name
[  459.635502][T16421] dummy0: entered promiscuous mode
[  459.645617][T16421] dummy0: left promiscuous mode
[  460.003556][T16440] __nla_validate_parse: 16 callbacks suppressed
[  460.003578][T16440] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3012'.
[  460.049809][T16440] netlink: 19 bytes leftover after parsing attributes in process `syz.0.3012'.
[  460.150876][T16442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3014'.
[  460.558174][T16456] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3017'.
[  460.632486][T16458] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3018'.
[  460.854658][T16467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  460.889469][    C0] Dead loop on virtual device ipvlan1, fix it urgently!
[  461.004003][T16474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3021'.
[  461.041099][T16466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  461.111788][T16464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  461.122445][T16469] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3021'.
[  461.222457][T16481] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3025'.
[  461.261208][T16481] netlink: 19 bytes leftover after parsing attributes in process `syz.1.3025'.
[  461.355445][T16488] x_tables: duplicate underflow at hook 1
[  461.397028][T16489] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3026'.
[  462.123834][T16520] validate_nla: 2 callbacks suppressed
[  462.123853][T16520] netlink: 'syz.4.3038': attribute type 7 has an invalid length.
[  462.163767][T16521] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  462.222577][T16526] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  462.246419][T16527] netlink: 'syz.2.3035': attribute type 10 has an invalid length.
[  462.816232][T16547] netlink: 'syz.3.3046': attribute type 11 has an invalid length.
[  463.099493][T16555] sctp: [Deprecated]: syz.4.3049 (pid 16555) Use of struct sctp_assoc_value in delayed_ack socket option.
[  463.099493][T16555] Use struct sctp_sack_info instead
[  463.384389][T16576] Dead loop on virtual device ipvlan1, fix it urgently!
[  463.500043][T16576] netlink: 'syz.2.3053': attribute type 10 has an invalid length.
[  463.538914][T16576] team0: Port device dummy0 added
[  464.319605][T16597] netlink: 'syz.0.3061': attribute type 1 has an invalid length.
[  464.364248][T16597] bond0: entered promiscuous mode
[  464.394027][T16597] bond_slave_0: entered promiscuous mode
[  464.408281][T16597] bond_slave_1: entered promiscuous mode
[  464.491163][T16597] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  464.654845][T16610] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  464.704644][T16595] bond0: left promiscuous mode
[  464.712467][T16595] bond_slave_0: left promiscuous mode
[  464.721010][T16613] netlink: 'syz.4.3067': attribute type 2 has an invalid length.
[  464.731129][T16595] bond_slave_1: left promiscuous mode
[  465.412544][T16638] __nla_validate_parse: 16 callbacks suppressed
[  465.412564][T16638] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3082'.
[  465.472669][ T5279] IPVS: starting estimator thread 0...
[  465.497019][T16635] ɶƣ0GC�!: entered promiscuous mode
[  465.597690][T16640] IPVS: using max 17 ests per chain, 40800 per kthread
[  465.802845][T16647] dccp_invalid_packet: P.Data Offset(172) too large
[  465.828464][T16652] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3077'.
[  465.887643][T16652] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3077'.
[  465.939654][T16655] xt_CT: You must specify a L4 protocol and not use inversions on it
[  467.255574][T16681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3085'.
[  467.285711][T16681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3085'.
[  467.390566][T16682] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3084'.
[  468.292455][T16697] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3091'.
[  468.347198][T16697] netlink: 19 bytes leftover after parsing attributes in process `syz.3.3091'.
[  468.511757][T16703] xt_hashlimit: overflow, try lower: 0/0
[  468.747111][T16707] netlink: 'syz.3.3094': attribute type 10 has an invalid length.
[  469.373122][T16718] netlink: 'syz.2.3098': attribute type 4 has an invalid length.
[  469.598572][T16720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3099'.
[  469.710695][T16727] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3101'.
[  469.742197][T16727] netlink: 'syz.4.3101': attribute type 1 has an invalid length.
[  469.838111][T16734] netlink: 'syz.0.3102': attribute type 2 has an invalid length.
[  470.175833][T16742] veth0_macvtap: left promiscuous mode
[  470.564093][T16754] __nla_validate_parse: 6 callbacks suppressed
[  470.564114][T16754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3108'.
[  470.658058][T16754] netlink: 596 bytes leftover after parsing attributes in process `syz.3.3108'.
[  470.749361][T16758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3110'.
[  470.758778][T16758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3110'.
[  470.774717][T16758] tc_dump_action: action bad kind
[  470.870666][T16767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3110'.
[  471.401252][T16782] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 47243 - 0
[  471.410470][T16782] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 47243 - 0
[  471.420799][T16782] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 47243 - 0
[  471.430511][T16782] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 47243 - 0
[  471.440026][T16782] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 46851 - 0
[  471.454025][T16782] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 46851 - 0
[  471.463471][T16782] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 46851 - 0
[  471.472857][T16782] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 46851 - 0
[  471.497693][T16782] geneve3: entered promiscuous mode
[  471.517435][T16782] geneve3: entered allmulticast mode
[  471.650742][T16787] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3116'.
[  471.688905][T16787] netlink: 19 bytes leftover after parsing attributes in process `syz.4.3116'.
[  471.922940][T16793] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  472.226291][T16803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3122'.
[  472.723349][T16812] bridge1: entered promiscuous mode
[  472.760185][T16812] bridge1: entered allmulticast mode
[  472.867686][T16815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3125'.
[  472.926882][T16815] 8021q: adding VLAN 0 to HW filter on device batadv1
[  472.936930][T16813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3124'.
[  472.960077][T16815] team0: Port device batadv1 added
[  473.646659][T16837] netlink: 'syz.4.3129': attribute type 10 has an invalid length.
[  474.454398][T16866] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  474.463625][T16866] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  474.472599][T16866] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  474.481409][T16866] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  474.528892][T16866] vxlan0: entered promiscuous mode
[  474.534064][T16866] vxlan0: entered allmulticast mode
[  474.545442][T16870] netlink: 'syz.0.3139': attribute type 2 has an invalid length.
[  474.589655][T16866] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  474.598919][T16866] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  474.607891][T16866] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  474.616762][T16866] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  474.788103][T16868] pim6reg1: entered promiscuous mode
[  474.796178][T16868] pim6reg1: entered allmulticast mode
[  474.912302][T16878] netlink: 'syz.1.3141': attribute type 1 has an invalid length.
[  475.137663][T16887] Timeout policy `syz0' can only be used by L3 protocol number 34888
[  475.485409][T16894] netlink: 'syz.3.3146': attribute type 4 has an invalid length.
[  475.568347][T16891] tipc: Enabled bearer <udp:syz0>, priority 10
[  475.848035][T16898] lo speed is unknown, defaulting to 1000
[  476.420491][T16922] __nla_validate_parse: 11 callbacks suppressed
[  476.420513][T16922] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3154'.
[  476.450895][T16922] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3154'.
[  477.025931][T16944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3159'.
[  477.153410][T16947] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.3160'.
[  477.195310][T16947] Cannot find del_set index 3 as target
[  477.212663][T16947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3160'.
[  477.249929][T16947] vlan3: entered promiscuous mode
[  477.471654][T16956] netlink: 'syz.0.3162': attribute type 3 has an invalid length.
[  477.851865][T16967] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3165'.
[  477.892960][T16967] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3165'.
[  477.914745][T16959] Cannot find add_set index 3 as target
[  478.169881][T16969] siw: device registration error -23
[  478.231527][T16976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3167'.
[  478.633879][T16990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3171'.
[  478.932480][T16995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3172'.
[  479.455766][T17010] xt_TPROXY: Can be used only with -p tcp or -p udp
[  479.547975][T17010] sch_fq: defrate 0 ignored.
[  479.578065][T17022] bond0: option mode: unable to set because the bond device has slaves
[  480.229128][T17041] vlan2: entered allmulticast mode
[  480.246507][T17041] bridge_slave_0: entered allmulticast mode
[  480.278710][T17041] bridge_slave_0: left allmulticast mode
[  480.435956][T17053] bridge0 (unregistering): left promiscuous mode
[  480.575530][T17055] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  481.033268][T17070] xt_SECMARK: invalid mode: 0
[  481.176216][T17075] lo speed is unknown, defaulting to 1000
[  481.417989][T17085] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  481.494899][T17085] pimreg: entered allmulticast mode
[  481.546421][T17093] __nla_validate_parse: 10 callbacks suppressed
[  481.546440][T17093] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.3203'.
[  481.623626][T17096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  481.646190][T17097] xt_TCPMSS: Only works on TCP SYN packets
[  481.759422][T17096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3204'.
[  482.125242][T17111] netlink: 'syz.3.3208': attribute type 29 has an invalid length.
[  482.148088][T17114] netlink: 'syz.3.3208': attribute type 29 has an invalid length.
[  482.494126][T17122] netlink: 'syz.3.3211': attribute type 4 has an invalid length.
[  482.791117][T17138] netlink: 'syz.1.3216': attribute type 7 has an invalid length.
[  482.847655][T17138] netlink: 'syz.1.3216': attribute type 39 has an invalid length.
[  483.003284][T17144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3217'.
[  483.059063][ T4620] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  483.606822][T17163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3225'.
[  483.637656][T17163] netlink: 'syz.0.3225': attribute type 6 has an invalid length.
[  483.676289][T17163] netlink: 'syz.0.3225': attribute type 5 has an invalid length.
[  483.686542][T17169] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  483.740315][T17163] vxlan1: entered promiscuous mode
[  484.045740][T17180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  484.093588][T17180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  484.225168][T17185] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  485.546876][T17219] ebt_among: src integrity fail: 30a
[  485.647321][T17226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3239'.
[  485.674476][T17219] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3243'.
[  485.911842][T17238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3246'.
[  486.076635][T17251] netlink: 'syz.0.3245': attribute type 2 has an invalid length.
[  486.150056][T17243] vxlan1: entered promiscuous mode
[  486.227505][T17243] vxlan1: entered allmulticast mode
[  486.673880][T17260] netlink: 47 bytes leftover after parsing attributes in process `syz.3.3248'.
[  486.750172][T17264] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  486.778830][T17264] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  486.810418][   T35] bridge_slave_1: left allmulticast mode
[  486.816139][   T35] bridge_slave_1: left promiscuous mode
[  486.840716][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  486.869324][   T35] bridge_slave_0: left allmulticast mode
[  486.875012][   T35] bridge_slave_0: left promiscuous mode
[  486.906107][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  487.126494][T17278] netlink: 'syz.3.3253': attribute type 1 has an invalid length.
[  487.412648][   T35] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  487.658263][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  487.671432][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  487.683553][   T35] bond0 (unregistering): Released all slaves
[  487.851236][T17291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3257'.
[  487.878422][T17292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3256'.
[  487.994635][T17296] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3256'.
[  488.037559][T17296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3256'.
[  488.081507][T17292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3256'.
[  488.094378][T17298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3258'.
[  488.153656][T17298] netlink: 'syz.4.3258': attribute type 15 has an invalid length.
[  488.210189][T17298] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  488.219338][T17298] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  488.228180][T17298] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  488.236899][T17298] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  488.258459][T17298] vxlan0: entered promiscuous mode
[  488.873696][T17324] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3264'.
[  488.893589][T17318] 
[  488.895958][T17318] ================================================
[  488.902452][T17318] WARNING: lock held when returning to user space!
[  488.908950][T17318] 6.11.0-rc4-syzkaller-00565-gf9db28bb09f4 #0 Not tainted
[  488.916093][T17318] ------------------------------------------------
[  488.922570][T17318] syz.4.3262/17318 is leaving the kernel with locks still held!
[  488.930177][T17318] 1 lock held by syz.4.3262/17318:
[  488.935271][T17318]  #0: ffffffff8fc84b88 (rtnl_mutex){+.+.}-{3:3}, at: ethnl_act_cable_test+0x187/0x3f0
[  489.004037][T17315] ==================================================================
[  489.012145][T17315] BUG: KASAN: slab-use-after-free in __mutex_lock+0xcf5/0xd70
[  489.019627][T17315] Read of size 4 at addr ffff888050863c34 by task syz.2.3261/17315
[  489.027532][T17315] 
[  489.029877][T17315] CPU: 1 UID: 0 PID: 17315 Comm: syz.2.3261 Not tainted 6.11.0-rc4-syzkaller-00565-gf9db28bb09f4 #0
[  489.040652][T17315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  489.050722][T17315] Call Trace:
[  489.054018][T17315]  <TASK>
[  489.056957][T17315]  dump_stack_lvl+0x241/0x360
[  489.061660][T17315]  ? __pfx_dump_stack_lvl+0x10/0x10
[  489.066872][T17315]  ? __pfx__printk+0x10/0x10
[  489.071464][T17315]  ? _printk+0xd5/0x120
[  489.075597][T17315]  ? __virt_addr_valid+0x183/0x530
[  489.080706][T17315]  ? __virt_addr_valid+0x183/0x530
[  489.085835][T17315]  print_report+0x169/0x550
[  489.090361][T17315]  ? __virt_addr_valid+0x183/0x530
[  489.095478][T17315]  ? __virt_addr_valid+0x183/0x530
[  489.100589][T17315]  ? __virt_addr_valid+0x45f/0x530
[  489.105697][T17315]  ? __phys_addr+0xba/0x170
[  489.110191][T17315]  ? __mutex_lock+0xcf5/0xd70
[  489.114861][T17315]  kasan_report+0x143/0x180
[  489.119364][T17315]  ? __mutex_lock+0xcf5/0xd70
[  489.124036][T17315]  __mutex_lock+0xcf5/0xd70
[  489.128531][T17315]  ? __pfx___might_resched+0x10/0x10
[  489.133809][T17315]  ? vlan_ioctl_handler+0x112/0x9d0
[  489.138994][T17315]  ? __pfx_lock_release+0x10/0x10
[  489.144011][T17315]  ? __pfx___mutex_lock+0x10/0x10
[  489.149028][T17315]  ? __might_fault+0xc6/0x120
[  489.153699][T17315]  vlan_ioctl_handler+0x112/0x9d0
[  489.158709][T17315]  ? sock_ioctl+0x664/0x8e0
[  489.163207][T17315]  ? __pfx_vlan_ioctl_handler+0x10/0x10
[  489.168748][T17315]  ? __pfx_vlan_ioctl_handler+0x10/0x10
[  489.174282][T17315]  sock_ioctl+0x683/0x8e0
[  489.178610][T17315]  ? __pfx_sock_ioctl+0x10/0x10
[  489.183453][T17315]  ? __fget_files+0x29/0x470
[  489.188044][T17315]  ? __fget_files+0x3f6/0x470
[  489.192712][T17315]  ? __fget_files+0x29/0x470
[  489.197297][T17315]  ? bpf_lsm_file_ioctl+0x9/0x10
[  489.202226][T17315]  ? security_file_ioctl+0x87/0xb0
[  489.207323][T17315]  ? __pfx_sock_ioctl+0x10/0x10
[  489.212171][T17315]  __se_sys_ioctl+0xfc/0x170
[  489.216751][T17315]  do_syscall_64+0xf3/0x230
[  489.221246][T17315]  ? clear_bhb_loop+0x35/0x90
[  489.225917][T17315]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  489.231818][T17315] RIP: 0033:0x7fd40e579e79
[  489.236228][T17315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  489.255826][T17315] RSP: 002b:00007fd40f2f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  489.264316][T17315] RAX: ffffffffffffffda RBX: 00007fd40e715f80 RCX: 00007fd40e579e79
[  489.272279][T17315] RDX: 0000000020000100 RSI: 0000000000008983 RDI: 0000000000000009
[  489.280239][T17315] RBP: 00007fd40e5e793e R08: 0000000000000000 R09: 0000000000000000
[  489.288292][T17315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  489.296251][T17315] R13: 0000000000000000 R14: 00007fd40e715f80 R15: 00007ffea72b71f8
[  489.304233][T17315]  </TASK>
[  489.307235][T17315] 
[  489.309542][T17315] Allocated by task 17311:
[  489.313942][T17315]  kasan_save_track+0x3f/0x80
[  489.318611][T17315]  __kasan_slab_alloc+0x66/0x80
[  489.323456][T17315]  kmem_cache_alloc_node_noprof+0x16b/0x320
[  489.329333][T17315]  dup_task_struct+0x57/0x8c0
[  489.334020][T17315]  copy_process+0x5d1/0x3e10
[  489.338597][T17315]  kernel_clone+0x226/0x8f0
[  489.343085][T17315]  __se_sys_clone3+0x2cb/0x350
[  489.347837][T17315]  do_syscall_64+0xf3/0x230
[  489.352327][T17315]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  489.358208][T17315] 
[  489.360512][T17315] Freed by task 24:
[  489.364296][T17315]  kasan_save_track+0x3f/0x80
[  489.368986][T17315]  kasan_save_free_info+0x40/0x50
[  489.373998][T17315]  poison_slab_object+0xe0/0x150
[  489.378923][T17315]  __kasan_slab_free+0x37/0x60
[  489.383670][T17315]  kmem_cache_free+0x145/0x350
[  489.388419][T17315]  delayed_put_task_struct+0x125/0x300
[  489.393952][T17315]  rcu_core+0xafd/0x1830
[  489.398182][T17315]  handle_softirqs+0x2c4/0x970
[  489.402930][T17315]  run_ksoftirqd+0xca/0x130
[  489.407417][T17315]  smpboot_thread_fn+0x544/0xa30
[  489.412339][T17315]  kthread+0x2f0/0x390
[  489.416393][T17315]  ret_from_fork+0x4b/0x80
[  489.420793][T17315]  ret_from_fork_asm+0x1a/0x30
[  489.425540][T17315] 
[  489.427844][T17315] Last potentially related work creation:
[  489.433534][T17315]  kasan_save_stack+0x3f/0x60
[  489.438198][T17315]  __kasan_record_aux_stack+0xac/0xc0
[  489.443551][T17315]  call_rcu+0x167/0xa70
[  489.447712][T17315]  __schedule+0x1808/0x4a60
[  489.452206][T17315]  schedule+0x14b/0x320
[  489.456433][T17315]  do_nanosleep+0x197/0x600
[  489.460931][T17315]  hrtimer_nanosleep+0x227/0x470
[  489.465852][T17315]  __se_sys_clock_nanosleep+0x32b/0x3c0
[  489.471389][T17315]  do_syscall_64+0xf3/0x230
[  489.476059][T17315]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  489.481940][T17315] 
[  489.484252][T17315] Second to last potentially related work creation:
[  489.490818][T17315]  kasan_save_stack+0x3f/0x60
[  489.495486][T17315]  __kasan_record_aux_stack+0xac/0xc0
[  489.500842][T17315]  task_work_add+0xb8/0x450
[  489.505328][T17315]  sched_tick+0x322/0x610
[  489.509640][T17315]  update_process_times+0x202/0x230
[  489.514824][T17315]  tick_nohz_handler+0x37c/0x500
[  489.519745][T17315]  __hrtimer_run_queues+0x551/0xd50
[  489.524928][T17315]  hrtimer_interrupt+0x396/0x990
[  489.529857][T17315]  __sysvec_apic_timer_interrupt+0x110/0x3f0
[  489.535827][T17315]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  489.541450][T17315]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  489.547417][T17315] 
[  489.549732][T17315] The buggy address belongs to the object at ffff888050863c00
[  489.549732][T17315]  which belongs to the cache task_struct of size 7424
[  489.563855][T17315] The buggy address is located 52 bytes inside of
[  489.563855][T17315]  freed 7424-byte region [ffff888050863c00, ffff888050865900)
[  489.577641][T17315] 
[  489.579955][T17315] The buggy address belongs to the physical page:
[  489.586353][T17315] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x50860
[  489.595103][T17315] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  489.603582][T17315] memcg:ffff888066ea81c1
[  489.607804][T17315] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  489.615771][T17315] page_type: 0xfdffffff(slab)
[  489.620430][T17315] raw: 00fff00000000040 ffff8880166fd500 0000000000000000 dead000000000001
[  489.629009][T17315] raw: 0000000000000000 0000000000040004 00000001fdffffff ffff888066ea81c1
[  489.637574][T17315] head: 00fff00000000040 ffff8880166fd500 0000000000000000 dead000000000001
[  489.646226][T17315] head: 0000000000000000 0000000000040004 00000001fdffffff ffff888066ea81c1
[  489.654883][T17315] head: 00fff00000000003 ffffea0001421801 ffffffffffffffff 0000000000000000
[  489.663535][T17315] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[  489.672183][T17315] page dumped because: kasan: bad access detected
[  489.678602][T17315] page_owner tracks the page as allocated
[  489.684298][T17315] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6634, tgid 6634 (syz-executor), ts 203503987901, free_ts 203407918997
[  489.707209][T17315]  post_alloc_hook+0x1f3/0x230
[  489.711973][T17315]  get_page_from_freelist+0x2e4c/0x2f10
[  489.717512][T17315]  __alloc_pages_noprof+0x256/0x6c0
[  489.722696][T17315]  alloc_slab_page+0x5f/0x120
[  489.727362][T17315]  allocate_slab+0x5a/0x2f0
[  489.731858][T17315]  ___slab_alloc+0xcd1/0x14b0
[  489.736519][T17315]  __slab_alloc+0x58/0xa0
[  489.740835][T17315]  kmem_cache_alloc_node_noprof+0x1fe/0x320
[  489.746711][T17315]  dup_task_struct+0x57/0x8c0
[  489.751373][T17315]  copy_process+0x5d1/0x3e10
[  489.755947][T17315]  kernel_clone+0x226/0x8f0
[  489.760437][T17315]  __x64_sys_clone+0x258/0x2a0
[  489.765185][T17315]  do_syscall_64+0xf3/0x230
[  489.769672][T17315]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  489.775554][T17315] page last free pid 8398 tgid 8398 stack trace:
[  489.781864][T17315]  free_unref_page+0xd22/0xea0
[  489.786622][T17315]  __put_partials+0xeb/0x130
[  489.791198][T17315]  put_cpu_partial+0x17c/0x250
[  489.795981][T17315]  __slab_free+0x2ea/0x3d0
[  489.800385][T17315]  qlist_free_all+0x9e/0x140
[  489.804994][T17315]  kasan_quarantine_reduce+0x14f/0x170
[  489.810441][T17315]  __kasan_slab_alloc+0x23/0x80
[  489.815288][T17315]  kmem_cache_alloc_noprof+0x135/0x2a0
[  489.820735][T17315]  getname_flags+0xb7/0x540
[  489.825227][T17315]  do_sys_openat2+0xd2/0x1d0
[  489.829798][T17315]  __x64_sys_openat+0x247/0x2a0
[  489.834629][T17315]  do_syscall_64+0xf3/0x230
[  489.839118][T17315]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  489.845007][T17315] 
[  489.847320][T17315] Memory state around the buggy address:
[  489.852932][T17315]  ffff888050863b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  489.860976][T17315]  ffff888050863b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  489.869025][T17315] >ffff888050863c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  489.877064][T17315]                                      ^
[  489.882673][T17315]  ffff888050863c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  489.890717][T17315]  ffff888050863d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  489.898762][T17315] ==================================================================
[  489.910266][T17315] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  489.917492][T17315] CPU: 1 UID: 0 PID: 17315 Comm: syz.2.3261 Not tainted 6.11.0-rc4-syzkaller-00565-gf9db28bb09f4 #0
[  489.928327][T17315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  489.938405][T17315] Call Trace:
[  489.941691][T17315]  <TASK>
[  489.944614][T17315]  dump_stack_lvl+0x241/0x360
[  489.949286][T17315]  ? __pfx_dump_stack_lvl+0x10/0x10
[  489.954472][T17315]  ? __pfx__printk+0x10/0x10
[  489.959059][T17315]  ? rcu_is_watching+0x15/0xb0
[  489.963840][T17315]  ? vscnprintf+0x5d/0x90
[  489.968162][T17315]  panic+0x349/0x860
[  489.972045][T17315]  ? check_panic_on_warn+0x21/0xb0
[  489.977159][T17315]  ? __pfx_panic+0x10/0x10
[  489.981569][T17315]  ? trace_irq_enable+0x2c/0x120
[  489.986529][T17315]  ? _raw_spin_unlock_irqrestore+0xd8/0x140
[  489.992440][T17315]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  489.998329][T17315]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  490.004648][T17315]  ? print_report+0x502/0x550
[  490.009317][T17315]  check_panic_on_warn+0x86/0xb0
[  490.014241][T17315]  ? __mutex_lock+0xcf5/0xd70
[  490.018904][T17315]  end_report+0x77/0x160
[  490.023143][T17315]  kasan_report+0x154/0x180
[  490.027643][T17315]  ? __mutex_lock+0xcf5/0xd70
[  490.032321][T17315]  __mutex_lock+0xcf5/0xd70
[  490.036816][T17315]  ? __pfx___might_resched+0x10/0x10
[  490.042093][T17315]  ? vlan_ioctl_handler+0x112/0x9d0
[  490.047276][T17315]  ? __pfx_lock_release+0x10/0x10
[  490.052292][T17315]  ? __pfx___mutex_lock+0x10/0x10
[  490.057312][T17315]  ? __might_fault+0xc6/0x120
[  490.061981][T17315]  vlan_ioctl_handler+0x112/0x9d0
[  490.066991][T17315]  ? sock_ioctl+0x664/0x8e0
[  490.071487][T17315]  ? __pfx_vlan_ioctl_handler+0x10/0x10
[  490.077023][T17315]  ? __pfx_vlan_ioctl_handler+0x10/0x10
[  490.082554][T17315]  sock_ioctl+0x683/0x8e0
[  490.086879][T17315]  ? __pfx_sock_ioctl+0x10/0x10
[  490.091726][T17315]  ? __fget_files+0x29/0x470
[  490.096310][T17315]  ? __fget_files+0x3f6/0x470
[  490.100977][T17315]  ? __fget_files+0x29/0x470
[  490.105557][T17315]  ? bpf_lsm_file_ioctl+0x9/0x10
[  490.110485][T17315]  ? security_file_ioctl+0x87/0xb0
[  490.115579][T17315]  ? __pfx_sock_ioctl+0x10/0x10
[  490.120435][T17315]  __se_sys_ioctl+0xfc/0x170
[  490.125038][T17315]  do_syscall_64+0xf3/0x230
[  490.129542][T17315]  ? clear_bhb_loop+0x35/0x90
[  490.134220][T17315]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  490.140110][T17315] RIP: 0033:0x7fd40e579e79
[  490.144520][T17315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  490.164122][T17315] RSP: 002b:00007fd40f2f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  490.172528][T17315] RAX: ffffffffffffffda RBX: 00007fd40e715f80 RCX: 00007fd40e579e79
[  490.180488][T17315] RDX: 0000000020000100 RSI: 0000000000008983 RDI: 0000000000000009
[  490.188463][T17315] RBP: 00007fd40e5e793e R08: 0000000000000000 R09: 0000000000000000
[  490.196447][T17315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  490.204411][T17315] R13: 0000000000000000 R14: 00007fd40e715f80 R15: 00007ffea72b71f8
[  490.212382][T17315]  </TASK>
[  490.215619][T17315] Kernel Offset: disabled
[  490.219934][T17315] Rebooting in 86400 seconds..